last executing test programs: 13.213810639s ago: executing program 2 (id=1166): syz_open_dev$vim2m(&(0x7f0000000040), 0x50c9, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x3}, 0x28) ioprio_set$pid(0x2, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7U\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n\x8f~\xd0\xe2y-l\xef_\xb0\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xfe{\xfd\x8a\xa3Eo\tCv\xad\x18\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4\a\x00\x00\x00\x00\x00\x00\x00\x94\xb6\xe8\x885\x92#\x8dE \x86[N\xa7\xd03\xa8\xb4,\x85p\xbd\x88\x02\x1d\xf3\xd5X\xa0\xa9M\xca\xc7\x8b\x8cu\xf0\x00\x00\x00\x00\x00i\xc7\xe7\xbc\xd2\x1e\xf99|\x93\xc7\x7flk\xd2\xa0\xe9\x99`\xff\xf6\xfb\xc4\x9a[\x05\\\x96<\x92\xea}\xec\xac\x17\x9f7\xc0\xa1P\xd0\xf2\x8f\xdc\xf2\xb0\vV\xf7%4_\xba\x81\x95cLW\xfcw\xe0\x97wS\x15\xe4F\xb3\x8a\x9f\b\f\x10z\x14>\x03\xf9\xb0\x95\xbd\xaaF\x02\x86.\xbf\x85\xcfo)G\xb1m\xa8\x01H\x1fO\x9d\x9a\x1b\xfd\xaaf\x96\x92\x96\x1b\xfd\x8e\x10\x8a\x9e:\xa5\x14\xb0`\x82\xd8k\xfd\xd2XNh\xd3\xa3\x03\xb1\x10d)\x11.\xe8~\x8c\x19x\x8f\x82Y\xb9\xc8W\xd1\xa8\xa6b9\xbc\x1a\xff\xc5\xdcObsvRc\x13gb\xa4\x0e~\xbb\r\xb7!\x19\x17\xd56\xec\xb5\xe3\xd2\xa3\x17i\x1c?\xcb\x85\xbe\x13\xa13\x05\x8c\xa6Z\x87\xe0\x91]Bp\xd1\xabg\xd9p\xa9)n\xc5t\x8a\xcb\x1e\xec\x92\xdco\xc1\xe2\x12\xd3\xd1\x19\b&%\xf8a&9\x1b?\f\xd8\xa8\x1a\xc8q\x17\xc2]N\x9c\x80\xb1\x13\xb3\xd6\x01\xad\xc26\x13\x93\xd0\x80$\xc8\x05\x91\x9b\xa8\x02\xc3\x87\xc9\x86^\xb8\x7f\xec\\n\x05\xbf\xd7\x15\xce\xff\x00\xe7\xd9\xc5\r\x00\x02\x00\x00\x00\x00\x00\x00\x15\xd2\xd4~\x88\x19der\xa9B\x91m=\xcd\xf7\x9f\xaa\xe7\x9f\x11\x19\xf8\xe6\x16\x7f\xa8W\xf3\xbf\xcbq\x9d\x14#\xb0}\xb4#\x10\xa3\xc8\xff\xc3\x06\xe9^7\x86\x85\xd4:\x8dQd&E\xf4F\xc7l&\x19\xe6\x95\xec\xa1\n\x9cx\x8d\xf2\xec|\xccYR\xaeZ\xd2\x84\xed0\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r1, 0x0, 0x1, &(0x7f0000000040)=""/53, &(0x7f0000000080)=0x35) r2 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={@mcast2, @rand_addr=0x64010102, 0x1b, 0x8}}) sendfile(r0, r2, &(0x7f0000000100), 0x2ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) 11.957223034s ago: executing program 2 (id=1173): socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x46c8b6a4fb71009c}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote, @private0, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6060000, r3}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r9}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 10.758530566s ago: executing program 2 (id=1175): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={0x0, 0xfffc}, 0x8) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000480)=r7) 10.55488453s ago: executing program 4 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/kernel/fscaps', 0x0, 0x0) flistxattr(r4, &(0x7f0000000680)=""/103, 0x67) mkdirat(0xffffffffffffffff, 0x0, 0x0) unshare(0x60600) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) 10.489139274s ago: executing program 2 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) 9.427895347s ago: executing program 1 (id=1181): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808044, &(0x7f00000001c0)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_lower}, {@fat=@usefree}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@uni_xlateno}]}, 0x1, 0x294, &(0x7f0000000500)="$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") bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) open(0x0, 0x109042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(0x0, 0xfff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='smb3\x00', 0x0, &(0x7f0000000180)='*z\x82\x90\xab\xbc=,[XU\x0f!J\xa1f\x10\x88rq\x1c\xe4\x9f;a\'\x06\x00\x00\x00\xf1G\xff\xff\xab\xbb\xe4\xcfp<\xef\x8e\xe4\xf2\xf0\x02#r\x88g') getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 9.38892554s ago: executing program 2 (id=1182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="0400130006001200000000000600b500850100000a00060008021100000100000600120101000000fa35d005739d74e1875ea7536cd7c2ac32933455e495d33aa8ee966af39d10a188cc2d8346345fb5d2fb0b719fb675a372dc0df49ab01dc5d38c256ce4d0df75331e00647c2884c03a5cdff605834494832ec6e7b982"], 0x44}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={r6, r9}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000180)={r8, r9, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r11, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0xc0041) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) 9.358508261s ago: executing program 4 (id=1184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000300)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xc977\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xedsa\xa1\x8b\x12\xad\x88\x8a+~U\xdfhR\xf8\x1f \xa8e\xbc\x17<;N_5\xd6\x8f#R\xa0\x13\x18\x855\x8bP] \xfd\x80wj\xf5\x90s\x91K\x85\x0e\xafX\x10\x14\x85u\x98uP9\"\x1aG\x8e\xaa\x02d\x05\xeaD\xaez\x84/\x10j\x88z\x16\xb1\xfeX\ny\xd1f\xf4w\xff\xac\xb27\xc1g\xca&4\x10\xc9qI\xa49\xd7iRZ\xcf\xabg.\xba\x02\x83?\xc4e\xdb(\x8fAj\x9a\x17\x13\x06\x8cW\x84\x06\xb2\x8e\xfad \f\x98\xed{\xd2D\xd5@\x1b\xcf\x00\xeck\x19\xe4b?\xff.\xa5F\xec\xe8\xa6\xbe\xadOy\'\x93z\xe6Tp\xf7N\xa1~\x95\xb9\xb7-\xa9\xb1K\aND\xfaQ\xb2\xea\xfc\x12\x96\xaf\xe3\xe3\x05T\xe8T7R\r\xcfN\xa5.G\xa0d\xae[?+\x04W\xbe\xa9\xab\xb0\xe5\xa6Y\x82\x7f\x8ac\x90Y\x1e\x8c L=\xf0D\x06\x91\xd7\r4y\x946n\x149-\x90\xfe\xbdrFa\xc9\xcf\xdf\xd21q\xe1}\xc2$3|\x94j\xd2X\xdfa\xc6\xb7!\x18\x81rs\xb9\xdc\xecI\xc2\x024\x9a\xe6\x9e~\xa9\x88O^.\xb7X\x83\xc6n%\'$e@\x85\x8ek$\x0fg3\xbd\xfc|%\x0e\xe5\x9f=\xf8\xcb\x7f\xea\x8a\xe8=d\xe47s\r\xa1Q:\x9e\xfb\x12\xd5sB1\x88x@G\x8b\x97\x1a\x84\x8f\xd7\x83\x8a)+\xab\xc3\xa8\x99\xe0\xab\xf9\xc4\x81\xb4\xce\x00\xf1\xd69|\bM\xaf\xc7\xd6=\f\x9a_\xe5J\xfd\x82\xa5\x05\x10p\xf1\x18\xeb\xe1\x1f\xd3\xf5\xb7Y\x9a0\n~%\xc9\x82\x85xX\x9b\xbf\x8c{\xc9\xca\f\xeb\xed \x94\x05\x9b\xe0\x1e}\xb9~\xec\xc7', 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) unshare(0x20040600) syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0xe0183) syz_clone3(0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.448209644s ago: executing program 1 (id=1187): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f00000004c0)={0x200001000, &(0x7f0000000180), 0x0, 0x0, {0xe}, &(0x7f0000000740)=""/238, 0xee, &(0x7f0000000100)=""/54, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0xa14c, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) r3 = dup(r2) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b79], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x802) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) ioperm(0x0, 0xf1, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.446301854s ago: executing program 4 (id=1188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80001) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, r4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) recvfrom(0xffffffffffffffff, &(0x7f0000000540)=""/251, 0xfb, 0x40000120, &(0x7f0000000480)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x80) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000640)={&(0x7f0000121000/0x1000)=nil, 0x1000}) write$P9_RLERRORu(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab5168510449b8a5"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000440)={{&(0x7f00000f5000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 8.408672926s ago: executing program 2 (id=1189): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009885f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4dbcacea29d4554d2d95ed4444e9bcbd6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa35e548ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f5823", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_io_uring_setup(0x585, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) pwritev2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)='\t', 0x1}], 0x1, 0x0, 0x0, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) sendmsg$tipc(r4, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r4, &(0x7f00000000c0)=@name, 0x10) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0x5c00, 0xa00}) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000002200)={r6}, &(0x7f0000000340)=0x8) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/214) 6.219294336s ago: executing program 3 (id=1192): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = syz_io_uring_setup(0x1365, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0xffffffff, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x20}}, 0x1c) r5 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r7 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0) r8 = dup3(r6, r7, 0x0) fchdir(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090e000000000700000000000004000900a0000000e9255bb992464e73a02159"], 0x70}, 0x1, 0x7}, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) r9 = socket$inet(0x15, 0x5, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffc3) syz_io_uring_submit(r2, r3, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) io_uring_enter(r1, 0x2bb2, 0x0, 0x0, 0x0, 0x0) 6.218881926s ago: executing program 4 (id=1193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) 6.188053748s ago: executing program 1 (id=1194): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@lazytime}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x90, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'ovf\x00'}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) write(r0, &(0x7f0000004200)='t', 0x7ffff000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x27, 0x9, 0x0, 0x0, {0x6}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}]}, 0x20}}, 0x0) 5.310403387s ago: executing program 4 (id=1195): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) 5.309085038s ago: executing program 3 (id=1196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.045196855s ago: executing program 0 (id=1197): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808044, &(0x7f00000001c0)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_lower}, {@fat=@usefree}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@uni_xlateno}]}, 0x1, 0x294, &(0x7f0000000500)="$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") bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) open(0x0, 0x109042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(0x0, 0xfff, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='smb3\x00', 0x0, &(0x7f0000000180)='*z\x82\x90\xab\xbc=,[XU\x0f!J\xa1f\x10\x88rq\x1c\xe4\x9f;a\'\x06\x00\x00\x00\xf1G\xff\xff\xab\xbb\xe4\xcfp<\xef\x8e\xe4\xf2\xf0\x02#r\x88g') get_robust_list(r0, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 4.800028463s ago: executing program 4 (id=1198): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808044, &(0x7f00000001c0)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_lower}, {@fat=@usefree}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@uni_xlateno}]}, 0x1, 0x294, &(0x7f0000000500)="$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") bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) open(0x0, 0x109042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)='smb3\x00', 0x0, &(0x7f0000000180)='*z\x82\x90\xab\xbc=,[XU\x0f!J\xa1f\x10\x88rq\x1c\xe4\x9f;a\'\x06\x00\x00\x00\xf1G\xff\xff\xab\xbb\xe4\xcfp<\xef\x8e\xe4\xf2\xf0\x02#r\x88g') getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 3.933676422s ago: executing program 0 (id=1199): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0xb}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 3.694774378s ago: executing program 1 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x0, 0xc, 0x0, @opaque="75d0148a"}}}}}, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) 2.867935274s ago: executing program 0 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x10) setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, {@in6=@empty, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r6, 0x0, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 2.867667604s ago: executing program 3 (id=1202): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccb000/0x2000)=nil, 0x800000}) close(r3) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340), 0x40) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r5, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.944657017s ago: executing program 1 (id=1203): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204080, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=maccyrillic,iocharset=cp737,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=000000000003,\x00'/36], 0x3e, 0x299, &(0x7f0000000b80)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000880), 0x1, 0x53b, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000140)=0xfffffbff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r3, 0x0) 1.854681323s ago: executing program 3 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) semtimedop(0x0, &(0x7f0000000400)=[{0x4, 0x4, 0x1000}, {0x4, 0x2, 0x800}, {0x3, 0x6, 0x1000}, {0x4, 0x3ff, 0x1800}, {0x0, 0x7ff, 0x1400}, {0x2, 0x1}, {0x1, 0x7, 0x2000}, {0x4, 0x1e}], 0x2aaaaaaaaaaaad26, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000040)) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f00000003c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.844021894s ago: executing program 0 (id=1205): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000240)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc2d, &(0x7f0000001900)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x16}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000019840)=@acquire={0x16c, 0x17, 0xe01, 0x0, 0x0, {{@in6=@private1}, @in6=@rand_addr=' \x01\x00', {@in, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}}}, [@tmpl={0x44, 0x5, [{{@in6=@private2}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xf10b8ffbb258080e}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x10000000}}}}}}, 0x0) 615.956818ms ago: executing program 3 (id=1206): msgsnd(0x0, &(0x7f0000000480)={0x2}, 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0x6a, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffff7f, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x90}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x5c3b37380d70341, 0x0, 0x0, {{@in6=@private1, @in6=@dev}, {@in6=@empty, 0x0, 0x32}, @in=@remote}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x2}}]}, 0x13c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f00000002c0)={0x0, 0x1}) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) 418.959481ms ago: executing program 0 (id=1208): socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x46c8b6a4fb71009c}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote, @private0, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6060000, r4}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r9}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 179.019008ms ago: executing program 3 (id=1209): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080), 0x8) listen(r0, 0x0) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r1, 0x5, 0x0, 0x0, @void, @value}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000240), &(0x7f0000000280)=@udp6=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r5, 0x4, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000240), &(0x7f0000000300)=@tcp=r4}, 0x20) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04040a00000000000054d64e1cf33429e26ea36f8b71679240"], 0xd) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x22, 0x2, @local}, 0x1c) socket$netlink(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40082104, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) 31.977678ms ago: executing program 0 (id=1210): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchown(r3, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={r0}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) mkdir(&(0x7f0000000a00)='./file0\x00', 0x14) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000c40)=0xc) mount$bpf(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x200000, &(0x7f0000000d80)={[{@uid={'uid', 0x3d, r5}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000140)='./bus\x00', 0x0) 0s ago: executing program 1 (id=1211): ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000003d80), 0x1001) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x80, {{0x2, 0x4e24, @private=0xa010102}}}, 0x88) pipe(&(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_fuse_handle_req(r3, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000004b40)={&(0x7f00000044c0)={0x50, 0x0, 0x7, {0x7, 0x27, 0xffffffff, 0xc400d1, 0x8, 0x9, 0x7fff, 0x7}}, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x9}}, 0x0, &(0x7f0000004540)={0x18, 0xfffffffffffffffe, 0xe00, {0xffff}}, &(0x7f0000004580)={0x18, 0x0, 0x5, {0xc076}}, &(0x7f00000045c0)={0x28, 0x0, 0x4, {{0x7fff, 0x1}}}, &(0x7f0000004600)={0x60, 0x0, 0x200, {{0x6, 0xf2, 0x9, 0x1ff, 0x207, 0x7, 0x8001, 0x7fffffff}}}, &(0x7f0000004680)={0x18, 0x0, 0x7fffffffffffffff, {0x5}}, &(0x7f00000023c0)=ANY=[@ANYBLOB="1fe600000078ca4e3d0000070101000000001d00000021245b282a295b402c858804063f2e3a164a2cec2f73019d710a6f0bfd46265684cf010098b94f05a6875e0e3ee8f6859f07aa6ddf996fea2dbaf3e7b3c5b9219e9d69980fb7f3257147a98130ecc08d2549a7930bafd8c4f7fc75eaff72fc4d234dce1bbc7b3b78a00f203796acc22d4f37bab7e4"], &(0x7f0000004700)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x4}}, 0x0, &(0x7f0000004900)={0x90, 0x0, 0xc2, {0x1, 0x3, 0x1ff, 0x4, 0x1, 0x9, {0x3, 0x5, 0x6b6a, 0x0, 0x8, 0x9, 0xaf, 0x7fff, 0x5, 0x2000, 0xb9f, r4, 0x0, 0x62a, 0x6}}}, &(0x7f00000049c0)={0x30, 0x0, 0x7ff, [{0x4, 0x1, 0x2, 0x800, '{#'}]}, &(0x7f0000004a00)={0x10, 0x0, 0xfff}, &(0x7f0000004a40)={0xa0, 0x0, 0x6, {{0x0, 0x3, 0x1ff, 0x401, 0x90, 0x6, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x15, 0x0, 0x2, 0x0, 0x1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x17de17d3}}, {0x0, 0x10}}}, &(0x7f0000004b00)={0x20, 0x0, 0x800, {0x3, 0x4, 0x8}}}) sendfile(r3, 0xffffffffffffffff, &(0x7f0000004bc0)=0x10000, 0x9257) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlinkprop={0x48, 0x10, 0xf8b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="2cf9f54fbe58"}]}}}]}, 0x48}}, 0x0) bind$inet(r3, &(0x7f0000002580)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0xfffffee0, &(0x7f00000001c0)={&(0x7f0000000480)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000003f00)=@getsadinfo={0x26c, 0x23, 0x8, 0x70bd26, 0x25dfdbfe, 0x0, [@sec_ctx={0xa1, 0x8, {0x9d, 0x8, 0x0, 0xff, 0x95, "977e9d776b935c97ee6f3163b8dda771d439a73664eae3687b61d8da3f06c8aa3d8d6d38a5456159ee2d15ae3e9e74f09e76c27d7c21a7f572283ed8da2c284076af43adf01ec5dfb7f0fea5fac1ffb5e05d1823d538e587489e0bd5a4d7c14c21435e7e9b816534ecbaa99a29f8942583ec9d239d92eb2ad62abdbda016976c314a956de35b0267b834ae6bd8f42e070f4aebc54e"}}, @algo_auth_trunc={0x96, 0x14, {{'sha256-generic\x00'}, 0x250, 0x80, "adb6f9bbc1f50b92fd9fa60f69dfa1b7b35a2b0c105697f5f7ffd8cb415cbcf2a82801f23e0bec7de4f73f2ffe09bd7c0398e265ddec33173648c4bbd6ee330dbd4c626df746bb774444"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @srcaddr={0x14, 0xd, @in6=@mcast2}, @coaddr={0x14, 0xe, @in=@multicast2}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e23, @in=@remote}}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x43}}, @algo_crypt={0xb9, 0x2, {{'ecb(twofish)\x00'}, 0x388, "276862adf716b31617bc83b7599994b5c8f85562e7c36ba535a1d197b3e07f79ec2da879483aa526be381a5a28869b9ebf32b6b008aa3a79642d65125aa94b01c6d0f01f56b519feafaa6d088ac4cbe6ab142881f6038d46931451405872b05fe0412e55f8ef9aa4ec560d71ea1bdafe32"}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x422002, 0x120) r7 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2d}, {0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000000801"], 0x14}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@local={0xfe, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.471798][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.483286][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.502717][ T5576] device veth0_vlan entered promiscuous mode [ 229.509859][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.525286][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.558135][ T5576] device veth1_vlan entered promiscuous mode [ 229.591314][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.640254][ T4825] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 229.666094][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.678141][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.694906][ T5576] device veth0_macvtap entered promiscuous mode [ 229.726025][ T5576] device veth1_macvtap entered promiscuous mode [ 229.762359][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.797769][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.886195][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.968974][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.012220][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.020262][ T4825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.034642][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.041943][ T4825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.058947][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.069858][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.078258][ T4825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.098513][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.098930][ T4825] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 230.118696][ T4825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.125112][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.128973][ T4825] usb 1-1: config 0 descriptor?? [ 230.163999][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.185623][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.200195][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 230.202903][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.239938][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.249467][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.296312][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.331071][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.362776][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.384235][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.402376][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.423745][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.460155][ T5576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.490268][ T5576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.518244][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.617358][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.632485][ T4825] prodikeys 0003:041E:2801.0009: unexpected long global item [ 231.448004][ T4825] prodikeys 0003:041E:2801.0009: hid parse failed [ 231.455334][ T4825] prodikeys: probe of 0003:041E:2801.0009 failed with error -22 [ 231.474536][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.487177][ T4825] usb 1-1: USB disconnect, device number 9 [ 231.503338][ T5576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.541782][ T5576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.577929][ T5576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.591136][ T5576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.323344][ T4212] Bluetooth: hci2: command 0x0419 tx timeout [ 232.602638][ T3653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.261217][ T3653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.357372][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.407536][ T5677] netlink: 164 bytes leftover after parsing attributes in process `syz.4.531'. [ 233.418649][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.494981][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.553234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.485358][ T5694] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.497' sets config #0 [ 236.618492][ T3688] device hsr_slave_0 left promiscuous mode [ 236.653338][ T3688] device hsr_slave_1 left promiscuous mode [ 236.781157][ T5729] loop3: detected capacity change from 0 to 1024 [ 236.945034][ T5729] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 237.014578][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.115405][ T5729] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 237.280380][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.318114][ T5736] loop4: detected capacity change from 0 to 512 [ 237.325610][ T3688] device bridge_slave_1 left promiscuous mode [ 237.353937][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.389475][ T3688] device bridge_slave_0 left promiscuous mode [ 237.405302][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.416808][ T5739] loop1: detected capacity change from 0 to 1024 [ 237.439846][ T5736] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 237.461512][ T5736] EXT4-fs (loop4): 1 truncate cleaned up [ 237.461523][ T5739] hfsplus: unable to parse mount options [ 237.461537][ T5736] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.485899][ T3688] device veth1_macvtap left promiscuous mode [ 237.516413][ T3688] device veth0_macvtap left promiscuous mode [ 237.525252][ T3688] device veth1_vlan left promiscuous mode [ 237.531364][ T3688] device veth0_vlan left promiscuous mode [ 237.649557][ T3688] bond1 (unregistering): Released all slaves [ 238.862850][ T5739] loop1: detected capacity change from 0 to 2048 [ 238.870386][ T5739] UDF-fs: bad mount option "0xffffffffffffffff1844674407370955161518446744073709551615" or missing value [ 239.340548][ T5751] loop3: detected capacity change from 0 to 64 [ 239.489084][ T3688] team0 (unregistering): Port device team_slave_1 removed [ 239.532457][ T3688] team0 (unregistering): Port device team_slave_0 removed [ 239.555875][ T3688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.596603][ T3688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.725063][ T5755] loop4: detected capacity change from 0 to 64 [ 239.732057][ T5753] loop1: detected capacity change from 0 to 512 [ 239.828663][ T3688] bond0 (unregistering): Released all slaves [ 239.925157][ T5753] EXT4-fs (loop1): orphan cleanup on readonly fs [ 239.962897][ T5753] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz.1.554: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 240.010060][ T5727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'. [ 240.028223][ T5734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 240.127088][ T5753] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 240.176058][ T5753] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 240.246785][ T5753] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 240.276691][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.329242][ T5762] loop2: detected capacity change from 0 to 1024 [ 242.946932][ T5762] hfsplus: request for non-existent node 40 in B*Tree [ 242.980296][ T5762] hfsplus: request for non-existent node 40 in B*Tree [ 243.099287][ T5771] netlink: 164 bytes leftover after parsing attributes in process `syz.0.556'. [ 243.685659][ T5780] IPv6: Can't replace route, no match found [ 244.390287][ T1077] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 245.332064][ T5804] loop2: detected capacity change from 0 to 64 [ 245.420273][ T1077] usb 1-1: Using ep0 maxpacket: 16 [ 245.550161][ T1077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.572029][ T1077] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.582497][ T1077] usb 1-1: New USB device found, idVendor=2087, idProduct=0a01, bcdDevice= 0.00 [ 245.592346][ T1077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.616272][ T1077] usb 1-1: config 0 descriptor?? [ 246.542438][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 247.581428][ T5846] binder: 5837:5846 ioctl c0306201 20000380 returned -14 [ 248.310444][ T1077] usbhid 1-1:0.0: can't add hid device: -71 [ 248.316696][ T1077] usbhid: probe of 1-1:0.0 failed with error -71 [ 248.346763][ T1077] usb 1-1: USB disconnect, device number 10 [ 248.379737][ T5847] netlink: 164 bytes leftover after parsing attributes in process `syz.1.576'. [ 248.400399][ T5856] loop4: detected capacity change from 0 to 64 [ 250.602671][ T5872] usb usb8: usbfs: process 5872 (syz.0.584) did not claim interface 0 before use [ 250.632958][ T5872] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.789101][ T5872] loop0: detected capacity change from 0 to 1024 [ 251.902568][ T144] hfsplus: b-tree write err: -5, ino 4 [ 252.710042][ T4839] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 252.757918][ T5896] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 253.050541][ T5896] netlink: 'syz.0.591': attribute type 4 has an invalid length. [ 253.477887][ T5896] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.591'. [ 253.620135][ T4839] usb 3-1: Using ep0 maxpacket: 32 [ 253.780803][ T4839] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 253.813509][ T4839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.848425][ T4839] usb 3-1: config 0 descriptor?? [ 253.908192][ T5910] loop1: detected capacity change from 0 to 256 [ 254.451669][ T4839] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 254.457957][ T4839] gspca_mr97310a: reg write [21] error -22 [ 254.480545][ T4839] mr97310a: probe of 3-1:0.0 failed with error -22 [ 254.509475][ T4839] usb 3-1: USB disconnect, device number 12 [ 254.545103][ T5910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 254.785279][ T5915] loop0: detected capacity change from 0 to 512 [ 255.783176][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.789533][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.114129][ T5915] EXT4-fs (loop0): Ignoring removed oldalloc option [ 256.120795][ T5915] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 256.544901][ T5931] dlm: no local IP address has been set [ 256.550910][ T5931] dlm: cannot start dlm midcomms -107 [ 257.256956][ T5915] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 257.524462][ T5937] loop4: detected capacity change from 0 to 64 [ 257.572821][ T5914] loop0: detected capacity change from 0 to 2048 [ 257.727321][ T5914] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.597: casefold flag without casefold feature [ 257.764183][ T5914] EXT4-fs (loop0): get root inode failed [ 257.769852][ T5914] EXT4-fs (loop0): mount failed [ 258.292032][ T5935] loop3: detected capacity change from 0 to 4096 [ 259.128983][ T5935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 260.181770][ T5955] loop0: detected capacity change from 0 to 8192 [ 260.533380][ T5963] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.605'. [ 260.620188][ T4825] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 261.448227][ T3586] Bluetooth: Wrong link type (-71) [ 261.475937][ T5969] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 261.500147][ T4825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.520064][ T4839] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 261.534892][ T4825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.581610][ T4825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.602281][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.647646][ T4825] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 261.666384][ T4825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.689414][ T4825] usb 2-1: config 0 descriptor?? [ 261.721594][ T5969] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 261.800072][ T4839] usb 3-1: Using ep0 maxpacket: 32 [ 261.920201][ T4839] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 261.936096][ T4839] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 261.972697][ T4839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 262.008088][ T4839] usb 3-1: config 1 has no interface number 0 [ 262.028293][ T4839] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.075962][ T4839] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 262.141908][ T4839] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 262.182225][ T4825] prodikeys 0003:041E:2801.000A: unexpected long global item [ 262.201816][ T4839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.218743][ T4825] prodikeys 0003:041E:2801.000A: hid parse failed [ 262.259169][ T4825] prodikeys: probe of 0003:041E:2801.000A failed with error -22 [ 262.304491][ T4839] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 262.384877][ T4825] usb 2-1: USB disconnect, device number 11 [ 262.551688][ T5975] loop4: detected capacity change from 0 to 16 [ 263.245647][ T4212] Bluetooth: hci3: command 0x0406 tx timeout [ 263.801101][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888060a26000: rx timeout, send abort [ 264.309397][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888060a26000: abort rx timeout. Force session deactivation [ 265.800327][ T4839] snd_usb_pod 3-1:1.1: set_interface failed [ 265.806685][ T4839] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 265.822557][ T4839] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 265.826554][ T5975] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 20, please upgrade kernel version [ 266.822933][ T4839] usb 3-1: USB disconnect, device number 13 [ 268.366672][ T5995] loop3: detected capacity change from 0 to 256 [ 268.653418][ T6002] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.621'. [ 269.346328][ T6005] loop1: detected capacity change from 0 to 64 [ 269.443224][ T26] audit: type=1326 audit(1726370527.459:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 269.569820][ T5995] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 269.630176][ T5995] FAT-fs (loop3): Filesystem has been set read-only [ 269.646205][ T5995] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006005) [ 269.691597][ T26] audit: type=1326 audit(1726370527.459:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 269.913217][ T26] audit: type=1326 audit(1726370527.459:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 270.132414][ T26] audit: type=1326 audit(1726370527.459:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 270.185719][ T26] audit: type=1326 audit(1726370527.459:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 270.261167][ T26] audit: type=1326 audit(1726370527.459:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 270.393074][ T26] audit: type=1326 audit(1726370527.459:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 270.474613][ T26] audit: type=1326 audit(1726370527.459:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 270.492114][ T6025] ax25_connect(): syz.2.628 uses autobind, please contact jreuter@yaina.de [ 270.501937][ T26] audit: type=1326 audit(1726370527.459:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 270.539004][ T26] audit: type=1326 audit(1726370527.459:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6007 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 270.620148][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.626'. [ 270.669191][ T6030] program syz.2.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.946183][ T6022] chnl_net:caif_netlink_parms(): no params data found [ 272.016379][ T6043] 9pnet: Insufficient options for proto=fd [ 272.119652][ T6047] loop3: detected capacity change from 0 to 8 [ 272.118815][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.135541][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.188383][ T6022] device bridge_slave_0 entered promiscuous mode [ 272.213557][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.237872][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.270849][ T6047] attempt to access beyond end of device [ 272.270849][ T6047] loop3: rw=2048, want=36028797018963976, limit=8 [ 272.287862][ T6022] device bridge_slave_1 entered promiscuous mode [ 272.297040][ T6051] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 272.305088][ T6051] netlink: 'syz.1.633': attribute type 4 has an invalid length. [ 272.314496][ T6051] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.633'. [ 272.337475][ T6047] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 272.355643][ T6047] unable to read xattr id index table [ 272.369521][ T6022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.449592][ T6022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.478822][ C1] sd 0:0:1:0: tag#3742 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 272.488800][ C1] sd 0:0:1:0: tag#3742 CDB: Write(6) 0a 0b 00 08 00 00 [ 272.528072][ T4839] Bluetooth: hci0: command 0x0409 tx timeout [ 272.601759][ T6022] team0: Port device team_slave_0 added [ 272.626738][ T6022] team0: Port device team_slave_1 added [ 272.782805][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.797544][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.896593][ T6022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.952584][ T6022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.982790][ T6022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.105646][ T6022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.195981][ T6068] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.634'. [ 273.346406][ T6066] loop2: detected capacity change from 0 to 2048 [ 273.893409][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 274.015335][ T6022] device hsr_slave_0 entered promiscuous mode [ 274.033437][ T6022] device hsr_slave_1 entered promiscuous mode [ 274.044212][ T6066] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.257902][ T6022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.267616][ T6022] Cannot create hsr debugfs directory [ 275.825236][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.007578][ T6022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.033199][ T6114] loop1: detected capacity change from 0 to 64 [ 278.165289][ T6022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.277096][ T6022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.395445][ T6022] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.517461][ T6022] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.526965][ T6022] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.537418][ T6022] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.546784][ T6022] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.641640][ T6022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.659245][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.667512][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.679279][ T6022] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.695091][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.704400][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.713343][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.720461][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.737730][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.745972][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.754870][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.764411][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.771491][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.779423][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.788192][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.805360][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.816323][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.826052][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.837740][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.848553][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.900224][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.909807][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.931384][ T6022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.948080][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.957464][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.966416][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.083544][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.094543][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.108778][ T6022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.135765][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.144794][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.174959][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.183568][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.193971][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.202146][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.211928][ T6022] device veth0_vlan entered promiscuous mode [ 279.228620][ T6022] device veth1_vlan entered promiscuous mode [ 279.252291][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.260839][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.268798][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.278241][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.288364][ T6022] device veth0_macvtap entered promiscuous mode [ 279.307641][ T6022] device veth1_macvtap entered promiscuous mode [ 279.324660][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.336331][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.346633][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.357912][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.367885][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.378741][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.389284][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.399819][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.411650][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.423724][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.434661][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.444923][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.455891][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.466631][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.477236][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.487465][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.498215][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.508257][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.518958][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.529054][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.539534][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.549477][ T6022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.561842][ T6022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.572820][ T6022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.591339][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.600243][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.611792][ T6022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.621200][ T6022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.629886][ T6022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.639051][ T6022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.682167][ T3673] device hsr_slave_0 left promiscuous mode [ 279.688527][ T3673] device hsr_slave_1 left promiscuous mode [ 279.697760][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.706743][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.715616][ T3673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.723605][ T3673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.731553][ T3673] device bridge_slave_1 left promiscuous mode [ 279.737718][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.746584][ T3673] device bridge_slave_0 left promiscuous mode [ 279.752990][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.769420][ T3673] device veth1_macvtap left promiscuous mode [ 279.775516][ T3673] device veth0_macvtap left promiscuous mode [ 279.782452][ T3673] device veth1_vlan left promiscuous mode [ 279.788209][ T3673] device veth0_vlan left promiscuous mode [ 279.936968][ T3673] team0 (unregistering): Port device team_slave_1 removed [ 279.953890][ T3673] team0 (unregistering): Port device team_slave_0 removed [ 279.967378][ T3673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.987121][ T3673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.050710][ T3673] bond0 (unregistering): Released all slaves [ 280.170721][ T3860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.179557][ T3860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.218428][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.228694][ T3860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.237505][ T3860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.252819][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.409300][ T6140] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 281.597768][ T6145] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.651'. [ 283.378431][ T6158] loop4: detected capacity change from 0 to 512 [ 283.412961][ T6156] loop3: detected capacity change from 0 to 2048 [ 283.632417][ T6158] EXT4-fs (loop4): orphan cleanup on readonly fs [ 283.862183][ T6158] EXT4-fs error (device loop4): ext4_find_extent:929: inode #4: comm syz.4.656: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 283.975124][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.236726][ T6158] __quota_error: 35 callbacks suppressed [ 284.237015][ T6158] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 284.291975][ T6158] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 284.306632][ T6158] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 284.313540][ T6158] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.371334][ T6182] loop2: detected capacity change from 0 to 16 [ 287.827730][ T6182] erofs: (device loop2): mounted with root inode @ nid 36. [ 288.344282][ T6182] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.553510][ T6190] netlink: 60 bytes leftover after parsing attributes in process `syz.3.668'. [ 289.574327][ T6203] loop0: detected capacity change from 0 to 164 [ 292.647318][ T6220] loop0: detected capacity change from 0 to 512 [ 292.839819][ T6220] EXT4-fs (loop0): orphan cleanup on readonly fs [ 293.887124][ T6220] EXT4-fs error (device loop0): ext4_find_extent:929: inode #4: comm syz.0.673: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 293.963924][ T6220] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 294.116023][ T6220] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 294.408086][ T6220] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 294.542039][ T6220] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.437564][ T6244] loop3: detected capacity change from 0 to 256 [ 295.602539][ T6247] loop0: detected capacity change from 0 to 16 [ 295.674980][ T6244] loop3: detected capacity change from 0 to 256 [ 295.693677][ T6247] erofs: (device loop0): mounted with root inode @ nid 36. [ 295.724073][ T6244] exfat: Deprecated parameter 'utf8' [ 295.760276][ T6244] exfat: Deprecated parameter 'namecase' [ 295.776121][ T6247] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.783871][ T6244] exfat: Deprecated parameter 'namecase' [ 295.832431][ T6244] exfat: Deprecated parameter 'utf8' [ 295.886822][ T6244] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 297.779340][ T6263] loop2: detected capacity change from 0 to 256 [ 297.952105][ T6263] FAT-fs (loop2): Directory bread(block 64) failed [ 298.711145][ T6263] FAT-fs (loop2): Directory bread(block 65) failed [ 298.717807][ T6263] FAT-fs (loop2): Directory bread(block 66) failed [ 298.777583][ T6263] FAT-fs (loop2): Directory bread(block 67) failed [ 299.208795][ T6263] FAT-fs (loop2): Directory bread(block 68) failed [ 299.215486][ T6263] FAT-fs (loop2): Directory bread(block 69) failed [ 299.223529][ T6263] FAT-fs (loop2): Directory bread(block 70) failed [ 299.232400][ T6263] FAT-fs (loop2): Directory bread(block 71) failed [ 299.239009][ T6263] FAT-fs (loop2): Directory bread(block 72) failed [ 299.248008][ T6263] FAT-fs (loop2): Directory bread(block 73) failed [ 301.091345][ T6293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.512571][ T6298] loop2: detected capacity change from 0 to 4096 [ 301.573388][ T6298] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 301.680415][ T6300] loop3: detected capacity change from 0 to 64 [ 301.738633][ T6302] 9pnet: Insufficient options for proto=fd [ 301.796811][ T6302] loop1: detected capacity change from 0 to 8 [ 302.029547][ T6302] attempt to access beyond end of device [ 302.029547][ T6302] loop1: rw=2048, want=36028797018963976, limit=8 [ 302.065796][ T6302] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 302.109330][ T6307] loop4: detected capacity change from 0 to 64 [ 302.141104][ T6302] unable to read xattr id index table [ 302.273739][ C1] sd 0:0:1:0: tag#3744 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 302.283705][ C1] sd 0:0:1:0: tag#3744 CDB: Write(6) 0a 0b 00 08 00 00 [ 302.306967][ T6298] ntfs3: loop2: mft corrupted [ 303.230587][ T6291] loop0: detected capacity change from 0 to 40427 [ 303.380157][ T6291] F2FS-fs (loop0): invalid crc value [ 303.427823][ T6291] F2FS-fs (loop0): Found nat_bits in checkpoint [ 303.600092][ T6291] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 303.652622][ T6291] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 303.858020][ T6022] attempt to access beyond end of device [ 303.858020][ T6022] loop0: rw=2049, want=45104, limit=40427 [ 303.957167][ T6313] loop2: detected capacity change from 0 to 32768 [ 304.246323][ T6326] loop1: detected capacity change from 0 to 1024 [ 304.346254][ T6326] autofs4:pid:6326:autofs_fill_super: pipe file descriptor does not contain proper ops [ 304.480801][ T6327] loop4: detected capacity change from 0 to 4096 [ 304.590790][ T6327] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker. [ 304.626090][ T6326] hfsplus: bad catalog entry type [ 304.730343][ T6327] ntfs: volume version 3.1. [ 306.968386][ T3582] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 307.097124][ T144] hfsplus: b-tree write err: -5, ino 4 [ 307.137225][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.710'. [ 307.223690][ T6345] binder: BINDER_SET_CONTEXT_MGR already set [ 307.248213][ T6345] binder: 6343:6345 ioctl 4018620d 200001c0 returned -16 [ 307.255648][ T6342] device hsr_slave_1 left promiscuous mode [ 308.123881][ T3582] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 308.197938][ T6352] rose0: tun_chr_ioctl cmd 1074025677 [ 308.205237][ T6352] rose0: linktype set to 825 [ 308.210708][ T3582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.238469][ T3582] usb 1-1: Product: syz [ 308.243782][ T3582] usb 1-1: Manufacturer: syz [ 308.248635][ T3582] usb 1-1: SerialNumber: syz [ 308.255137][ T3582] usb 1-1: config 0 descriptor?? [ 308.280136][ T3582] usb 1-1: can't set config #0, error -71 [ 308.293849][ T3582] usb 1-1: USB disconnect, device number 11 [ 308.496712][ T6361] loop0: detected capacity change from 0 to 64 [ 310.244177][ T1169] block nbd4: Attempted send on invalid socket [ 310.252284][ T1169] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.271914][ T6372] VFS: unable to read V7 FS superblock on device nbd4. [ 310.348327][ T6372] VFS: could not find a valid V7 on nbd4. [ 310.364948][ T6375] loop4: detected capacity change from 0 to 47 [ 311.193712][ T6385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.719'. [ 311.475564][ T6386] loop2: detected capacity change from 0 to 4096 [ 311.867343][ T6386] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker. [ 312.040731][ T6386] ntfs: volume version 3.1. [ 312.440177][ T4840] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 313.260270][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.279128][ T4840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.307266][ T4840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.357104][ T4840] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 313.366833][ T4840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.407393][ T4840] usb 4-1: config 0 descriptor?? [ 314.550355][ T4834] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 314.824478][ T4840] prodikeys 0003:041E:2801.000B: unexpected long global item [ 315.033314][ T4840] prodikeys 0003:041E:2801.000B: hid parse failed [ 315.043381][ T4840] prodikeys: probe of 0003:041E:2801.000B failed with error -22 [ 316.820672][ T4832] usb 4-1: USB disconnect, device number 8 [ 317.262894][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.806001][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.815888][ T4834] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 318.688859][ T4834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.697033][ T4834] usb 3-1: Product: syz [ 318.704225][ T4834] usb 3-1: config 0 descriptor?? [ 318.720165][ T4834] usb 3-1: can't set config #0, error -71 [ 318.739887][ T4834] usb 3-1: USB disconnect, device number 14 [ 318.834514][ T6425] overlayfs: unrecognized mount option "/" or missing value [ 318.884057][ T6422] loop3: detected capacity change from 0 to 512 [ 319.217632][ T6422] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 319.280147][ T6422] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038 (0x7fffffff) [ 319.379388][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.724863][ T6459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 320.830566][ T4834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 320.851048][ T6465] loop0: detected capacity change from 0 to 64 [ 320.946127][ T6466] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 321.106074][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 321.144140][ T6469] device vlan2 entered promiscuous mode [ 321.149719][ T6469] device batadv0 entered promiscuous mode [ 321.157950][ T6469] device batadv0 left promiscuous mode [ 321.233328][ T4834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.254573][ T4834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.274830][ T4834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.297955][ T4834] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 321.318206][ T4834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.329704][ T4834] usb 5-1: config 0 descriptor?? [ 321.430922][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 321.534979][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.543518][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.562959][ T6471] device bridge_slave_0 entered promiscuous mode [ 321.582791][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.596689][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.606704][ T6471] device bridge_slave_1 entered promiscuous mode [ 321.684367][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.722539][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.812007][ T4834] prodikeys 0003:041E:2801.000C: unexpected long global item [ 321.837117][ T4834] prodikeys 0003:041E:2801.000C: hid parse failed [ 321.846734][ T4834] prodikeys: probe of 0003:041E:2801.000C failed with error -22 [ 321.992644][ T6471] team0: Port device team_slave_0 added [ 322.002657][ T6471] team0: Port device team_slave_1 added [ 322.017871][ T4832] usb 5-1: USB disconnect, device number 11 [ 322.055187][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.098941][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.193534][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.273526][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.309003][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.486762][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.882848][ T6493] loop0: detected capacity change from 0 to 1024 [ 323.043386][ T6493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.240314][ T4832] Bluetooth: hci4: command 0x0409 tx timeout [ 323.477333][ T6471] device hsr_slave_0 entered promiscuous mode [ 323.507190][ T6471] device hsr_slave_1 entered promiscuous mode [ 323.547215][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.912618][ T6471] Cannot create hsr debugfs directory [ 324.266332][ T6507] loop0: detected capacity change from 0 to 4096 [ 324.414624][ T6507] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 324.517542][ T6511] trusted_key: encrypted_key: insufficient parameters specified [ 324.991808][ T6507] ntfs: volume version 3.1. [ 325.234545][ T6471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.398642][ T4834] Bluetooth: hci4: command 0x041b tx timeout [ 325.447974][ T6471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.318463][ T6471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.445266][ T6524] loop0: detected capacity change from 0 to 64 [ 326.500164][ T6471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.543400][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.890259][ T6471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.899902][ T6471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.920953][ T6471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.480100][ T4834] Bluetooth: hci4: command 0x040f tx timeout [ 327.513309][ T6471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.693075][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.834419][ T6541] loop4: detected capacity change from 0 to 1024 [ 328.223286][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.570537][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.578578][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.593973][ T6541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.703041][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.728259][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.780559][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.787643][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.342576][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.523851][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.540294][ T6552] loop1: detected capacity change from 0 to 64 [ 329.588790][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.600295][ T4836] Bluetooth: hci4: command 0x0419 tx timeout [ 329.634494][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.641656][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.680129][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.832510][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.866444][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.899094][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.917522][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.934155][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.953620][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.000737][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.009201][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.024246][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.043109][ T6471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.062711][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.198771][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.210941][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.231402][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.277512][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.287711][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.329025][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.340833][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.375390][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.526368][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.554121][ T6471] device veth0_vlan entered promiscuous mode [ 330.603644][ T6471] device veth1_vlan entered promiscuous mode [ 330.649385][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.672743][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.699710][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.732041][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.743155][ T6471] device veth0_macvtap entered promiscuous mode [ 330.776740][ T6471] device veth1_macvtap entered promiscuous mode [ 330.799880][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.811964][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.829997][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.847845][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.860325][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.869143][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.885378][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 330.896531][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.913677][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.932424][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.949980][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.959806][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.985440][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.999245][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.017528][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.028249][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.049042][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.069081][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.079795][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.099313][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.112369][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.128516][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.141245][ T6471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.153171][ T6471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.162961][ T6471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.173294][ T6471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.273039][ T3716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.286130][ T3716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.307973][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.330208][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.338608][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.360486][ T3716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.320457][ T4825] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 332.560117][ T4825] usb 4-1: Using ep0 maxpacket: 8 [ 332.681748][ T4825] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 332.691176][ T4825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.705662][ T4825] usb 4-1: config 0 descriptor?? [ 333.391204][ T6574] udc-core: couldn't find an available UDC or it's busy [ 333.398185][ T6574] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 334.030702][ T6574] netlink: 100 bytes leftover after parsing attributes in process `syz.3.749'. [ 334.991318][ T4825] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 335.002193][ T4825] asix: probe of 4-1:0.0 failed with error -71 [ 335.010891][ T4825] usb 4-1: USB disconnect, device number 9 [ 335.598612][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.327740][ T6582] loop3: detected capacity change from 0 to 4096 [ 336.444031][ T6582] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 336.502971][ T6594] device bridge1 entered promiscuous mode [ 336.506137][ T6582] ntfs: volume version 3.1. [ 336.815816][ T6604] loop2: detected capacity change from 0 to 256 [ 339.453045][ T6604] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 341.391682][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 341.759344][ T6634] loop2: detected capacity change from 0 to 16 [ 341.908832][ T6634] erofs: (device loop2): mounted with root inode @ nid 36. [ 341.918700][ T6634] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 341.928948][ T6634] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 341.938496][ T6634] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 341.948226][ T6634] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 341.949267][ T6636] loop1: detected capacity change from 0 to 4096 [ 341.972909][ T6634] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 341.982630][ T6634] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 341.991591][ T6634] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 342.001266][ T6634] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 342.011523][ T6634] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 342.021227][ T6634] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 343.026491][ T6660] netlink: 32 bytes leftover after parsing attributes in process `syz.4.803'. [ 343.313422][ T6664] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 343.883814][ T26] audit: type=1326 audit(1726370601.899:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x0 [ 343.908328][ T6679] loop4: detected capacity change from 0 to 16 [ 344.154633][ T6679] erofs: (device loop4): mounted with root inode @ nid 36. [ 344.182022][ T3660] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 344.467336][ T6690] vxcan1: tx drop: invalid sa for name 0x0000040000000000 [ 345.116963][ T6684] loop2: detected capacity change from 0 to 512 [ 345.427895][ T6684] EXT4-fs (loop2): Ignoring removed nobh option [ 345.434783][ T6684] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 345.580933][ T3660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 345.691183][ T6697] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 345.836605][ T3660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 346.117173][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 346.306369][ T3660] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 346.316109][ T3660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.335915][ T3660] usb 1-1: config 0 descriptor?? [ 346.363073][ T3660] usb 1-1: can't set config #0, error -71 [ 346.400289][ T3660] usb 1-1: USB disconnect, device number 12 [ 347.943937][ T6730] loop0: detected capacity change from 0 to 256 [ 348.023752][ T6730] MINIX-fs: mounting file system with errors, running fsck is recommended [ 348.040957][ T6737] loop1: detected capacity change from 0 to 64 [ 350.091830][ T6745] dlm: no local IP address has been set [ 350.091826][ T4212] Bluetooth: hci2: command 0x0406 tx timeout [ 350.103510][ T6745] dlm: cannot start dlm midcomms -107 [ 350.873943][ T6763] loop3: detected capacity change from 0 to 64 [ 350.987378][ T6755] loop2: detected capacity change from 0 to 2048 [ 353.199037][ T6786] loop2: detected capacity change from 0 to 512 [ 353.920115][ T6786] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.838: corrupted in-inode xattr [ 353.932622][ T6786] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.838: couldn't read orphan inode 15 (err -117) [ 353.945352][ T6786] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 354.072661][ T6783] ODEBUG: Out of memory. ODEBUG disabled [ 354.163818][ T6795] Invalid ELF header type: 0 != 1 [ 354.200837][ T6795] 9pnet: Insufficient options for proto=fd [ 354.416317][ T6808] netlink: 'syz.3.845': attribute type 4 has an invalid length. [ 354.532243][ T6797] loop0: detected capacity change from 0 to 8192 [ 354.752506][ T6815] loop3: detected capacity change from 0 to 128 [ 354.973224][ T6815] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.040175][ T6815] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 355.264013][ T6821] loop1: detected capacity change from 0 to 2048 [ 356.005173][ T6824] loop4: detected capacity change from 0 to 512 [ 356.283136][ T6824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.850: bg 0: block 393: padding at end of block bitmap is not set [ 356.371203][ T6824] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 356.384142][ T6824] EXT4-fs (loop4): 2 truncates cleaned up [ 356.397377][ T6824] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 356.468103][ T6837] loop1: detected capacity change from 0 to 256 [ 359.946578][ T6867] loop1: detected capacity change from 0 to 64 [ 360.998516][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.030826][ T6843] loop2: detected capacity change from 0 to 8192 [ 361.050540][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.866'. [ 361.064292][ T6880] loop1: detected capacity change from 0 to 128 [ 361.095035][ T6843] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.957153][ T6907] loop1: detected capacity change from 0 to 256 [ 363.264930][ T6913] loop0: detected capacity change from 0 to 256 [ 363.999797][ T6913] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 364.037116][ T6917] smb3: Unknown parameter '*z' [ 364.498677][ T26] audit: type=1326 audit(1726370622.509:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 364.617639][ T26] audit: type=1326 audit(1726370622.509:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 364.641175][ T26] audit: type=1326 audit(1726370622.509:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 364.673325][ T6929] netlink: 576 bytes leftover after parsing attributes in process `syz.0.880'. [ 364.745476][ T26] audit: type=1326 audit(1726370622.509:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 364.789474][ T26] audit: type=1326 audit(1726370622.509:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 364.812296][ T6936] loop2: detected capacity change from 0 to 512 [ 364.954183][ T6936] EXT4-fs (loop2): 1 truncate cleaned up [ 364.970637][ T26] audit: type=1326 audit(1726370622.509:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 364.980222][ T6936] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.993408][ T26] audit: type=1326 audit(1726370622.509:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 365.026046][ T26] audit: type=1326 audit(1726370622.509:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 365.053198][ T26] audit: type=1326 audit(1726370622.509:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 365.172544][ T26] audit: type=1326 audit(1726370622.509:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0801baef9 code=0x7ffc0000 [ 368.696771][ T6956] loop0: detected capacity change from 0 to 256 [ 369.097698][ T6965] loop1: detected capacity change from 0 to 256 [ 370.066989][ T6965] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 370.113193][ T6956] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 372.251432][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.290960][ T6983] loop1: detected capacity change from 0 to 256 [ 372.417061][ T6979] device bridge1 entered promiscuous mode [ 372.470598][ T6983] tipc: Failed to remove unknown binding: 66,1,1/0:3872958786/3872958788 [ 373.427905][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 373.510800][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 373.536005][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 374.175045][ T4833] vcan0 speed is unknown, defaulting to 1000 [ 374.172533][ T6997] infiniband syz1: set active [ 374.264707][ T6997] infiniband syz1: added vcan0 [ 374.379086][ T6997] infiniband syz1: Couldn't open port 1 [ 374.536238][ T6997] RDS/IB: syz1: added [ 374.537206][ T7012] binder: 7011:7012 ioctl c018620c 0 returned -14 [ 374.571252][ T6997] smc: adding ib device syz1 with port count 1 [ 374.595681][ T6997] smc: ib device syz1 port 1 has pnetid [ 374.616257][ T4833] vcan0 speed is unknown, defaulting to 1000 [ 374.647257][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 374.903075][ T7016] loop4: detected capacity change from 0 to 256 [ 375.002441][ T7018] loop0: detected capacity change from 0 to 512 [ 375.031115][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 375.194412][ T7018] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.907: bg 0: block 393: padding at end of block bitmap is not set [ 375.212480][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 375.212489][ T26] audit: type=1326 audit(1726370633.229:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.251403][ T7018] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 375.274197][ T26] audit: type=1326 audit(1726370633.289:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.325517][ T26] audit: type=1326 audit(1726370633.289:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.354347][ T7018] EXT4-fs (loop0): 2 truncates cleaned up [ 375.356081][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 375.386539][ T26] audit: type=1326 audit(1726370633.289:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.390060][ T7018] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 375.430013][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 375.525550][ T26] audit: type=1326 audit(1726370633.299:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.582343][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.911'. [ 375.594469][ T26] audit: type=1326 audit(1726370633.299:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.668221][ T26] audit: type=1326 audit(1726370633.299:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.719971][ T26] audit: type=1326 audit(1726370633.299:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.745183][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 375.774118][ T26] audit: type=1326 audit(1726370633.299:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.807076][ T26] audit: type=1326 audit(1726370633.299:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7019 comm="syz.2.909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ed22ef9 code=0x7ffc0000 [ 375.980422][ T23] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 376.023516][ T23] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 376.429987][ T23] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 376.468112][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.598710][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 376.814175][ T7023] loop0: detected capacity change from 0 to 16384 [ 376.857579][ T6997] vcan0 speed is unknown, defaulting to 1000 [ 376.939201][ T7039] loop3: detected capacity change from 0 to 256 [ 377.760081][ T7042] loop_set_block_size: loop0 () has still dirty pages (nrpages=240) [ 377.760166][ T23] usb 5-1: string descriptor 0 read error: -22 [ 377.785846][ T7039] MINIX-fs: mounting file system with errors, running fsck is recommended [ 378.062796][ T7052] loop2: detected capacity change from 0 to 512 [ 378.196045][ T7052] EXT4-fs (loop2): orphan cleanup on readonly fs [ 378.210373][ T7052] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.917: corrupted in-inode xattr [ 378.226285][ T7061] loop3: detected capacity change from 0 to 256 [ 378.324376][ T7052] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.917: couldn't read orphan inode 15 (err -117) [ 378.377766][ T7052] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 378.531231][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.537538][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.673175][ T7066] loop3: detected capacity change from 0 to 2048 [ 378.959682][ T7070] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.227755][ T7072] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.924' resets device [ 379.550146][ T23] usb 5-1: USB disconnect, device number 12 [ 379.865199][ T7052] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz.2.917: lblock 0 mapped to illegal pblock 3 (length 1) [ 379.987678][ T7052] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.917: error -117 reading directory block [ 380.050109][ T7052] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz.2.917: lblock 0 mapped to illegal pblock 3 (length 1) [ 380.155984][ T7052] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.917: error -117 reading directory block [ 380.889308][ T7095] loop4: detected capacity change from 0 to 1024 [ 380.914633][ T7090] vcan0 speed is unknown, defaulting to 1000 [ 380.978264][ T7095] EXT4-fs (loop4): Ignoring removed oldalloc option [ 380.993285][ T7095] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 381.004525][ T7095] EXT4-fs (loop4): Unrecognized mount option "fsuuid=cf79116S-e0d7-d1c2-3c3-" or missing value [ 381.167448][ T7103] loop3: detected capacity change from 0 to 256 [ 381.389853][ T7108] loop0: detected capacity change from 0 to 1024 [ 381.431613][ T7103] exfat: Bad value for 'dmask' [ 381.489142][ T7109] vivid-002: disconnect [ 381.519059][ T7113] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 381.570932][ T7107] vivid-002: reconnect [ 381.858724][ T7108] hfsplus: bad catalog entry type [ 382.089108][ T7128] loop2: detected capacity change from 0 to 256 [ 382.113679][ T7122] loop1: detected capacity change from 0 to 2048 [ 382.116616][ T3731] hfsplus: b-tree write err: -5, ino 4 [ 382.220527][ T7128] FAT-fs (loop2): Unrecognized mount option "codeage=775" or missing value [ 382.312989][ T7131] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.439219][ T7128] Mount JFS Failure: -22 [ 382.468009][ T7128] jfs_mount failed w/return code = -22 [ 382.944387][ T7138] vcan0 speed is unknown, defaulting to 1000 [ 382.987861][ T7143] loop2: detected capacity change from 0 to 512 [ 383.090123][ T7143] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000079f) [ 383.146814][ T7143] FAT-fs (loop2): Filesystem has been set read-only [ 383.500059][ T4834] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 383.809974][ T4834] usb 3-1: Using ep0 maxpacket: 16 [ 383.832921][ T7150] overlayfs: refusing to follow metacopy origin for (/file0) [ 384.050790][ T4834] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.080045][ T4834] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 384.101369][ T7138] chnl_net:caif_netlink_parms(): no params data found [ 384.300243][ T4834] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.344536][ T4834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.362921][ T4834] usb 3-1: Product: syz [ 384.367140][ T4834] usb 3-1: Manufacturer: ᨵĒ麶쟃︆ẵꕴ [ 384.383993][ T4834] usb 3-1: SerialNumber: syz [ 384.431614][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.438690][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.477523][ T7138] device bridge_slave_0 entered promiscuous mode [ 384.509178][ T7154] loop1: detected capacity change from 0 to 2048 [ 384.511225][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.549647][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.570937][ T7138] device bridge_slave_1 entered promiscuous mode [ 384.691137][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.724119][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.930110][ T4833] Bluetooth: hci4: command 0x0409 tx timeout [ 384.936458][ T4834] cdc_ncm 3-1:1.0: bind() failure [ 384.944735][ T4834] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 384.972492][ T4834] cdc_ncm 3-1:1.1: bind() failure [ 384.998550][ T7169] loop0: detected capacity change from 0 to 256 [ 385.040331][ T4834] usb 3-1: USB disconnect, device number 15 [ 385.445076][ T7169] smb3: Unknown parameter '*z' [ 385.725322][ T7138] team0: Port device team_slave_0 added [ 385.746355][ T7138] team0: Port device team_slave_1 added [ 385.823655][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.829491][ T7178] loop1: detected capacity change from 0 to 512 [ 385.831139][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.866145][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.899626][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.981109][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.988080][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.014072][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.061212][ T7178] EXT4-fs (loop1): 1 truncate cleaned up [ 386.066967][ T7178] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.254622][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.176646][ T4833] Bluetooth: hci4: command 0x041b tx timeout [ 387.692185][ T7197] loop4: detected capacity change from 0 to 16 [ 387.870627][ T7138] device hsr_slave_0 entered promiscuous mode [ 387.965303][ T7138] device hsr_slave_1 entered promiscuous mode [ 388.039785][ T7138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.151905][ T7138] Cannot create hsr debugfs directory [ 388.347994][ T7197] erofs: (device loop4): mounted with root inode @ nid 36. [ 388.374883][ T7196] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 388.384981][ T7196] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 388.394098][ T7196] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 388.404056][ T7196] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 388.413606][ T7196] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 388.423533][ T7196] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 388.432636][ T7196] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 388.442654][ T7196] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 388.451234][ T7200] loop2: detected capacity change from 0 to 2048 [ 388.451831][ T7196] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 388.467941][ T7196] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 388.477077][ T7196] attempt to access beyond end of device [ 388.477077][ T7196] loop4: rw=524288, want=776, limit=16 [ 388.488265][ T7196] attempt to access beyond end of device [ 388.488265][ T7196] loop4: rw=524288, want=848, limit=16 [ 388.499771][ T7196] attempt to access beyond end of device [ 388.499771][ T7196] loop4: rw=524288, want=13478624056, limit=16 [ 388.671340][ T7200] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro,. Quota mode: writeback. [ 388.698580][ T7200] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.960: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 388.775334][ T7138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.797096][ T7200] EXT4-fs (loop2): Remounting filesystem read-only [ 390.188857][ T4834] Bluetooth: hci4: command 0x040f tx timeout [ 390.589022][ T7221] loop1: detected capacity change from 0 to 256 [ 390.662130][ T7138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.682404][ T7221] exfat: Bad value for 'dmask' [ 390.824690][ T7138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.982281][ T7138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.078869][ T7230] loop0: detected capacity change from 0 to 128 [ 391.307994][ T7138] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.177463][ T4833] Bluetooth: hci4: command 0x0419 tx timeout [ 393.294116][ T7138] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.334936][ T7138] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.394618][ T7138] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 393.650458][ T7206] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 394.240118][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.323608][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.331973][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.363797][ T7138] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.375624][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.385369][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.411340][ T3859] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.418423][ T3859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.529403][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.546206][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.571171][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.579648][ T3859] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.586816][ T3859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.610320][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.631470][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.641998][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.843086][ T7253] loop2: detected capacity change from 0 to 128 [ 395.186370][ T7253] loop2: detected capacity change from 0 to 8192 [ 395.256967][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 395.315523][ T7253] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 395.404569][ T7253] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 395.413416][ T7253] FAT-fs (loop2): Filesystem has been set read-only [ 395.681183][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 395.711538][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 395.825819][ T7138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 395.869244][ T7138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.919857][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.932124][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.940749][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.951398][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.978102][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.011413][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 396.052968][ T7246] vcan0 speed is unknown, defaulting to 1000 [ 396.154021][ T7269] loop0: detected capacity change from 0 to 512 [ 396.230808][ T7269] EXT4-fs (loop0): 1 truncate cleaned up [ 396.236491][ T7269] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.520102][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 397.147158][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.154753][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.167207][ T7138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.331969][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.360998][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.416687][ T3674] device hsr_slave_0 left promiscuous mode [ 397.434881][ T3674] device hsr_slave_1 left promiscuous mode [ 397.450958][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.468518][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.478077][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.500777][ T3674] device bridge_slave_1 left promiscuous mode [ 397.510898][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.534539][ T3674] device bridge_slave_0 left promiscuous mode [ 397.548436][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.562351][ T3674] device veth1_macvtap left promiscuous mode [ 397.568538][ T3674] device veth0_macvtap left promiscuous mode [ 397.604241][ T3674] device veth1_vlan left promiscuous mode [ 397.620403][ T3674] device veth0_vlan left promiscuous mode [ 398.051845][ T4834] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 398.166181][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 398.207924][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 398.237988][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.270069][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.420252][ T4834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.439951][ T4834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.459953][ T4834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.493220][ T4834] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 398.495020][ T3674] bond0 (unregistering): Released all slaves [ 398.520004][ T4834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.550635][ T4834] usb 3-1: config 0 descriptor?? [ 398.600149][ T3660] Bluetooth: hci2: command 0x041b tx timeout [ 398.614563][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.630842][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.648082][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.667111][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.693819][ T7138] device veth0_vlan entered promiscuous mode [ 398.774381][ T7138] device veth1_vlan entered promiscuous mode [ 398.830183][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.838391][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.848122][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.858703][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.872051][ T7138] device veth0_macvtap entered promiscuous mode [ 398.908027][ T7138] device veth1_macvtap entered promiscuous mode [ 398.980466][ T7246] chnl_net:caif_netlink_parms(): no params data found [ 399.032013][ T4834] prodikeys 0003:041E:2801.000D: unexpected long global item [ 399.057399][ T4834] prodikeys 0003:041E:2801.000D: hid parse failed [ 399.064150][ T4834] prodikeys: probe of 0003:041E:2801.000D failed with error -22 [ 399.117579][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.201559][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.225943][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.239391][ T4832] usb 3-1: USB disconnect, device number 16 [ 399.289108][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.311276][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.319551][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.404790][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.416163][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.640319][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.676048][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.687750][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.698752][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.710006][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.724790][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.738643][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.749710][ T7138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.761461][ T7138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.053052][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.118556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 400.169175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.264124][ T7138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.283892][ T7138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.368765][ T7303] loop2: detected capacity change from 0 to 128 [ 400.411034][ T7138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.419819][ T7138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.134285][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 401.239974][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.250686][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.269141][ T7246] device bridge_slave_0 entered promiscuous mode [ 401.292473][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.310068][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.318347][ T7246] device bridge_slave_1 entered promiscuous mode [ 401.493946][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.503899][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.520297][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.535121][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.598160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 401.670876][ T7246] team0: Port device team_slave_0 added [ 401.693873][ T7246] team0: Port device team_slave_1 added [ 401.737190][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.751566][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.770669][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.776118][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.888218][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.941757][ T7235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 401.974446][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.984511][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.076440][ T7315] loop0: detected capacity change from 0 to 128 [ 402.082978][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 402.089915][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.108833][ T7317] loop2: detected capacity change from 0 to 256 [ 402.493832][ T7246] device hsr_slave_0 entered promiscuous mode [ 403.067412][ T7246] device hsr_slave_1 entered promiscuous mode [ 403.090115][ T7246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.114029][ T7246] Cannot create hsr debugfs directory [ 403.160355][ T3582] Bluetooth: hci2: command 0x0419 tx timeout [ 403.173813][ T7324] tipc: Started in network mode [ 403.179071][ T7324] tipc: Node identity ac1414aa, cluster identity 4711 [ 403.186552][ T7324] tipc: New replicast peer: 100.1.1.1 [ 403.192165][ T7324] tipc: Enabled bearer , priority 10 [ 403.342096][ T7327] loop2: detected capacity change from 0 to 164 [ 403.525228][ T7327] Unable to read rock-ridge attributes [ 403.590596][ T7334] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 403.710235][ T3582] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 403.742423][ T7246] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.755319][ T7336] loop3: detected capacity change from 0 to 256 [ 403.834659][ T7246] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.859861][ T7336] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 403.936458][ T7246] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.144278][ T7339] vcan0 speed is unknown, defaulting to 1000 [ 404.252292][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 404.320387][ T3582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.798040][ T3582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.869775][ T3582] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.902798][ T3582] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 404.919134][ T3582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.942955][ T3582] usb 1-1: config 0 descriptor?? [ 404.960318][ T23] tipc: Node number set to 2886997162 [ 405.007964][ T7246] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.388895][ T7246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 405.403945][ T7246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 405.432973][ T7246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 405.459969][ T7246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 406.137722][ T3582] prodikeys 0003:041E:2801.000E: unexpected long global item [ 406.198313][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.230901][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.260486][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.280500][ T3582] prodikeys 0003:041E:2801.000E: hid parse failed [ 406.286996][ T3582] prodikeys: probe of 0003:041E:2801.000E failed with error -22 [ 406.481958][ T3582] usb 1-1: USB disconnect, device number 13 [ 408.174934][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.221288][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.378466][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.397821][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.404966][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.421160][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.463382][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.491726][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.500115][ T7381] netlink: 61 bytes leftover after parsing attributes in process `syz.0.1004'. [ 408.533500][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.540666][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.593872][ T7387] loop4: detected capacity change from 0 to 64 [ 408.620483][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.635635][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.674981][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.686061][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.698764][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.817539][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.830387][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.840995][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.850424][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.939177][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.379376][ T7246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 409.512740][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.894967][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 409.939210][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.133150][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.327246][ T7419] loop3: detected capacity change from 0 to 512 [ 412.539475][ T7419] EXT4-fs (loop3): Ignoring removed nobh option [ 412.575292][ T7419] EXT4-fs (loop3): 1 truncate cleaned up [ 412.581137][ T7419] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback. [ 412.854520][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 413.042603][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 413.612725][ T7433] loop0: detected capacity change from 0 to 512 [ 413.629332][ T7435] loop4: detected capacity change from 0 to 256 [ 414.785629][ T7433] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 414.816265][ T7433] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038 (0x7fffffff) [ 414.846506][ T7246] device veth0_vlan entered promiscuous mode [ 415.018766][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 415.048459][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 415.073866][ T7246] device veth1_vlan entered promiscuous mode [ 415.251056][ T7452] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1018: Directory hole found for htree leaf block 0 [ 415.461664][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.483932][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.565541][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 415.568186][ T7458] loop0: detected capacity change from 0 to 1024 [ 415.639548][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.674292][ T7458] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 415.694119][ T7458] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 415.742407][ T7246] device veth0_macvtap entered promiscuous mode [ 415.760233][ T7458] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 415.783774][ T7246] device veth1_macvtap entered promiscuous mode [ 415.785808][ T7458] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 415.798471][ T7458] System zones: 0-1, 3-36 [ 415.866466][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.880748][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.898491][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.908974][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.928601][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.937002][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 415.953801][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 415.956724][ T7458] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 415.980621][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 415.992063][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 415.998560][ T7471] loop3: detected capacity change from 0 to 512 [ 416.004673][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.272678][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.401084][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.538976][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.611398][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.689422][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.713867][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.724492][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.734357][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.745013][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.754877][ T7246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.767301][ T7246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.779462][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.790312][ T7246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.799153][ T7246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.813141][ T7246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.823516][ T7246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.828438][ T7471] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 416.868982][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.930027][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.039664][ T7482] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.1026: Unimplemented hash flags: 0x0001 [ 417.055228][ T7482] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1026: Corrupt directory, running e2fsck is recommended [ 417.068612][ T7482] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.1026: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 417.197203][ T7483] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 417.690802][ T7485] loop4: detected capacity change from 0 to 64 [ 417.879152][ T7487] loop0: detected capacity change from 0 to 256 [ 418.166885][ T7492] loop3: detected capacity change from 0 to 128 [ 420.032687][ T7501] loop0: detected capacity change from 0 to 512 [ 420.050576][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.152169][ T7501] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 420.318619][ T7501] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038 (0x7fffffff) [ 421.514496][ T7512] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1032: Directory hole found for htree leaf block 0 [ 421.752579][ T3860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.788448][ T7235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.828570][ T3860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.870677][ T7235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.913367][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.941087][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 422.220155][ T4832] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 423.330484][ T4829] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 423.363207][ T7532] loop4: detected capacity change from 0 to 256 [ 423.363961][ T7533] loop0: detected capacity change from 0 to 164 [ 423.647256][ T7541] smb3: Unknown parameter '*z' [ 424.157068][ T4832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.239703][ T4829] usb 2-1: Using ep0 maxpacket: 8 [ 424.248360][ T4832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.259673][ T4832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.320920][ T4832] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 424.371633][ T7546] loop2: detected capacity change from 0 to 512 [ 424.377924][ T4832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.386240][ T4829] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 424.394890][ T4829] usb 2-1: config 179 has no interface number 0 [ 424.402593][ T4829] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 424.414928][ T4832] usb 4-1: config 0 descriptor?? [ 424.420167][ T4829] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 424.432593][ T4829] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.445400][ T4829] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 424.458263][ T4829] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 424.478048][ T4829] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 424.489969][ T4829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.525509][ T7546] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 424.549593][ T7546] EXT4-fs (loop2): group descriptors corrupted! [ 424.556181][ T7523] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 424.606122][ T7550] loop4: detected capacity change from 0 to 512 [ 424.779047][ T7550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 424.800399][ T7550] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038 (0x7fffffff) [ 424.978222][ T4832] prodikeys 0003:041E:2801.000F: unexpected long global item [ 425.012084][ T4832] prodikeys 0003:041E:2801.000F: hid parse failed [ 425.217698][ T7560] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1045: Directory hole found for htree leaf block 0 [ 425.388300][ T4832] prodikeys: probe of 0003:041E:2801.000F failed with error -22 [ 425.436166][ T4829] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 425.483080][ T4832] usb 4-1: USB disconnect, device number 10 [ 425.696026][ T4742] usb 2-1: USB disconnect, device number 12 [ 425.699950][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 425.709031][ T7573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1051'. [ 425.710336][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 425.900107][ T3614] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 426.287091][ T3674] device hsr_slave_0 left promiscuous mode [ 426.343364][ T3674] device hsr_slave_1 left promiscuous mode [ 426.351878][ T7586] loop1: detected capacity change from 0 to 256 [ 426.368591][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.378663][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.519584][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.555264][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.565995][ T3674] device bridge_slave_1 left promiscuous mode [ 426.575522][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.584094][ T3674] device bridge_slave_0 left promiscuous mode [ 426.590315][ T3614] usb 1-1: Using ep0 maxpacket: 32 [ 426.595690][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.657481][ T7590] smb3: Unknown parameter '*z' [ 427.400317][ T3614] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 427.419336][ T3614] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 427.440007][ T3614] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 427.474700][ T3614] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 427.493773][ T3614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.506872][ T3674] device hsr_slave_0 left promiscuous mode [ 427.514598][ T3674] device hsr_slave_1 left promiscuous mode [ 427.521777][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.530918][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.538340][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.546442][ T3674] device bridge_slave_1 left promiscuous mode [ 427.553119][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.573221][ T3674] device bridge_slave_0 left promiscuous mode [ 427.579418][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.588681][ T7594] loop1: detected capacity change from 0 to 64 [ 427.654820][ T3674] rdma_rxe: ignoring netdev event = 10 for vcan0 [ 427.673823][ T3674] device veth1_macvtap left promiscuous mode [ 427.680845][ T3674] device veth0_macvtap left promiscuous mode [ 427.687521][ T3674] device veth1_vlan left promiscuous mode [ 427.760652][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1059'. [ 428.356988][ T3614] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 428.437250][ T3674] device veth0_vlan left promiscuous mode [ 428.452335][ T3614] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 428.471600][ T3674] device veth1_macvtap left promiscuous mode [ 428.474401][ T3614] usb 1-1: Product: syz [ 428.477993][ T3674] device veth0_macvtap left promiscuous mode [ 428.488035][ T3674] device veth1_vlan left promiscuous mode [ 428.495156][ T3674] device veth0_vlan left promiscuous mode [ 428.501021][ T3614] usb 1-1: Manufacturer: syz [ 428.506115][ T3614] usb 1-1: SerialNumber: syz [ 428.522310][ T3614] usb 1-1: config 0 descriptor?? [ 428.571592][ T3614] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 428.643989][ T3614] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 428.760480][ T3614] usb 1-1: USB disconnect, device number 14 [ 428.792023][ T3614] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 429.255200][ T7598] syz.4.1057 (7598): drop_caches: 2 [ 429.356859][ T7615] loop0: detected capacity change from 0 to 128 [ 430.165595][ T3674] infiniband syz1: set down [ 430.367209][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 430.386923][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 430.403184][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.416479][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.440155][ T4832] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 430.461992][ T3674] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 430.502358][ T3674] bond0 (unregistering): Released all slaves [ 430.703092][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 430.716416][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 430.729618][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.747013][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.812798][ T3674] bond0 (unregistering): Released all slaves [ 430.825693][ T3629] smc: removing ib device syz1 [ 430.832898][ T4832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.846503][ T4832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.857041][ T4832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.870089][ T4832] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 430.879122][ T4832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.889389][ T4832] usb 2-1: config 0 descriptor?? [ 430.915999][ T3614] vcan0 speed is unknown, defaulting to 1000 [ 431.123384][ T7632] loop0: detected capacity change from 0 to 64 [ 431.522651][ T4832] prodikeys 0003:041E:2801.0010: unexpected long global item [ 431.556975][ T4832] prodikeys 0003:041E:2801.0010: hid parse failed [ 431.581743][ T4832] prodikeys: probe of 0003:041E:2801.0010 failed with error -22 [ 431.620877][ T4832] usb 2-1: USB disconnect, device number 13 [ 432.047170][ T7649] loop4: detected capacity change from 0 to 64 [ 432.243431][ T7658] ipt_CLUSTERIP: Please specify destination IP [ 434.851928][ T7675] loop4: detected capacity change from 0 to 512 [ 434.897932][ T7675] EXT4-fs (loop4): Ignoring removed nobh option [ 434.974335][ T7681] loop1: detected capacity change from 0 to 64 [ 435.009364][ T7675] EXT4-fs (loop4): 1 truncate cleaned up [ 435.020197][ T7675] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback. [ 436.118803][ T7688] loop2: detected capacity change from 0 to 1024 [ 436.447299][ T7688] loop2: detected capacity change from 0 to 256 [ 436.541501][ T7700] Cannot find add_set index 0 as target [ 437.142028][ T7705] loop0: detected capacity change from 0 to 64 [ 437.183039][ T7688] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 439.325934][ T7723] loop4: detected capacity change from 0 to 128 [ 439.369466][ T7725] loop0: detected capacity change from 0 to 64 [ 440.341085][ T7727] tipc: Started in network mode [ 440.346318][ T7727] tipc: Node identity ac1414aa, cluster identity 4711 [ 440.359849][ T7727] tipc: New replicast peer: 100.1.1.1 [ 440.369183][ T7727] tipc: Enabled bearer , priority 10 [ 440.800167][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.806556][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.123510][ T7733] loop1: detected capacity change from 0 to 512 [ 441.185282][ T7733] EXT4-fs (loop1): Ignoring removed nobh option [ 441.253261][ T7733] EXT4-fs (loop1): 1 truncate cleaned up [ 441.291570][ T7733] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,nolazytime,dioread_lock,nobh,,errors=continue. Quota mode: writeback. [ 441.470209][ T3614] tipc: Node number set to 2886997162 [ 441.644524][ T4840] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 442.381834][ T7751] loop2: detected capacity change from 0 to 64 [ 442.550137][ T4840] usb 1-1: Using ep0 maxpacket: 8 [ 442.647390][ T7753] loop1: detected capacity change from 0 to 256 [ 442.672525][ T4840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.909083][ T7753] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 443.353800][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 443.353822][ T26] audit: type=1326 audit(1726370701.369:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7752 comm="syz.1.1100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598ba0bef9 code=0x0 [ 443.392572][ T4840] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 443.404942][ T4840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.415614][ T4840] usb 1-1: config 0 descriptor?? [ 443.468249][ T4840] usb 1-1: bad CDC descriptors [ 443.508352][ T4840] usb 1-1: bad CDC descriptors [ 443.573548][ T7766] loop2: detected capacity change from 0 to 256 [ 443.719456][ T7741] loop0: detected capacity change from 0 to 1024 [ 443.834911][ T7741] hfsplus: failed to load root directory [ 443.896149][ T7771] smb3: Unknown parameter '*z' [ 444.644005][ T7773] loop1: detected capacity change from 0 to 128 [ 445.720303][ T7778] tipc: Started in network mode [ 445.725664][ T7778] tipc: Node identity ac1414aa, cluster identity 4711 [ 445.736275][ T7778] tipc: New replicast peer: 100.1.1.1 [ 445.744661][ T7778] tipc: Enabled bearer , priority 10 [ 446.816815][ T7779] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1118'. [ 446.845038][ T4742] tipc: Node number set to 2886997162 [ 446.850325][ T4832] usb 1-1: USB disconnect, device number 15 [ 446.901220][ T7779] loop2: detected capacity change from 0 to 512 [ 448.058710][ T7784] binder: Unknown parameter 'fsmagic' [ 448.135267][ T7789] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 448.807600][ T7779] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 449.705317][ T7806] loop2: detected capacity change from 0 to 64 [ 450.591274][ T7817] loop3: detected capacity change from 0 to 128 [ 451.176749][ T7821] tipc: Started in network mode [ 451.182208][ T7821] tipc: Node identity ac1414aa, cluster identity 4711 [ 451.192320][ T7821] tipc: New replicast peer: 100.1.1.1 [ 451.197990][ T7821] tipc: Enabled bearer , priority 10 [ 451.887401][ T7829] loop3: detected capacity change from 0 to 256 [ 451.949637][ T7826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.208332][ T7834] smb3: Unknown parameter '*z' [ 452.769995][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 452.785597][ T7838] loop2: detected capacity change from 0 to 512 [ 452.837524][ T7371] tipc: Node number set to 2886997162 [ 452.980938][ T7811] loop4: detected capacity change from 0 to 32768 [ 453.005856][ T7838] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 453.025000][ T7838] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038 (0x7fffffff) [ 453.042103][ T7838] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1126: Directory hole found for htree leaf block 0 [ 453.073904][ T7838] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1126: Directory hole found for htree leaf block 0 [ 453.113272][ T7838] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1126: Directory hole found for htree leaf block 0 [ 453.124970][ T7842] kvm: emulating exchange as write [ 453.149567][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 453.179412][ T7811] XFS (loop4): Mounting V5 Filesystem [ 453.405418][ T7811] XFS (loop4): Ending clean mount [ 453.508746][ T7864] loop0: detected capacity change from 0 to 128 [ 453.551084][ T4610] XFS (loop4): Unmounting Filesystem [ 453.699286][ T7871] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 455.479610][ T7881] loop2: detected capacity change from 0 to 128 [ 456.542757][ T7896] loop3: detected capacity change from 0 to 256 [ 456.658171][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 456.667173][ T7898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1139'. [ 457.666534][ T7912] smb3: Unknown parameter '*z' [ 458.947566][ T7926] netlink: 'syz.3.1145': attribute type 2 has an invalid length. [ 458.956980][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1145'. [ 458.986905][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 458.997267][ T4840] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 459.089613][ T7936] loop4: detected capacity change from 0 to 1024 [ 459.270069][ T4840] usb 1-1: Using ep0 maxpacket: 8 [ 459.280000][ T7936] EXT4-fs (loop4): Ignoring removed orlov option [ 459.287078][ T7936] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 459.313466][ T7936] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,journal_ioprio=0x0000000000000000,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 459.506503][ T4742] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 460.330846][ T7949] loop1: detected capacity change from 0 to 256 [ 460.430067][ T4742] usb 4-1: Using ep0 maxpacket: 8 [ 460.525323][ T7952] loop2: detected capacity change from 0 to 2048 [ 460.550647][ T4742] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 460.615813][ T7955] smb3: Unknown parameter '*z' [ 460.635207][ T4742] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 460.880268][ T4742] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=f0.c9 [ 460.962898][ T4742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.987560][ T4742] usb 4-1: Product: syz [ 460.995746][ T4742] usb 4-1: Manufacturer: syz [ 461.140353][ T4840] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 461.150336][ T4840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.161385][ T4742] usb 4-1: SerialNumber: syz [ 461.212983][ T7957] loop4: detected capacity change from 0 to 64 [ 461.232573][ T4840] usb 1-1: Product: syz [ 461.236909][ T4840] usb 1-1: Manufacturer: syz [ 461.248183][ T4840] usb 1-1: SerialNumber: syz [ 461.271575][ T4840] usb 1-1: config 0 descriptor?? [ 461.288874][ T7952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.480052][ T4742] snd-usb-6fire 4-1:2.0: unknown device firmware state received from device: [ 461.507458][ T4742] d8 70 a4 ab 2e b6 ee 60 [ 461.523723][ T4742] snd-usb-6fire: probe of 4-1:2.0 failed with error -5 [ 462.200367][ T4840] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 462.276963][ T7933] netlink: 'syz.3.1150': attribute type 3 has an invalid length. [ 462.292029][ T7933] netlink: 'syz.3.1150': attribute type 2 has an invalid length. [ 462.300452][ T7933] netlink: 'syz.3.1150': attribute type 9 has an invalid length. [ 462.308315][ T7933] netlink: 'syz.3.1150': attribute type 10 has an invalid length. [ 462.326902][ T7933] netlink: 'syz.3.1150': attribute type 11 has an invalid length. [ 462.338248][ T7933] netlink: 'syz.3.1150': attribute type 12 has an invalid length. [ 462.347869][ T7933] netlink: 'syz.3.1150': attribute type 13 has an invalid length. [ 462.356118][ T7933] netlink: 'syz.3.1150': attribute type 14 has an invalid length. [ 462.403706][ T4742] usb 4-1: USB disconnect, device number 11 [ 462.800135][ T4840] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 462.815516][ T4840] usb 1-1: USB disconnect, device number 16 [ 462.945458][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 463.160906][ T7995] loop4: detected capacity change from 0 to 256 [ 464.235771][ T8008] loop0: detected capacity change from 0 to 256 [ 464.325054][ T7999] Can't find ip_set type bitmap:ip,mac [ 465.057281][ T8018] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 465.694499][ T8025] overlayfs: './file0' not a directory [ 466.986262][ T8043] loop1: detected capacity change from 0 to 256 [ 467.028574][ T8047] loop3: detected capacity change from 0 to 64 [ 467.614850][ T8056] smb3: Unknown parameter '*z' [ 468.527907][ T8069] input: syz1 as /devices/virtual/input/input10 [ 470.308657][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 470.490332][ T8085] loop1: detected capacity change from 0 to 512 [ 471.103002][ T8085] EXT4-fs (loop1): Ignoring removed oldalloc option [ 471.217285][ T8085] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1194: Parent and EA inode have the same ino 15 [ 471.237676][ T8085] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.1194: Parent and EA inode have the same ino 15 [ 471.276622][ T8085] EXT4-fs (loop1): 1 orphan inode deleted [ 471.292744][ T8085] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,lazytime,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 471.332459][ T8097] loop0: detected capacity change from 0 to 256 [ 471.814211][ T8104] smb3: Unknown parameter '*z' [ 473.286361][ T4832] Bluetooth: hci1: command 0x0409 tx timeout [ 473.543538][ T8082] chnl_net:caif_netlink_parms(): no params data found [ 474.465877][ T8129] loop1: detected capacity change from 0 to 64 [ 474.612604][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.624709][ T8133] loop0: detected capacity change from 0 to 2048 [ 474.649049][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.672114][ T8082] device bridge_slave_0 entered promiscuous mode [ 474.700501][ T8133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.721479][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.734481][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.747729][ T8082] device bridge_slave_1 entered promiscuous mode [ 475.636065][ T4834] Bluetooth: hci1: command 0x041b tx timeout [ 476.052435][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.126699][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.163103][ T8114] chnl_net:caif_netlink_parms(): no params data found [ 476.326234][ T3586] Bluetooth: unknown link type 28 [ 476.347057][ T3582] Bluetooth: hci3: command 0x0409 tx timeout [ 476.355432][ T8155] loop0: detected capacity change from 0 to 256 [ 476.373535][ T8082] team0: Port device team_slave_0 added [ 476.383025][ T8082] team0: Port device team_slave_1 added [ 476.398855][ T3587] BUG: sleeping function called from invalid context at net/core/sock.c:3252 [ 476.408447][ T3587] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3587, name: kworker/u5:8 [ 476.417712][ T3587] 6 locks held by kworker/u5:8/3587: [ 476.423158][ T3587] #0: ffff88807deb8138 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 476.433869][ T3587] #1: ffffc90002f07d20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 476.445717][ T3587] #2: ffff888079d78078 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xab/0x9b0 [ 476.456005][ T3587] #3: ffffffff8db7b128 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45f/0x9b0 [ 476.466770][ T3587] #4: ffff888026d7c620 (&conn->lock#2){+.+.}-{2:2}, at: sco_connect_cfm+0x27c/0xad0 [ 476.476363][ T3587] #5: ffff8880216dc120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x456/0xad0 [ 476.487566][ T3587] Preemption disabled at: [ 476.487580][ T3587] [<0000000000000000>] 0x0 [ 476.496367][ T3587] CPU: 1 PID: 3587 Comm: kworker/u5:8 Not tainted 5.15.167-syzkaller #0 [ 476.504688][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 476.514741][ T3587] Workqueue: hci4 hci_rx_work [ 476.519439][ T3587] Call Trace: [ 476.522710][ T3587] [ 476.525632][ T3587] dump_stack_lvl+0x1e3/0x2d0 [ 476.530313][ T3587] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 476.535950][ T3587] ? panic+0x860/0x860 [ 476.540030][ T3587] ___might_sleep+0x547/0x6a0 [ 476.544715][ T3587] ? __might_sleep+0xc0/0xc0 [ 476.549308][ T3587] ? __lock_acquire+0x1ff0/0x1ff0 [ 476.554333][ T3587] ? do_raw_spin_lock+0x14a/0x370 [ 476.559359][ T3587] ? queue_work_node+0x420/0x420 [ 476.564300][ T3587] ? __rwlock_init+0x140/0x140 [ 476.569070][ T3587] lock_sock_nested+0x5b/0x100 [ 476.573839][ T3587] sco_connect_cfm+0x456/0xad0 [ 476.578629][ T3587] ? sco_skb_put_cmsg+0x90/0x90 [ 476.583483][ T3587] ? sco_skb_put_cmsg+0x90/0x90 [ 476.588336][ T3587] hci_sync_conn_complete_evt+0x4ce/0x9b0 [ 476.594065][ T3587] hci_event_packet+0xa12/0x1550 [ 476.599006][ T3587] ? rcu_lock_release+0x20/0x20 [ 476.603854][ T3587] ? hci_send_to_monitor+0x99/0x4d0 [ 476.609049][ T3587] hci_rx_work+0x232/0x990 [ 476.613468][ T3587] process_one_work+0x8a1/0x10c0 [ 476.618389][ T3587] ? worker_detach_from_pool+0x260/0x260 [ 476.623996][ T3587] ? _raw_spin_lock_irqsave+0x120/0x120 [ 476.629518][ T3587] ? kthread_data+0x4e/0xc0 [ 476.633992][ T3587] ? wq_worker_running+0x97/0x170 [ 476.638989][ T3587] worker_thread+0xaca/0x1280 [ 476.643655][ T3587] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 476.649550][ T3587] kthread+0x3f6/0x4f0 [ 476.653596][ T3587] ? rcu_lock_release+0x20/0x20 [ 476.658442][ T3587] ? kthread_blkcg+0xd0/0xd0 [ 476.663019][ T3587] ret_from_fork+0x1f/0x30 [ 476.667418][ T3587] [ 476.670464][ T3587] ================================================================== [ 476.678506][ T3587] BUG: KASAN: use-after-free in __lock_acquire+0x74/0x1ff0 [ 476.685680][ T3587] Read of size 8 at addr ffff8880216dc0a0 by task kworker/u5:8/3587 [ 476.693642][ T3587] [ 476.695954][ T3587] CPU: 1 PID: 3587 Comm: kworker/u5:8 Tainted: G W 5.15.167-syzkaller #0 [ 476.705634][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 476.715762][ T3587] Workqueue: hci4 hci_rx_work [ 476.720419][ T3587] Call Trace: [ 476.723671][ T3587] [ 476.726574][ T3587] dump_stack_lvl+0x1e3/0x2d0 [ 476.731229][ T3587] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 476.736853][ T3587] ? _printk+0xd1/0x120 [ 476.740997][ T3587] ? __wake_up_klogd+0xcc/0x100 [ 476.745825][ T3587] ? panic+0x860/0x860 [ 476.749870][ T3587] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 476.755314][ T3587] print_address_description+0x63/0x3b0 [ 476.760835][ T3587] ? __lock_acquire+0x74/0x1ff0 [ 476.765655][ T3587] kasan_report+0x16b/0x1c0 [ 476.770127][ T3587] ? __lock_acquire+0x74/0x1ff0 [ 476.774947][ T3587] __lock_acquire+0x74/0x1ff0 [ 476.779596][ T3587] ? dump_stack_lvl+0x274/0x2d0 [ 476.784428][ T3587] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 476.790049][ T3587] lock_acquire+0x1db/0x4f0 [ 476.794524][ T3587] ? lock_sock_nested+0x68/0x100 [ 476.799432][ T3587] ? read_lock_is_recursive+0x10/0x10 [ 476.804772][ T3587] ? lock_sock_nested+0x68/0x100 [ 476.809676][ T3587] ? __bpf_trace_softirq+0x10/0x10 [ 476.814763][ T3587] ? __lock_acquire+0x1ff0/0x1ff0 [ 476.819754][ T3587] ? do_raw_spin_lock+0x14a/0x370 [ 476.824749][ T3587] ? queue_work_node+0x420/0x420 [ 476.829660][ T3587] ? lock_sock_nested+0x68/0x100 [ 476.834570][ T3587] _raw_spin_lock_bh+0x31/0x40 [ 476.839324][ T3587] ? lock_sock_nested+0x68/0x100 [ 476.844231][ T3587] lock_sock_nested+0x68/0x100 [ 476.848964][ T3587] sco_connect_cfm+0x456/0xad0 [ 476.853698][ T3587] ? sco_skb_put_cmsg+0x90/0x90 [ 476.858521][ T3587] ? sco_skb_put_cmsg+0x90/0x90 [ 476.863339][ T3587] hci_sync_conn_complete_evt+0x4ce/0x9b0 [ 476.869030][ T3587] hci_event_packet+0xa12/0x1550 [ 476.873959][ T3587] ? rcu_lock_release+0x20/0x20 [ 476.878796][ T3587] ? hci_send_to_monitor+0x99/0x4d0 [ 476.883973][ T3587] hci_rx_work+0x232/0x990 [ 476.888388][ T3587] process_one_work+0x8a1/0x10c0 [ 476.893314][ T3587] ? worker_detach_from_pool+0x260/0x260 [ 476.898934][ T3587] ? _raw_spin_lock_irqsave+0x120/0x120 [ 476.904448][ T3587] ? kthread_data+0x4e/0xc0 [ 476.908941][ T3587] ? wq_worker_running+0x97/0x170 [ 476.913934][ T3587] worker_thread+0xaca/0x1280 [ 476.918595][ T3587] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 476.924476][ T3587] kthread+0x3f6/0x4f0 [ 476.928519][ T3587] ? rcu_lock_release+0x20/0x20 [ 476.933341][ T3587] ? kthread_blkcg+0xd0/0xd0 [ 476.937920][ T3587] ret_from_fork+0x1f/0x30 [ 476.942317][ T3587] [ 476.945310][ T3587] [ 476.947605][ T3587] Allocated by task 8152: [ 476.951897][ T3587] ____kasan_kmalloc+0xba/0xf0 [ 476.956628][ T3587] __kmalloc+0x168/0x300 [ 476.960837][ T3587] sk_prot_alloc+0xe0/0x200 [ 476.965307][ T3587] sk_alloc+0x35/0x310 [ 476.969344][ T3587] sco_sock_create+0xb7/0x300 [ 476.974011][ T3587] bt_sock_create+0x159/0x220 [ 476.978660][ T3587] __sock_create+0x460/0x8d0 [ 476.983221][ T3587] __sys_socket+0x132/0x370 [ 476.987717][ T3587] __x64_sys_socket+0x76/0x80 [ 476.992388][ T3587] do_syscall_64+0x3b/0xb0 [ 476.996791][ T3587] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.002656][ T3587] [ 477.004953][ T3587] Freed by task 8151: [ 477.008898][ T3587] kasan_set_track+0x4b/0x80 [ 477.013457][ T3587] kasan_set_free_info+0x1f/0x40 [ 477.018363][ T3587] ____kasan_slab_free+0xd8/0x120 [ 477.023354][ T3587] slab_free_freelist_hook+0xdd/0x160 [ 477.028694][ T3587] kfree+0xf1/0x270 [ 477.032474][ T3587] __sk_destruct+0x58e/0x840 [ 477.037052][ T3587] sco_sock_release+0x259/0x310 [ 477.041886][ T3587] sock_close+0xcd/0x230 [ 477.046100][ T3587] __fput+0x3fe/0x8e0 [ 477.050051][ T3587] task_work_run+0x129/0x1a0 [ 477.054628][ T3587] exit_to_user_mode_loop+0x106/0x130 [ 477.059966][ T3587] exit_to_user_mode_prepare+0xb1/0x140 [ 477.065477][ T3587] syscall_exit_to_user_mode+0x5d/0x240 [ 477.070992][ T3587] do_syscall_64+0x47/0xb0 [ 477.075384][ T3587] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.081259][ T3587] [ 477.083568][ T3587] Last potentially related work creation: [ 477.089263][ T3587] kasan_save_stack+0x36/0x60 [ 477.093933][ T3587] kasan_record_aux_stack+0xba/0x100 [ 477.099210][ T3587] call_rcu+0x1c4/0xa70 [ 477.103335][ T3587] netlink_release+0x1388/0x1800 [ 477.108243][ T3587] sock_close+0xcd/0x230 [ 477.112476][ T3587] __fput+0x3fe/0x8e0 [ 477.116428][ T3587] task_work_run+0x129/0x1a0 [ 477.120992][ T3587] exit_to_user_mode_loop+0x106/0x130 [ 477.126334][ T3587] exit_to_user_mode_prepare+0xb1/0x140 [ 477.131851][ T3587] syscall_exit_to_user_mode+0x5d/0x240 [ 477.137398][ T3587] do_syscall_64+0x47/0xb0 [ 477.141813][ T3587] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.147689][ T3587] [ 477.149992][ T3587] Second to last potentially related work creation: [ 477.156545][ T3587] kasan_save_stack+0x36/0x60 [ 477.161200][ T3587] kasan_record_aux_stack+0xba/0x100 [ 477.166457][ T3587] call_rcu+0x1c4/0xa70 [ 477.170585][ T3587] netlink_release+0x1388/0x1800 [ 477.175493][ T3587] sock_close+0xcd/0x230 [ 477.179722][ T3587] __fput+0x3fe/0x8e0 [ 477.183684][ T3587] task_work_run+0x129/0x1a0 [ 477.188271][ T3587] exit_to_user_mode_loop+0x106/0x130 [ 477.193636][ T3587] exit_to_user_mode_prepare+0xb1/0x140 [ 477.199162][ T3587] syscall_exit_to_user_mode+0x5d/0x240 [ 477.204682][ T3587] do_syscall_64+0x47/0xb0 [ 477.209079][ T3587] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.214943][ T3587] [ 477.217239][ T3587] The buggy address belongs to the object at ffff8880216dc000 [ 477.217239][ T3587] which belongs to the cache kmalloc-2k of size 2048 [ 477.231271][ T3587] The buggy address is located 160 bytes inside of [ 477.231271][ T3587] 2048-byte region [ffff8880216dc000, ffff8880216dc800) [ 477.244621][ T3587] The buggy address belongs to the page: [ 477.250231][ T3587] page:ffffea000085b600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x216d8 [ 477.260349][ T3587] head:ffffea000085b600 order:3 compound_mapcount:0 compound_pincount:0 [ 477.268675][ T3587] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 477.276637][ T3587] raw: 00fff00000010200 ffffea0000911000 0000000200000002 ffff888017042000 [ 477.285204][ T3587] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 477.293773][ T3587] page dumped because: kasan: bad access detected [ 477.300170][ T3587] page_owner tracks the page as allocated [ 477.305855][ T3587] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3569, ts 51060635061, free_ts 51005736197 [ 477.324918][ T3587] get_page_from_freelist+0x322a/0x33c0 [ 477.330454][ T3587] __alloc_pages+0x272/0x700 [ 477.335035][ T3587] new_slab+0xbb/0x4b0 [ 477.339094][ T3587] ___slab_alloc+0x6f6/0xe10 [ 477.343656][ T3587] __kmalloc_track_caller+0x1c7/0x300 [ 477.349000][ T3587] kmemdup+0x21/0x50 [ 477.352865][ T3587] neigh_sysctl_register+0xb0/0x530 [ 477.358033][ T3587] devinet_sysctl_register+0x9d/0x1a0 [ 477.363376][ T3587] inetdev_init+0x257/0x470 [ 477.367857][ T3587] inetdev_event+0x29b/0x1490 [ 477.372603][ T3587] raw_notifier_call_chain+0xd0/0x170 [ 477.377953][ T3587] call_netdevice_notifiers+0x145/0x1b0 [ 477.383484][ T3587] register_netdevice+0x12e8/0x1720 [ 477.388677][ T3587] veth_newlink+0x94f/0xe20 [ 477.393168][ T3587] rtnl_newlink+0x14e1/0x2070 [ 477.397834][ T3587] rtnetlink_rcv_msg+0x993/0xee0 [ 477.402744][ T3587] page last free stack trace: [ 477.407382][ T3587] free_unref_page_prepare+0xc34/0xcf0 [ 477.412809][ T3587] free_unref_page+0x95/0x2d0 [ 477.417458][ T3587] __unfreeze_partials+0x1b7/0x210 [ 477.422538][ T3587] put_cpu_partial+0x132/0x1a0 [ 477.427268][ T3587] ___cache_free+0xe3/0x100 [ 477.431743][ T3587] qlist_free_all+0x36/0x90 [ 477.436239][ T3587] kasan_quarantine_reduce+0x162/0x180 [ 477.441680][ T3587] __kasan_slab_alloc+0x2f/0xc0 [ 477.446498][ T3587] slab_post_alloc_hook+0x53/0x380 [ 477.451576][ T3587] kmem_cache_alloc_node+0x121/0x2c0 [ 477.456830][ T3587] __alloc_skb+0xdd/0x590 [ 477.461130][ T3587] rtmsg_ifinfo_build_skb+0x81/0x180 [ 477.466405][ T3587] rtnetlink_event+0xee/0x1b0 [ 477.471054][ T3587] raw_notifier_call_chain+0xd0/0x170 [ 477.476396][ T3587] netdev_lower_state_changed+0x1b9/0x260 [ 477.482086][ T3587] __team_port_change_send+0x215/0x5b0 [ 477.487536][ T3587] [ 477.489840][ T3587] Memory state around the buggy address: [ 477.495548][ T3587] ffff8880216dbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 477.503589][ T3587] ffff8880216dc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.511617][ T3587] >ffff8880216dc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.519641][ T3587] ^ [ 477.524728][ T3587] ffff8880216dc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.532760][ T3587] ffff8880216dc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 477.540798][ T3587] ================================================================== [ 477.548824][ T3587] Disabling lock debugging due to kernel taint [ 477.554954][ T3587] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 477.562119][ T3587] CPU: 1 PID: 3587 Comm: kworker/u5:8 Tainted: G B W 5.15.167-syzkaller #0 [ 477.571831][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 477.581862][ T3587] Workqueue: hci4 hci_rx_work [ 477.586532][ T3587] Call Trace: [ 477.589783][ T3587] [ 477.592687][ T3587] dump_stack_lvl+0x1e3/0x2d0 [ 477.597341][ T3587] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 477.602959][ T3587] ? panic+0x860/0x860 [ 477.607003][ T3587] ? rcu_is_watching+0x11/0xa0 [ 477.611737][ T3587] ? lock_release+0xb9/0x9a0 [ 477.616301][ T3587] panic+0x318/0x860 [ 477.620168][ T3587] ? check_panic_on_warn+0x1d/0xa0 [ 477.625247][ T3587] ? fb_is_primary_device+0xd0/0xd0 [ 477.630424][ T3587] ? do_raw_spin_unlock+0x137/0x8b0 [ 477.635612][ T3587] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 477.641478][ T3587] ? _raw_spin_unlock+0x40/0x40 [ 477.646298][ T3587] check_panic_on_warn+0x7e/0xa0 [ 477.651208][ T3587] ? __lock_acquire+0x74/0x1ff0 [ 477.656028][ T3587] end_report+0x6d/0xf0 [ 477.660151][ T3587] kasan_report+0x18e/0x1c0 [ 477.664620][ T3587] ? __lock_acquire+0x74/0x1ff0 [ 477.669436][ T3587] __lock_acquire+0x74/0x1ff0 [ 477.674081][ T3587] ? dump_stack_lvl+0x274/0x2d0 [ 477.678903][ T3587] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 477.684503][ T3587] lock_acquire+0x1db/0x4f0 [ 477.688985][ T3587] ? lock_sock_nested+0x68/0x100 [ 477.693892][ T3587] ? read_lock_is_recursive+0x10/0x10 [ 477.699231][ T3587] ? lock_sock_nested+0x68/0x100 [ 477.704164][ T3587] ? __bpf_trace_softirq+0x10/0x10 [ 477.709249][ T3587] ? __lock_acquire+0x1ff0/0x1ff0 [ 477.714241][ T3587] ? do_raw_spin_lock+0x14a/0x370 [ 477.719235][ T3587] ? queue_work_node+0x420/0x420 [ 477.724141][ T3587] ? lock_sock_nested+0x68/0x100 [ 477.729135][ T3587] _raw_spin_lock_bh+0x31/0x40 [ 477.730098][ T4836] Bluetooth: hci1: command 0x040f tx timeout [ 477.733870][ T3587] ? lock_sock_nested+0x68/0x100 [ 477.744726][ T3587] lock_sock_nested+0x68/0x100 [ 477.749484][ T3587] sco_connect_cfm+0x456/0xad0 [ 477.754242][ T3587] ? sco_skb_put_cmsg+0x90/0x90 [ 477.759100][ T3587] ? sco_skb_put_cmsg+0x90/0x90 [ 477.763923][ T3587] hci_sync_conn_complete_evt+0x4ce/0x9b0 [ 477.769616][ T3587] hci_event_packet+0xa12/0x1550 [ 477.774539][ T3587] ? rcu_lock_release+0x20/0x20 [ 477.779360][ T3587] ? hci_send_to_monitor+0x99/0x4d0 [ 477.784531][ T3587] hci_rx_work+0x232/0x990 [ 477.788921][ T3587] process_one_work+0x8a1/0x10c0 [ 477.793829][ T3587] ? worker_detach_from_pool+0x260/0x260 [ 477.799487][ T3587] ? _raw_spin_lock_irqsave+0x120/0x120 [ 477.805004][ T3587] ? kthread_data+0x4e/0xc0 [ 477.809481][ T3587] ? wq_worker_running+0x97/0x170 [ 477.814477][ T3587] worker_thread+0xaca/0x1280 [ 477.819125][ T3587] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 477.824993][ T3587] kthread+0x3f6/0x4f0 [ 477.829118][ T3587] ? rcu_lock_release+0x20/0x20 [ 477.833951][ T3587] ? kthread_blkcg+0xd0/0xd0 [ 477.838516][ T3587] ret_from_fork+0x1f/0x30 [ 477.842907][ T3587] [ 477.846103][ T3587] Kernel Offset: disabled [ 477.850437][ T3587] Rebooting in 86400 seconds..