last executing test programs: 9m18.598352084s ago: executing program 1 (id=664): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket(0x1e, 0x5, 0x0) sendto(r0, &(0x7f0000000340)="2493f3915b412fff8dc1c39c3f6d4e6ad07387a314461ab4871a9ee5aa1b6fe01eb83d38df1d79389565758b2b6372fea09d43c97d1bf3f3d233977971f0b837a49bbdd622eb575e5fbe45fb6e714cabd73486714da5546669f3355160f694560548220f7b0a92d13a06c4aa4baff5a11e52af91429c2d776f9861a43ad8ca7151b99cb71f98786a13c2cbc2a1372a87eace6f682f9250c02e50772492c1dca7e1626725dd214889d00944fb3c9eaf706a9b9b24478de2c19e45b863e807f97ae94486625985d5a4ba0e6d9bab6cfffc7bd9285cbe7d9ddd2697503accf93203c24c7b611098fdf085eacfe3dbbff55a", 0xf0, 0x8040, &(0x7f0000000540)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000100)={0x2017be01}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x2, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x800000000000007], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x8, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x2, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) ioctl$TIOCCONS(r0, 0x541d) 9m17.385835079s ago: executing program 1 (id=668): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x803, &(0x7f0000000300)=ANY=[], 0x29, 0x1b0, &(0x7f0000000600)="$eJzKKC4sZmBgYPj7sSaZwYEBDNgY+BhuMzIysDCwMMgzQsTc2CH0KzYIrQflv2CB0JqcEHoRVP4/FBRXVmUn5uSkFtGQgV2OCeIQBlJMBKlHl7ryMZafVHOGFIORjIAarIzoAbQ9nhkSjtQx8MuABybLIIlTYhmMmFIIrj0bA8NbcEq//rEmGcRIgJZSILEUCGZkQlIDis0jSGqkWMCYkZnhP1wNqPADcdQZGBj0S3IL9Isrq3QzcxPTU9NT84yMjM0MTAwMTI300zJzUg0gJCOSFbAiCkSDyl5QmcqJJM/KwMBwD1rAcjEggZcQa2FOg8ozIusFlcP/oYW0hjIDCmBC0guj2RkOCMD0QrWBbQ5hUGPgYGBgKG+AlROggFEBm8LCAPaSBwMjAzOUYwh1LgMj3C4OsIRecn5OSjsDIwMjTNtyBha4GYaPGVjBHDaEGyEyxhYNMKF2KK0CpT2g9HIo/RhKw+osWF3EAjbhCZSn0QByYkViSUmRIdt5qBZDUK0HFjNig8kaCTQgBxjI1k9sqJ6TYWcYBaNgFIyCUTAKRsEoGGIAEAAA//8Lolh1") 9m16.518059244s ago: executing program 1 (id=671): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x39ac5f0a16b650a2, 0x100, 0x6, {0x2, 0x6, 0x5, 0x2e0}}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x40, 0xa, 0x0, "1506ddff0900941000a8210c4e89b9f1a100000000000a00000000613dbda5f7", 0x30314752}) 9m15.892521395s ago: executing program 1 (id=674): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) socket$inet6(0xa, 0x80000, 0x413) 9m14.042539755s ago: executing program 1 (id=678): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_clone3(&(0x7f0000000300)={0x231010000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), {0x8}, &(0x7f0000000200)=""/132, 0x84, &(0x7f0000000e40)=""/4096, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) capset(&(0x7f0000000380)={0x19980330, r0}, &(0x7f0000000400)={0x7, 0x8, 0x7, 0xfffffff7, 0x6, 0x39a}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 9m12.76217272s ago: executing program 1 (id=682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}}, 0x0) 9m11.577568565s ago: executing program 32 (id=682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="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"], 0x184}}, 0x0) 9m11.560693232s ago: executing program 3 (id=686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = mq_open(&(0x7f0000000140)='\\{^\x00', 0xc2, 0x12, &(0x7f0000000180)={0x10001, 0x8, 0xd, 0xffffffff}) mq_timedreceive(r2, &(0x7f0000000480)=""/29, 0x1d, 0x800, &(0x7f00000004c0)={0x0, 0x3938700}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x44, 0x0, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x168, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x50}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x5c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x202}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x26}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_TUPLE_MASTER={0x94, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x4, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_SYNPROXY={0x4}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x800) 9m11.476553319s ago: executing program 3 (id=687): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x20, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18}, 0xfffffdef) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d0"}]}], {0x14}}, 0x80}}, 0x0) dup3(r6, 0xffffffffffffffff, 0x80000) 9m10.152948175s ago: executing program 3 (id=690): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") (async) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="186700000b000000000000000900000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003c0000008500", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000004340c0ff0400000065a530001000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f900001fb703000008000000b7040000000000008500000082000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000600)=""/172, 0x40f00, 0x11, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x9, 0x5c03, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x0, 0x2, 0x4, 0xb}], 0x10, 0x5}, 0x94) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b000100000000"], 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000000000001) writev(r2, 0x0, 0x0) (async) r3 = syz_usb_connect(0x6, 0x59, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], 0x0) (async) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x20001000, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$bt_BT_VOICE(r4, 0x12, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000900)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYRESOCT=r3, @ANYBLOB, @ANYRES32=r0], 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0) (async) getpid() ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0389424, &(0x7f00000000c0)={"00d0500000000000e51511194d2e45df", 0x0, 0x0, {}, {}, 0x0, [0x0, 0x0, 0xb]}) 9m8.718523667s ago: executing program 3 (id=692): r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='.\x02\x00', 0x2000c0, &(0x7f0000002380)=ANY=[@ANYBLOB="747970653d629bfeaa2c747970653d75699e3e2c666f7263652c6465636f6d706f73652c666f7263652c6e6c733d69736f383835392d392c00fb96ab4c9493d7be8b39915215ec88b35cc6fc60097459"], 0x1, 0x6ef, &(0x7f0000000180)="$eJzs3U9sW3cdAPDvsx0n7qTM29ptIKRGq6hghTaJGS0SEgUhlMOEKnHZ1bTpGtXJqsRDaYWoBwxuwAn1sMMQCoed0A5IQxwQ44yExBX1Xol7xQGj9/zs2E7i2G3+tN3nI72833vv9/eb3/vFfm7lAD6zlt6KqVYksXTuzc30+P5WrXF/q7baTUfEdEQUIkqdXSRrEcmnEZejs8Xn0pN5dcle7bzx4JMPzt77qNY5KuVblr8wqty29ogWWvkWcxFRzPcTKu1V39Vd6rs7UdVJr99pwM50AwfHrb1Da5LiY9y3wJPubkRxapfz1YgTETGTvw6IfHUo5JfLR9jFAzXRKgcAAABPpuJ+GZ5/GA9jM2aPpjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwbEg63xmY5Fuhm56LpPv9/+X8XKr8ZH/x/1f2uf7+9SPqCAAAAAAAAAAcio/zD+5PP4yHsRmz3fPtJPvM/7Xs4GT287l4NzZiOdbjfGxGPZrRjPVYiJia7auwvFlvNtcXdpb8baQl2+323bzkYkRUY3qo5OKRDBsAAAAAAAAAnlU/jaWYPe5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvySi2Nll28luuhqFUkTMREQ5zdeK+Es3/TT763F3AAAAAA5fJd/PJv/rJNpJ9p7/5ex9/0y8G2vRjJVoRiOW41r2LKDzrr/wz1YxL1xb7RTtuJsdfPs/E/UjqzEiivHeHi3PZzlO9UosxffiB3Eu5uJKrMdK/Cjq0YzlmItKOoioRxLVSufpRfX+Vm21fxts/PLA0ZXhvp0eOn4160klrsdK1rfzcbUcnccm2RjSNl/ta+1P5YihFt9Lo5N8KzdmjK71/b5+kz+XybWfH7OOw1HNRj7Vi8h8Gvs8Gi+Mjv2E82S4pYUo9J5BndxuJbZnZU835j+cJOYn8n0a618MxvygTfgobTgSi1HIZ1/Ey4Mxv/XFey8OFv7yv/525UZh7eaN6xvnDnFIh2qqmxiORK0vEq+Mnn15JBppJFrjR2Jq+MTMY4zjAJXzaHQW5vFWy+9mqXq81jcF34lrsRwXYz4W4lLMxzdiMWoDM+zUQFxLtdXBmGT3WmHn+lYZ0fkzX+rL9Mt9Mh+tNC4v9MW1f6WrZtfyM5d/HfN9UXpx9Oyb+K9A2v7n83Taxs96f3GeBAORyNfmbu9eGh2J37XTnxuNtZvrN+q3xmzvbL5Pb9v3B9fm3x/EeB5dOl/SFbeUHWUxqXTnS3rtpV5vB+NVzj9x6ZQr7Lh2qnetGrOxEt/f804t56/hdtbUufZK/7V/b6+c5fz1TffawKuceCca2auQIXNHE1UAxnbi9RPlyoPKPyofVn5euVF5c+Y705emv1COqb+X/lz8Y+EPhW8mr8eH8ZOYPe6eAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAs2Dj9p2b9UZjeb2XiJnhM4+bKO/Z1uhEFPbNs/XceBVGNWJ0W0meKB/s2J/GRCUOqeaPI2JEnvJjN5FMPMcmTqQT+UAq7H5xWnamXZygeKlbavc8pdiY2es3OL19F0T1Zr3x3/ZAnkr03TLAM+5Cc/XWhY3bd766slp/e/nt5bXFSxcvXax9feFrF66vNJbnOz+Pu5fAYdi4fac4OsevdnzrLQAAAAAAAAAAAHC88n/933zk/8xQ2idPeX1j95ZPH/VQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKfU0lsx1YokFubPz6fH97dqjXTrprdzliKiEBHJjyOSTyMuR2eLal91yV7tvPHgkw/O3vuotl1XqZu/MKrceFr5FnMRUcz3+5vepZqd9V3tq6/1SN1LeiNMA3amGzg4bv8PAAD//3Ds/WM=") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffff, 0x0, 0xa0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback={0x30}, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x6290}], 0x1, 0x2160, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4004841, &(0x7f0000000180)={0x11, 0xf7, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000016c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001680)={&(0x7f0000000e80)={0x7c4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x9, 0x1, 0x6}, {0x1, 0xa, 0x6, 0xffff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcad}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbef2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x2000c080}, 0x8010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073"], 0x7c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0xffffffffffffffc7, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRESOCT=r5, @ANYRES8=r0, @ANYRES16=r5, @ANYRES32=r6], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0xc, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 9m7.40766843s ago: executing program 3 (id=697): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c103df3abbfee2605aca013868c000000", @ANYRES16=r2, @ANYBLOB="a1ab0000000000000000320000000800170156000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0xe5, 0x10, 0x0, 0x4f5, 0x81, 0x2b, 0x94, 0x81, 0x77, 0xe, 0x7, 0x0, 0x6, 0x7, 0x0, 0x2, 0x2, 0x40, '\x00', 0xa, 0x8}) socket(0x2c, 0x1, 0x9aa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r8, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 9m6.602084868s ago: executing program 3 (id=699): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000080)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001740)=""/4085, 0xff5}, {&(0x7f0000002740)=""/4081, 0xff1}], 0x2}, 0x5}], 0x3, 0x4, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000080)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001740)=""/4085, 0xff5}, {&(0x7f0000002740)=""/4081, 0xff1}], 0x2}, 0x5}], 0x3, 0x4, 0x0) (async) 9m5.890908817s ago: executing program 33 (id=699): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000080)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001740)=""/4085, 0xff5}, {&(0x7f0000002740)=""/4081, 0xff1}], 0x2}, 0x5}], 0x3, 0x4, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f0000000080)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001740)=""/4085, 0xff5}, {&(0x7f0000002740)=""/4081, 0xff1}], 0x2}, 0x5}], 0x3, 0x4, 0x0) (async) 7m19.82509828s ago: executing program 0 (id=1197): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 7m19.555367498s ago: executing program 0 (id=1200): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "427f4d05618664ecb7f952ed7667675bc32afc7ebbfea1deee1e2e520cc38c6a"}}) close_range(r0, 0xffffffffffffffff, 0x0) 7m19.432362014s ago: executing program 0 (id=1202): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 7m19.168481738s ago: executing program 0 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="0f21e135200000000f22d866bad004b06eee0fc71c530f23d80721f835000000000f23f866baf80cb854cd0882ef66bafc0cb80dde1f5feff3406a473e3e0f01d10f1a4eaf2e450f2247430f01986a310b80c4a1e610d7", 0x57}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m18.422084778s ago: executing program 0 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3a090, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1010408, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 7m18.24128443s ago: executing program 0 (id=1220): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x24008000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 7m3.077572966s ago: executing program 34 (id=1220): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x24008000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 3m19.29274394s ago: executing program 6 (id=4093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m18.713409969s ago: executing program 6 (id=4099): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001140)=@filter={'filter\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_virt_wifi\x00', {0xff}, 'batadv_slave_0\x00', {}, 0x10, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x700000, 0x1, 0x1}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x84, 0xd, 0x6, 0x8, 0x5, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 0x4, 0x20}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffe, 0x401}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000080), 0x0, 0x0, 0x4) (async) preadv(r6, &(0x7f0000000080), 0x0, 0x0, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) shutdown(0xffffffffffffffff, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000140)="359fd9d9d66f22e3a890", 0xa}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000380)="04ca4fef843808d93e3fe8b9f7e0cdffcef4fca4e396ef5996f6902696a0455ba73d0b9ece7bd516964feb4cde130881ebbaaf7212b7d9374aa3224c3d12ee9eee7c70e56cf5a73822191cef26d36e3c90d72a5c7049feff4232105a8e3a584c1787416508e3e83e2c6dae15943e2ffb94e4ed2d89d3438ac1885d7809784374a637740e88bfaafc0bdeaae352c3719ee9d367b29292d90a9e4ab10a94f0525252fd4f96f885a11ad187", 0xaa}, {&(0x7f0000000440)="0067bab405733e38e2ed2163d294147b06ff74fa23906ca38a4a5fc5a865a5e00c41abc04355c76b1f5405e8b436aa8442615cf6c0ebd9fd7832d51ed7ba5947734542a7f970a71509d64871ffcc346b197f4c6e50c1f8f348faf44380e3951f3870870f6c0cbbb89634dbe15d4a86c4b490bb5c7c59f33057e08c179d9d367f60a409d7ca9ead4550707e0714eacd1de1a17ddb8073847c74dada63c78c", 0x9e}], 0x8, 0x8, 0x1) (async) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000140)="359fd9d9d66f22e3a890", 0xa}, {&(0x7f0000001640)="699f735d863e364334526e7f99d24cf5f72c91df29b4e9f511126d2764eab8f3283d325c3ac3fc4194fb7cc7cf2847a1adcf92251936a20030034e596a4cbfcec349876a0d3b4e9ad682f33c53d39fa8cd860bbed3318b3e35bf2fd99c97ccad9e2a39a2dce37246ef33fe2b219dd9ad8ef324c01d9de499b3de71fedf45ca2862668d6fd67ec13ce5f61238e0612a3fe4fa5c4e849214feaa838502da0fd017498171dc554d606a559dc61d334ef9720c96d9452de83d09aa995ad4e2e3ee0bb83668f13330bc005510e7016dd49fdc6bd40f192a35f0b6ea9fd5fb28e1aa4d83476d22a62a69565ebd53b01ffaeaadc9e75782a1ee57883bd443b36d5053270d99eda6f63e138c94a9bc10d5028fa51ca432c05c06b84f7d69ce961c3f500ffd44cded3d05c7d4537c7c46e2b787c2a774ba56d163bbd9d7527c7a2d1200ed3c7aafb5c0279e10b29fc566f6d9f9109716284e41faa8d72f1e870bd76ec15d0b03b58c6fbdef4e27e27f96d982b85d57d0f8ec6d744b4d4f37066efeafcc7d66a8798fd8c5f397a5bb25425d415437bd19a57cb8bff01d967f4bf02b8bb68f71573b7f0618e0302342981c9f543586395a6e86dffee42d0363006ba40be10d37756478e42ed124e81f41a1cc89cba6766db1ca45d45c9fe63f6f081b355c0fb507387daf8fdc53b46b44c4942d3e41321fbc8d1fc515d50a43c8390d1affa742fb296be09a67aecc2875d0aa5613851b1920a0f8792d2727a42fb2cd163c05c3365cccaaeb41076b61e4826dd1df3916e965575eee0604dad49e2cf8a98b9e764108b5e17532dc463868c05e3e50101346b04e8f99fe0d3396475661d1aa63b00b74ae8d773ddc299e9e21dd2463b88a9ce3de4159b300619509e3809275e19b8a2c32af6ab5e048ccffd69746517a4df8cd93c67ac6249bf3148f8f1c1017814484b3b70759c69f8abc9ec3cb3483157d150fb0915615f0531c34b36b02d4b173fc4b695245d360018e22097eb870005b368116c9c884035a1e20e796b22e0c03dd874806114196f977506a457441091156bc0fc48d87d63a6d1ed4654488c2a3fb11db80306a73d060fc87078d0b3d1c4157541ea4124826fd58b49861ccbc840b54d1b47a82380ea59c866df2a7dad25086019aa22ca6415d0d63171f6280830c0c82c84565c12d84bd26e2565586cec3aaa439fe6eb08aebd510b2665da900eda78ca22592b7f0a71d58f176c607e3ccd1b545c7bb46f734bb612e3361fd578a21e3082d067ddddbec9b08541d5556e1fd956b438d32c4462de898338df4fcae8eba648b79c3615a0a69892da82ea992c5ad5fde89e52795940d84293f87ca0985cda0df7ef870e9f5b76bc85aa4a95f6abfb5a0950b67708dd2d5fb1e197aeb0e4709616d3f289c7b623bcd6f47b27f95473824a7c1e2e9a3db21d4e59945905dd5f0f5b0c96f560c7309eb7ee2312adb0fbfad33ce743c05076914c481a295268625428d3289c8c9e27f3ed73a6e4e50292d5460c1a717c1d1e37da7af1250ff15deed5797ea06f13aa15851823d112bd1989d4fa88a6792d8258a9951b039a4450ce7ca96265b952b24388177caa1e520b9c94d36e6a2743494f739fd64af76bcf74d331c2b79a18c4167494b63afe90fea0c08db1b09d39526a7ca5f5e0bc273c84789c59b85a56c38a847d4a44a3e27b872be0f0bb7bbdc13ecddb4a358203deb3c0728834973b8713db3db6aa94ade80a1401301536a872d4c63e4d0db0fd47596e8610b3d08d323504817e60db1890d2efd6154b82c9873534fb3cc65379ca0ffc4317d81ad6f0fa5e963af5541ee2b06e503e6a3097775dd9cf1df7c942d55930e355d964583bfda1520b824abef4ea946e750aaaf5f94ad4bdb17f697573a6eeb5939f88206462586b906cf60c4a366c4910409da567f2a1bf57e4eecac010311200886ef9a6531c8b592088dc2e91e2ff1937e0f2d8df0f405831f729a9a3c025cdc8228e2263cd10c4debb0115f23f4757a38dcb9aba4e8cd576f32b1544fcd3660d830b6eb7c2e992208b0fb7236f814b0719558d2965248c24bd6e04d4a29aeb6280fad52daf4c081740d6504a682fe5d3faba1ecd23b0b658b8d520c871e1eefeeef73dc4aa1b9c5ce717a1703c9ada83926a007b14444c674c8161486f25ebb5e21b6c61b81f9469213967a2ae4ecc7128e32984e2db46c3522e2ceaafe55eddb5b7540d0814550493c49cdea9e75a6ea691a7fdef3900bc66bb551bce96f84cb0cea2d03f5fe5bad3dd07ce230cd43ddd3a4da2cbecc4a63a450b9533033e7117ce442fd0c4c1f595eac5935d1855c0d8d58af29b36a4ab98eb3057651b9b95c608e6c652a6253d4489feefbfda9749d540c5fceebe45d4d018fffb6badf7b6b737e11fd2625df8240cb4fa4f8589df3b1554184cdded2c74dbce33ccc1e6f469db990540d1ce9a76c90aa9a800f502b5ca4a48cd8586ff83104b338c2ad78ffccec09361d9eba4e9b785f14623927c383161aa7aa00c5884239c2a1c864334da55e484e86e98f059c8088d296fd15773a35a2a3d0245166cffed2825368353bcbff6f4b2a975db713a3830fbe00a9586288c2a4b452215f1db2e0b64baab3aebe8d6bc8f6da9ebd5078e34e1e3d27b0647f3d7cb7c263924addcf4014ae4ef04ce349c48f6e218c51d0579e5716d7f188f2c1deeeebc8b387b33f686a2f1ca1914d33c5496b8ef5a9dd5d4b5da16369bbf53cb7414158eb2b820ed95537a2f6a39b31e687f1b4bd11a4f5c447bfe855c2f3a82cf2a473cb2f42ce60c400de8c8d1687093a60e6608937db122d609d7e742aaa8459913b5c4106ccacf75c92790e83e07699254320099028a7ad3ce655b87890f104740ded00efc72d4ac212577a6f924840cc087683b46fbbb579d5c9a678f49a96483566e6eacab1814c2525248d0f976451995fccd4a45581b0a7e1dcb8d1aa569023ea0a202aa22dadee98cb3ed3645d7a2092da35b5a964f3e3d94fc53eaf0cbd4f66d364fed5acda9c48662a9bbf75fe547729c408b42ddbc0dd23e4327678fca3446e207b55f445f13267c9c243243f3505fd559ddede111985bc102c26555532f9abfa9a46bae16d6f53e8f932b59cef95bba8653fa79814769a7ec7f0b3d255580ecaf825f82ed0653904f1b57812fed2778877a0e5200e6ce53c403b74841975138eae2ccce7bdfe0ce090d4e7ad6584fc3002ca566bf9e7866d51cb5af77345af0847e28628a85ad3c975b716e3f74eb94f94c085e8b5c4adbbf45f271294563366f03cd924bf728236cc02b780f0a1f690854ac1d27882c9c91ae7efd449cb64800c6703f9af73cde5eeef4911dfbe6269348cdc547072afe6e57d64230263cb9dd77e0d974189389713c5999cc2ebe65b3794d3c251d77d09ce6be4c6652475fc475b1d63168cdc93305c0ed5b4b7e8f22f39569e9d54ba296d7795469f53b7de0ce98891bfd71227d82201f41282728f49b884e292d1ef9165b0f4192f39738be879edf6896159e442575fd55ea6296669503bcf205958fbe3e0a141c58685b7f1e2cf02c1a0ba19018aa7037ac25270da0ccd2f5078f34998d116409990060b0a5701f8629d82b854d9bd0eb584e9a5cd8ea16f7e6b4d7cf6675b8aaf269088af58c0647442da35c42ec00e731d8d0e791e9c77a2349d2cbb2693f2dc32a7c23d7ca7544b8606aa3fb30d33f5535c8c27b9a4ea4e67ec5dd7f36456ffdfae2a977f4feeaceae2412e264a6d9986173b588cf7e361e8022d32aa0dce02a8d6b10db8e1f9e876648da132bc7e2632f81a51c80bc544f344ae3e87ec32c0bed712945ce6453769938d8dcaf1b6d87a886d8771dd6c6b0e9c51d7e5df505be6e77165f592212bf9fb8a50daaf489159fe7c3f1655aed3ac468c5aba530219ccc6a4bc5e952d0287221b3e081fd647c3db2395cff3e9877eb1e63f57dfd9fd25bdecb795ed3b9fa461ed7b4e6e05d554396b4ab1f0166ffd1b49a907ac1267c34fe1cac5bd72d4b7703e326e7a5a5c27af08299579cfd05a7f1b7139b3d98386ac3c3b45065a76af152d01a3d4f877d962aa8d94e8a13bd2f458759aaa8079a55ba36eaee24d4422316114eed75ba4b82e42ea1c6704b25aa6d7a15538dec3cded087732b1b756e31ecf2fe92bfd6ff8395bfccf8a5a7bb1407e75910606498ab2058155c2bb3811d9339d8798cbf023280c9f70b157b8e64f790bf2eef419a4175feb95091ff6a3a6b0167082a23c41411e0638b8e4f8a903caf635a1146c065545d75c796c3aaf4076e8699008b901bef5dd12fd3381bdb08f92d44fbf29ffa1e70d1e61b3c199a58a09414bf25c6fb406a53c77800c8f36c79d6f689d3e49df21e537a87977c8e15ea008dc0ab9912ab9310695decb2db3541ed3b03fe0e2dea0eaf8973b6f8b7380a5183c2e9cd5f78648097557d26af8adfe17e36d897ee46d018e8d4a3ebd8a483133a96005624a2932101d60b8929f27c9707886823540de9bab80dc478d906a066164abfb51db662614a954ebf410daf6c3dc082f17bb77d7a323d6e0825b803282c5fc59a616dabf263f1123256fb02601dd98ab9f4ec08bee5f5e429a287e9f555f887a31e070ece3786a07f9d1d95b233e844a12f34fd6e731a05b5c37a4fcb2b3c7476520a60ee321bd5f7e5d7efdd59b51c791145352c457359d154b3e5a848b2839b26c2958ea8accc25eeb7c70e891a6d843e019fc385da379081986a14db8f9f63cc51e383ae67b26be553c19f40af6d68036e617c7339765ed48f25c3eaaf703bb067370dee21fb92071b3d785f2395359c2af1b364414fc345774fc6c1cb9c2c2e92e1ef1a5fc475a073350dd451023544414eeef82f21828d0d29543cbd5ad323d6973147b5136c7a801a4b93ae732a78d17ac2d6e20040021127dcbbb54e192c1480bc0445ea8d5dad11bdd023ea1b5498588a17383345486849ffd5d8250d9e239dcf2f312b8e871c9d4d8332255683958a29e9acf4e25c800c38621ad7d836def1e6142ad529bdbac3503b9fc51f96ba2fbd09f5acf39b1fb0596a18c74ef9db3c3031b0f1bec8e56314879a5cc511258be62098170680e01edf28acde81a62e652b41c554c7dd20fbb436125004c819d7bb1a6212a66343da5a9fcc4f8957614f815fab555167cdbc7acfdd4f6a5a31391d192a3b95faa7af423774ea8086068ec93b651a332fbf5e3650a5b02a1e4cf66c66b1dc529b8a83b2de8ffa24e0d761b83ce4d20cb7cefa54683abb78bd328620b4feadcaa474e19e0e7d7bd2a2ed5202284418afcae2029603845d2c5ffc3d7980a831c321e0c04c43d08a0ebde7c96a6022b15d47b4ff41783e0b790b77de45dce3b9f4953782a38842f7431ce606c4cf286c35e00bec3a08e51c439fa45934237232fae1c0e2efaff12a268d32ac83be1c27f3eead8fde22e4c2cc2af28a123615eaa446b2eac90d1f4d7acc1ff3b36cc107a414269252b76d5e0dc6939ce835578b28321cfc26f0aa98b21f28f809d6f069f88e5321341fbc3550ce8c8d8504a97caa155d66052d4378663cefcfd1c9e5401a4dc1b6386ca4f9289225ca04936305abdb99d429c5e0197c7c01c094d4292db1a65d19d4623bf7fd834253d4e1b333b68bdd92e4f3d8767bdfe4307442a080b4e5d1fd30b193b3080d9490b65368076e170ab8d461afb07bbf41eb57c9552dd24666ee94ad4615ce500cc6c18991a54e6a61193bfed3112f5fa2b925fae0502484af731651f", 0x1000}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000000280)="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", 0xfc}, {&(0x7f0000000380)="04ca4fef843808d93e3fe8b9f7e0cdffcef4fca4e396ef5996f6902696a0455ba73d0b9ece7bd516964feb4cde130881ebbaaf7212b7d9374aa3224c3d12ee9eee7c70e56cf5a73822191cef26d36e3c90d72a5c7049feff4232105a8e3a584c1787416508e3e83e2c6dae15943e2ffb94e4ed2d89d3438ac1885d7809784374a637740e88bfaafc0bdeaae352c3719ee9d367b29292d90a9e4ab10a94f0525252fd4f96f885a11ad187", 0xaa}, {&(0x7f0000000440)="0067bab405733e38e2ed2163d294147b06ff74fa23906ca38a4a5fc5a865a5e00c41abc04355c76b1f5405e8b436aa8442615cf6c0ebd9fd7832d51ed7ba5947734542a7f970a71509d64871ffcc346b197f4c6e50c1f8f348faf44380e3951f3870870f6c0cbbb89634dbe15d4a86c4b490bb5c7c59f33057e08c179d9d367f60a409d7ca9ead4550707e0714eacd1de1a17ddb8073847c74dada63c78c", 0x9e}], 0x8, 0x8, 0x1) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 3m17.913014798s ago: executing program 4 (id=4106): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0xc2}, 0x48) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m17.68360719s ago: executing program 4 (id=4107): syz_clone(0x2000000, &(0x7f00000003c0)="545b89a55c27a0b6238879e4496a8b51d5ad8362b08929e897581d2110cb01fb8bcf0920b8559d1c6bff841bd5db5e62ab54384b606b3243f7c5616d773c1d2c75dfe544a7d8d7bcf20f38c6e2cf242b8a8b188e37fd8f27182f932186711766e09821ab1ceb3959128af1cef7d0bbc04bc24ea4be5dee7d1356138a26c71769493d10e7e825df835e492cc7cca3827b85fe56a5294b67916fc54ea4b5cde863533313bf0f37364665e61bb5b192eb98f6bd5ce944c4b80fa3a79212dcc3601084dab67170f0", 0xc6, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000004c0)="1960d7124d3cfecd81055b63785fa79d7211d6b13db4bb2be57923abe847f788ee9388df52dff27757263ccacd8e8cbf0483886d0ec6e2c4") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0xfe, 0x19c, &(0x7f0000000200)="$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") r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) unshare(0x22020600) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x8000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) 3m16.870180902s ago: executing program 7 (id=4109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m16.715365131s ago: executing program 4 (id=4110): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xab4, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000100)=0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, r6, 0x0, 0x20fffe82) read$FUSE(r0, &(0x7f0000002e40)={0x2020}, 0xffffff0f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x45) 3m16.586080381s ago: executing program 6 (id=4112): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xa, 0x110, r0, 0xbbdd000) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x5f, 0x20000800}, 0x4000008) r1 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x4000}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r4, 0x0, 0x0, r4}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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") ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000000380)={0x1, "055f4cec9ba2d17ffb6d5abc7098ae75c70925ae5a4bfe22590ebd965f22be94493927f845f622c91699adce5a5bb7bef9f700ee76a795bef6f604721d94d819", {0x4, 0x9}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@user_xattr}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {}, {@usrjquota}]}, 0xff, 0x47d, &(0x7f00000007c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x496, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000340)={0xfffffffd}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0) 3m16.384944712s ago: executing program 7 (id=4115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff04) 3m15.841053146s ago: executing program 7 (id=4119): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000080000000000000000850000006d80000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @pix_mp={0x0, 0x3, 0x20303159, 0x0, 0xb, [{}, {}, {0x5}, {0xfffffffd}, {}, {}, {0x100000, 0x8000002}, {0x3ff}], 0x4, 0x0, 0x4, 0x0, 0x3}}}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f00000001c0), 0x0, 0x4) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1000, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@min_batch_time}]}, 0x1, 0x4f4, &(0x7f0000000f40)="$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") 3m14.980643161s ago: executing program 5 (id=4121): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0xb, 0x0, 0x2, {0x8001, 0x4, 0x1000001, 0x8}}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x1, "1e"}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001900)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000900)=[{0x0}], 0x1, &(0x7f0000000b40)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x28}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 3m14.788289821s ago: executing program 7 (id=4123): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904"], 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) syz_usb_connect(0x0, 0x25c, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e9b7e3405e04bf02069e0000000109024a0201000020000904"], 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = io_uring_setup(0x30d8, &(0x7f0000000240)={0x0, 0x8d1d, 0x1, 0x0, 0x45}) io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f00000008c0), 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000ffdbdf000b8c514e07b4602a214f9b79a000"/37, @ANYRES32=r5, @ANYBLOB="04000a00"], 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000000}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2], 0xa8}, 0x1, 0x0, 0x0, 0x2cc75b7ccf39f88}, 0x44000) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r9, 0x5000aea5, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) 3m14.763122517s ago: executing program 5 (id=4124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m14.624734257s ago: executing program 5 (id=4125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m14.5421451s ago: executing program 4 (id=4126): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 3m14.386485533s ago: executing program 5 (id=4127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) 3m14.288375016s ago: executing program 5 (id=4128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m14.070162898s ago: executing program 5 (id=4129): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xab4, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000100)=0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, r6, 0x0, 0x20fffe82) read$FUSE(r0, &(0x7f0000002e40)={0x2020}, 0xffffff0f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x45) 3m13.865973622s ago: executing program 4 (id=4130): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 3m13.690620422s ago: executing program 4 (id=4131): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x1}, 0xfe}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) splice(r0, &(0x7f00000003c0)=0x2, 0xffffffffffffffff, &(0x7f0000000400)=0x3, 0x8, 0x5) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), &(0x7f0000000140), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01010101", 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x47, &(0x7f0000000200)=@string={0x47, 0x3, "4af6a327f85075112f657bad9aec4a0e0f7a8035c5b24ab98313e422bff8db9fe5561d4878a579abf214728ea3f75e08cf631c600e8fef253367e03abf88c35ed97fb7358b"}}, {0xc, &(0x7f0000000380)=@string={0xc, 0x3, "47e50506afadc998a845"}}]}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000340), &(0x7f0000000380), 0x0) syz_emit_ethernet(0xa8, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x801}, {0x8100, 0x0, 0x1, 0x3}}, {@llc_tr={0x11, {@snap={0xaa, 0x1, "a0", "44ff21", 0x884c, "7704f1fcc45c536c6c08c13974c6f870e73f7a1d0fe9fdaab649c945c3af067e2b287a897bcd262117e9d68c635894c5c3d12437694da9bf000418ab54e7fcf0b16fc825ceccc5e58aa25ee6c922437936980f5a93eac64aaf2ae7cc47992188e810ecdf5d0cd2c277075d657249e107803a271a5ada7f70c9"}}}}}, 0x0) 3m13.562237742s ago: executing program 2 (id=4132): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x1a, &(0x7f0000000a80)=ANY=[], 0x0) 3m13.450691857s ago: executing program 6 (id=4133): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0xc2}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m13.450332178s ago: executing program 2 (id=4134): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x800, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) (fail_nth: 2) 3m13.131382734s ago: executing program 7 (id=4135): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 3m13.131208572s ago: executing program 2 (id=4136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}]}], {0x14}}, 0xd8}}, 0x0) 3m12.841210443s ago: executing program 2 (id=4137): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) 3m12.662222764s ago: executing program 7 (id=4138): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m12.610740448s ago: executing program 2 (id=4139): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2002, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000500)={0x5, 0x4, "650fdbab4ed6a5ea12c15895debf2a7a287aef019a6609f6", {0x1, 0x5f}, 0x3}) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3m12.602503094s ago: executing program 6 (id=4140): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose, 0x8}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48) sendto(r0, 0x0, 0x0, 0x80, &(0x7f00000000c0)=@llc={0x1a, 0x201, 0x9b, 0x9f, 0x5, 0x9, @broadcast}, 0x80) 3m12.451156654s ago: executing program 6 (id=4141): setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x3804001, &(0x7f0000000680)=ANY=[], 0x1, 0x1a3, &(0x7f00000002c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000100)=0x2, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="00010000000000406a0584000000000000010902240001000040050904020081030000000921eaff270122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000500)=""/45, 0x2d) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2e2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_QUANTUM={0x7, 0x6, 0x7fffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x12101497}]}, 0x78}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', r6, 0x4, 0x2, 0x3, 0x9, 0x1a, @private0, @remote, 0x7800, 0x700, 0x7c, 0x9}}) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) 3m12.314075969s ago: executing program 2 (id=4142): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ptrace$cont(0x20, r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r4, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 0s ago: executing program 35 (id=4129): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xab4, &(0x7f0000000340)="$eJzs3U2MW0cBAOCxd73JNilxSkKXNLQJhbb8dNNslvATQVIlQiJqKsSlUsUlStMSEYJEkYCqEklO3GhVBYkTP+LUS1UQEr2gqCculWikCqmnwoEDURCVOJRAYhR7xvs8sfNsZ9dex98nzY7nzTzPPO/z8/ubNwGYWtXm3+XlhUoIF9545cg/Hvr7/I0pB9sl6s2/s4VULYRQienZ7P3em2nF195/8US3uBKWmn9TOjx5pT3vphDC2bArXAz1sOPCpZffWnri2Lmj53e//eqBy2uz9AAAMF2+fvHA8va//vm+rVdfu/9Q2NCenvbP6zG9Oe73H4o7/mn/vxo605VCKJrLys3GUJ3vLDfTpVyxnlpWbrZH/XNZ/bUe5TaEW9c/U5jWbblhkqX1uB4q1cWOdLW6uNg6Jg/N4/q5yuKZU6effX5MDQVW3b8fCCHsKoTD5zvT6y0cXAdtGDI01kEbJjIcGl1dVxstY1/mEYXGlnFvgQBa8uuFNzmbn1m4Pe13m+2v/iuPV7vPD6tg1Ov/QPXPjbn+oP7fnLPFYfXcqWtTWq70Pdoc0/l1hPz+pd7fv/xKR+fU/HpErc929rqOMCnXF3q1c2bE7RhWr/bn68Wd6ssxTp/DVzpyH+j4/uT/00n5HwPdfZCf/xcEYX2H0JGu3c57Nca8/QHWr/y+uUa6Phrl9/Xl+RtK8jeW5M+X5N9Vkr+pJB+m2e++/9PwUmXlfFd+TD/o+fB0nu3uGH9owPbk5yMHrT+/73dQt1t/fj8xrGd/OP7UyS888/Sl1v3/lfb6fz2u7+lwox6/WxdjgXS+MD+v3r73v95ZT7VHuXuy9tzdpXzz9bbOcpVtK+8TCtuZm9qx0Dnfll7ldnaWq2fl5mPYmLU33z+5K5sv7X+k7Wr6vGaz5a1lyzGXtSNtV7bGOG8HDCOtj73u/0/r50KoVZ49dfrkYzGd1tM/zdQ23Ji+d8TtBm5fv/1/FkJn/5/N7em1anG7sGVleqW1XXg9vl/n9KV2PYXphR+19Dv3rZn5ZvnFE989/cwqLztMu+d/9MK3j58+ffJ7Xgz94qvroxmDvEiHLeulPV4M+mLXWlcx5g0TsOb2/Li1E/Doqe8cf+7kcyfP7Nu/f9/S0v4v7lve09yv31Pcuy86O4bWAqtp5Ud/3C0BAAAAAAAAAAAA+vWDo0cuvfPm599t9f9f6f+X+v+nO39T//+fZP3/837yqR986ge4tUt+s0z2gNW5rFwthg9n7d2W1bM9m+8jMW6P4xf7/6fq8ue6pvbcm02v9UhmjxO46Xkpc9kzSPLxAj8e4/Mx/nWAMarMd58c41s837ryQWFdT8+nKHThbXg+8ORI/7fm2lB4pFHq/931uU5d+mszWUbRY3Hcywh098+pev73v1YWfOxtEXqH2dHW9/PpXScaPffS+x3BBmB1jHv8z3TeM8Vn/vi1jTdCKnbl8c7tZf78UhjEX97pTK/38SfXuv583L5R1z/u5R/1+J/t8e/63v5lI+bVh6v3P7+4/G6h2rCj3/rz5U/Pgd42WP1XY/1paR4O/dXf+FVWf35BqE//zeq/q8/6b1r+ncPV/79Yf/rYHnmw3/pbLa5UO9sxny1Huv6XnzdOrmXLn57teYv6v/FCt+UfcqDG67F+mGaTMs7soLL9iPZO+/Dj/0ZnV3f833Zjs81afh/G52I6bYjTfQ75eCeDtj/dX5F+B7Zn718p+X0z/u9k+1KMy74PafzftD7W409+Id38LFO61uWzvVO3NTCp3puq63+jCpdbh0HDzb9x/O0XBgiNmSHma48TN+b2NxqNtT2hVWKslTP2z3/cxwnjrn/cn3+ZfPzffB8+H/83z8/H/83z8/F/8/z5+B/qlZ+P/5t/nvn4v3n+vdn75uMDL5Tkf7Qkf0f3/PZh+30l8+8syf9YSf7udv7BjhIp//5bzr9Srtf731OS/2BJ/idK8j9Zkv9QSf4jhfziGNAp/1Ml89/pUn+UaV1+mGZ5/zzff5ge6fpPr+//tpJ8YHL97LW9h5/+7Tfrrf7/c+3zIek63qGYrsXjpx/GdH7dOxTSN/LejOm/Zfnr/XwHTJP8+Rn57/vDJfnA5Er3efl+wxSqbOw+OcZlz63qtZ/PZPl0jD8T48/G+NEYL8Z4T4z3xnhpRO1jbRx+/fcHXqqsHO9vyfL7vZ887w/U8ZyoEMK+PtuTnx8Y9H72/Dl+g7rd+ofsDgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA21ebf5eWFSggX3njlyFPHTu25MeVgu0S9+Xe2kKq15wvhsRjPxPiX8cW19188UYyvx7gSlkIlVNrTw5NX2jVtCiGcDbvCxVAPOy5cevmtpSeOnTt6fvfbrx64vHafAAAAANz5/h8AAP//JI4RIA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000100)=0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, r6, 0x0, 0x20fffe82) read$FUSE(r0, &(0x7f0000002e40)={0x2020}, 0xffffff0f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x45) kernel console output (not intermixed with test programs): ort 1(bridge_slave_0) entered blocking state [ 492.118158][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.134667][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.141907][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.351212][T14103] fuse: Unknown parameter 'group_i00000000000000000000' [ 492.419737][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2437'. [ 492.503519][T14016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.533604][T14111] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2439'. [ 492.927384][T14132] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 493.014813][T14136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.042339][T14137] fuse: Unknown parameter 'group_id00000000000000000000' [ 493.055650][T14136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.081781][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 493.156715][T14016] veth0_vlan: entered promiscuous mode [ 493.186729][T14016] veth1_vlan: entered promiscuous mode [ 493.202895][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2451'. [ 493.279490][T14016] veth0_macvtap: entered promiscuous mode [ 493.290729][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2451'. [ 493.314162][T14016] veth1_macvtap: entered promiscuous mode [ 493.345194][T14016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.389440][T14016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.562510][T14155] batman_adv: batadv0: Adding interface: dummy0 [ 493.569198][T14155] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.598271][T14155] batman_adv: batadv0: Interface activated: dummy0 [ 493.636850][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.654331][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.679611][T14158] batadv0: mtu less than device minimum [ 493.698470][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 493.710991][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 493.722973][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 493.734898][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 493.746805][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 493.758786][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 493.770751][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 493.782649][T14158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 493.815186][ T52] Bluetooth: hci2: command tx timeout [ 493.898207][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.935508][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 493.940759][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.009457][T14171] fuse: Unknown parameter 'group_id00000000000000000000' [ 494.211586][T14182] netlink: 484 bytes leftover after parsing attributes in process `syz.5.2466'. [ 494.491067][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2474'. [ 494.503913][ T5957] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 494.514910][T14201] fuse: Unknown parameter 'group_id00000000000000000000' [ 494.665623][ T5957] usb 5-1: config 0 has no interfaces? [ 494.673595][ T5957] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 494.692961][ T5957] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 494.725766][ T5957] usb 5-1: Manufacturer: syz [ 494.738715][ T5957] usb 5-1: config 0 descriptor?? [ 494.955952][ T5957] usb 5-1: USB disconnect, device number 2 [ 495.580822][T14255] Driver unsupported XDP return value 0 on prog (id 337) dev N/A, expect packet loss! [ 495.649744][T14261] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 495.894330][ T52] Bluetooth: hci2: command tx timeout [ 496.159983][T14289] __nla_validate_parse: 3 callbacks suppressed [ 496.160001][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 496.186116][T14290] netlink: 548 bytes leftover after parsing attributes in process `syz.5.2514'. [ 496.506411][T14309] fuse: Bad value for 'user_id' [ 496.511438][T14309] fuse: Bad value for 'user_id' [ 496.743621][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2529'. [ 496.886053][T14329] syz_tun: entered allmulticast mode [ 496.902356][T14328] syz_tun: left allmulticast mode [ 497.653023][T14375] netlink: 548 bytes leftover after parsing attributes in process `syz.2.2550'. [ 497.674211][ T52] Bluetooth: hci0: command tx timeout [ 498.053072][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2564'. [ 498.649723][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2577'. [ 498.937892][T14450] bridge_slave_0: left allmulticast mode [ 498.956909][T14450] bridge_slave_0: left promiscuous mode [ 498.962808][T14450] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.090080][T14450] bridge_slave_1: left allmulticast mode [ 499.098504][T14450] bridge_slave_1: left promiscuous mode [ 499.122734][T14450] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.137589][T14450] bond0: (slave bond_slave_0): Releasing backup interface [ 499.153255][T14450] bond0: (slave bond_slave_1): Releasing backup interface [ 499.186184][T14450] team0: Port device team_slave_0 removed [ 499.218132][T14450] team0: Port device team_slave_1 removed [ 499.231916][T14450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.246501][T14450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.266134][T14450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.275251][T14450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.288752][T14450] net_ratelimit: 11 callbacks suppressed [ 499.288769][T14450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 499.346330][T14436] lec:lec_atm_close: lec0: Shut down! [ 499.412707][T14465] fuse: Bad value for 'fd' [ 499.604418][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'. [ 499.963267][T14496] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002 [ 500.003675][T14498] fuse: Bad value for 'fd' [ 500.100351][T14503] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2604'. [ 500.132978][T14503] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2604'. [ 500.144774][T14503] netlink: 34 bytes leftover after parsing attributes in process `syz.5.2604'. [ 500.364127][ T5957] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 500.528613][ T5957] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 500.543229][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.559456][ T5957] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 500.568987][ T5957] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 500.577244][ T5957] usb 3-1: Manufacturer: syz [ 500.589069][ T5957] usb 3-1: config 0 descriptor?? [ 500.597712][ T5957] igorplugusb 3-1:0.0: incorrect number of endpoints [ 500.813437][ T5957] usb 3-1: USB disconnect, device number 36 [ 500.969337][T14541] fuse: Bad value for 'fd' [ 501.229788][T14558] __nla_validate_parse: 3 callbacks suppressed [ 501.229806][T14558] netlink: 548 bytes leftover after parsing attributes in process `syz.7.2621'. [ 501.421544][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.428401][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.537211][T14576] fuse: Invalid rootmode [ 501.712755][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 501.929082][T14597] sock: sock_timestamping_bind_phc: sock not bind to device [ 502.025944][T14603] fuse: Invalid rootmode [ 502.108660][T14609] netlink: 'syz.4.2644': attribute type 4 has an invalid length. [ 502.117567][T14609] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2644'. [ 502.145274][T14609] : renamed from bond0 (while UP) [ 502.324551][T14619] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2646'. [ 502.426720][T14626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.620018][T14634] tipc: Enabling of bearer rejected, failed to enable media [ 502.699695][T14638] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2651'. [ 502.883649][T14644] netlink: 548 bytes leftover after parsing attributes in process `syz.7.2653'. [ 503.362876][ T60] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 503.461154][T14669] lo speed is unknown, defaulting to 1000 [ 503.478298][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2666'. [ 504.380543][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2679'. [ 504.680301][T14720] IPVS: Scheduler module ip_vs_ not found [ 505.220854][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 505.416550][T14758] netlink: 'syz.5.2697': attribute type 1 has an invalid length. [ 505.443876][T14758] netlink: 'syz.5.2697': attribute type 4 has an invalid length. [ 505.461863][T14758] netlink: 15586 bytes leftover after parsing attributes in process `syz.5.2697'. [ 505.609004][T14772] netlink: 'syz.5.2701': attribute type 4 has an invalid length. [ 505.688014][T14774] lo speed is unknown, defaulting to 1000 [ 506.397329][T14798] __nla_validate_parse: 1 callbacks suppressed [ 506.397348][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2710'. [ 507.132048][T14835] netlink: 548 bytes leftover after parsing attributes in process `syz.2.2721'. [ 507.443555][T14851] ieee802154 phy0 wpan0: encryption failed: -90 [ 507.456616][T14848] lo speed is unknown, defaulting to 1000 [ 507.782678][T14865] fuse: Unknown parameter 'use00000000000000000000' [ 507.822717][ T52] Bluetooth: hci2: command tx timeout [ 508.077623][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 508.582660][T14892] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96 [ 509.166634][ T5989] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 509.339264][ T5989] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 509.352696][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.421330][ T5989] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 509.435393][ T5989] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 509.473833][ T5989] usb 5-1: Manufacturer: syz [ 509.493377][ T5989] usb 5-1: config 0 descriptor?? [ 509.513319][ T5989] igorplugusb 5-1:0.0: incorrect number of endpoints [ 509.730531][ T5989] usb 5-1: USB disconnect, device number 3 [ 509.886022][T14955] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.894029][T14955] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.073256][T14955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.124665][T14955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.450335][ T5957] lo speed is unknown, defaulting to 1000 [ 510.475908][ T5957] syz0: Port: 1 Link DOWN [ 510.524201][ T6100] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.548551][ T6100] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.590498][ T6100] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.633324][ T6100] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.147641][T15027] tipc: Started in network mode [ 511.152649][T15027] tipc: Node identity d68e004e247c, cluster identity 4711 [ 511.171257][T15027] tipc: Enabled bearer , priority 0 [ 511.179925][T15027] syzkaller0: entered promiscuous mode [ 511.186078][T15027] syzkaller0: entered allmulticast mode [ 511.230445][T15027] tipc: Resetting bearer [ 511.250455][T15026] tipc: Resetting bearer [ 511.313711][T15026] tipc: Disabling bearer [ 511.614461][T15051] fuse: Unknown parameter 'user_id00000000000000000000' [ 511.942983][T15066] tipc: Enabled bearer , priority 0 [ 511.968344][T15066] syzkaller0: entered promiscuous mode [ 511.974761][T15066] syzkaller0: entered allmulticast mode [ 512.054497][T15066] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2809'. [ 512.065722][T15074] tipc: Resetting bearer [ 512.114028][T15065] tipc: Resetting bearer [ 512.122791][T15075] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2812'. [ 512.136294][T13788] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 512.192068][T15065] tipc: Disabling bearer [ 512.192355][T15082] netlink: 548 bytes leftover after parsing attributes in process `syz.6.2814'. [ 512.231737][T15075] geneve2: entered promiscuous mode [ 512.251860][T15075] geneve2: entered allmulticast mode [ 512.267744][T15084] fuse: Unknown parameter 'user_id00000000000000000000' [ 512.343290][T13788] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 512.358213][T13788] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.401929][T13788] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 512.417362][T13788] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 512.443532][T13788] usb 6-1: Manufacturer: syz [ 512.460255][T13788] usb 6-1: config 0 descriptor?? [ 512.475173][T13788] igorplugusb 6-1:0.0: incorrect number of endpoints [ 512.680332][ T6000] usb 6-1: USB disconnect, device number 13 [ 514.044730][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 514.215903][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 514.225009][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.250740][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 514.260252][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 514.277444][ T10] usb 3-1: Manufacturer: syz [ 514.304929][ T10] usb 3-1: config 0 descriptor?? [ 514.325272][ T10] igorplugusb 3-1:0.0: incorrect number of endpoints [ 514.332997][T15167] tipc: Started in network mode [ 514.352266][T15167] tipc: Node identity 52e06ad638ea, cluster identity 4711 [ 514.371057][T15167] tipc: Enabled bearer , priority 0 [ 514.482863][T15171] syzkaller0: entered promiscuous mode [ 514.488626][T15171] syzkaller0: entered allmulticast mode [ 514.495089][T15171] tipc: Resetting bearer [ 514.509409][T15166] tipc: Resetting bearer [ 514.512842][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2853'. [ 514.533882][ T10] usb 3-1: USB disconnect, device number 37 [ 515.494600][ T10] tipc: Node number set to 1779067606 [ 517.056976][T15166] tipc: Disabling bearer [ 517.113685][T15176] lo speed is unknown, defaulting to 1000 [ 517.773075][T14986] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 517.803219][T15231] tipc: Enabling of bearer rejected, failed to enable media [ 517.954065][T14986] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 517.962485][T14986] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 518.025764][T14986] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 518.030443][T15244] fuse: Unknown parameter '0x0000000000000003' [ 518.066216][T14986] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 518.093889][T14986] usb 5-1: Manufacturer: syz [ 518.145767][T14986] usb 5-1: config 0 descriptor?? [ 518.212109][T14986] igorplugusb 5-1:0.0: incorrect number of endpoints [ 518.343473][T15253] batadv0: mtu less than device minimum [ 518.395716][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.407723][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.419712][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.431689][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.443608][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.455546][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.467416][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.479346][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.491249][T15253] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 518.544433][ T5989] usb 5-1: USB disconnect, device number 4 [ 518.933514][T15273] lo speed is unknown, defaulting to 1000 [ 520.623860][ T6000] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 520.750785][T15333] lo speed is unknown, defaulting to 1000 [ 520.786294][ T6000] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 520.805575][ T6000] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 520.824465][ T6000] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 520.843261][ T6000] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 520.870636][ T6000] usb 5-1: Manufacturer: syz [ 521.132382][ T6000] usb 5-1: config 0 descriptor?? [ 521.179664][ T6000] igorplugusb 5-1:0.0: incorrect number of endpoints [ 521.384059][ T6000] usb 5-1: USB disconnect, device number 5 [ 522.963204][T15387] lo speed is unknown, defaulting to 1000 [ 523.341270][T15405] vlan2: entered promiscuous mode [ 523.351059][T15405] bond0: entered promiscuous mode [ 523.356698][T15405] bond_slave_0: entered promiscuous mode [ 523.366649][T15405] bond_slave_1: entered promiscuous mode [ 523.723431][T15427] ieee802154 phy0 wpan0: encryption failed: -22 [ 524.151916][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'. [ 524.207354][T15442] lo speed is unknown, defaulting to 1000 [ 524.534167][ T6000] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 524.715791][ T6000] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 524.736361][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.752052][ T6000] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 524.764584][ T6000] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 524.772624][ T6000] usb 8-1: Manufacturer: syz [ 524.796591][ T6000] usb 8-1: config 0 descriptor?? [ 524.958540][T15452] lo speed is unknown, defaulting to 1000 [ 525.027773][ T6000] rc_core: IR keymap rc-hauppauge not found [ 525.034034][ T6000] Registered IR keymap rc-empty [ 525.068138][ T6000] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 525.136793][ T6000] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input24 [ 525.251669][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2955'. [ 525.306356][ T6000] usb 8-1: USB disconnect, device number 8 [ 525.666665][T15485] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.877957][T15500] netlink: 'syz.7.2965': attribute type 1 has an invalid length. [ 525.900714][T15500] netlink: 'syz.7.2965': attribute type 1 has an invalid length. [ 526.068011][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'. [ 526.156339][T15507] lo speed is unknown, defaulting to 1000 [ 526.456101][T15492] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 526.654494][ T6000] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 526.849423][ T6000] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 526.876244][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.927446][ T6000] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 526.945191][ T6000] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 526.964223][ T6000] usb 5-1: Manufacturer: syz [ 526.978928][ T6000] usb 5-1: config 0 descriptor?? [ 527.126398][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2979'. [ 527.135717][ T6000] rc_core: IR keymap rc-hauppauge not found [ 527.141624][ T6000] Registered IR keymap rc-empty [ 527.173521][ T6000] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 527.212446][ T6000] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 527.230370][ T6000] usb 5-1: USB disconnect, device number 6 [ 527.617719][T15563] lo speed is unknown, defaulting to 1000 [ 528.167281][T15548] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 528.700831][T15603] netlink: 'syz.7.3005': attribute type 29 has an invalid length. [ 528.783660][T15603] netlink: 'syz.7.3005': attribute type 29 has an invalid length. [ 528.835173][T15611] netlink: 548 bytes leftover after parsing attributes in process `syz.7.3005'. [ 529.159279][T15620] lo speed is unknown, defaulting to 1000 [ 529.369535][T15633] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.758737][T15643] netlink: 'syz.4.3020': attribute type 4 has an invalid length. [ 530.149588][T15657] netlink: 'syz.7.3024': attribute type 10 has an invalid length. [ 530.302562][T15671] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.971033][T15696] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3036'. [ 531.151862][T15703] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.754468][T15731] netlink: 'syz.5.3047': attribute type 23 has an invalid length. [ 532.448763][T15771] net_ratelimit: 10 callbacks suppressed [ 532.448783][T15771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.746726][T15788] netlink: 'syz.4.3066': attribute type 29 has an invalid length. [ 532.778422][T15788] netlink: 'syz.4.3066': attribute type 29 has an invalid length. [ 532.798615][T15788] netlink: 548 bytes leftover after parsing attributes in process `syz.4.3066'. [ 533.492906][T15835] netlink: 548 bytes leftover after parsing attributes in process `syz.6.3079'. [ 533.928351][T15820] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.996709][T15829] netlink: 'syz.6.3079': attribute type 29 has an invalid length. [ 534.081362][T15836] tipc: Enabled bearer , priority 0 [ 534.115018][T15837] syzkaller0: entered promiscuous mode [ 534.120538][T15837] syzkaller0: entered allmulticast mode [ 534.165907][T15849] tipc: Resetting bearer [ 534.181195][T15832] netlink: 'syz.6.3079': attribute type 29 has an invalid length. [ 534.249932][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3084'. [ 534.270062][T15820] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.300193][T15823] tipc: Resetting bearer [ 534.306458][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3084'. [ 534.329400][T15823] tipc: Disabling bearer [ 534.352610][T15860] macvtap1: entered promiscuous mode [ 534.358143][T15860] batadv0: entered promiscuous mode [ 534.363506][T15860] macvtap1: entered allmulticast mode [ 534.368938][T15860] batadv0: entered allmulticast mode [ 534.387771][T15860] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 534.434720][T15862] batadv0: left allmulticast mode [ 534.439833][T15862] batadv0: left promiscuous mode [ 534.557428][T15820] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.648599][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3088'. [ 534.741553][T15820] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.180991][ T197] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.250613][ T197] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.312540][ T5968] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.340265][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3103'. [ 535.388690][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.546253][T15919] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3109'. [ 535.578792][T15923] netlink: 'syz.6.3108': attribute type 23 has an invalid length. [ 535.849936][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3116'. [ 535.931281][T15945] tipc: Enabled bearer , priority 0 [ 536.042737][T15945] syzkaller0: entered promiscuous mode [ 536.055235][T15945] syzkaller0: entered allmulticast mode [ 536.068523][T15945] tipc: Resetting bearer [ 536.076311][T15948] batman_adv: batadv0: Adding interface: dummy0 [ 536.084934][T15948] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.123103][T15948] batman_adv: batadv0: Interface activated: dummy0 [ 536.132265][T15943] tipc: Resetting bearer [ 536.999207][ T6000] tipc: Node number set to 4075946062 [ 537.656585][T15919] Bluetooth: hci4: Opcode 0x0401 failed: -110 [ 538.647544][T15943] tipc: Disabling bearer [ 540.262264][T16058] lo speed is unknown, defaulting to 1000 [ 540.773628][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.801594][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.824640][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.844903][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.860017][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 540.881978][T10181] syz_tun (unregistering): left promiscuous mode [ 540.988189][T16071] lo speed is unknown, defaulting to 1000 [ 541.187745][T16063] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 541.396457][T16086] tipc: Enabled bearer , priority 0 [ 541.436997][T16085] tipc: Disabling bearer [ 541.963396][T16071] chnl_net:caif_netlink_parms(): no params data found [ 542.134352][T16071] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.141539][T16071] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.148989][T16071] bridge_slave_0: entered allmulticast mode [ 542.156882][T16071] bridge_slave_0: entered promiscuous mode [ 542.167114][T16071] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.174572][T16071] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.181804][T16071] bridge_slave_1: entered allmulticast mode [ 542.190181][T16071] bridge_slave_1: entered promiscuous mode [ 542.289256][T16071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.313062][T16071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.367778][T16120] tipc: Enabled bearer , priority 0 [ 542.389397][T16071] team0: Port device team_slave_0 added [ 542.408379][T16071] team0: Port device team_slave_1 added [ 542.431721][T16124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3187'. [ 542.442815][T16124] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3187'. [ 542.458351][T16119] tipc: Disabling bearer [ 542.486069][T16124] geneve2: entered promiscuous mode [ 542.495781][T16071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.502878][T16071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.540392][T16071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.561317][T16071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.570607][T16071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.605374][T16071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.622240][ T5968] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.647165][ T5968] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.701971][ T5968] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.751210][T16128] netlink: 'syz.4.3189': attribute type 3 has an invalid length. [ 542.782107][ T5968] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.821733][T16071] hsr_slave_0: entered promiscuous mode [ 542.846566][T16071] hsr_slave_1: entered promiscuous mode [ 542.853038][T16071] debugfs: 'hsr0' already exists in 'hsr' [ 542.881723][T16071] Cannot create hsr debugfs directory [ 542.934328][ T52] Bluetooth: hci5: command tx timeout [ 543.159796][T16152] tipc: Enabling of bearer rejected, failed to enable media [ 543.543333][T16071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.588076][T16071] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.609587][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.616830][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.721475][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.728691][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.211686][T16071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.784977][T16071] veth0_vlan: entered promiscuous mode [ 544.821372][T16071] veth1_vlan: entered promiscuous mode [ 544.865530][T16071] veth0_macvtap: entered promiscuous mode [ 544.903514][T16071] veth1_macvtap: entered promiscuous mode [ 544.970699][T16071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.007595][T16071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.014204][ T52] Bluetooth: hci5: command tx timeout [ 545.283505][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.311013][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.456074][ T6100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.483899][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.801244][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 546.817587][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 546.835105][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 546.847177][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 546.858623][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 546.921353][T16286] lo speed is unknown, defaulting to 1000 [ 547.094457][ T52] Bluetooth: hci5: command tx timeout [ 547.110672][ T6100] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.172294][T16291] lo speed is unknown, defaulting to 1000 [ 547.248431][ T6100] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.370939][ T6100] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.501725][ T6100] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.625483][T16301] tipc: Enabled bearer , priority 0 [ 547.652078][T16301] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3248'. [ 547.674531][T16301] tipc: Resetting bearer [ 547.745098][T16300] tipc: Disabling bearer [ 548.014342][ T6100] bridge_slave_1: left allmulticast mode [ 548.020040][ T6100] bridge_slave_1: left promiscuous mode [ 548.026182][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.047916][ T6100] bridge_slave_0: left allmulticast mode [ 548.053608][ T6100] bridge_slave_0: left promiscuous mode [ 548.064477][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.942436][ T52] Bluetooth: hci3: command tx timeout [ 549.000242][ T6100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.009266][ T6100] bond_slave_0: left promiscuous mode [ 549.016547][ T6100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.025890][ T6100] bond_slave_1: left promiscuous mode [ 549.031717][ T6100] bond0 (unregistering): Released all slaves [ 549.045906][ T6100] bond1 (unregistering): Released all slaves [ 549.192446][ T52] Bluetooth: hci5: command tx timeout [ 549.459258][T16349] sd 0:0:1:0: PR command failed: 1026 [ 549.491709][T16349] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 549.500717][T16349] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 549.721449][T16291] chnl_net:caif_netlink_parms(): no params data found [ 549.767607][T16353] syzkaller0: entered promiscuous mode [ 549.773123][T16353] syzkaller0: entered allmulticast mode [ 549.877968][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3264'. [ 549.912147][T16355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3259'. [ 549.953464][T16361] lo speed is unknown, defaulting to 1000 [ 550.048079][T16369] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 550.061279][T16369] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 550.103518][T16373] macvlan2: entered promiscuous mode [ 550.109165][T16373] macvlan2: entered allmulticast mode [ 550.120969][T16373] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 550.372240][T16387] netlink: 'syz.7.3268': attribute type 29 has an invalid length. [ 550.411114][T16387] netlink: 568 bytes leftover after parsing attributes in process `syz.7.3268'. [ 550.462298][T16390] netlink: 'syz.7.3268': attribute type 29 has an invalid length. [ 550.485717][T16291] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.496547][T16291] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.521138][T16291] bridge_slave_0: entered allmulticast mode [ 550.550397][T16291] bridge_slave_0: entered promiscuous mode [ 550.604797][T16291] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.611993][T16291] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.658473][T16291] bridge_slave_1: entered allmulticast mode [ 550.680808][T16291] bridge_slave_1: entered promiscuous mode [ 550.982910][T16291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.014180][ T52] Bluetooth: hci3: command tx timeout [ 551.089127][T16291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.219708][ T6100] hsr_slave_0: left promiscuous mode [ 551.232837][ T6100] hsr_slave_1: left promiscuous mode [ 551.239075][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.248131][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.289291][T16425] netlink: 568 bytes leftover after parsing attributes in process `syz.7.3279'. [ 551.840035][ T6100] team0 (unregistering): Port device team_slave_1 removed [ 551.903994][ T6100] team0 (unregistering): Port device team_slave_0 removed [ 551.938973][ T60] smc: removing ib device syz2 [ 552.312940][ T6100] team0 (unregistering): Port device dummy0 removed [ 552.513179][T16421] netlink: 'syz.7.3279': attribute type 29 has an invalid length. [ 552.544003][T16291] team0: Port device team_slave_0 added [ 552.599685][T16291] team0: Port device team_slave_1 added [ 552.973375][T16444] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3284'. [ 553.050337][T16291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.074195][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.103971][ T52] Bluetooth: hci3: command tx timeout [ 553.134016][T16291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.235004][T16291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.242402][T16291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.325707][T16291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.066562][T16465] netlink: 568 bytes leftover after parsing attributes in process `syz.4.3290'. [ 554.111680][T16291] hsr_slave_0: entered promiscuous mode [ 554.137044][T16291] hsr_slave_1: entered promiscuous mode [ 554.154272][T16291] debugfs: 'hsr0' already exists in 'hsr' [ 554.170050][T16291] Cannot create hsr debugfs directory [ 554.182629][T16463] netlink: 'syz.4.3290': attribute type 29 has an invalid length. [ 554.228269][T16464] netlink: 'syz.4.3290': attribute type 29 has an invalid length. [ 555.080176][T16491] sd 0:0:1:0: PR command failed: 1026 [ 555.091249][T16491] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 555.110827][T16491] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 555.174965][ T52] Bluetooth: hci3: command tx timeout [ 555.799700][T16291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.888972][T16291] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.916875][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.924129][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.002467][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.009686][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.196183][T16527] netlink: 'syz.7.3309': attribute type 29 has an invalid length. [ 556.217157][T16529] netlink: 'syz.7.3309': attribute type 29 has an invalid length. [ 556.239177][T16527] netlink: 576 bytes leftover after parsing attributes in process `syz.7.3309'. [ 556.935890][T16291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.039964][T16565] netlink: 'syz.2.3321': attribute type 29 has an invalid length. [ 557.142308][T16565] netlink: 'syz.2.3321': attribute type 29 has an invalid length. [ 557.159135][T16565] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3321'. [ 557.486261][T16585] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3327'. [ 557.934705][T16291] veth0_vlan: entered promiscuous mode [ 557.967370][T16291] veth1_vlan: entered promiscuous mode [ 558.083551][T16291] veth0_macvtap: entered promiscuous mode [ 558.232181][T16600] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.259591][T16291] veth1_macvtap: entered promiscuous mode [ 558.269884][T16607] netlink: 'syz.7.3334': attribute type 29 has an invalid length. [ 558.314978][T16608] netlink: 'syz.7.3334': attribute type 29 has an invalid length. [ 558.343423][T16607] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3334'. [ 558.379048][T16600] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.496057][T16291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.600459][T16291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.723707][T16620] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3338'. [ 558.756085][T16600] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.030336][T16600] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.348774][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.368458][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.401251][T16600] Failed to register nexthop notifier [ 559.503092][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.529011][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.705127][ T6103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.712995][ T6103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.120153][T16667] netlink: 'syz.7.3359': attribute type 2 has an invalid length. [ 560.328389][T16677] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3364'. [ 560.352447][T16677] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3364'. [ 560.373075][T16677] netlink: 34 bytes leftover after parsing attributes in process `syz.7.3364'. [ 561.260301][T16709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3375'. [ 561.370518][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3376'. [ 561.606258][T16723] loop7: detected capacity change from 0 to 512 [ 561.699090][T16723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.724112][T16723] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.845447][T16737] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3386'. [ 562.077327][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3391'. [ 562.489091][T11419] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.865008][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.879412][T16758] tipc: Enabled bearer , priority 0 [ 562.956056][T16754] tipc: Resetting bearer [ 564.088731][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3403'. [ 566.555220][T16754] tipc: Disabling bearer [ 566.581032][T16789] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3398'. [ 567.343663][T16834] loop2: detected capacity change from 0 to 8 [ 567.425610][T16834] SQUASHFS error: Unable to read directory block [631:26] [ 568.529682][T16846] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3417'. [ 568.967508][T16863] 9pnet_fd: Insufficient options for proto=fd [ 568.988884][T16863] lo speed is unknown, defaulting to 1000 [ 568.995219][T16863] lo speed is unknown, defaulting to 1000 [ 569.008273][T16863] lo speed is unknown, defaulting to 1000 [ 569.125371][T16863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 569.304505][T16863] lo speed is unknown, defaulting to 1000 [ 569.326381][T16863] lo speed is unknown, defaulting to 1000 [ 569.335566][T16863] lo speed is unknown, defaulting to 1000 [ 569.361392][T16863] lo speed is unknown, defaulting to 1000 [ 569.372844][T16863] lo speed is unknown, defaulting to 1000 [ 569.380425][T16863] lo speed is unknown, defaulting to 1000 [ 569.388147][T16863] lo speed is unknown, defaulting to 1000 [ 569.606303][T16869] loop5: detected capacity change from 0 to 512 [ 569.698727][T16869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.722738][T16869] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.335578][T16886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3431'. [ 570.577480][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3438'. [ 570.691768][ T8769] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.863392][T16906] sd 0:0:1:0: PR command failed: 1026 [ 570.871852][T16906] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 570.891394][T16906] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 571.035489][T16911] 9pnet_fd: Insufficient options for proto=fd [ 571.912343][T16919] lo speed is unknown, defaulting to 1000 [ 572.098051][T16933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3452'. [ 572.532463][T16959] loop6: detected capacity change from 0 to 2048 [ 572.637898][T16965] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 572.649709][ T30] audit: type=1800 audit(1757840265.642:59): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3457" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 574.261321][T16965] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 574.292753][T16965] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 574.333820][T16965] Remounting filesystem read-only [ 574.349692][T16291] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 574.878710][T16974] loop5: detected capacity change from 0 to 32768 [ 574.971271][T16974] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.068496][T16974] XFS (loop5): Ending clean mount [ 575.224514][ T8769] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.847006][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3480'. [ 576.415555][T17081] loop5: detected capacity change from 0 to 8 [ 576.849987][T17075] SQUASHFS error: Unable to read directory block [631:26] [ 577.127600][T17090] tipc: Enabled bearer , priority 0 [ 577.145355][T17090] syzkaller0: entered promiscuous mode [ 577.168898][T17090] syzkaller0: entered allmulticast mode [ 577.243444][T17090] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3496'. [ 577.311967][T17088] tipc: Resetting bearer [ 577.404611][T17088] tipc: Disabling bearer [ 578.555076][T17128] tipc: Enabled bearer , priority 0 [ 578.603130][T17128] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3510'. [ 578.678727][T17128] tipc: Resetting bearer [ 578.912082][T17126] tipc: Disabling bearer [ 579.005070][T17137] tipc: Enabled bearer , priority 0 [ 579.120406][T17134] tipc: Disabling bearer [ 579.359327][T17149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3517'. [ 579.707425][T17170] netlink: 380 bytes leftover after parsing attributes in process `syz.5.3527'. [ 579.804222][T17175] netlink: 'syz.5.3529': attribute type 29 has an invalid length. [ 579.813571][T17175] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3529'. [ 580.720654][T17203] lo speed is unknown, defaulting to 1000 [ 581.448988][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'. [ 581.531321][T17230] syzkaller0: entered promiscuous mode [ 581.543889][T17230] syzkaller0: entered allmulticast mode [ 581.592945][T17238] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3547'. [ 583.025860][T17316] syzkaller0: entered promiscuous mode [ 583.031536][T17316] syzkaller0: entered allmulticast mode [ 583.638830][T17346] loop2: detected capacity change from 0 to 8 [ 584.308303][T17356] sd 0:0:1:0: PR command failed: 1026 [ 584.313874][T17356] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 584.320601][T17356] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 584.661794][T17377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3606'. [ 585.116655][T17395] loop5: detected capacity change from 0 to 8 [ 585.219576][T17395] SQUASHFS error: Unable to read directory block [631:26] [ 585.738000][T17403] netlink: 'syz.2.3615': attribute type 29 has an invalid length. [ 585.770860][T17403] netlink: 'syz.2.3615': attribute type 29 has an invalid length. [ 585.782772][T17403] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3615'. [ 585.859904][T17407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3617'. [ 586.300131][T17434] lo speed is unknown, defaulting to 1000 [ 586.610633][T17444] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3631'. [ 586.658520][T17440] tipc: Enabling of bearer rejected, failed to enable media [ 586.960498][T17444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3631'. [ 588.257509][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3634'. [ 588.277430][T17457] loop4: detected capacity change from 0 to 128 [ 588.302256][T17457] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 588.323029][T17457] hpfs: filesystem error: improperly stopped [ 588.329318][T17457] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 588.337272][T17457] hpfs: You really don't want any checks? You are crazy... [ 588.346045][T17457] hpfs: hpfs_map_sector(): read error [ 588.353900][T17457] hpfs: code page support is disabled [ 588.377510][T17457] hpfs: hpfs_map_4sectors(): unaligned read [ 588.384017][T17457] hpfs: hpfs_map_4sectors(): unaligned read [ 588.397019][T17457] hpfs: filesystem error: unable to find root dir [ 588.421094][T17457] hpfs: hpfs_map_4sectors(): unaligned read [ 588.439538][T17457] hpfs: hpfs_map_sector(): read error [ 588.479040][T17457] hpfs: hpfs_map_4sectors(): unaligned read [ 588.510272][T17457] hpfs: hpfs_map_sector(): read error [ 588.548569][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3635'. [ 590.011910][T17483] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3645'. [ 590.047752][T17483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3645'. [ 590.450965][T17476] loop2: detected capacity change from 0 to 32768 [ 590.484923][T17476] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 590.567266][T17476] XFS (loop2): Ending clean mount [ 590.729176][T16071] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 591.682297][T17551] loop2: detected capacity change from 0 to 256 [ 591.699280][T17551] vfat: Bad value for 'nonumtail' [ 592.247455][T17556] FAULT_INJECTION: forcing a failure. [ 592.247455][T17556] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 592.273409][T17560] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3674'. [ 592.324056][T17556] CPU: 1 UID: 0 PID: 17556 Comm: syz.6.3672 Not tainted syzkaller #0 PREEMPT(full) [ 592.324084][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 592.324099][T17556] Call Trace: [ 592.324107][T17556] [ 592.324116][T17556] dump_stack_lvl+0x189/0x250 [ 592.324145][T17556] ? __pfx____ratelimit+0x10/0x10 [ 592.324165][T17556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.324186][T17556] ? __pfx__printk+0x10/0x10 [ 592.324223][T17556] should_fail_ex+0x414/0x560 [ 592.324248][T17556] _copy_to_user+0x31/0xb0 [ 592.324274][T17556] simple_read_from_buffer+0xe1/0x170 [ 592.324305][T17556] proc_fail_nth_read+0x1b3/0x220 [ 592.324330][T17556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.324355][T17556] ? rw_verify_area+0x2a6/0x4d0 [ 592.324376][T17556] ? __lock_acquire+0xab9/0xd20 [ 592.324397][T17556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.324419][T17556] vfs_read+0x200/0xa30 [ 592.324440][T17556] ? fdget_pos+0x247/0x320 [ 592.324462][T17556] ? __pfx___mutex_lock+0x10/0x10 [ 592.324482][T17556] ? __pfx_vfs_read+0x10/0x10 [ 592.324507][T17556] ? __fget_files+0x2a/0x420 [ 592.324528][T17556] ? __fget_files+0x3a0/0x420 [ 592.324543][T17556] ? __fget_files+0x2a/0x420 [ 592.324569][T17556] ksys_read+0x145/0x250 [ 592.324594][T17556] ? __pfx_ksys_read+0x10/0x10 [ 592.324621][T17556] ? do_syscall_64+0xbe/0xfa0 [ 592.324645][T17556] do_syscall_64+0xfa/0xfa0 [ 592.324663][T17556] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.324682][T17556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.324699][T17556] ? clear_bhb_loop+0x60/0xb0 [ 592.324721][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.324742][T17556] RIP: 0033:0x7ff8fd58d5bc [ 592.324759][T17556] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 592.324775][T17556] RSP: 002b:00007ff8fe450030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.324795][T17556] RAX: ffffffffffffffda RBX: 00007ff8fd7d5fa0 RCX: 00007ff8fd58d5bc [ 592.324808][T17556] RDX: 000000000000000f RSI: 00007ff8fe4500a0 RDI: 0000000000000003 [ 592.324820][T17556] RBP: 00007ff8fe450090 R08: 0000000000000000 R09: 0000000000000000 [ 592.324830][T17556] R10: 000000002590f58a R11: 0000000000000246 R12: 0000000000000001 [ 592.324847][T17556] R13: 00007ff8fd7d6038 R14: 00007ff8fd7d5fa0 R15: 00007fff6a914828 [ 592.324880][T17556] [ 592.690668][T17568] loop5: detected capacity change from 0 to 256 [ 592.769876][T17544] loop7: detected capacity change from 0 to 32768 [ 592.857705][T17544] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 592.983526][T17544] XFS (loop7): Ending clean mount [ 593.357444][T11419] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 594.489779][T17605] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3688'. [ 594.626366][T17568] loop5: detected capacity change from 0 to 32768 [ 594.662515][T17568] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 594.724823][T17568] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 594.767275][T17568] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 5ms [ 594.788530][ T5989] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 594.795566][ T5989] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 594.871996][ T5989] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms [ 594.900314][ T5989] gfs2: fsid=syz:syz.0: jid=0: Done [ 594.924448][T17568] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 595.121115][T17631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3696'. [ 595.278276][T17630] syzkaller0: entered promiscuous mode [ 595.295835][T17630] syzkaller0: entered allmulticast mode [ 595.845421][T17638] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3697'. [ 596.127953][T17643] loop4: detected capacity change from 0 to 128 [ 596.196543][T17643] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 596.244178][T17643] hpfs: filesystem error: improperly stopped [ 596.279364][T17643] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 596.290613][T17643] hpfs: You really don't want any checks? You are crazy... [ 596.326420][T17643] hpfs: hpfs_map_sector(): read error [ 596.342107][T17643] hpfs: code page support is disabled [ 596.363938][T17643] hpfs: hpfs_map_4sectors(): unaligned read [ 596.386786][T17643] hpfs: hpfs_map_4sectors(): unaligned read [ 596.484342][T17643] hpfs: filesystem error: unable to find root dir [ 596.549195][T17643] hpfs: hpfs_map_4sectors(): unaligned read [ 596.582903][T17643] hpfs: hpfs_map_sector(): read error [ 596.612759][T17643] hpfs: hpfs_map_4sectors(): unaligned read [ 596.618800][T17643] hpfs: hpfs_map_sector(): read error [ 597.165926][T17666] : entered promiscuous mode [ 599.965184][T17743] loop4: detected capacity change from 0 to 32768 [ 600.007940][T17743] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 600.098764][T17743] XFS (loop4): Ending clean mount [ 600.100465][T17765] lo speed is unknown, defaulting to 1000 [ 600.197841][T14016] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 600.929219][T17795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3759'. [ 601.642336][T17825] lo speed is unknown, defaulting to 1000 [ 601.662027][T17807] loop2: detected capacity change from 0 to 32768 [ 601.691699][T17807] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 601.759663][T17807] XFS (loop2): Ending clean mount [ 601.888397][T16071] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 603.735250][T17860] loop5: detected capacity change from 0 to 32768 [ 603.779264][T17871] loop6: detected capacity change from 0 to 32768 [ 603.794975][T17871] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3784 (17871) [ 603.799971][T17860] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 603.840855][T17871] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 603.868798][T17871] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 603.882375][T17860] XFS (loop5): Ending clean mount [ 603.915803][T17860] XFS (loop5): Quotacheck needed: Please wait. [ 604.010798][T17860] XFS (loop5): Quotacheck: Done. [ 604.030061][ T30] audit: type=1800 audit(1757840297.022:60): pid=17860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3781" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 604.081833][T17871] BTRFS info (device loop6): rebuilding free space tree [ 604.124849][T17871] BTRFS info (device loop6): checking UUID tree [ 604.147370][T17871] BTRFS info (device loop6): enabling ssd optimizations [ 604.156798][T17871] BTRFS info (device loop6): turning on async discard [ 604.163683][T17871] BTRFS info (device loop6): enabling free space tree [ 604.172715][T17871] BTRFS info (device loop6): force clearing of disk cache [ 604.180498][T17871] BTRFS info (device loop6): force zstd compression, level 3 [ 604.272009][T17924] FAULT_INJECTION: forcing a failure. [ 604.272009][T17924] name failslab, interval 1, probability 0, space 0, times 1 [ 604.281587][T17922] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3797'. [ 604.301379][T17924] CPU: 1 UID: 0 PID: 17924 Comm: syz.2.3796 Not tainted syzkaller #0 PREEMPT(full) [ 604.301405][T17924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.301416][T17924] Call Trace: [ 604.301423][T17924] [ 604.301431][T17924] dump_stack_lvl+0x189/0x250 [ 604.301457][T17924] ? __pfx____ratelimit+0x10/0x10 [ 604.301477][T17924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.301498][T17924] ? __pfx__printk+0x10/0x10 [ 604.301531][T17924] ? __pfx___might_resched+0x10/0x10 [ 604.301561][T17924] should_fail_ex+0x414/0x560 [ 604.301585][T17924] should_failslab+0xa8/0x100 [ 604.301606][T17924] __kmalloc_noprof+0xcb/0x7f0 [ 604.301628][T17924] ? __local_bh_enable_ip+0x12d/0x1c0 [ 604.301651][T17924] ? sock_kmalloc+0xd6/0x160 [ 604.301673][T17924] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.301698][T17924] sock_kmalloc+0xd6/0x160 [ 604.301724][T17924] alg_setkey+0x55/0x190 [ 604.301746][T17924] ? alg_setsockopt+0x3c5/0x4a0 [ 604.301772][T17924] alg_setsockopt+0x3da/0x4a0 [ 604.301796][T17924] ? __pfx_alg_setsockopt+0x10/0x10 [ 604.301821][T17924] do_sock_setsockopt+0x17c/0x1b0 [ 604.301847][T17924] __x64_sys_setsockopt+0x13f/0x1b0 [ 604.301874][T17924] do_syscall_64+0xfa/0xfa0 [ 604.301893][T17924] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.301911][T17924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.301929][T17924] ? clear_bhb_loop+0x60/0xb0 [ 604.301951][T17924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.301968][T17924] RIP: 0033:0x7f74df78eba9 [ 604.301984][T17924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.301999][T17924] RSP: 002b:00007f74e05ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 604.302018][T17924] RAX: ffffffffffffffda RBX: 00007f74df9d5fa0 RCX: 00007f74df78eba9 [ 604.302031][T17924] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 604.302042][T17924] RBP: 00007f74e05ef090 R08: 0000000000000011 R09: 0000000000000000 [ 604.302053][T17924] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 604.302064][T17924] R13: 00007f74df9d6038 R14: 00007f74df9d5fa0 R15: 00007ffd10bd55b8 [ 604.302097][T17924] [ 604.522847][T14970] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 604.532160][T16291] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 604.732062][T17928] openvswitch: netlink: Flow key attr not present in new flow. [ 604.767162][T14970] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 604.778392][T14970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.787506][T14970] usb 6-1: Product: syz [ 604.791694][T14970] usb 6-1: Manufacturer: syz [ 604.803816][T14970] usb 6-1: SerialNumber: syz [ 604.834863][T14970] usb 6-1: config 0 descriptor?? [ 604.890613][T17931] loop2: detected capacity change from 0 to 2048 [ 604.991077][T17931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.020188][ T30] audit: type=1800 audit(1757840298.012:61): pid=17931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3800" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 605.165151][T14970] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 605.188657][T14970] peak_usb 6-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 605.426432][T17947] lo speed is unknown, defaulting to 1000 [ 605.445847][T14970] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 605.486729][T14970] usb 6-1: USB disconnect, device number 14 [ 605.595610][T17961] loop6: detected capacity change from 0 to 1024 [ 605.621927][T17961] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 605.639130][T17961] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 605.650577][T17961] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.3809: Failed to acquire dquot type 0 [ 605.682557][T17961] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 605.698587][T17961] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.3809: corrupted inode contents [ 605.713355][T17961] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.3809: mark_inode_dirty error [ 605.732085][T17961] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.3809: corrupted inode contents [ 605.756820][T17961] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.3809: mark_inode_dirty error [ 605.773068][T17961] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.3809: corrupted inode contents [ 605.779527][T17951] loop2: detected capacity change from 0 to 32768 [ 605.790944][T17961] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 605.802736][T17961] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.3809: corrupted inode contents [ 605.809725][T17951] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 605.830343][T17961] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.3809: mark_inode_dirty error [ 605.842567][T17961] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 605.856287][T17951] XFS (loop2): Ending clean mount [ 605.859168][T17961] EXT4-fs (loop6): 1 truncate cleaned up [ 605.870859][T17961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.891515][T17961] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.909004][T16071] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 605.960390][ T8769] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 606.569017][T17992] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3811'. [ 606.656380][T17994] netlink: 'syz.2.3816': attribute type 29 has an invalid length. [ 606.687496][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3817'. [ 606.705190][T17994] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3816'. [ 606.714556][T17995] netlink: 'syz.2.3816': attribute type 29 has an invalid length. [ 607.080045][T18009] FAULT_INJECTION: forcing a failure. [ 607.080045][T18009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.152748][T18009] CPU: 0 UID: 0 PID: 18009 Comm: syz.2.3822 Not tainted syzkaller #0 PREEMPT(full) [ 607.152775][T18009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 607.152787][T18009] Call Trace: [ 607.152795][T18009] [ 607.152803][T18009] dump_stack_lvl+0x189/0x250 [ 607.152831][T18009] ? __pfx____ratelimit+0x10/0x10 [ 607.152851][T18009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.152872][T18009] ? __pfx__printk+0x10/0x10 [ 607.152895][T18009] ? __might_fault+0xb0/0x130 [ 607.152931][T18009] should_fail_ex+0x414/0x560 [ 607.152955][T18009] _copy_from_user+0x2d/0xb0 [ 607.152980][T18009] ___sys_recvmsg+0x12e/0x510 [ 607.153010][T18009] ? __pfx____sys_recvmsg+0x10/0x10 [ 607.153055][T18009] ? __fget_files+0x3a0/0x420 [ 607.153081][T18009] do_recvmmsg+0x307/0x770 [ 607.153113][T18009] ? __pfx_do_recvmmsg+0x10/0x10 [ 607.153148][T18009] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 607.153188][T18009] __x64_sys_recvmmsg+0x190/0x240 [ 607.153214][T18009] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 607.153241][T18009] ? do_syscall_64+0xbe/0xfa0 [ 607.153264][T18009] do_syscall_64+0xfa/0xfa0 [ 607.153282][T18009] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.153307][T18009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.153324][T18009] ? clear_bhb_loop+0x60/0xb0 [ 607.153346][T18009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.153364][T18009] RIP: 0033:0x7f74df78eba9 [ 607.153380][T18009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.153396][T18009] RSP: 002b:00007f74e05ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 607.153416][T18009] RAX: ffffffffffffffda RBX: 00007f74df9d5fa0 RCX: 00007f74df78eba9 [ 607.153429][T18009] RDX: 0000000000000001 RSI: 0000200000003bc0 RDI: 0000000000000004 [ 607.153441][T18009] RBP: 00007f74e05ef090 R08: 0000000000000000 R09: 0000000000000000 [ 607.153453][T18009] R10: 0000000000010041 R11: 0000000000000246 R12: 0000000000000001 [ 607.153464][T18009] R13: 00007f74df9d6038 R14: 00007f74df9d5fa0 R15: 00007ffd10bd55b8 [ 607.153497][T18009] [ 607.367221][T18014] 9pnet_fd: Insufficient options for proto=fd [ 607.385660][T18014] siw: device registration error -23 [ 607.437465][T18014] loop5: detected capacity change from 0 to 512 [ 607.516500][T18015] lo speed is unknown, defaulting to 1000 [ 607.782543][T18031] netlink: 'syz.7.3828': attribute type 29 has an invalid length. [ 607.792162][T18031] netlink: 'syz.7.3828': attribute type 29 has an invalid length. [ 607.801048][T18031] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3828'. [ 607.871707][T18033] loop7: detected capacity change from 0 to 512 [ 607.893608][T18033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 607.915677][T18033] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 607.932013][T18037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3829'. [ 608.120741][T11419] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.389591][T18036] loop5: detected capacity change from 0 to 32768 [ 608.642294][T18036] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 609.244532][T18036] XFS (loop5): Ending clean mount [ 609.268404][T18073] netlink: 'syz.6.3840': attribute type 29 has an invalid length. [ 609.284333][T18073] netlink: 'syz.6.3840': attribute type 29 has an invalid length. [ 609.293403][T18073] netlink: 500 bytes leftover after parsing attributes in process `syz.6.3840'. [ 609.427242][ T8769] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 609.645832][T18079] lo speed is unknown, defaulting to 1000 [ 609.834858][T18090] 9pnet_fd: Insufficient options for proto=fd [ 609.912486][T18090] loop4: detected capacity change from 0 to 512 [ 609.973350][T18087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3846'. [ 610.557030][T18099] Unknown options in mask b7f2 [ 610.703639][T18105] netlink: 'syz.2.3853': attribute type 29 has an invalid length. [ 610.728135][T18105] netlink: 'syz.2.3853': attribute type 29 has an invalid length. [ 610.751681][T18105] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3853'. [ 610.759951][T18107] : entered promiscuous mode [ 611.189339][T18124] loop6: detected capacity change from 0 to 2048 [ 611.209707][T18128] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 611.352150][T18132] loop4: detected capacity change from 0 to 8 [ 612.030293][T18147] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3866'. [ 612.710375][T18170] syzkaller0: entered promiscuous mode [ 612.730555][T18170] syzkaller0: entered allmulticast mode [ 612.894208][T18174] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3873'. [ 613.381982][T18128] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 613.424899][T18128] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 613.466320][T18128] Remounting filesystem read-only [ 613.483909][T16291] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 613.530017][ T8769] syz_tun (unregistering): left allmulticast mode [ 613.565047][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.604131][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.620952][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.644022][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.651804][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 613.840222][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3878'. [ 613.859922][T18189] lo speed is unknown, defaulting to 1000 [ 613.883021][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3878'. [ 613.970353][T18197] loop4: detected capacity change from 0 to 24 [ 613.994891][T18197] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 614.081728][T18197] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 614.141327][T18185] loop2: detected capacity change from 0 to 32768 [ 614.177945][T18199] loop6: detected capacity change from 0 to 128 [ 614.225398][T18199] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 614.227405][T18185] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 614.259213][T18205] overlay: filesystem on ./file0 is read-only [ 614.271439][T18199] hpfs: filesystem error: improperly stopped [ 614.314326][T18199] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 614.350224][T18199] hpfs: You really don't want any checks? You are crazy... [ 614.393931][T18185] XFS (loop2): Ending clean mount [ 614.411520][T18199] hpfs: hpfs_map_sector(): read error [ 614.431352][T18199] hpfs: code page support is disabled [ 614.448404][T18199] hpfs: hpfs_map_4sectors(): unaligned read [ 614.469856][T18199] hpfs: hpfs_map_4sectors(): unaligned read [ 614.483951][T18199] hpfs: filesystem error: unable to find root dir [ 614.491687][ T6100] batman_adv: batadv0: Interface deactivated: macvlan2 [ 614.581112][ T6100] batman_adv: batadv0: Removing interface: macvlan2 [ 614.691999][T16071] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 615.174744][T18224] loop7: detected capacity change from 0 to 2048 [ 615.266654][T18226] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 615.734120][ T52] Bluetooth: hci1: command tx timeout [ 616.173643][ T6100] bond0 (unregistering): Released all slaves [ 616.209940][T18231] : entered promiscuous mode [ 616.338152][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3893'. [ 616.357431][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3893'. [ 616.406753][T18237] syzkaller0: entered promiscuous mode [ 616.412351][T18237] syzkaller0: entered allmulticast mode [ 616.439353][ T6100] tipc: Left network mode [ 616.652293][T18251] FAULT_INJECTION: forcing a failure. [ 616.652293][T18251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.678938][T18251] CPU: 1 UID: 0 PID: 18251 Comm: syz.2.3897 Not tainted syzkaller #0 PREEMPT(full) [ 616.678963][T18251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.678973][T18251] Call Trace: [ 616.678980][T18251] [ 616.678988][T18251] dump_stack_lvl+0x189/0x250 [ 616.679015][T18251] ? __pfx____ratelimit+0x10/0x10 [ 616.679032][T18251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.679052][T18251] ? __pfx__printk+0x10/0x10 [ 616.679075][T18251] ? __might_fault+0xb0/0x130 [ 616.679107][T18251] should_fail_ex+0x414/0x560 [ 616.679128][T18251] _copy_from_user+0x2d/0xb0 [ 616.679152][T18251] ___sys_sendmsg+0x158/0x2a0 [ 616.679179][T18251] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.679238][T18251] ? __fget_files+0x2a/0x420 [ 616.679254][T18251] ? __fget_files+0x3a0/0x420 [ 616.679285][T18251] __x64_sys_sendmsg+0x19b/0x260 [ 616.679310][T18251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.679342][T18251] ? __pfx_ksys_write+0x10/0x10 [ 616.679369][T18251] ? do_syscall_64+0xbe/0xfa0 [ 616.679393][T18251] do_syscall_64+0xfa/0xfa0 [ 616.679411][T18251] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.679430][T18251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.679448][T18251] ? clear_bhb_loop+0x60/0xb0 [ 616.679469][T18251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.679487][T18251] RIP: 0033:0x7f74df78eba9 [ 616.679504][T18251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.679519][T18251] RSP: 002b:00007f74e05ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.679538][T18251] RAX: ffffffffffffffda RBX: 00007f74df9d5fa0 RCX: 00007f74df78eba9 [ 616.679551][T18251] RDX: 0000000004000044 RSI: 0000200000001040 RDI: 0000000000000004 [ 616.679563][T18251] RBP: 00007f74e05ef090 R08: 0000000000000000 R09: 0000000000000000 [ 616.679574][T18251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.679585][T18251] R13: 00007f74df9d6038 R14: 00007f74df9d5fa0 R15: 00007ffd10bd55b8 [ 616.679616][T18251] [ 616.944223][T18226] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 616.957073][T18226] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 616.984706][T18226] Remounting filesystem read-only [ 617.004083][T11419] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 617.219731][T18266] loop7: detected capacity change from 0 to 128 [ 617.248636][T18266] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 617.264111][T18266] hpfs: filesystem error: improperly stopped [ 617.284748][T18266] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 617.292565][T18266] hpfs: You really don't want any checks? You are crazy... [ 617.300742][T18266] hpfs: hpfs_map_sector(): read error [ 617.306305][T18266] hpfs: code page support is disabled [ 617.337517][T18266] hpfs: hpfs_map_4sectors(): unaligned read [ 617.344648][T18266] hpfs: hpfs_map_4sectors(): unaligned read [ 617.350854][T18266] hpfs: filesystem error: unable to find root dir [ 617.645238][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3905'. [ 617.655245][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3905'. [ 617.813942][ T52] Bluetooth: hci1: command tx timeout [ 618.359369][T18302] loop6: detected capacity change from 0 to 128 [ 618.379140][T18302] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 618.392295][T18302] hpfs: filesystem error: improperly stopped [ 618.398488][T18302] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 618.406412][T18302] hpfs: You really don't want any checks? You are crazy... [ 618.414032][T18302] hpfs: hpfs_map_sector(): read error [ 618.419507][T18302] hpfs: code page support is disabled [ 618.425870][T18302] hpfs: hpfs_map_4sectors(): unaligned read [ 618.432013][T18302] hpfs: hpfs_map_4sectors(): unaligned read [ 618.439734][T18302] hpfs: filesystem error: unable to find root dir [ 619.894016][ T52] Bluetooth: hci1: command tx timeout [ 621.092904][T18325] syzkaller0: entered promiscuous mode [ 621.100021][T18325] syzkaller0: entered allmulticast mode [ 621.114423][T18189] chnl_net:caif_netlink_parms(): no params data found [ 621.990970][ T52] Bluetooth: hci1: command tx timeout [ 622.018691][T18366] loop6: detected capacity change from 0 to 16 [ 622.041833][T18366] erofs (device loop6): algorithm 1 isn't enabled on this kernel [ 622.063031][T18366] loop6: detected capacity change from 0 to 16 [ 622.082446][T18366] erofs (device loop6): algorithm 1 isn't enabled on this kernel [ 622.489058][T18376] loop6: detected capacity change from 0 to 64 [ 622.497840][T18376] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 624.304345][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.317473][ T6100] hsr_slave_0: left promiscuous mode [ 624.326597][ T6100] hsr_slave_1: left promiscuous mode [ 624.333134][ T6100] batman_adv: batadv0: Interface deactivated: dummy0 [ 624.340056][ T6100] batman_adv: batadv0: Removing interface: dummy0 [ 624.377394][T18381] loop2: detected capacity change from 0 to 128 [ 624.396945][ T6100] veth1_macvtap: left promiscuous mode [ 624.402688][ T6100] veth0_macvtap: left promiscuous mode [ 624.408715][ T6100] veth1_vlan: left promiscuous mode [ 624.415122][ T6100] veth0_vlan: left promiscuous mode [ 626.046950][T18389] loop2: detected capacity change from 0 to 256 [ 626.055296][T18389] exfat: Deprecated parameter 'namecase' [ 626.078416][T18389] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 626.962478][T18189] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.971582][T18189] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.983732][T18189] bridge_slave_0: entered allmulticast mode [ 626.993267][T18189] bridge_slave_0: entered promiscuous mode [ 627.002738][T18411] FAULT_INJECTION: forcing a failure. [ 627.002738][T18411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.004788][T18189] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.023176][T18411] CPU: 0 UID: 0 PID: 18411 Comm: syz.6.3947 Not tainted syzkaller #0 PREEMPT(full) [ 627.023200][T18411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.023210][T18411] Call Trace: [ 627.023217][T18411] [ 627.023225][T18411] dump_stack_lvl+0x189/0x250 [ 627.023259][T18411] ? __pfx____ratelimit+0x10/0x10 [ 627.023275][T18411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.023295][T18411] ? __pfx__printk+0x10/0x10 [ 627.023316][T18411] ? __might_fault+0xb0/0x130 [ 627.023349][T18411] should_fail_ex+0x414/0x560 [ 627.023372][T18411] _copy_from_user+0x2d/0xb0 [ 627.023397][T18411] ___sys_sendmsg+0x158/0x2a0 [ 627.023421][T18411] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.023452][T18189] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.023478][T18411] ? __fget_files+0x2a/0x420 [ 627.023492][T18411] ? __fget_files+0x3a0/0x420 [ 627.023517][T18411] __x64_sys_sendmsg+0x19b/0x260 [ 627.023542][T18411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.023572][T18411] ? __pfx_ksys_write+0x10/0x10 [ 627.023597][T18411] ? do_syscall_64+0xbe/0xfa0 [ 627.023621][T18411] do_syscall_64+0xfa/0xfa0 [ 627.023638][T18411] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.023656][T18411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.023672][T18411] ? clear_bhb_loop+0x60/0xb0 [ 627.023693][T18411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.023710][T18411] RIP: 0033:0x7ff8fd58eba9 [ 627.023726][T18411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.023745][T18411] RSP: 002b:00007ff8fe450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.023764][T18411] RAX: ffffffffffffffda RBX: 00007ff8fd7d5fa0 RCX: 00007ff8fd58eba9 [ 627.023776][T18411] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 627.023788][T18411] RBP: 00007ff8fe450090 R08: 0000000000000000 R09: 0000000000000000 [ 627.023799][T18411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.023809][T18411] R13: 00007ff8fd7d6038 R14: 00007ff8fd7d5fa0 R15: 00007fff6a914828 [ 627.023839][T18411] [ 627.241040][T18189] bridge_slave_1: entered allmulticast mode [ 627.248721][T18189] bridge_slave_1: entered promiscuous mode [ 627.292658][T18416] syzkaller0: entered promiscuous mode [ 627.298199][T18416] syzkaller0: entered allmulticast mode [ 631.040719][T18405] lo speed is unknown, defaulting to 1000 [ 631.049350][T18189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.089179][ T6100] IPVS: stop unused estimator thread 0... [ 631.122956][T18189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.255775][T18189] team0: Port device team_slave_0 added [ 631.269231][T18189] team0: Port device team_slave_1 added [ 631.517735][T18189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.534720][T18189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.574984][T18449] Bluetooth: hci2: command 0x0406 tx timeout [ 631.601659][T18189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.622817][T18189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.630204][T18189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.656339][T18189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.816296][T18189] hsr_slave_0: entered promiscuous mode [ 631.823019][T18189] hsr_slave_1: entered promiscuous mode [ 631.855658][T18189] debugfs: 'hsr0' already exists in 'hsr' [ 631.861440][T18189] Cannot create hsr debugfs directory [ 631.907290][T18453] loop6: detected capacity change from 0 to 32768 [ 632.081066][T18453] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 6 [ 632.081066][T18453] [ 632.150161][T18453] ERROR: (device loop6): remounting filesystem as read-only [ 632.258006][T18465] loop4: detected capacity change from 0 to 32768 [ 632.274986][T18465] btrfs: Unknown parameter 'fsuuid' [ 632.296422][T18472] loop7: detected capacity change from 0 to 1024 [ 632.315699][T18472] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 632.385246][T18472] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3968: Invalid block bitmap block 0 in block_group 0 [ 632.413993][T18472] Quota error (device loop7): write_blk: dquota write failed [ 632.442269][T18472] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 632.502068][T18472] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.3968: Failed to acquire dquot type 0 [ 632.545275][T18189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.569660][T18189] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.600557][T18472] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.3968: Freeing blocks not in datazone - block = 0, count = 4096 [ 632.647300][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.654527][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.674205][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.676919][T18472] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3968: Invalid inode bitmap blk 0 in block_group 0 [ 632.681418][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.702106][ T6100] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 632.724016][ T6100] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:9: Failed to release dquot type 0 [ 632.744430][T18472] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 632.777094][T18472] EXT4-fs (loop7): 1 orphan inode deleted [ 632.806917][T18472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.281917][T18189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.618454][T18510] sd 0:0:1:0: PR command failed: 1026 [ 633.632915][T18510] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 633.670470][T18510] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 633.703376][T18513] syzkaller0: entered promiscuous mode [ 633.717931][T18513] syzkaller0: entered allmulticast mode [ 633.780317][T18513] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3978'. [ 634.021921][T18189] veth0_vlan: entered promiscuous mode [ 634.076549][T18189] veth1_vlan: entered promiscuous mode [ 634.147853][T18189] veth0_macvtap: entered promiscuous mode [ 634.193636][T18189] veth1_macvtap: entered promiscuous mode [ 634.281284][T18189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.311125][T18189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.406244][T11419] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.467745][ T6100] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 634.532371][ T6100] EXT4-fs error (device loop7): ext4_release_dquot:6979: comm kworker/u8:9: Failed to release dquot type 0 [ 634.683027][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.692945][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.857114][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.882458][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.665170][T18545] lo speed is unknown, defaulting to 1000 [ 636.143840][T18561] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3989'. [ 636.736840][T18577] loop5: detected capacity change from 0 to 2048 [ 636.778797][T18582] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 636.914343][T18545] netlink: 'syz.4.3985': attribute type 2 has an invalid length. [ 637.286342][T18605] FAULT_INJECTION: forcing a failure. [ 637.286342][T18605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.345427][T18605] CPU: 1 UID: 0 PID: 18605 Comm: syz.2.4005 Not tainted syzkaller #0 PREEMPT(full) [ 637.345454][T18605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 637.345465][T18605] Call Trace: [ 637.345473][T18605] [ 637.345481][T18605] dump_stack_lvl+0x189/0x250 [ 637.345508][T18605] ? __pfx____ratelimit+0x10/0x10 [ 637.345526][T18605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.345547][T18605] ? __pfx__printk+0x10/0x10 [ 637.345570][T18605] ? __might_fault+0xb0/0x130 [ 637.345605][T18605] should_fail_ex+0x414/0x560 [ 637.345629][T18605] _copy_from_user+0x2d/0xb0 [ 637.345654][T18605] ___sys_sendmsg+0x158/0x2a0 [ 637.345680][T18605] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.345738][T18605] ? __fget_files+0x2a/0x420 [ 637.345754][T18605] ? __fget_files+0x3a0/0x420 [ 637.345780][T18605] __x64_sys_sendmsg+0x19b/0x260 [ 637.345804][T18605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.345836][T18605] ? __pfx_ksys_write+0x10/0x10 [ 637.345862][T18605] ? do_syscall_64+0xbe/0xfa0 [ 637.345885][T18605] do_syscall_64+0xfa/0xfa0 [ 637.345910][T18605] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.345929][T18605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.345946][T18605] ? clear_bhb_loop+0x60/0xb0 [ 637.345968][T18605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.345985][T18605] RIP: 0033:0x7f74df78eba9 [ 637.346000][T18605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.346015][T18605] RSP: 002b:00007f74e05ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.346036][T18605] RAX: ffffffffffffffda RBX: 00007f74df9d5fa0 RCX: 00007f74df78eba9 [ 637.346048][T18605] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 637.346060][T18605] RBP: 00007f74e05ef090 R08: 0000000000000000 R09: 0000000000000000 [ 637.346071][T18605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.346081][T18605] R13: 00007f74df9d6038 R14: 00007f74df9d5fa0 R15: 00007ffd10bd55b8 [ 637.346112][T18605] [ 637.883531][T18582] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 637.919706][T18582] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 637.947660][T18582] Remounting filesystem read-only [ 637.956157][T18189] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 638.768172][T18621] 9pnet_fd: Insufficient options for proto=fd [ 638.861122][T18621] loop4: detected capacity change from 0 to 512 [ 639.538930][T18634] FAULT_INJECTION: forcing a failure. [ 639.538930][T18634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.555382][T18634] CPU: 1 UID: 0 PID: 18634 Comm: syz.7.4014 Not tainted syzkaller #0 PREEMPT(full) [ 639.555400][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 639.555407][T18634] Call Trace: [ 639.555413][T18634] [ 639.555418][T18634] dump_stack_lvl+0x189/0x250 [ 639.555435][T18634] ? __pfx____ratelimit+0x10/0x10 [ 639.555446][T18634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.555458][T18634] ? __pfx__printk+0x10/0x10 [ 639.555471][T18634] ? __might_fault+0xb0/0x130 [ 639.555491][T18634] should_fail_ex+0x414/0x560 [ 639.555504][T18634] _copy_from_user+0x2d/0xb0 [ 639.555519][T18634] ___sys_sendmsg+0x158/0x2a0 [ 639.555534][T18634] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.555564][T18634] ? __fget_files+0x2a/0x420 [ 639.555573][T18634] ? __fget_files+0x3a0/0x420 [ 639.555587][T18634] __x64_sys_sendmsg+0x19b/0x260 [ 639.555601][T18634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.555618][T18634] ? __pfx_ksys_write+0x10/0x10 [ 639.555633][T18634] ? do_syscall_64+0xbe/0xfa0 [ 639.555647][T18634] do_syscall_64+0xfa/0xfa0 [ 639.555656][T18634] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.555667][T18634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.555677][T18634] ? clear_bhb_loop+0x60/0xb0 [ 639.555689][T18634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.555699][T18634] RIP: 0033:0x7f810a38eba9 [ 639.555708][T18634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.555719][T18634] RSP: 002b:00007f810b1c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.555731][T18634] RAX: ffffffffffffffda RBX: 00007f810a5d5fa0 RCX: 00007f810a38eba9 [ 639.555739][T18634] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 639.555745][T18634] RBP: 00007f810b1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 639.555751][T18634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.555756][T18634] R13: 00007f810a5d6038 R14: 00007f810a5d5fa0 R15: 00007ffeb9892d38 [ 639.555773][T18634] [ 640.036293][T18641] loop7: detected capacity change from 0 to 64 [ 640.631295][T18644] loop5: detected capacity change from 0 to 2048 [ 640.702634][T18649] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.987661][T18661] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4026'. [ 641.004871][T18661] loop7: detected capacity change from 0 to 1024 [ 641.448410][T18680] loop7: detected capacity change from 0 to 1024 [ 641.544913][ T13] hfsplus: b-tree write err: -5, ino 4 [ 641.675182][T18687] netlink: 596 bytes leftover after parsing attributes in process `syz.7.4031'. [ 641.691522][T18688] FAULT_INJECTION: forcing a failure. [ 641.691522][T18688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.778113][T18688] CPU: 1 UID: 0 PID: 18688 Comm: syz.2.4032 Not tainted syzkaller #0 PREEMPT(full) [ 641.778140][T18688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.778151][T18688] Call Trace: [ 641.778158][T18688] [ 641.778167][T18688] dump_stack_lvl+0x189/0x250 [ 641.778193][T18688] ? __pfx____ratelimit+0x10/0x10 [ 641.778213][T18688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.778234][T18688] ? __pfx__printk+0x10/0x10 [ 641.778270][T18688] should_fail_ex+0x414/0x560 [ 641.778294][T18688] _copy_to_user+0x31/0xb0 [ 641.778321][T18688] simple_read_from_buffer+0xe1/0x170 [ 641.778352][T18688] proc_fail_nth_read+0x1b3/0x220 [ 641.778377][T18688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.778401][T18688] ? rw_verify_area+0x2a6/0x4d0 [ 641.778422][T18688] ? __lock_acquire+0xab9/0xd20 [ 641.778444][T18688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.778464][T18688] vfs_read+0x200/0xa30 [ 641.778486][T18688] ? fdget_pos+0x247/0x320 [ 641.778507][T18688] ? __pfx___mutex_lock+0x10/0x10 [ 641.778528][T18688] ? __pfx_vfs_read+0x10/0x10 [ 641.778553][T18688] ? __fget_files+0x2a/0x420 [ 641.778574][T18688] ? __fget_files+0x3a0/0x420 [ 641.778589][T18688] ? __fget_files+0x2a/0x420 [ 641.778615][T18688] ksys_read+0x145/0x250 [ 641.778641][T18688] ? __pfx_ksys_read+0x10/0x10 [ 641.778667][T18688] ? do_syscall_64+0xbe/0xfa0 [ 641.778692][T18688] do_syscall_64+0xfa/0xfa0 [ 641.778709][T18688] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.778735][T18688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.778752][T18688] ? clear_bhb_loop+0x60/0xb0 [ 641.778775][T18688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.778792][T18688] RIP: 0033:0x7f74df78d5bc [ 641.778809][T18688] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 641.778824][T18688] RSP: 002b:00007f74e05ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 641.778843][T18688] RAX: ffffffffffffffda RBX: 00007f74df9d6090 RCX: 00007f74df78d5bc [ 641.778856][T18688] RDX: 000000000000000f RSI: 00007f74e05ce0a0 RDI: 0000000000000004 [ 641.778868][T18688] RBP: 00007f74e05ce090 R08: 0000000000000000 R09: 0000000000000000 [ 641.778878][T18688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.778889][T18688] R13: 00007f74df9d6128 R14: 00007f74df9d6090 R15: 00007ffd10bd55b8 [ 641.778921][T18688] [ 642.071575][T18649] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 642.082398][T18649] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 642.097530][T18649] Remounting filesystem read-only [ 642.173512][T18189] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 642.446859][T18697] loop2: detected capacity change from 0 to 1024 [ 642.529895][T18697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.711799][T18710] loop4: detected capacity change from 0 to 2048 [ 642.807116][T18697] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4036: bg 0: block 280: padding at end of block bitmap is not set [ 642.900944][T18725] FAULT_INJECTION: forcing a failure. [ 642.900944][T18725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.917527][T18726] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.942339][T18697] EXT4-fs (loop2): Remounting filesystem read-only [ 642.944252][T18725] CPU: 0 UID: 0 PID: 18725 Comm: syz.6.4040 Not tainted syzkaller #0 PREEMPT(full) [ 642.944276][T18725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 642.944293][T18725] Call Trace: [ 642.944301][T18725] [ 642.944309][T18725] dump_stack_lvl+0x189/0x250 [ 642.944335][T18725] ? __pfx____ratelimit+0x10/0x10 [ 642.944354][T18725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.944375][T18725] ? __pfx__printk+0x10/0x10 [ 642.944398][T18725] ? __might_fault+0xb0/0x130 [ 642.944432][T18725] should_fail_ex+0x414/0x560 [ 642.944455][T18725] _copy_from_user+0x2d/0xb0 [ 642.944482][T18725] ___sys_sendmsg+0x158/0x2a0 [ 642.944507][T18725] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.944563][T18725] ? __fget_files+0x2a/0x420 [ 642.944578][T18725] ? __fget_files+0x3a0/0x420 [ 642.944603][T18725] __x64_sys_sendmsg+0x19b/0x260 [ 642.944627][T18725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.944658][T18725] ? __pfx_ksys_write+0x10/0x10 [ 642.944684][T18725] ? do_syscall_64+0xbe/0xfa0 [ 642.944706][T18725] do_syscall_64+0xfa/0xfa0 [ 642.944723][T18725] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.944741][T18725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.944758][T18725] ? clear_bhb_loop+0x60/0xb0 [ 642.944779][T18725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.944795][T18725] RIP: 0033:0x7ff8fd58eba9 [ 642.944811][T18725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.944825][T18725] RSP: 002b:00007ff8fe450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.944844][T18725] RAX: ffffffffffffffda RBX: 00007ff8fd7d5fa0 RCX: 00007ff8fd58eba9 [ 642.944857][T18725] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 642.944868][T18725] RBP: 00007ff8fe450090 R08: 0000000000000000 R09: 0000000000000000 [ 642.944880][T18725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.944890][T18725] R13: 00007ff8fd7d6038 R14: 00007ff8fd7d5fa0 R15: 00007fff6a914828 [ 642.944919][T18725] [ 643.334720][T18697] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.2.4036: cleanup dec ref error -117 [ 643.526400][T18734] loop7: detected capacity change from 0 to 2048 [ 643.532736][T16071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.599616][T18738] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.765330][ T5928] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 643.945446][ T5928] usb 7-1: config 0 has an invalid interface number: 248 but max is 0 [ 643.956823][ T5928] usb 7-1: config 0 has no interface number 0 [ 644.013219][ T5928] usb 7-1: config 0 interface 248 altsetting 0 endpoint 0x5 has invalid maxpacket 48120, setting to 64 [ 644.080096][ T5928] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 644.097401][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.106427][ T5928] usb 7-1: Product: syz [ 644.111014][ T5928] usb 7-1: Manufacturer: syz [ 644.116694][ T5928] usb 7-1: SerialNumber: syz [ 644.126594][ T5928] usb 7-1: config 0 descriptor?? [ 644.136918][ T5928] snd-usb-audio 7-1:0.248: probe with driver snd-usb-audio failed with error -22 [ 644.334094][ T5989] usb 7-1: USB disconnect, device number 7 [ 644.336806][T18726] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 644.355499][T18749] loop5: detected capacity change from 0 to 256 [ 644.369989][T18726] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 644.413262][T18726] Remounting filesystem read-only [ 644.431051][T14016] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 644.849333][T18756] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4049'. [ 644.849554][T18738] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 644.911953][T18738] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 644.951222][T18738] Remounting filesystem read-only [ 644.969152][T11419] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 645.201298][T18749] loop5: detected capacity change from 0 to 32768 [ 645.230145][T18749] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 645.269388][T18749] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 645.334227][T18749] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 645.348877][ T5989] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 645.356795][ T5989] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 645.466297][ T5989] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 109ms [ 645.483934][ T5989] gfs2: fsid=syz:syz.0: jid=0: Done [ 645.495816][T18749] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 645.938818][T18793] FAULT_INJECTION: forcing a failure. [ 645.938818][T18793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.978706][T18793] CPU: 1 UID: 0 PID: 18793 Comm: syz.2.4058 Not tainted syzkaller #0 PREEMPT(full) [ 645.978733][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.978744][T18793] Call Trace: [ 645.978752][T18793] [ 645.978760][T18793] dump_stack_lvl+0x189/0x250 [ 645.978788][T18793] ? __pfx____ratelimit+0x10/0x10 [ 645.978808][T18793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.978829][T18793] ? __pfx__printk+0x10/0x10 [ 645.978853][T18793] ? __might_fault+0xb0/0x130 [ 645.978889][T18793] should_fail_ex+0x414/0x560 [ 645.978914][T18793] _copy_from_user+0x2d/0xb0 [ 645.978939][T18793] __sys_bpf+0x1ed/0x870 [ 645.978963][T18793] ? __pfx___sys_bpf+0x10/0x10 [ 645.978996][T18793] ? ksys_write+0x22a/0x250 [ 645.979022][T18793] ? __pfx_ksys_write+0x10/0x10 [ 645.979051][T18793] __x64_sys_bpf+0x7c/0x90 [ 645.979072][T18793] do_syscall_64+0xfa/0xfa0 [ 645.979090][T18793] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.979109][T18793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.979127][T18793] ? clear_bhb_loop+0x60/0xb0 [ 645.979149][T18793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.979167][T18793] RIP: 0033:0x7f74df78eba9 [ 645.979183][T18793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.979198][T18793] RSP: 002b:00007f74e05ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 645.979218][T18793] RAX: ffffffffffffffda RBX: 00007f74df9d5fa0 RCX: 00007f74df78eba9 [ 645.979238][T18793] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 645.979250][T18793] RBP: 00007f74e05ef090 R08: 0000000000000000 R09: 0000000000000000 [ 645.979261][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.979271][T18793] R13: 00007f74df9d6038 R14: 00007f74df9d5fa0 R15: 00007ffd10bd55b8 [ 645.979303][T18793] [ 646.255834][ T30] audit: type=1800 audit(1757840339.242:62): pid=18749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4046" name="bus" dev="loop5" ino=4709 res=0 errno=0 [ 646.341380][T18773] loop7: detected capacity change from 0 to 40427 [ 646.354104][T18773] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 646.368424][T18800] FAULT_INJECTION: forcing a failure. [ 646.368424][T18800] name failslab, interval 1, probability 0, space 0, times 0 [ 646.386154][T18773] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 646.420899][T18800] CPU: 0 UID: 0 PID: 18800 Comm: syz.2.4060 Not tainted syzkaller #0 PREEMPT(full) [ 646.420926][T18800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 646.420946][T18800] Call Trace: [ 646.420954][T18800] [ 646.420962][T18800] dump_stack_lvl+0x189/0x250 [ 646.420989][T18800] ? __pfx____ratelimit+0x10/0x10 [ 646.421008][T18800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.421028][T18800] ? __pfx__printk+0x10/0x10 [ 646.421057][T18800] ? __pfx___might_resched+0x10/0x10 [ 646.421080][T18800] ? fs_reclaim_acquire+0x7d/0x100 [ 646.421110][T18800] should_fail_ex+0x414/0x560 [ 646.421134][T18800] should_failslab+0xa8/0x100 [ 646.421154][T18800] kmem_cache_alloc_node_noprof+0x77/0x710 [ 646.421178][T18800] ? __alloc_skb+0x112/0x2d0 [ 646.421195][T18800] ? netlink_autobind+0xdb/0x300 [ 646.421219][T18800] __alloc_skb+0x112/0x2d0 [ 646.421243][T18800] netlink_sendmsg+0x5c6/0xb30 [ 646.421274][T18800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.421297][T18800] ? aa_sock_msg_perm+0xf1/0x1d0 [ 646.421319][T18800] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.421336][T18800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.421357][T18800] __sock_sendmsg+0x21c/0x270 [ 646.421385][T18800] ____sys_sendmsg+0x505/0x830 [ 646.421414][T18800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.421445][T18800] ? import_iovec+0x74/0xa0 [ 646.421472][T18800] ___sys_sendmsg+0x21f/0x2a0 [ 646.421497][T18800] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.421554][T18800] ? __fget_files+0x2a/0x420 [ 646.421570][T18800] ? __fget_files+0x3a0/0x420 [ 646.421598][T18800] __x64_sys_sendmsg+0x19b/0x260 [ 646.421622][T18800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.421654][T18800] ? __pfx_ksys_write+0x10/0x10 [ 646.421681][T18800] ? do_syscall_64+0xbe/0xfa0 [ 646.421705][T18800] do_syscall_64+0xfa/0xfa0 [ 646.421722][T18800] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.421742][T18800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.421759][T18800] ? clear_bhb_loop+0x60/0xb0 [ 646.421779][T18800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.421797][T18800] RIP: 0033:0x7f74df78eba9 [ 646.421812][T18800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.421827][T18800] RSP: 002b:00007f74e05ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.421845][T18800] RAX: ffffffffffffffda RBX: 00007f74df9d5fa0 RCX: 00007f74df78eba9 [ 646.421857][T18800] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 646.421868][T18800] RBP: 00007f74e05ef090 R08: 0000000000000000 R09: 0000000000000000 [ 646.421879][T18800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.421888][T18800] R13: 00007f74df9d6038 R14: 00007f74df9d5fa0 R15: 00007ffd10bd55b8 [ 646.421917][T18800] [ 646.702227][T18773] F2FS-fs (loop7): invalid crc value [ 646.983543][T18773] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 647.035859][T14972] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 647.129025][T18773] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 647.153140][T18773] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 647.310813][T18820] loop2: detected capacity change from 0 to 64 [ 647.654109][T14972] usb 5-1: Using ep0 maxpacket: 8 [ 647.686662][T14972] usb 5-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 647.733002][T14972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.789869][T14972] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 647.835801][T14972] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 647.903917][T14972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.943454][T14972] usb 5-1: Product: syz [ 647.968942][T14972] usb 5-1: Manufacturer: syz [ 647.983869][T14972] usb 5-1: SerialNumber: syz [ 648.020461][T14972] usb 5-1: config 0 descriptor?? [ 648.087459][T18832] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4066'. [ 648.143315][T18834] loop6: detected capacity change from 0 to 512 [ 648.169295][T18834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.233032][T14972] usb 5-1: USB disconnect, device number 7 [ 648.387579][T16291] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.429070][T18836] loop5: detected capacity change from 0 to 32768 [ 648.441529][T18836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4070 (18836) [ 648.467782][T18836] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 648.491200][T18836] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 648.549112][ T36] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 648.569446][T18836] BTRFS error (device loop5): failed to load root extent [ 648.580767][T18836] BTRFS warning (device loop5): try to load backup roots slot 1 [ 648.589881][ T6103] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 648.607653][T18836] BTRFS warning (device loop5): couldn't read tree root [ 648.617302][T18836] BTRFS warning (device loop5): try to load backup roots slot 2 [ 648.625418][ T36] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 648.636052][T18836] BTRFS warning (device loop5): couldn't read tree root [ 648.643023][T18836] BTRFS warning (device loop5): try to load backup roots slot 3 [ 648.680329][T18836] BTRFS info (device loop5): checking UUID tree [ 648.698668][T18858] FAULT_INJECTION: forcing a failure. [ 648.698668][T18858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.713121][T18836] BTRFS info (device loop5): setting nodatasum [ 648.723224][T18836] BTRFS info (device loop5): setting nodatacow [ 648.723709][T18858] CPU: 0 UID: 0 PID: 18858 Comm: syz.6.4072 Not tainted syzkaller #0 PREEMPT(full) [ 648.723732][T18858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.723746][T18858] Call Trace: [ 648.723754][T18858] [ 648.723762][T18858] dump_stack_lvl+0x189/0x250 [ 648.723790][T18858] ? __pfx____ratelimit+0x10/0x10 [ 648.723809][T18858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.723829][T18858] ? __pfx__printk+0x10/0x10 [ 648.723864][T18858] should_fail_ex+0x414/0x560 [ 648.723888][T18858] _copy_to_user+0x31/0xb0 [ 648.723914][T18858] simple_read_from_buffer+0xe1/0x170 [ 648.723943][T18858] proc_fail_nth_read+0x1b3/0x220 [ 648.723967][T18858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.723997][T18858] ? rw_verify_area+0x2a6/0x4d0 [ 648.724018][T18858] ? __lock_acquire+0xab9/0xd20 [ 648.724038][T18858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.724059][T18858] vfs_read+0x200/0xa30 [ 648.724080][T18858] ? fdget_pos+0x247/0x320 [ 648.724100][T18858] ? __pfx___mutex_lock+0x10/0x10 [ 648.724122][T18858] ? __pfx_vfs_read+0x10/0x10 [ 648.724145][T18858] ? __fget_files+0x2a/0x420 [ 648.724165][T18858] ? __fget_files+0x3a0/0x420 [ 648.724180][T18858] ? __fget_files+0x2a/0x420 [ 648.724205][T18858] ksys_read+0x145/0x250 [ 648.724229][T18858] ? __pfx_ksys_read+0x10/0x10 [ 648.724255][T18858] ? do_syscall_64+0xbe/0xfa0 [ 648.724278][T18858] do_syscall_64+0xfa/0xfa0 [ 648.724295][T18858] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.724313][T18858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.724331][T18858] ? clear_bhb_loop+0x60/0xb0 [ 648.724351][T18858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.724368][T18858] RIP: 0033:0x7ff8fd58d5bc [ 648.724385][T18858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 648.724399][T18858] RSP: 002b:00007ff8fe450030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.724419][T18858] RAX: ffffffffffffffda RBX: 00007ff8fd7d5fa0 RCX: 00007ff8fd58d5bc [ 648.724431][T18858] RDX: 000000000000000f RSI: 00007ff8fe4500a0 RDI: 0000000000000004 [ 648.724441][T18858] RBP: 00007ff8fe450090 R08: 0000000000000000 R09: 0000000000000000 [ 648.724452][T18858] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.724463][T18858] R13: 00007ff8fd7d6038 R14: 00007ff8fd7d5fa0 R15: 00007fff6a914828 [ 648.724493][T18858] [ 648.987687][T18836] BTRFS info (device loop5): enabling ssd optimizations [ 649.006169][T18836] BTRFS info (device loop5): turning on flush-on-commit [ 649.019844][T18836] BTRFS info (device loop5): turning on async discard [ 649.073116][T18836] BTRFS info (device loop5): enabling free space tree [ 649.073639][T18874] FAULT_INJECTION: forcing a failure. [ 649.073639][T18874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.090397][T18836] BTRFS info (device loop5): enabling auto defrag [ 649.115503][T18874] CPU: 0 UID: 0 PID: 18874 Comm: syz.4.4077 Not tainted syzkaller #0 PREEMPT(full) [ 649.115530][T18874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 649.115541][T18874] Call Trace: [ 649.115548][T18874] [ 649.115556][T18874] dump_stack_lvl+0x189/0x250 [ 649.115583][T18874] ? __pfx____ratelimit+0x10/0x10 [ 649.115602][T18874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.115623][T18874] ? __pfx__printk+0x10/0x10 [ 649.115645][T18874] ? __might_fault+0xb0/0x130 [ 649.115681][T18874] should_fail_ex+0x414/0x560 [ 649.115703][T18874] _copy_from_user+0x2d/0xb0 [ 649.115727][T18874] sctp_setsockopt+0x19f/0x1200 [ 649.115749][T18874] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 649.115770][T18874] do_sock_setsockopt+0x17c/0x1b0 [ 649.115796][T18874] __x64_sys_setsockopt+0x13f/0x1b0 [ 649.115822][T18874] do_syscall_64+0xfa/0xfa0 [ 649.115841][T18874] ? lockdep_hardirqs_on+0x9c/0x150 [ 649.115859][T18874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.115876][T18874] ? clear_bhb_loop+0x60/0xb0 [ 649.115898][T18874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.115915][T18874] RIP: 0033:0x7f6b8bb8eba9 [ 649.115932][T18874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.115953][T18874] RSP: 002b:00007f6b8ca5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 649.115973][T18874] RAX: ffffffffffffffda RBX: 00007f6b8bdd5fa0 RCX: 00007f6b8bb8eba9 [ 649.115986][T18874] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000003 [ 649.115997][T18874] RBP: 00007f6b8ca5b090 R08: 0000000000000090 R09: 0000000000000000 [ 649.116008][T18874] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 649.116020][T18874] R13: 00007f6b8bdd6038 R14: 00007f6b8bdd5fa0 R15: 00007ffc6ea3d168 [ 649.116052][T18874] [ 649.130263][T18836] BTRFS info (device loop5): trying to use backup root at mount time [ 649.409598][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4078'. [ 649.727015][T18189] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 650.326607][T18918] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4086'. [ 650.498924][T18921] loop4: detected capacity change from 0 to 4096 [ 650.512434][T18921] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 650.529952][T18921] ntfs3(loop4): It is recommened to use chkdsk. [ 650.554269][ T5989] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 650.713894][ T5989] usb 3-1: Using ep0 maxpacket: 8 [ 650.721693][ T5989] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 650.735415][ T5989] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 650.746527][ T5989] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 650.759319][ T5989] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.773407][ T5989] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 650.783011][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.001845][ T5989] usb 3-1: GET_CAPABILITIES returned 0 [ 651.012074][ T5989] usbtmc 3-1:16.0: can't read capabilities [ 651.057600][ T5989] usb 3-1: USB disconnect, device number 38 [ 651.135620][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4091'. [ 651.535321][T18938] netlink: 'syz.4.4094': attribute type 10 has an invalid length. [ 651.553670][T18938] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 651.562654][T18938] team0: Failed to send options change via netlink (err -105) [ 651.570489][T18938] team0: Port device dummy0 added [ 651.858073][T18956] lo speed is unknown, defaulting to 1000 [ 652.826776][T18984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4105'. [ 652.845998][T18985] 9pnet_fd: Insufficient options for proto=fd [ 652.865439][T18985] siw: device registration error -23 [ 652.938069][T18985] loop7: detected capacity change from 0 to 512 [ 653.356435][T18988] loop4: detected capacity change from 0 to 128 [ 653.363601][T18988] vfat: Unknown parameter 'T[\'#yIjQխb)X! Uk^bT8K`k2Camw<' [ 653.470969][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4107'. [ 653.921267][T19008] loop4: detected capacity change from 0 to 2048 [ 653.990571][T19011] netlink: 'syz.5.4113': attribute type 29 has an invalid length. [ 654.000037][T19011] netlink: 'syz.5.4113': attribute type 29 has an invalid length. [ 654.009007][T19011] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4113'. [ 654.057423][T19014] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 654.184358][T14971] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 654.333901][T14971] usb 7-1: device descriptor read/64, error -71 [ 654.581866][T14971] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 654.772996][T14971] usb 7-1: device descriptor read/64, error -71 [ 654.880483][T19034] 9pnet_fd: Insufficient options for proto=fd [ 654.899475][T19034] siw: device registration error -23 [ 654.976943][T19034] loop7: detected capacity change from 0 to 512 [ 654.999929][T14971] usb usb7-port1: attempt power cycle [ 655.825454][T14971] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 655.854489][T14971] usb 7-1: device descriptor read/8, error -71 [ 655.955426][T19014] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 655.974190][T14972] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 655.991952][T19014] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 656.026896][T19014] Remounting filesystem read-only [ 656.045101][T14016] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 656.104021][T14971] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 656.136087][T14972] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 656.147837][T14972] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.157452][T14971] usb 7-1: device descriptor read/8, error -71 [ 656.173876][T14972] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.198695][T14972] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 656.242964][T14972] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 656.264292][T14971] usb usb7-port1: unable to enumerate USB device [ 656.302856][T19038] loop2: detected capacity change from 0 to 32768 [ 656.390818][T19056] netlink: 'syz.4.4126': attribute type 29 has an invalid length. [ 656.404080][T19045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.413006][T19045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.436680][T19054] loop5: detected capacity change from 0 to 2048 [ 656.441694][T19045] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4123'. [ 656.454299][T19056] netlink: 'syz.4.4126': attribute type 29 has an invalid length. [ 656.485238][T19057] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 656.496707][T19056] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4126'. [ 656.509658][T14971] usb 8-1: USB disconnect, device number 9 [ 657.002907][T19071] FAULT_INJECTION: forcing a failure. [ 657.002907][T19071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.019542][T19071] CPU: 0 UID: 0 PID: 19071 Comm: syz.2.4134 Not tainted syzkaller #0 PREEMPT(full) [ 657.019568][T19071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.019578][T19071] Call Trace: [ 657.019585][T19071] [ 657.019593][T19071] dump_stack_lvl+0x189/0x250 [ 657.019622][T19071] ? __pfx____ratelimit+0x10/0x10 [ 657.019642][T19071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.019662][T19071] ? __pfx__printk+0x10/0x10 [ 657.019700][T19071] should_fail_ex+0x414/0x560 [ 657.019725][T19071] _copy_from_user+0x2d/0xb0 [ 657.019750][T19071] __copy_msghdr+0x3c5/0x5b0 [ 657.019777][T19071] ___sys_sendmsg+0x1a5/0x2a0 [ 657.019802][T19071] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.019868][T19071] ? __fget_files+0x2a/0x420 [ 657.019885][T19071] ? __fget_files+0x3a0/0x420 [ 657.019912][T19071] __sys_sendmmsg+0x227/0x430 [ 657.019940][T19071] ? __pfx___sys_sendmmsg+0x10/0x10 [ 657.019972][T19071] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 657.020011][T19071] ? ksys_write+0x22a/0x250 [ 657.020037][T19071] ? __pfx_ksys_write+0x10/0x10 [ 657.020066][T19071] __x64_sys_sendmmsg+0xa0/0xc0 [ 657.020090][T19071] do_syscall_64+0xfa/0xfa0 [ 657.020109][T19071] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.020128][T19071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.020146][T19071] ? clear_bhb_loop+0x60/0xb0 [ 657.020168][T19071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.020185][T19071] RIP: 0033:0x7f74df78eba9 [ 657.020202][T19071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.020218][T19071] RSP: 002b:00007f74e05ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 657.020238][T19071] RAX: ffffffffffffffda RBX: 00007f74df9d5fa0 RCX: 00007f74df78eba9 [ 657.020251][T19071] RDX: 1e1730a30afb6559 RSI: 0000200000000c40 RDI: 0000000000000004 [ 657.020264][T19071] RBP: 00007f74e05ef090 R08: 0000000000000000 R09: 0000000000000000 [ 657.020275][T19071] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 657.020287][T19071] R13: 00007f74df9d6038 R14: 00007f74df9d5fa0 R15: 00007ffd10bd55b8 [ 657.020318][T19071] [ 657.524804][ T5989] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 657.704531][ T5989] usb 5-1: Using ep0 maxpacket: 16 [ 657.761235][ T5989] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.782383][ T5989] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.842725][ T5989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 657.861003][ T5989] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 657.883892][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.915005][ T5989] usb 5-1: config 0 descriptor?? [ 658.136837][T19087] loop6: detected capacity change from 0 to 64 [ 658.162949][T19087] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 660.456049][ T5989] usbhid 5-1:0.0: can't add hid device: -71 [ 660.462209][ T5989] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 668.643820][ C1] sched: DL replenish lagged too much [ 670.092453][T18449] Bluetooth: hci5: command 0x0406 tx timeout [ 702.386683][T18449] Bluetooth: hci3: command tx timeout [ 702.634860][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.702121][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 781.876743][T19096] Bluetooth: hci1: command tx timeout [ 809.873722][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.780107][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 877.543797][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 877.551502][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19091/1:b..l [ 877.560441][ C1] rcu: (detected by 1, t=10503 jiffies, g=91165, q=1599256 ncpus=2) [ 877.568524][ C1] task:syz.2.4142 state:R running task stack:25440 pid:19091 tgid:19091 ppid:19093 task_flags:0x40044c flags:0x01004024 [ 877.584413][ C1] Call Trace: [ 877.587714][ C1] [ 877.590659][ C1] __schedule+0x1798/0x4cc0 [ 877.595201][ C1] ? __pfx___schedule+0x10/0x10 [ 877.600075][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 877.605375][ C1] preempt_schedule_irq+0xb5/0x150 [ 877.610496][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 877.616233][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 877.622054][ C1] irqentry_exit+0x6f/0x90 [ 877.626478][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.632463][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 877.637758][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b 23 26 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 877.657460][ C1] RSP: 0018:ffffc9000428f0b8 EFLAGS: 00000206 [ 877.663539][ C1] RAX: cc13ca57d52d4a00 RBX: 0000000000000000 RCX: cc13ca57d52d4a00 [ 877.671517][ C1] RDX: 0000000000000000 RSI: ffffffff8ddae1af RDI: ffffffff8c036f00 [ 877.679498][ C1] RBP: ffffffff8173bd25 R08: 0000000000000000 R09: ffffffff8173bd25 [ 877.687476][ C1] R10: ffffc9000428f278 R11: ffffffff81ac3160 R12: 0000000000000002 [ 877.695457][ C1] R13: ffffffff8e33c820 R14: 0000000000000000 R15: 0000000000000246 [ 877.703441][ C1] ? unwind_next_frame+0xa5/0x2390 [ 877.708564][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 877.714727][ C1] ? unwind_next_frame+0xa5/0x2390 [ 877.719866][ C1] ? unwind_next_frame+0xa5/0x2390 [ 877.724981][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.731050][ C1] ? unwind_next_frame+0xa5/0x2390 [ 877.736162][ C1] unwind_next_frame+0xc2/0x2390 [ 877.741103][ C1] ? unwind_next_frame+0xa5/0x2390 [ 877.746231][ C1] ? unwind_next_frame+0xa5/0x2390 [ 877.751347][ C1] ? do_syscall_64+0x2bd/0xfa0 [ 877.756131][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 877.762290][ C1] arch_stack_walk+0x11c/0x150 [ 877.767064][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.773145][ C1] stack_trace_save+0x9c/0xe0 [ 877.777831][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 877.783221][ C1] ? __lock_acquire+0xab9/0xd20 [ 877.788085][ C1] kasan_save_track+0x3e/0x80 [ 877.792775][ C1] ? kasan_save_track+0x3e/0x80 [ 877.797633][ C1] ? __kasan_save_free_info+0x46/0x50 [ 877.803012][ C1] ? __kasan_slab_free+0x5b/0x80 [ 877.807961][ C1] ? kmem_cache_free+0x19a/0x690 [ 877.812906][ C1] ? unlink_anon_vmas+0x614/0x670 [ 877.817937][ C1] ? free_pgtables+0x72b/0x9c0 [ 877.822700][ C1] ? exit_mmap+0x43c/0xb40 [ 877.827130][ C1] ? __mmput+0x118/0x430 [ 877.831381][ C1] ? exit_mm+0x1da/0x2c0 [ 877.835626][ C1] ? do_exit+0x648/0x2300 [ 877.839955][ C1] ? do_group_exit+0x21c/0x2d0 [ 877.844721][ C1] ? get_signal+0x1286/0x1340 [ 877.849402][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 877.855131][ C1] ? exit_to_user_mode_loop+0x75/0x130 [ 877.860596][ C1] ? do_syscall_64+0x2bd/0xfa0 [ 877.865365][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.871480][ C1] ? unlink_anon_vmas+0x614/0x670 [ 877.876531][ C1] __kasan_save_free_info+0x46/0x50 [ 877.881747][ C1] __kasan_slab_free+0x5b/0x80 [ 877.886518][ C1] kmem_cache_free+0x19a/0x690 [ 877.891305][ C1] unlink_anon_vmas+0x614/0x670 [ 877.896174][ C1] free_pgtables+0x72b/0x9c0 [ 877.900780][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 877.905913][ C1] ? __pfx_down_write+0x10/0x10 [ 877.910772][ C1] ? __mas_set_range+0x12f/0x3c0 [ 877.915728][ C1] exit_mmap+0x43c/0xb40 [ 877.919978][ C1] ? uprobe_clear_state+0x20f/0x290 [ 877.925186][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 877.929955][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 877.935613][ C1] ? __pfx_exit_aio+0x10/0x10 [ 877.940313][ C1] ? uprobe_clear_state+0x27c/0x290 [ 877.945523][ C1] __mmput+0x118/0x430 [ 877.949607][ C1] exit_mm+0x1da/0x2c0 [ 877.953683][ C1] ? __pfx_exit_mm+0x10/0x10 [ 877.958276][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 877.963745][ C1] ? rcu_is_watching+0x15/0xb0 [ 877.968522][ C1] do_exit+0x648/0x2300 [ 877.972691][ C1] ? do_raw_spin_lock+0x121/0x290 [ 877.977719][ C1] ? __pfx_do_exit+0x10/0x10 [ 877.982332][ C1] do_group_exit+0x21c/0x2d0 [ 877.986927][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 877.992137][ C1] get_signal+0x1286/0x1340 [ 877.996676][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 878.002234][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 878.008390][ C1] ? force_sig_fault+0xdc/0x130 [ 878.013267][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 878.018738][ C1] exit_to_user_mode_loop+0x75/0x130 [ 878.024037][ C1] do_syscall_64+0x2bd/0xfa0 [ 878.028631][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 878.033835][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.039902][ C1] ? clear_bhb_loop+0x60/0xb0 [ 878.044591][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.050487][ C1] RIP: 0033:0x7f74df7c1465 [ 878.054904][ C1] RSP: 002b:00007f74e05eef80 EFLAGS: 00000393 ORIG_RAX: 00000000000000db [ 878.063326][ C1] RAX: ffffffffffffffda RBX: 00007f74df9d5fa0 RCX: 00007f74df7c1465 [ 878.071306][ C1] RDX: 00007f74e05eefc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 878.079285][ C1] RBP: 00007f74df811e19 R08: 0000000000000000 R09: 0000000000000000 [ 878.087264][ C1] R10: 0000000000000000 R11: 0000000000000393 R12: 0000000000000000 [ 878.095246][ C1] R13: 00007f74df9d6038 R14: 00007f74df9d5fa0 R15: 00007ffd10bd55b8 [ 878.103250][ C1]