[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. 2021/03/05 07:11:17 fuzzer started 2021/03/05 07:11:17 dialing manager at 10.128.0.169:33225 2021/03/05 07:11:17 syscalls: 3540 2021/03/05 07:11:17 code coverage: enabled 2021/03/05 07:11:17 comparison tracing: enabled 2021/03/05 07:11:17 extra coverage: enabled 2021/03/05 07:11:17 setuid sandbox: enabled 2021/03/05 07:11:17 namespace sandbox: enabled 2021/03/05 07:11:17 Android sandbox: /sys/fs/selinux/policy does not exist 2021/03/05 07:11:17 fault injection: enabled 2021/03/05 07:11:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/03/05 07:11:17 net packet injection: enabled 2021/03/05 07:11:17 net device setup: enabled 2021/03/05 07:11:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/03/05 07:11:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/03/05 07:11:17 USB emulation: enabled 2021/03/05 07:11:17 hci packet injection: enabled 2021/03/05 07:11:17 wifi device emulation: enabled 2021/03/05 07:11:17 802.15.4 emulation: enabled 2021/03/05 07:11:17 fetching corpus: 0, signal 0/2000 (executing program) 2021/03/05 07:11:18 fetching corpus: 50, signal 29130/32991 (executing program) 2021/03/05 07:11:18 fetching corpus: 100, signal 52265/57910 (executing program) 2021/03/05 07:11:18 fetching corpus: 150, signal 64942/72294 (executing program) 2021/03/05 07:11:18 fetching corpus: 200, signal 88646/97546 (executing program) 2021/03/05 07:11:18 fetching corpus: 250, signal 102011/112507 (executing program) 2021/03/05 07:11:18 fetching corpus: 300, signal 111733/123827 (executing program) 2021/03/05 07:11:18 fetching corpus: 350, signal 121496/135176 (executing program) 2021/03/05 07:11:18 fetching corpus: 400, signal 133287/148441 (executing program) 2021/03/05 07:11:18 fetching corpus: 450, signal 141639/158284 (executing program) 2021/03/05 07:11:18 fetching corpus: 500, signal 151980/170005 (executing program) 2021/03/05 07:11:18 fetching corpus: 550, signal 162306/181663 (executing program) 2021/03/05 07:11:18 fetching corpus: 600, signal 169025/189773 (executing program) 2021/03/05 07:11:19 fetching corpus: 650, signal 178119/200134 (executing program) 2021/03/05 07:11:19 fetching corpus: 700, signal 182939/206345 (executing program) 2021/03/05 07:11:19 fetching corpus: 750, signal 191117/215758 (executing program) 2021/03/05 07:11:19 fetching corpus: 800, signal 198999/224840 (executing program) 2021/03/05 07:11:19 fetching corpus: 850, signal 206408/233443 (executing program) 2021/03/05 07:11:19 fetching corpus: 900, signal 212249/240503 (executing program) 2021/03/05 07:11:19 fetching corpus: 950, signal 216071/245629 (executing program) 2021/03/05 07:11:19 fetching corpus: 1000, signal 221268/252075 (executing program) 2021/03/05 07:11:19 fetching corpus: 1050, signal 223884/256022 (executing program) 2021/03/05 07:11:19 fetching corpus: 1100, signal 227560/260918 (executing program) 2021/03/05 07:11:20 fetching corpus: 1150, signal 230557/265153 (executing program) 2021/03/05 07:11:20 fetching corpus: 1200, signal 234029/269841 (executing program) 2021/03/05 07:11:20 fetching corpus: 1250, signal 237984/274998 (executing program) 2021/03/05 07:11:20 fetching corpus: 1300, signal 241415/279599 (executing program) 2021/03/05 07:11:20 fetching corpus: 1350, signal 244907/284321 (executing program) 2021/03/05 07:11:20 fetching corpus: 1400, signal 249375/289905 (executing program) 2021/03/05 07:11:20 fetching corpus: 1450, signal 254365/295931 (executing program) 2021/03/05 07:11:20 fetching corpus: 1500, signal 258530/301184 (executing program) 2021/03/05 07:11:20 fetching corpus: 1550, signal 261266/305075 (executing program) 2021/03/05 07:11:20 fetching corpus: 1600, signal 264137/309082 (executing program) 2021/03/05 07:11:20 fetching corpus: 1650, signal 269172/315105 (executing program) 2021/03/05 07:11:21 fetching corpus: 1700, signal 271248/318406 (executing program) 2021/03/05 07:11:21 fetching corpus: 1750, signal 274298/322561 (executing program) 2021/03/05 07:11:21 fetching corpus: 1800, signal 278709/327847 (executing program) 2021/03/05 07:11:21 fetching corpus: 1850, signal 282400/332534 (executing program) 2021/03/05 07:11:21 fetching corpus: 1900, signal 286558/337605 (executing program) 2021/03/05 07:11:21 fetching corpus: 1950, signal 289474/341554 (executing program) 2021/03/05 07:11:21 fetching corpus: 2000, signal 293591/346550 (executing program) 2021/03/05 07:11:21 fetching corpus: 2050, signal 296647/350594 (executing program) 2021/03/05 07:11:21 fetching corpus: 2100, signal 301524/356257 (executing program) 2021/03/05 07:11:21 fetching corpus: 2150, signal 303960/359705 (executing program) 2021/03/05 07:11:21 fetching corpus: 2200, signal 305933/362760 (executing program) 2021/03/05 07:11:21 fetching corpus: 2250, signal 307828/365704 (executing program) 2021/03/05 07:11:21 fetching corpus: 2300, signal 311189/369953 (executing program) 2021/03/05 07:11:22 fetching corpus: 2350, signal 314934/374474 (executing program) 2021/03/05 07:11:22 fetching corpus: 2400, signal 317841/378299 (executing program) 2021/03/05 07:11:22 fetching corpus: 2450, signal 320927/382276 (executing program) 2021/03/05 07:11:22 fetching corpus: 2500, signal 323674/385873 (executing program) 2021/03/05 07:11:22 fetching corpus: 2550, signal 326567/389669 (executing program) 2021/03/05 07:11:22 fetching corpus: 2600, signal 328620/392678 (executing program) 2021/03/05 07:11:22 fetching corpus: 2650, signal 331782/396629 (executing program) 2021/03/05 07:11:22 fetching corpus: 2700, signal 334366/400067 (executing program) 2021/03/05 07:11:22 fetching corpus: 2750, signal 337158/403597 (executing program) 2021/03/05 07:11:22 fetching corpus: 2800, signal 339726/407022 (executing program) 2021/03/05 07:11:22 fetching corpus: 2850, signal 341440/409704 (executing program) 2021/03/05 07:11:22 fetching corpus: 2900, signal 343765/412878 (executing program) 2021/03/05 07:11:23 fetching corpus: 2950, signal 345277/415354 (executing program) 2021/03/05 07:11:23 fetching corpus: 3000, signal 346636/417664 (executing program) 2021/03/05 07:11:23 fetching corpus: 3050, signal 349189/421011 (executing program) 2021/03/05 07:11:23 fetching corpus: 3100, signal 350784/423550 (executing program) 2021/03/05 07:11:23 fetching corpus: 3150, signal 354744/428043 (executing program) 2021/03/05 07:11:23 fetching corpus: 3200, signal 356166/430341 (executing program) 2021/03/05 07:11:23 fetching corpus: 3250, signal 358227/433213 (executing program) 2021/03/05 07:11:23 fetching corpus: 3300, signal 361424/437017 (executing program) 2021/03/05 07:11:23 fetching corpus: 3350, signal 363132/439579 (executing program) 2021/03/05 07:11:23 fetching corpus: 3400, signal 364590/441912 (executing program) 2021/03/05 07:11:23 fetching corpus: 3450, signal 366929/444986 (executing program) 2021/03/05 07:11:24 fetching corpus: 3500, signal 368091/447089 (executing program) 2021/03/05 07:11:24 fetching corpus: 3550, signal 369127/449025 (executing program) 2021/03/05 07:11:24 fetching corpus: 3600, signal 369972/450904 (executing program) 2021/03/05 07:11:24 fetching corpus: 3650, signal 371212/453009 (executing program) 2021/03/05 07:11:24 fetching corpus: 3700, signal 372869/455521 (executing program) 2021/03/05 07:11:24 fetching corpus: 3750, signal 374336/457837 (executing program) 2021/03/05 07:11:24 fetching corpus: 3800, signal 378734/462557 (executing program) syzkaller login: [ 70.981923][ T3276] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.988543][ T3276] ieee802154 phy1 wpan1: encryption failed: -22 2021/03/05 07:11:24 fetching corpus: 3850, signal 380441/465014 (executing program) 2021/03/05 07:11:24 fetching corpus: 3900, signal 382336/467598 (executing program) 2021/03/05 07:11:24 fetching corpus: 3950, signal 384017/470006 (executing program) 2021/03/05 07:11:24 fetching corpus: 4000, signal 384994/471851 (executing program) 2021/03/05 07:11:24 fetching corpus: 4050, signal 386220/473911 (executing program) 2021/03/05 07:11:25 fetching corpus: 4100, signal 388478/476784 (executing program) 2021/03/05 07:11:25 fetching corpus: 4150, signal 390264/479316 (executing program) 2021/03/05 07:11:25 fetching corpus: 4200, signal 392054/481754 (executing program) 2021/03/05 07:11:25 fetching corpus: 4250, signal 393638/484065 (executing program) 2021/03/05 07:11:25 fetching corpus: 4300, signal 394963/486208 (executing program) 2021/03/05 07:11:25 fetching corpus: 4350, signal 399749/490996 (executing program) 2021/03/05 07:11:25 fetching corpus: 4400, signal 401040/493067 (executing program) 2021/03/05 07:11:25 fetching corpus: 4450, signal 403513/496045 (executing program) 2021/03/05 07:11:25 fetching corpus: 4500, signal 405049/498196 (executing program) 2021/03/05 07:11:25 fetching corpus: 4550, signal 407785/501345 (executing program) 2021/03/05 07:11:26 fetching corpus: 4600, signal 413747/507011 (executing program) 2021/03/05 07:11:26 fetching corpus: 4650, signal 416549/510149 (executing program) 2021/03/05 07:11:26 fetching corpus: 4700, signal 417736/512058 (executing program) 2021/03/05 07:11:26 fetching corpus: 4750, signal 419191/514136 (executing program) 2021/03/05 07:11:26 fetching corpus: 4800, signal 421939/517197 (executing program) 2021/03/05 07:11:26 fetching corpus: 4850, signal 423383/519209 (executing program) 2021/03/05 07:11:26 fetching corpus: 4900, signal 424635/521140 (executing program) 2021/03/05 07:11:26 fetching corpus: 4950, signal 426684/523646 (executing program) 2021/03/05 07:11:27 fetching corpus: 5000, signal 431534/528247 (executing program) 2021/03/05 07:11:27 fetching corpus: 5050, signal 433419/530656 (executing program) 2021/03/05 07:11:27 fetching corpus: 5100, signal 434224/532184 (executing program) 2021/03/05 07:11:27 fetching corpus: 5150, signal 438534/536399 (executing program) 2021/03/05 07:11:27 fetching corpus: 5200, signal 439896/538346 (executing program) 2021/03/05 07:11:27 fetching corpus: 5250, signal 440934/540087 (executing program) 2021/03/05 07:11:27 fetching corpus: 5300, signal 442716/542323 (executing program) 2021/03/05 07:11:27 fetching corpus: 5350, signal 444177/544302 (executing program) 2021/03/05 07:11:27 fetching corpus: 5400, signal 445436/546133 (executing program) 2021/03/05 07:11:27 fetching corpus: 5450, signal 446081/547528 (executing program) 2021/03/05 07:11:27 fetching corpus: 5500, signal 447254/549299 (executing program) 2021/03/05 07:11:28 fetching corpus: 5550, signal 449694/552027 (executing program) 2021/03/05 07:11:28 fetching corpus: 5600, signal 450487/553551 (executing program) 2021/03/05 07:11:28 fetching corpus: 5650, signal 452589/555987 (executing program) 2021/03/05 07:11:28 fetching corpus: 5700, signal 454560/558359 (executing program) 2021/03/05 07:11:28 fetching corpus: 5750, signal 455577/560014 (executing program) 2021/03/05 07:11:28 fetching corpus: 5800, signal 456621/561681 (executing program) 2021/03/05 07:11:28 fetching corpus: 5850, signal 458193/563679 (executing program) 2021/03/05 07:11:28 fetching corpus: 5900, signal 459591/565586 (executing program) 2021/03/05 07:11:28 fetching corpus: 5950, signal 460955/567435 (executing program) 2021/03/05 07:11:28 fetching corpus: 6000, signal 461951/569061 (executing program) 2021/03/05 07:11:28 fetching corpus: 6050, signal 462482/570331 (executing program) 2021/03/05 07:11:28 fetching corpus: 6100, signal 463826/572177 (executing program) 2021/03/05 07:11:28 fetching corpus: 6150, signal 464588/573557 (executing program) 2021/03/05 07:11:29 fetching corpus: 6200, signal 466463/575769 (executing program) 2021/03/05 07:11:29 fetching corpus: 6250, signal 467024/577060 (executing program) 2021/03/05 07:11:29 fetching corpus: 6300, signal 468054/578608 (executing program) 2021/03/05 07:11:29 fetching corpus: 6350, signal 469264/580321 (executing program) 2021/03/05 07:11:29 fetching corpus: 6400, signal 470695/582110 (executing program) 2021/03/05 07:11:29 fetching corpus: 6450, signal 471364/583397 (executing program) 2021/03/05 07:11:30 fetching corpus: 6500, signal 472137/584794 (executing program) 2021/03/05 07:11:30 fetching corpus: 6550, signal 474541/587293 (executing program) 2021/03/05 07:11:30 fetching corpus: 6600, signal 475883/589054 (executing program) 2021/03/05 07:11:30 fetching corpus: 6650, signal 476882/590568 (executing program) 2021/03/05 07:11:30 fetching corpus: 6700, signal 477472/591841 (executing program) 2021/03/05 07:11:30 fetching corpus: 6750, signal 479347/593943 (executing program) 2021/03/05 07:11:30 fetching corpus: 6800, signal 480111/595313 (executing program) 2021/03/05 07:11:30 fetching corpus: 6850, signal 481478/597076 (executing program) 2021/03/05 07:11:30 fetching corpus: 6900, signal 482422/598556 (executing program) 2021/03/05 07:11:30 fetching corpus: 6950, signal 482903/599734 (executing program) 2021/03/05 07:11:30 fetching corpus: 7000, signal 484317/601469 (executing program) 2021/03/05 07:11:30 fetching corpus: 7050, signal 485470/603076 (executing program) 2021/03/05 07:11:30 fetching corpus: 7100, signal 486427/604520 (executing program) 2021/03/05 07:11:31 fetching corpus: 7150, signal 487060/605772 (executing program) 2021/03/05 07:11:31 fetching corpus: 7200, signal 488622/607631 (executing program) 2021/03/05 07:11:31 fetching corpus: 7250, signal 489833/609239 (executing program) 2021/03/05 07:11:31 fetching corpus: 7300, signal 491051/610921 (executing program) 2021/03/05 07:11:31 fetching corpus: 7350, signal 492024/612360 (executing program) 2021/03/05 07:11:31 fetching corpus: 7400, signal 493309/613995 (executing program) 2021/03/05 07:11:31 fetching corpus: 7450, signal 494036/615244 (executing program) 2021/03/05 07:11:31 fetching corpus: 7500, signal 495367/616898 (executing program) 2021/03/05 07:11:31 fetching corpus: 7550, signal 497731/619176 (executing program) 2021/03/05 07:11:31 fetching corpus: 7600, signal 498897/620703 (executing program) 2021/03/05 07:11:31 fetching corpus: 7650, signal 500474/622417 (executing program) 2021/03/05 07:11:32 fetching corpus: 7700, signal 501276/623761 (executing program) 2021/03/05 07:11:32 fetching corpus: 7750, signal 502212/625156 (executing program) 2021/03/05 07:11:32 fetching corpus: 7800, signal 502878/626333 (executing program) 2021/03/05 07:11:32 fetching corpus: 7850, signal 503971/627770 (executing program) 2021/03/05 07:11:32 fetching corpus: 7900, signal 504810/629063 (executing program) 2021/03/05 07:11:32 fetching corpus: 7950, signal 505769/630461 (executing program) 2021/03/05 07:11:32 fetching corpus: 8000, signal 506530/631719 (executing program) 2021/03/05 07:11:32 fetching corpus: 8050, signal 508040/633401 (executing program) 2021/03/05 07:11:32 fetching corpus: 8100, signal 508802/634599 (executing program) 2021/03/05 07:11:32 fetching corpus: 8150, signal 510121/636139 (executing program) 2021/03/05 07:11:32 fetching corpus: 8200, signal 511303/637613 (executing program) 2021/03/05 07:11:32 fetching corpus: 8250, signal 512796/639323 (executing program) 2021/03/05 07:11:33 fetching corpus: 8300, signal 513981/640835 (executing program) 2021/03/05 07:11:33 fetching corpus: 8350, signal 514649/641995 (executing program) 2021/03/05 07:11:33 fetching corpus: 8400, signal 515755/643407 (executing program) 2021/03/05 07:11:33 fetching corpus: 8450, signal 517262/645015 (executing program) 2021/03/05 07:11:33 fetching corpus: 8500, signal 519715/647180 (executing program) 2021/03/05 07:11:33 fetching corpus: 8550, signal 520608/648448 (executing program) 2021/03/05 07:11:33 fetching corpus: 8600, signal 521509/649716 (executing program) 2021/03/05 07:11:33 fetching corpus: 8650, signal 522232/650856 (executing program) 2021/03/05 07:11:33 fetching corpus: 8700, signal 523522/652303 (executing program) 2021/03/05 07:11:33 fetching corpus: 8750, signal 524724/653707 (executing program) 2021/03/05 07:11:33 fetching corpus: 8800, signal 526137/655297 (executing program) 2021/03/05 07:11:34 fetching corpus: 8850, signal 529124/657713 (executing program) 2021/03/05 07:11:34 fetching corpus: 8900, signal 529674/658756 (executing program) 2021/03/05 07:11:34 fetching corpus: 8950, signal 530959/660237 (executing program) 2021/03/05 07:11:34 fetching corpus: 9000, signal 531562/661348 (executing program) 2021/03/05 07:11:34 fetching corpus: 9050, signal 533231/663029 (executing program) 2021/03/05 07:11:34 fetching corpus: 9100, signal 533999/664158 (executing program) 2021/03/05 07:11:34 fetching corpus: 9150, signal 534907/665337 (executing program) 2021/03/05 07:11:34 fetching corpus: 9200, signal 535700/666454 (executing program) 2021/03/05 07:11:34 fetching corpus: 9250, signal 536539/667657 (executing program) 2021/03/05 07:11:34 fetching corpus: 9300, signal 537184/668689 (executing program) 2021/03/05 07:11:34 fetching corpus: 9350, signal 538088/669886 (executing program) 2021/03/05 07:11:34 fetching corpus: 9400, signal 539694/671475 (executing program) 2021/03/05 07:11:35 fetching corpus: 9450, signal 541078/672943 (executing program) 2021/03/05 07:11:35 fetching corpus: 9500, signal 541871/674122 (executing program) 2021/03/05 07:11:35 fetching corpus: 9550, signal 542757/675270 (executing program) 2021/03/05 07:11:35 fetching corpus: 9600, signal 543266/676209 (executing program) 2021/03/05 07:11:35 fetching corpus: 9650, signal 544484/677501 (executing program) 2021/03/05 07:11:35 fetching corpus: 9700, signal 545984/678954 (executing program) 2021/03/05 07:11:35 fetching corpus: 9750, signal 546756/680050 (executing program) 2021/03/05 07:11:35 fetching corpus: 9800, signal 547513/681150 (executing program) 2021/03/05 07:11:35 fetching corpus: 9850, signal 548227/682186 (executing program) 2021/03/05 07:11:35 fetching corpus: 9900, signal 548772/683200 (executing program) 2021/03/05 07:11:35 fetching corpus: 9950, signal 549615/684295 (executing program) 2021/03/05 07:11:35 fetching corpus: 10000, signal 550930/685691 (executing program) 2021/03/05 07:11:35 fetching corpus: 10050, signal 552029/686911 (executing program) 2021/03/05 07:11:36 fetching corpus: 10100, signal 552712/687905 (executing program) 2021/03/05 07:11:36 fetching corpus: 10150, signal 553985/689220 (executing program) 2021/03/05 07:11:36 fetching corpus: 10200, signal 554877/690303 (executing program) 2021/03/05 07:11:36 fetching corpus: 10250, signal 555316/691152 (executing program) 2021/03/05 07:11:36 fetching corpus: 10300, signal 556692/692469 (executing program) 2021/03/05 07:11:36 fetching corpus: 10350, signal 557237/693351 (executing program) 2021/03/05 07:11:36 fetching corpus: 10400, signal 557738/694271 (executing program) 2021/03/05 07:11:36 fetching corpus: 10450, signal 558751/695444 (executing program) 2021/03/05 07:11:36 fetching corpus: 10500, signal 559704/696545 (executing program) 2021/03/05 07:11:36 fetching corpus: 10550, signal 560453/697586 (executing program) 2021/03/05 07:11:36 fetching corpus: 10600, signal 562196/699067 (executing program) 2021/03/05 07:11:37 fetching corpus: 10650, signal 563495/700321 (executing program) 2021/03/05 07:11:37 fetching corpus: 10700, signal 564409/701395 (executing program) 2021/03/05 07:11:37 fetching corpus: 10750, signal 565171/702379 (executing program) 2021/03/05 07:11:37 fetching corpus: 10800, signal 566116/703474 (executing program) 2021/03/05 07:11:37 fetching corpus: 10850, signal 566985/704493 (executing program) 2021/03/05 07:11:37 fetching corpus: 10900, signal 567435/705320 (executing program) 2021/03/05 07:11:37 fetching corpus: 10950, signal 568679/706537 (executing program) 2021/03/05 07:11:37 fetching corpus: 11000, signal 569235/707372 (executing program) 2021/03/05 07:11:37 fetching corpus: 11050, signal 569887/708271 (executing program) 2021/03/05 07:11:37 fetching corpus: 11100, signal 570320/709107 (executing program) 2021/03/05 07:11:37 fetching corpus: 11150, signal 571043/710086 (executing program) 2021/03/05 07:11:38 fetching corpus: 11200, signal 571752/711017 (executing program) 2021/03/05 07:11:38 fetching corpus: 11250, signal 572197/711843 (executing program) 2021/03/05 07:11:38 fetching corpus: 11300, signal 572887/712777 (executing program) 2021/03/05 07:11:38 fetching corpus: 11350, signal 573577/713710 (executing program) 2021/03/05 07:11:38 fetching corpus: 11400, signal 574364/714669 (executing program) 2021/03/05 07:11:38 fetching corpus: 11450, signal 575249/715669 (executing program) 2021/03/05 07:11:38 fetching corpus: 11500, signal 575770/716525 (executing program) 2021/03/05 07:11:38 fetching corpus: 11550, signal 576365/717398 (executing program) 2021/03/05 07:11:38 fetching corpus: 11600, signal 577101/718311 (executing program) 2021/03/05 07:11:38 fetching corpus: 11650, signal 578393/719452 (executing program) 2021/03/05 07:11:38 fetching corpus: 11700, signal 578961/720319 (executing program) 2021/03/05 07:11:39 fetching corpus: 11750, signal 579729/721250 (executing program) 2021/03/05 07:11:39 fetching corpus: 11800, signal 580073/721985 (executing program) 2021/03/05 07:11:39 fetching corpus: 11850, signal 580333/722688 (executing program) 2021/03/05 07:11:39 fetching corpus: 11900, signal 581200/723659 (executing program) 2021/03/05 07:11:39 fetching corpus: 11950, signal 581688/724463 (executing program) 2021/03/05 07:11:39 fetching corpus: 12000, signal 582568/725415 (executing program) 2021/03/05 07:11:39 fetching corpus: 12050, signal 583384/726310 (executing program) 2021/03/05 07:11:39 fetching corpus: 12100, signal 584587/727425 (executing program) 2021/03/05 07:11:39 fetching corpus: 12150, signal 585362/728379 (executing program) 2021/03/05 07:11:39 fetching corpus: 12200, signal 586360/729415 (executing program) 2021/03/05 07:11:39 fetching corpus: 12250, signal 586989/730261 (executing program) 2021/03/05 07:11:39 fetching corpus: 12300, signal 587861/731251 (executing program) 2021/03/05 07:11:39 fetching corpus: 12350, signal 588549/732059 (executing program) 2021/03/05 07:11:40 fetching corpus: 12400, signal 589844/733142 (executing program) 2021/03/05 07:11:40 fetching corpus: 12450, signal 590513/733983 (executing program) 2021/03/05 07:11:40 fetching corpus: 12500, signal 591041/734748 (executing program) 2021/03/05 07:11:40 fetching corpus: 12550, signal 591479/735477 (executing program) 2021/03/05 07:11:40 fetching corpus: 12600, signal 591757/736175 (executing program) 2021/03/05 07:11:40 fetching corpus: 12650, signal 592376/737019 (executing program) 2021/03/05 07:11:40 fetching corpus: 12700, signal 593260/737914 (executing program) 2021/03/05 07:11:40 fetching corpus: 12750, signal 593592/738599 (executing program) 2021/03/05 07:11:40 fetching corpus: 12800, signal 594493/739486 (executing program) 2021/03/05 07:11:40 fetching corpus: 12850, signal 595110/740284 (executing program) 2021/03/05 07:11:40 fetching corpus: 12900, signal 595476/740996 (executing program) 2021/03/05 07:11:40 fetching corpus: 12950, signal 596353/741871 (executing program) 2021/03/05 07:11:40 fetching corpus: 13000, signal 596900/742634 (executing program) 2021/03/05 07:11:41 fetching corpus: 13050, signal 597502/743444 (executing program) 2021/03/05 07:11:41 fetching corpus: 13100, signal 598159/744244 (executing program) 2021/03/05 07:11:41 fetching corpus: 13150, signal 598943/745095 (executing program) 2021/03/05 07:11:41 fetching corpus: 13200, signal 599699/745897 (executing program) 2021/03/05 07:11:41 fetching corpus: 13250, signal 600350/746653 (executing program) 2021/03/05 07:11:41 fetching corpus: 13300, signal 600914/747390 (executing program) 2021/03/05 07:11:41 fetching corpus: 13350, signal 601508/748143 (executing program) 2021/03/05 07:11:41 fetching corpus: 13400, signal 602318/749015 (executing program) 2021/03/05 07:11:41 fetching corpus: 13450, signal 603001/749814 (executing program) 2021/03/05 07:11:41 fetching corpus: 13500, signal 603544/750541 (executing program) 2021/03/05 07:11:42 fetching corpus: 13550, signal 604533/751420 (executing program) 2021/03/05 07:11:42 fetching corpus: 13600, signal 605122/752140 (executing program) 2021/03/05 07:11:42 fetching corpus: 13650, signal 605547/752815 (executing program) 2021/03/05 07:11:42 fetching corpus: 13700, signal 605900/753444 (executing program) 2021/03/05 07:11:42 fetching corpus: 13750, signal 606424/754149 (executing program) 2021/03/05 07:11:42 fetching corpus: 13800, signal 607100/754867 (executing program) 2021/03/05 07:11:42 fetching corpus: 13850, signal 607976/755734 (executing program) 2021/03/05 07:11:42 fetching corpus: 13900, signal 608961/756602 (executing program) 2021/03/05 07:11:42 fetching corpus: 13950, signal 609919/757461 (executing program) 2021/03/05 07:11:42 fetching corpus: 14000, signal 610680/758272 (executing program) 2021/03/05 07:11:42 fetching corpus: 14050, signal 610945/758895 (executing program) 2021/03/05 07:11:42 fetching corpus: 14100, signal 611361/759578 (executing program) 2021/03/05 07:11:42 fetching corpus: 14150, signal 612030/760310 (executing program) 2021/03/05 07:11:43 fetching corpus: 14200, signal 612389/760945 (executing program) 2021/03/05 07:11:43 fetching corpus: 14250, signal 612782/761599 (executing program) 2021/03/05 07:11:43 fetching corpus: 14300, signal 613406/762321 (executing program) 2021/03/05 07:11:43 fetching corpus: 14350, signal 613998/763073 (executing program) 2021/03/05 07:11:43 fetching corpus: 14400, signal 614408/763719 (executing program) 2021/03/05 07:11:43 fetching corpus: 14450, signal 614994/764350 (executing program) 2021/03/05 07:11:43 fetching corpus: 14500, signal 615801/765157 (executing program) 2021/03/05 07:11:43 fetching corpus: 14550, signal 616974/766070 (executing program) 2021/03/05 07:11:43 fetching corpus: 14600, signal 617753/766790 (executing program) 2021/03/05 07:11:43 fetching corpus: 14649, signal 618169/767444 (executing program) 2021/03/05 07:11:43 fetching corpus: 14699, signal 618876/768178 (executing program) 2021/03/05 07:11:44 fetching corpus: 14749, signal 619308/768806 (executing program) 2021/03/05 07:11:44 fetching corpus: 14799, signal 621176/769852 (executing program) 2021/03/05 07:11:44 fetching corpus: 14849, signal 621584/770420 (executing program) 2021/03/05 07:11:44 fetching corpus: 14899, signal 622487/771172 (executing program) 2021/03/05 07:11:44 fetching corpus: 14949, signal 623239/771875 (executing program) 2021/03/05 07:11:44 fetching corpus: 14999, signal 623622/772444 (executing program) 2021/03/05 07:11:44 fetching corpus: 15049, signal 623856/773027 (executing program) 2021/03/05 07:11:44 fetching corpus: 15099, signal 624286/773652 (executing program) 2021/03/05 07:11:44 fetching corpus: 15149, signal 625230/774383 (executing program) 2021/03/05 07:11:44 fetching corpus: 15199, signal 625900/775055 (executing program) 2021/03/05 07:11:44 fetching corpus: 15249, signal 626873/775785 (executing program) 2021/03/05 07:11:45 fetching corpus: 15299, signal 627422/776410 (executing program) 2021/03/05 07:11:45 fetching corpus: 15349, signal 627754/776995 (executing program) 2021/03/05 07:11:45 fetching corpus: 15399, signal 628226/777604 (executing program) 2021/03/05 07:11:45 fetching corpus: 15449, signal 629190/778349 (executing program) 2021/03/05 07:11:45 fetching corpus: 15499, signal 629693/778973 (executing program) 2021/03/05 07:11:45 fetching corpus: 15549, signal 630417/779624 (executing program) 2021/03/05 07:11:45 fetching corpus: 15599, signal 630997/780216 (executing program) 2021/03/05 07:11:45 fetching corpus: 15649, signal 631410/780800 (executing program) 2021/03/05 07:11:45 fetching corpus: 15699, signal 631885/781403 (executing program) 2021/03/05 07:11:45 fetching corpus: 15749, signal 632724/782102 (executing program) 2021/03/05 07:11:45 fetching corpus: 15799, signal 633989/782871 (executing program) 2021/03/05 07:11:45 fetching corpus: 15849, signal 634963/783552 (executing program) 2021/03/05 07:11:45 fetching corpus: 15899, signal 635656/784182 (executing program) 2021/03/05 07:11:46 fetching corpus: 15949, signal 636536/784853 (executing program) 2021/03/05 07:11:46 fetching corpus: 15999, signal 636924/785360 (executing program) 2021/03/05 07:11:46 fetching corpus: 16049, signal 637746/786033 (executing program) 2021/03/05 07:11:46 fetching corpus: 16099, signal 638290/786577 (executing program) 2021/03/05 07:11:46 fetching corpus: 16149, signal 638751/787144 (executing program) 2021/03/05 07:11:46 fetching corpus: 16199, signal 639320/787743 (executing program) 2021/03/05 07:11:46 fetching corpus: 16249, signal 640025/788301 (executing program) 2021/03/05 07:11:46 fetching corpus: 16299, signal 641116/788960 (executing program) 2021/03/05 07:11:46 fetching corpus: 16349, signal 641980/789579 (executing program) 2021/03/05 07:11:46 fetching corpus: 16399, signal 642587/790151 (executing program) 2021/03/05 07:11:46 fetching corpus: 16449, signal 642890/790676 (executing program) 2021/03/05 07:11:46 fetching corpus: 16499, signal 643626/791273 (executing program) 2021/03/05 07:11:47 fetching corpus: 16549, signal 644097/791812 (executing program) 2021/03/05 07:11:47 fetching corpus: 16599, signal 644604/792315 (executing program) 2021/03/05 07:11:47 fetching corpus: 16649, signal 645144/792879 (executing program) 2021/03/05 07:11:47 fetching corpus: 16699, signal 645769/793467 (executing program) 2021/03/05 07:11:47 fetching corpus: 16749, signal 646472/794072 (executing program) 2021/03/05 07:11:48 fetching corpus: 16799, signal 646870/794554 (executing program) 2021/03/05 07:11:48 fetching corpus: 16849, signal 647414/795089 (executing program) 2021/03/05 07:11:48 fetching corpus: 16899, signal 647742/795555 (executing program) 2021/03/05 07:11:48 fetching corpus: 16949, signal 648576/796121 (executing program) 2021/03/05 07:11:48 fetching corpus: 16999, signal 648926/796611 (executing program) 2021/03/05 07:11:48 fetching corpus: 17049, signal 649422/797166 (executing program) 2021/03/05 07:11:48 fetching corpus: 17099, signal 649893/797664 (executing program) 2021/03/05 07:11:48 fetching corpus: 17149, signal 650991/798247 (executing program) 2021/03/05 07:11:48 fetching corpus: 17199, signal 652057/798806 (executing program) 2021/03/05 07:11:48 fetching corpus: 17249, signal 652634/799309 (executing program) 2021/03/05 07:11:48 fetching corpus: 17299, signal 653749/799882 (executing program) 2021/03/05 07:11:48 fetching corpus: 17349, signal 654097/800350 (executing program) 2021/03/05 07:11:48 fetching corpus: 17399, signal 654723/800879 (executing program) 2021/03/05 07:11:49 fetching corpus: 17449, signal 655214/801391 (executing program) 2021/03/05 07:11:49 fetching corpus: 17499, signal 656588/802039 (executing program) 2021/03/05 07:11:49 fetching corpus: 17549, signal 657667/802607 (executing program) 2021/03/05 07:11:49 fetching corpus: 17599, signal 657992/803043 (executing program) 2021/03/05 07:11:49 fetching corpus: 17649, signal 659136/803629 (executing program) 2021/03/05 07:11:49 fetching corpus: 17699, signal 659648/804106 (executing program) 2021/03/05 07:11:49 fetching corpus: 17749, signal 660034/804581 (executing program) 2021/03/05 07:11:49 fetching corpus: 17799, signal 660601/805050 (executing program) 2021/03/05 07:11:49 fetching corpus: 17849, signal 660954/805491 (executing program) 2021/03/05 07:11:49 fetching corpus: 17899, signal 661691/805970 (executing program) 2021/03/05 07:11:50 fetching corpus: 17949, signal 663166/806599 (executing program) 2021/03/05 07:11:50 fetching corpus: 17999, signal 663871/807062 (executing program) 2021/03/05 07:11:50 fetching corpus: 18049, signal 664143/807469 (executing program) 2021/03/05 07:11:50 fetching corpus: 18099, signal 664592/807930 (executing program) 2021/03/05 07:11:50 fetching corpus: 18149, signal 664977/808352 (executing program) 2021/03/05 07:11:50 fetching corpus: 18199, signal 665333/808791 (executing program) 2021/03/05 07:11:50 fetching corpus: 18249, signal 666032/809270 (executing program) 2021/03/05 07:11:50 fetching corpus: 18299, signal 666745/809726 (executing program) 2021/03/05 07:11:50 fetching corpus: 18349, signal 667186/810165 (executing program) 2021/03/05 07:11:51 fetching corpus: 18399, signal 667636/810611 (executing program) 2021/03/05 07:11:51 fetching corpus: 18449, signal 668739/811129 (executing program) 2021/03/05 07:11:51 fetching corpus: 18499, signal 669716/811588 (executing program) 2021/03/05 07:11:51 fetching corpus: 18549, signal 670293/812007 (executing program) 2021/03/05 07:11:51 fetching corpus: 18599, signal 670653/812440 (executing program) 2021/03/05 07:11:51 fetching corpus: 18649, signal 671294/812879 (executing program) 2021/03/05 07:11:51 fetching corpus: 18699, signal 672133/813322 (executing program) 2021/03/05 07:11:51 fetching corpus: 18749, signal 672821/813733 (executing program) 2021/03/05 07:11:51 fetching corpus: 18799, signal 673615/814200 (executing program) 2021/03/05 07:11:51 fetching corpus: 18849, signal 673837/814593 (executing program) 2021/03/05 07:11:52 fetching corpus: 18899, signal 674398/815007 (executing program) 2021/03/05 07:11:52 fetching corpus: 18949, signal 674965/815413 (executing program) 2021/03/05 07:11:52 fetching corpus: 18999, signal 675515/815823 (executing program) 2021/03/05 07:11:52 fetching corpus: 19049, signal 675836/816213 (executing program) 2021/03/05 07:11:52 fetching corpus: 19099, signal 676322/816591 (executing program) 2021/03/05 07:11:52 fetching corpus: 19149, signal 676832/816983 (executing program) 2021/03/05 07:11:52 fetching corpus: 19199, signal 677100/817365 (executing program) 2021/03/05 07:11:52 fetching corpus: 19249, signal 678002/817783 (executing program) 2021/03/05 07:11:52 fetching corpus: 19299, signal 678518/818165 (executing program) 2021/03/05 07:11:52 fetching corpus: 19349, signal 678980/818559 (executing program) 2021/03/05 07:11:52 fetching corpus: 19399, signal 679284/818930 (executing program) 2021/03/05 07:11:52 fetching corpus: 19449, signal 679712/819322 (executing program) 2021/03/05 07:11:52 fetching corpus: 19499, signal 680187/819715 (executing program) 2021/03/05 07:11:53 fetching corpus: 19549, signal 680547/820102 (executing program) 2021/03/05 07:11:53 fetching corpus: 19599, signal 681201/820474 (executing program) 2021/03/05 07:11:53 fetching corpus: 19649, signal 681734/820881 (executing program) 2021/03/05 07:11:53 fetching corpus: 19699, signal 682425/821267 (executing program) 2021/03/05 07:11:53 fetching corpus: 19749, signal 682745/821602 (executing program) 2021/03/05 07:11:53 fetching corpus: 19799, signal 683125/821955 (executing program) 2021/03/05 07:11:53 fetching corpus: 19849, signal 683599/822333 (executing program) 2021/03/05 07:11:53 fetching corpus: 19899, signal 683901/822669 (executing program) 2021/03/05 07:11:53 fetching corpus: 19949, signal 684106/823016 (executing program) 2021/03/05 07:11:53 fetching corpus: 19999, signal 685690/823426 (executing program) 2021/03/05 07:11:53 fetching corpus: 20049, signal 686257/823764 (executing program) 2021/03/05 07:11:53 fetching corpus: 20099, signal 686820/824105 (executing program) 2021/03/05 07:11:54 fetching corpus: 20149, signal 687109/824454 (executing program) 2021/03/05 07:11:54 fetching corpus: 20199, signal 687762/824796 (executing program) 2021/03/05 07:11:54 fetching corpus: 20249, signal 688385/825139 (executing program) 2021/03/05 07:11:54 fetching corpus: 20299, signal 688830/825482 (executing program) 2021/03/05 07:11:54 fetching corpus: 20349, signal 690669/825838 (executing program) 2021/03/05 07:11:54 fetching corpus: 20399, signal 691205/826170 (executing program) 2021/03/05 07:11:54 fetching corpus: 20449, signal 691499/826516 (executing program) 2021/03/05 07:11:54 fetching corpus: 20499, signal 691833/826832 (executing program) 2021/03/05 07:11:54 fetching corpus: 20549, signal 692248/827152 (executing program) 2021/03/05 07:11:54 fetching corpus: 20599, signal 692687/827478 (executing program) 2021/03/05 07:11:54 fetching corpus: 20649, signal 693068/827725 (executing program) 2021/03/05 07:11:54 fetching corpus: 20699, signal 693711/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 20749, signal 694468/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 20799, signal 694746/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 20849, signal 695032/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 20899, signal 695579/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 20949, signal 696056/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 20999, signal 696599/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 21049, signal 696901/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 21099, signal 697350/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 21149, signal 697723/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 21199, signal 698661/827725 (executing program) 2021/03/05 07:11:55 fetching corpus: 21249, signal 699096/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21299, signal 699763/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21349, signal 700382/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21399, signal 700693/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21449, signal 701096/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21499, signal 701630/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21549, signal 702008/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21599, signal 702657/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21649, signal 703120/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21699, signal 703649/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21749, signal 703870/827725 (executing program) 2021/03/05 07:11:56 fetching corpus: 21799, signal 704035/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 21849, signal 704312/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 21899, signal 704459/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 21949, signal 704862/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 21999, signal 705791/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 22049, signal 706417/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 22099, signal 707290/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 22149, signal 708021/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 22199, signal 708811/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 22249, signal 709135/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 22299, signal 709636/827725 (executing program) 2021/03/05 07:11:57 fetching corpus: 22349, signal 710097/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22399, signal 710780/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22449, signal 711469/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22499, signal 712163/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22549, signal 712893/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22599, signal 713829/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22649, signal 714836/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22699, signal 715447/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22749, signal 715747/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22799, signal 716247/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22849, signal 716931/827725 (executing program) 2021/03/05 07:11:58 fetching corpus: 22899, signal 717391/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 22949, signal 717630/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 22999, signal 718267/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23049, signal 718907/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23099, signal 719162/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23149, signal 719486/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23199, signal 720076/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23249, signal 720621/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23299, signal 720994/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23349, signal 721332/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23399, signal 721631/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23449, signal 722091/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23499, signal 722380/827725 (executing program) 2021/03/05 07:11:59 fetching corpus: 23549, signal 722650/827725 (executing program) 2021/03/05 07:12:00 fetching corpus: 23599, signal 723033/827725 (executing program) 2021/03/05 07:12:00 fetching corpus: 23649, signal 723488/827725 (executing program) 2021/03/05 07:12:00 fetching corpus: 23699, signal 723820/827725 (executing program) 2021/03/05 07:12:00 fetching corpus: 23749, signal 724535/827725 (executing program) 2021/03/05 07:12:00 fetching corpus: 23799, signal 724882/827725 (executing program) 2021/03/05 07:12:00 fetching corpus: 23849, signal 725412/827726 (executing program) 2021/03/05 07:12:00 fetching corpus: 23899, signal 725735/827726 (executing program) 2021/03/05 07:12:00 fetching corpus: 23949, signal 726125/827726 (executing program) 2021/03/05 07:12:00 fetching corpus: 23999, signal 726425/827726 (executing program) 2021/03/05 07:12:00 fetching corpus: 24049, signal 726924/827726 (executing program) 2021/03/05 07:12:00 fetching corpus: 24099, signal 727224/827726 (executing program) 2021/03/05 07:12:00 fetching corpus: 24149, signal 727723/827726 (executing program) 2021/03/05 07:12:01 fetching corpus: 24199, signal 728063/827726 (executing program) 2021/03/05 07:12:01 fetching corpus: 24249, signal 728313/827726 (executing program) 2021/03/05 07:12:01 fetching corpus: 24299, signal 728610/827726 (executing program) 2021/03/05 07:12:01 fetching corpus: 24349, signal 729079/827726 (executing program) 2021/03/05 07:12:01 fetching corpus: 24399, signal 729421/827726 (executing program) 2021/03/05 07:12:01 fetching corpus: 24449, signal 729669/827736 (executing program) 2021/03/05 07:12:01 fetching corpus: 24499, signal 729986/827736 (executing program) 2021/03/05 07:12:01 fetching corpus: 24549, signal 730359/827736 (executing program) 2021/03/05 07:12:01 fetching corpus: 24599, signal 730851/827736 (executing program) 2021/03/05 07:12:01 fetching corpus: 24648, signal 731234/827736 (executing program) 2021/03/05 07:12:01 fetching corpus: 24698, signal 731492/827736 (executing program) 2021/03/05 07:12:01 fetching corpus: 24748, signal 731805/827737 (executing program) 2021/03/05 07:12:01 fetching corpus: 24798, signal 732166/827737 (executing program) 2021/03/05 07:12:01 fetching corpus: 24848, signal 732523/827737 (executing program) 2021/03/05 07:12:01 fetching corpus: 24878, signal 732626/827737 (executing program) 2021/03/05 07:12:01 fetching corpus: 24879, signal 732627/827737 (executing program) 2021/03/05 07:12:01 fetching corpus: 24879, signal 732627/827737 (executing program) 2021/03/05 07:12:03 starting 6 fuzzer processes 07:12:03 executing program 0: bpf$BPF_BTF_LOAD(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 07:12:04 executing program 1: bpf$BPF_BTF_LOAD(0x1a, 0x0, 0x0) 07:12:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0xffffffffffffff4d) 07:12:04 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:04 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f0000002400)) 07:12:05 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000300), 0x4) [ 111.663589][ T8413] IPVS: ftp: loaded support on port[0] = 21 [ 111.810764][ T8415] IPVS: ftp: loaded support on port[0] = 21 [ 111.962945][ T8413] chnl_net:caif_netlink_parms(): no params data found [ 112.082151][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 112.113019][ T8417] IPVS: ftp: loaded support on port[0] = 21 [ 112.171556][ T8413] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.179699][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.188898][ T8413] device bridge_slave_0 entered promiscuous mode [ 112.203285][ T8413] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.211850][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.220130][ T8413] device bridge_slave_1 entered promiscuous mode [ 112.252180][ T8413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.304786][ T8413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.390848][ T8419] IPVS: ftp: loaded support on port[0] = 21 [ 112.446029][ T8413] team0: Port device team_slave_0 added [ 112.459872][ T8413] team0: Port device team_slave_1 added [ 112.470796][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.477979][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.487428][ T8415] device bridge_slave_0 entered promiscuous mode [ 112.538017][ T8413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.546008][ T8413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.582296][ T8413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.595203][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.602427][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.612773][ T8415] device bridge_slave_1 entered promiscuous mode [ 112.652455][ T8421] IPVS: ftp: loaded support on port[0] = 21 [ 112.668277][ T8413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.675724][ T8413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.702209][ T8413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.718896][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.736228][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.835607][ T8434] IPVS: ftp: loaded support on port[0] = 21 [ 112.863803][ T8413] device hsr_slave_0 entered promiscuous mode [ 112.881755][ T8413] device hsr_slave_1 entered promiscuous mode [ 112.899073][ T8415] team0: Port device team_slave_0 added [ 112.956891][ T8415] team0: Port device team_slave_1 added [ 113.061881][ T8417] chnl_net:caif_netlink_parms(): no params data found [ 113.097062][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.104049][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.131426][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.170451][ T8419] chnl_net:caif_netlink_parms(): no params data found [ 113.181803][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.190836][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.217843][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.322514][ T8421] chnl_net:caif_netlink_parms(): no params data found [ 113.396541][ T8415] device hsr_slave_0 entered promiscuous mode [ 113.404602][ T8415] device hsr_slave_1 entered promiscuous mode [ 113.412937][ T8415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.421701][ T8415] Cannot create hsr debugfs directory [ 113.440815][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.448347][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.457575][ T8417] device bridge_slave_0 entered promiscuous mode [ 113.469794][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.477366][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.486674][ T8417] device bridge_slave_1 entered promiscuous mode [ 113.594065][ T8419] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.616285][ T19] Bluetooth: hci0: command 0x0409 tx timeout [ 113.639776][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.660081][ T8419] device bridge_slave_0 entered promiscuous mode [ 113.673216][ T8419] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.681230][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.690798][ T8419] device bridge_slave_1 entered promiscuous mode [ 113.702416][ T8417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.715838][ T8417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.775142][ T19] Bluetooth: hci1: command 0x0409 tx timeout [ 113.779975][ T8419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.793047][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 113.814311][ T8417] team0: Port device team_slave_0 added [ 113.830208][ T8419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.847780][ T8417] team0: Port device team_slave_1 added [ 113.921185][ T8419] team0: Port device team_slave_0 added [ 113.938320][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.948103][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.956420][ T8421] device bridge_slave_0 entered promiscuous mode [ 113.971244][ T8419] team0: Port device team_slave_1 added [ 113.983599][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.990765][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.017982][ T8417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.034066][ T8421] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.042993][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.051937][ T8421] device bridge_slave_1 entered promiscuous mode [ 114.083697][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.090894][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.117255][ T4881] Bluetooth: hci2: command 0x0409 tx timeout [ 114.123475][ T8417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.187643][ T8419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.194629][ T8419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.235422][ T8419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.257216][ T8413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.269794][ T8413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.289135][ T8421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.301030][ T8421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.312050][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.319722][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.328047][ T8434] device bridge_slave_0 entered promiscuous mode [ 114.335476][ T9187] Bluetooth: hci3: command 0x0409 tx timeout [ 114.341900][ T8419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.349000][ T8419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.376246][ T8419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.391030][ T8413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.422544][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.434525][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.444156][ T8434] device bridge_slave_1 entered promiscuous mode [ 114.458415][ T8413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.472542][ T8417] device hsr_slave_0 entered promiscuous mode [ 114.480219][ T8417] device hsr_slave_1 entered promiscuous mode [ 114.488201][ T8417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.495995][ T8417] Cannot create hsr debugfs directory [ 114.511532][ T8421] team0: Port device team_slave_0 added [ 114.537835][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.553422][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.575018][ T9464] Bluetooth: hci4: command 0x0409 tx timeout [ 114.582404][ T8421] team0: Port device team_slave_1 added [ 114.600904][ T8419] device hsr_slave_0 entered promiscuous mode [ 114.608227][ T8419] device hsr_slave_1 entered promiscuous mode [ 114.614679][ T8419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.624077][ T8419] Cannot create hsr debugfs directory [ 114.681880][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.688992][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.715648][ T8421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.728653][ T8415] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.738782][ T8415] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.760735][ T8434] team0: Port device team_slave_0 added [ 114.770863][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.779680][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.808533][ T8421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.820695][ T3184] Bluetooth: hci5: command 0x0409 tx timeout [ 114.838369][ T8415] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.851952][ T8434] team0: Port device team_slave_1 added [ 114.873191][ T8415] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.910777][ T8421] device hsr_slave_0 entered promiscuous mode [ 114.918319][ T8421] device hsr_slave_1 entered promiscuous mode [ 114.926939][ T8421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.934692][ T8421] Cannot create hsr debugfs directory [ 115.027455][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.034435][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.061390][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.083758][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.091992][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.119347][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.201666][ T8434] device hsr_slave_0 entered promiscuous mode [ 115.221864][ T8434] device hsr_slave_1 entered promiscuous mode [ 115.229214][ T8434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.229275][ T8434] Cannot create hsr debugfs directory [ 115.356019][ T8413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.398576][ T8419] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.432636][ T8419] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.445831][ T8419] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.460360][ T8419] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.496518][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.509776][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.527340][ T8413] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.576917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.590319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.599687][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.607089][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.620483][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.629302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.642573][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.649692][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.666483][ T8421] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.692713][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.695248][ T9464] Bluetooth: hci0: command 0x041b tx timeout [ 115.705540][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.717012][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.733489][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.746376][ T8421] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.758504][ T8421] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.771230][ T8421] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.796247][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.807402][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.817011][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.855015][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 115.863614][ T8413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.877918][ T8413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.894218][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.906233][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.913821][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.923734][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.932484][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.941162][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.951174][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.959910][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.971475][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.998827][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.016095][ T8417] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.036970][ T8417] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.065516][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.074258][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.084086][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.091222][ T9633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.100735][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.109907][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.118840][ T9633] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.125967][ T9633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.155116][ T8417] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.173922][ T8417] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.181256][ T9464] Bluetooth: hci2: command 0x041b tx timeout [ 116.192820][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.204328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.213881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.239095][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.246858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.296321][ T8413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.308300][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.317600][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.328383][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.338550][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.349646][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.365255][ T8434] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.383007][ T8434] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.403556][ T8434] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.415113][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 116.433867][ T8419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.447296][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.456664][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.470656][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.480273][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.491530][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.501425][ T8434] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.516692][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.541257][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.555743][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.563418][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.571559][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.579990][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.589062][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.598576][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.614318][ T8419] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.649314][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.659347][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.668506][ T9464] Bluetooth: hci4: command 0x041b tx timeout [ 116.676983][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.684038][ T9689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.693339][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.702111][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.710553][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.717674][ T9689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.726413][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.735263][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.768557][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.781000][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.789749][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.803459][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.812159][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.821737][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.830952][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.839785][ T9464] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.846921][ T9464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.858016][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.876645][ T8413] device veth0_vlan entered promiscuous mode [ 116.887009][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.896352][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.904142][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.913090][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.922238][ T9464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.931844][ T9464] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.939012][ T9464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.949121][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 116.985213][ T8413] device veth1_vlan entered promiscuous mode [ 116.992218][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.003934][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.014278][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.023147][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.032984][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.042137][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.050916][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.062740][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.073034][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.125458][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.126039][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.143509][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.156786][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.166931][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.177345][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.187594][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.233825][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.244229][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.255693][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.264180][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.274521][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.283410][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.302793][ T8413] device veth0_macvtap entered promiscuous mode [ 117.324856][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.342407][ T8417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.353142][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.361454][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.369884][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.378997][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.388255][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.397922][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.409539][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.418567][ T8415] device veth0_vlan entered promiscuous mode [ 117.431927][ T8413] device veth1_macvtap entered promiscuous mode [ 117.456976][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.466262][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.474488][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.494470][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.508683][ T8415] device veth1_vlan entered promiscuous mode [ 117.532141][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.552512][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.561586][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.572904][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.580943][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.589363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.597606][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.610577][ T8413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.628485][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.639244][ T8417] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.651431][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.660920][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.669999][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.677145][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.685459][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.694136][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.731306][ T8413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.746049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.753971][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.773674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.789820][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.796956][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.805393][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.813953][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.822898][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.831701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.840459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.849298][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.858762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.885527][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.904949][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.912036][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.940329][ T8415] device veth0_macvtap entered promiscuous mode [ 117.946868][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 117.956274][ T4881] Bluetooth: hci1: command 0x040f tx timeout [ 117.967062][ T8413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.984840][ T8413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.993565][ T8413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.006682][ T8413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.030980][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.040254][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.051042][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.061386][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.075364][ T8415] device veth1_macvtap entered promiscuous mode [ 118.114823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.123350][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.132151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.145091][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.153359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.162681][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.171147][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.178299][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.187320][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.195928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.204102][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 118.213156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 118.222015][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.231152][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.244721][ T3184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.252161][ T3184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.268340][ T36] Bluetooth: hci2: command 0x040f tx timeout [ 118.279104][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.298599][ T8419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.311564][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.322322][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.332812][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.349638][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.360778][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.373526][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.389639][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.400578][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.412455][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.448106][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.465620][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.474165][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.484925][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.493461][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.503786][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.513127][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.522246][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.531531][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.541133][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.549927][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.558706][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.567462][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.577680][ T9689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.586837][ T9187] Bluetooth: hci3: command 0x040f tx timeout [ 118.620824][ T8415] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.631220][ T8415] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.642191][ T8415] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.651693][ T8415] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.666299][ T8417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.707229][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.726246][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.739458][ T8421] device veth0_vlan entered promiscuous mode [ 118.746741][ T2979] Bluetooth: hci4: command 0x040f tx timeout [ 118.774782][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.783272][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.801395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.811576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.838449][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.892255][ T8421] device veth1_vlan entered promiscuous mode [ 118.911639][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.920991][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.945639][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.975870][ T5] Bluetooth: hci5: command 0x040f tx timeout [ 118.998619][ T8419] device veth0_vlan entered promiscuous mode [ 119.010020][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.022354][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.030924][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.048730][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.065644][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.095814][ T443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.100500][ T8419] device veth1_vlan entered promiscuous mode [ 119.103853][ T443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.142457][ T8417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.258926][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.287831][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.290327][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.304268][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.324133][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.333135][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.342325][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.379605][ T8421] device veth0_macvtap entered promiscuous mode [ 119.389731][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.399743][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.409645][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.418676][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.429699][ T443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.439035][ T400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.450936][ T8421] device veth1_macvtap entered promiscuous mode [ 119.458801][ T400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.464529][ T443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.478115][ T8419] device veth0_macvtap entered promiscuous mode [ 119.488751][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.498838][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.507502][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.516394][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.525646][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.540162][ T8434] device veth0_vlan entered promiscuous mode 07:12:13 executing program 1: perf_event_open(&(0x7f0000001280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x602}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 119.611865][ T8419] device veth1_macvtap entered promiscuous mode [ 119.636574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 07:12:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)}) [ 119.657954][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.677610][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.687768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.708643][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 07:12:13 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1f, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 119.740071][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.780571][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.808534][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 119.822443][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.843521][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.866807][ T8434] device veth1_vlan entered promiscuous mode 07:12:13 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') [ 119.888722][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.899323][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 07:12:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="b9ff1a649cdd8bf4a4469710538ad7b5e388baf9", 0x14, 0x2}, {0x0, 0x0, 0xc0e5}], 0x0, &(0x7f0000000280)={[{@fat=@nocase='nocase'}]}) [ 119.932822][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.961620][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.991504][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.003379][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.026727][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.050819][ T8417] device veth0_vlan entered promiscuous mode [ 120.067165][ T4881] Bluetooth: hci1: command 0x0419 tx timeout [ 120.067775][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 120.092559][ T4881] Bluetooth: hci0: command 0x0419 tx timeout [ 120.095159][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.113990][ T8421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 120.144500][ T8421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.162579][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_1 07:12:13 executing program 0: perf_event_open(&(0x7f0000001280)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 120.188020][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 120.200206][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.215069][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.222959][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.232829][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.239035][ T9794] loop1: detected capacity change from 0 to 192 [ 120.254205][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.261607][ T9794] FAT-fs (loop1): bogus logical sector size 38726 [ 120.271294][ T9794] FAT-fs (loop1): Can't find a valid FAT filesystem 07:12:13 executing program 1: perf_event_open(&(0x7f0000001280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000011c0)) [ 120.312168][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.323186][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.333709][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.335114][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 120.344118][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 120.360035][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.372400][ T8419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.389117][ T8421] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.399139][ T8421] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.408970][ T8421] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.428666][ T8421] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.439877][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 07:12:14 executing program 1: perf_event_open(&(0x7f0000001280)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 120.468544][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.491905][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 120.532528][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.582726][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 120.624435][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.647506][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 120.664626][ T3184] Bluetooth: hci3: command 0x0419 tx timeout [ 120.668608][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.684951][ T8419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.714316][ T8417] device veth1_vlan entered promiscuous mode [ 120.723257][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.735788][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.746335][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.792875][ T8419] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.803621][ T8419] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.816627][ T4881] Bluetooth: hci4: command 0x0419 tx timeout [ 120.819478][ T8419] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.837060][ T8419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.861009][ T8434] device veth0_macvtap entered promiscuous mode [ 120.879745][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.889485][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.930059][ T8434] device veth1_macvtap entered promiscuous mode [ 120.961420][ T3184] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.970341][ T3184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.029369][ T8417] device veth0_macvtap entered promiscuous mode [ 121.052351][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.061251][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.078885][ T2979] Bluetooth: hci5: command 0x0419 tx timeout [ 121.090176][ T8417] device veth1_macvtap entered promiscuous mode [ 121.117000][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.131924][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.154804][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.172891][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.183455][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.197161][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.207498][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.219696][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.229631][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.240141][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.252013][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.263802][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.275152][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.286537][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.300320][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.310797][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.324048][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.334088][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.344854][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.356273][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.370433][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.380315][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.389419][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.398422][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.407727][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.427755][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.451300][ T8434] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.465900][ T8434] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.475395][ T8434] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.484113][ T8434] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.500187][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.520325][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.531897][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.547029][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.557605][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.568644][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.579038][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.589670][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.599574][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 121.610143][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.622895][ T8417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.632375][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.634132][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.644457][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.658442][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.668342][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.678071][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.721804][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.746098][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.767247][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.779087][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.789621][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.800559][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.810697][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.821812][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.832339][ T8417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 121.846013][ T8417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.857762][ T8417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.897693][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.907655][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.924046][ T443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.934106][ T8417] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.947753][ T443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.953695][ T8417] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.964377][ T8417] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.973091][ T8417] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.996445][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.007340][ T9633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.024838][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.107998][ T9187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.130029][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.144728][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.168151][ T3184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.271513][ T443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.291107][ T9863] can: request_module (can-proto-0) failed. [ 122.302703][ T443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.350302][ T9863] can: request_module (can-proto-0) failed. [ 122.359119][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.376095][ T443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.409677][ T443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.456347][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.483191][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.514767][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.560470][ T9699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 07:12:16 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee00, 0x0, 0xffffffffffffffff}}) 07:12:16 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80287010, &(0x7f0000000040)) 07:12:16 executing program 1: perf_event_open(&(0x7f0000001280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:12:16 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="b9ff1a649cdd8bf4a4469710538ad7b5e388baf9", 0x14, 0x2}, {0x0, 0x0, 0xc0e5}], 0xc000, &(0x7f0000000280)) 07:12:16 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000300), 0x4) 07:12:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x2, 0x0) [ 122.742218][ T9900] loop4: detected capacity change from 0 to 192 07:12:16 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 07:12:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240001000f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000140)) [ 122.843638][ T9900] loop4: detected capacity change from 0 to 192 07:12:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000680)=""/165, 0xa5}], 0x5, 0x2, 0x2) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) unshare(0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setreuid(0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', 0x0, 0x0, 0x2, &(0x7f0000001640)=[{&(0x7f0000001380), 0x0, 0x9}, {0x0}], 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="bc1a0f3863bf15cd6186b30df1c08c4d1783d49749beb2d804951a16b1514ae142aadb62b5f2b775dd5e446a17"]) 07:12:16 executing program 2: perf_event_open(&(0x7f0000001280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:12:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="b9ff1a649cdd8bf4a4469710538ad7b5e388baf9", 0x14, 0x2}, {0x0, 0x0, 0xc0e5}], 0xc000, &(0x7f0000000280)) 07:12:16 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) [ 123.019392][ T9923] loop0: detected capacity change from 0 to 6 07:12:16 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x4000000000, 0x12) [ 123.070680][ T9923] FAT-fs (loop0): bogus number of FAT sectors 07:12:16 executing program 5: perf_event_open(&(0x7f0000001280)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 123.123048][ T9923] FAT-fs (loop0): Can't find a valid FAT filesystem 07:12:16 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:16 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000020002551071c0165ff3b00020200000000100f0007e1000c080018001605bf5c", 0x24) 07:12:16 executing program 3: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x4000000000, 0x12) [ 123.317756][ T9939] loop4: detected capacity change from 0 to 192 07:12:16 executing program 0: perf_event_open(&(0x7f0000001280)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:12:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="b9ff1a649cdd8bf4a4469710538ad7b5e388baf9", 0x14, 0x2}, {0x0, 0x0, 0xc0e5}], 0xc000, &(0x7f0000000280)) [ 123.650429][ T9972] loop4: detected capacity change from 0 to 192 07:12:17 executing program 1: r0 = getpgrp(0x0) r1 = getpgrp(0x0) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 07:12:17 executing program 5: perf_event_open(&(0x7f0000001280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:12:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000020002551071c0165ff3b00020200000000100f0007e1000c080018001605bf5c", 0x24) 07:12:17 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:12:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="b9ff1a649cdd8bf4a4469710538ad7b5e388baf9", 0x14, 0x2}, {0x0, 0x0, 0xc0e5}], 0xc000, &(0x7f0000000280)) 07:12:17 executing program 0: perf_event_open(&(0x7f0000001280)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() [ 124.067375][ T9995] loop4: detected capacity change from 0 to 192 07:12:17 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 07:12:17 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:17 executing program 5: r0 = fork() perf_event_open(&(0x7f0000001280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xd) 07:12:17 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000020002551071c0165ff3b00020200000000100f0007e1000c080018001605bf5c", 0x24) 07:12:17 executing program 4: perf_event_open(&(0x7f0000001280)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:12:17 executing program 1: perf_event_open(&(0x7f0000001280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:12:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0/file0\x00') renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 07:12:17 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:17 executing program 4: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/162) 07:12:18 executing program 2: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="2400000020002551071c0165ff3b00020200000000100f0007e1000c080018001605bf5c", 0x24) 07:12:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000680)=""/165, 0xa5}], 0x5, 0x2, 0x2) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) unshare(0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', 0x0, 0x0, 0x2, &(0x7f0000001640)=[{&(0x7f0000001380), 0x0, 0x9}, {0x0}], 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="bc1a0f3863bf15cd6186b30df1c08c4d1783d49749beb2d804951a16b1514ae142aadb62b5f2b775dd5e446a179a"]) 07:12:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x181a00) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 07:12:18 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x2) 07:12:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0/file0\x00') renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 07:12:18 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:18 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, "53a34cea2ccc7551559420797b1601e25089edc6178650bd763ec6"}}, 0x133) write$UHID_CREATE2(r0, &(0x7f0000000100)={0x8, {'syz0\x00', 'syz0\x00', 'syz1\x00'}}, 0x118) 07:12:18 executing program 1: socketpair(0x2, 0xa, 0x2, &(0x7f0000002200)) 07:12:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0/file0\x00') renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 07:12:18 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$FUSE_STATFS(r0, 0x0, 0x0) 07:12:18 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x4000000000, 0x12) [ 124.829457][ T9700] hid (null): unknown global tag 0xc [ 124.831479][T10054] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 124.856804][ T9700] hid-generic 0000:0000:0000.0001: unknown main item tag 0x5 07:12:18 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/mnt\x00') 07:12:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000006739f5"], 0x30}}, 0x0) [ 124.898618][ T9700] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 124.924198][ T9700] hid-generic 0000:0000:0000.0001: unknown main item tag 0x5 [ 124.931638][ T9700] hid-generic 0000:0000:0000.0001: unknown global tag 0xc [ 124.960484][ T9700] hid-generic 0000:0000:0000.0001: item 0 2 1 12 parsing failed [ 124.970394][ T9700] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 07:12:18 executing program 5: r0 = epoll_create1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 07:12:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}) 07:12:18 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0x4000000000, 0x12) 07:12:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') read$eventfd(r0, 0x0, 0x0) 07:12:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='./file0/file0\x00') renameat2(r2, &(0x7f0000000400)='./file0/file0\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 07:12:18 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000003600)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}], 0x1, 0x0) 07:12:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) [ 125.524351][T10087] loop2: detected capacity change from 0 to 6 07:12:19 executing program 2: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x20a903) 07:12:19 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) [ 125.564869][T10087] FAT-fs (loop2): bogus number of FAT sectors [ 125.571094][T10087] FAT-fs (loop2): Can't find a valid FAT filesystem 07:12:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000015c0)=""/4096) 07:12:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 07:12:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xb, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x0) 07:12:19 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5, 0x210100) 07:12:19 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) 07:12:19 executing program 1: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000002c0)=""/1) 07:12:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:19 executing program 2: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x10000, 0x0) syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) 07:12:19 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x335040) 07:12:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:19 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) 07:12:19 executing program 4: syz_open_dev$evdev(&(0x7f0000002b40)='/dev/input/event#\x00', 0x0, 0x80081) 07:12:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 07:12:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') read$FUSE(r0, 0x0, 0x0) 07:12:19 executing program 0: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x1050c2) 07:12:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) 07:12:19 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, 0x0) 07:12:19 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x12) 07:12:19 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000400)='/dev/hidraw#\x00', 0x0, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, 0x0) 07:12:20 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x66, 0x30, 0xb9, 0x40, 0x4e6, 0x3, 0x7d41, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0xa1, 0xa3}}]}}]}}, 0x0) 07:12:20 executing program 5: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:20 executing program 4: syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) 07:12:20 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x103601) 07:12:20 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x12) 07:12:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000002c0)=""/1) 07:12:20 executing program 5: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000029c0)={0x0, 0x1, &(0x7f0000002940)='\r'}) 07:12:20 executing program 4: ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) syz_open_dev$evdev(&(0x7f0000002800)='/dev/input/event#\x00', 0x89, 0x8840) 07:12:20 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x12) 07:12:20 executing program 5: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) [ 126.894271][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.264209][ T7] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=7d.41 [ 127.273726][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.329604][ T7] usb 1-1: config 0 descriptor?? [ 127.406545][ T7] ums-sddr09 1-1:0.0: USB Mass Storage device detected [ 127.633998][ T7] usb 1-1: USB disconnect, device number 2 [ 128.403921][ T3184] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.783921][ T3184] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=7d.41 [ 128.793552][ T3184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.804922][ T3184] usb 1-1: config 0 descriptor?? [ 128.845680][ T3184] ums-sddr09 1-1:0.0: USB Mass Storage device detected 07:12:22 executing program 0: syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x181340) 07:12:22 executing program 4: syz_open_dev$hiddev(&(0x7f00000013c0)='/dev/usb/hiddev#\x00', 0x0, 0x440002) 07:12:22 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:22 executing program 2: syz_open_dev$evdev(&(0x7f0000002a00)='/dev/input/event#\x00', 0x0, 0x4200) 07:12:22 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x401, 0x0) 07:12:22 executing program 3: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) [ 129.049063][ T9699] usb 1-1: USB disconnect, device number 3 07:12:22 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:22 executing program 1: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) 07:12:22 executing program 3: syz_open_dev$evdev(&(0x7f0000001280)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000002a00)='/dev/input/event#\x00', 0x0, 0x4200) 07:12:22 executing program 4: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) 07:12:22 executing program 2: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x0) 07:12:22 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:22 executing program 0: syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x103082) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000002c0)=""/1) 07:12:22 executing program 4: syz_open_dev$evdev(&(0x7f0000002800)='/dev/input/event#\x00', 0x0, 0x8840) 07:12:22 executing program 2: syz_open_dev$hiddev(&(0x7f0000000600)='/dev/usb/hiddev#\x00', 0x0, 0x668081) 07:12:23 executing program 1: syz_open_dev$hidraw(&(0x7f0000001640)='/dev/hidraw#\x00', 0x0, 0x705100) 07:12:23 executing program 3: write$hidraw(0xffffffffffffffff, 0x0, 0x0) 07:12:23 executing program 4: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x46400) 07:12:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:23 executing program 0: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x0, 0x80100) 07:12:23 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000240)=""/150) 07:12:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000240)=""/150) 07:12:23 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000400)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) 07:12:23 executing program 4: syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x0, 0x1810c1) 07:12:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 07:12:23 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x722a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) 07:12:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000029c0)={0x0, 0x0, 0x0}) 07:12:23 executing program 4: syz_open_dev$char_usb(0xc, 0xb4, 0x1) 07:12:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:23 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendfile(r1, r0, 0x0, 0x20) 07:12:23 executing program 3: syz_open_dev$evdev(&(0x7f00000023c0)='/dev/input/event#\x00', 0x0, 0x20000) 07:12:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x8, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) recvfrom(r2, 0x0, 0x22, 0x0, 0x0, 0x0) 07:12:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2}, 0xc) 07:12:23 executing program 5: syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000040)="09b041f5497f2a0d6126fbd256b96c79d4dc28d4709107d496a84b82ba226de28f41ab411142a83012b05bf9506adbf863ad6f8f1498d150798a61466f67110d5d867095acf163f8e728d1d1da716819749f9ad9c8b443d7ca74b3df1cddee1dc4ab5d20613affceb276aa204eecf8fd91baa673922df6110100841d82ca2cbf867d169c58046e035ffcebd980ec0a0000", 0x91, 0x61a, 0x0, 0x2) r2 = dup2(r0, r1) recvfrom(r2, 0x0, 0xc6, 0x0, 0x0, 0x0) 07:12:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/197) [ 130.263360][ T9700] usb 3-1: new high-speed USB device number 2 using dummy_hcd 07:12:24 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)) [ 130.513794][ T9700] usb 3-1: Using ep0 maxpacket: 16 [ 130.634087][ T9700] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 130.814257][ T9700] usb 3-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.40 [ 130.824296][ T9700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.832568][ T9700] usb 3-1: Product: syz [ 130.840580][ T9700] usb 3-1: Manufacturer: syz [ 130.846450][ T9700] usb 3-1: SerialNumber: syz [ 131.126214][ T9700] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 131.155904][ T9700] usb 3-1: USB disconnect, device number 2 [ 131.853630][ T3184] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.093785][ T3184] usb 3-1: Using ep0 maxpacket: 16 [ 132.214302][ T3184] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 132.385386][ T3184] usb 3-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.40 [ 132.394634][ T3184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.402613][ T3184] usb 3-1: Product: syz [ 132.407479][ T3184] usb 3-1: Manufacturer: syz [ 132.412218][ T3184] usb 3-1: SerialNumber: syz [ 132.420466][ T3276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.426835][ T3276] ieee802154 phy1 wpan1: encryption failed: -22 07:12:26 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=ANY=[], 0xffffffffffffffb8}, 0x0) 07:12:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)="09b041f5497f2a0d6126fbd256b96c79d4dc28d4709107d496a84b82ba0f90e28f41ab411142a83012b05bf9506a895d4e2a7b28ce41d150798a61466f67110d5d867095a8f163f8e728d1d1c8b443d7ca74b3df1cddee1dc4ab5d20613affceb276aa204eecf8fd91baa673922df6110153841d82ca2cbf867d169c58046e035ffcebd9801865f817fc10b008f44d350f", 0x91, 0x8, 0x0, 0x0) 07:12:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0xa) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 07:12:26 executing program 4: r0 = socket(0x18, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=ANY=[], 0x18}, 0x0) 07:12:26 executing program 5: syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000100)="09b041f5497f2a0d6126fbd256b96c79d4dc28d4709107d496a84b82ba0f90e28f41ab411142a83012b05bf9506adbf875ad6f8f1498d150798a61466f67110d5d867095acf163f8e728d1d1da716819749f9ad9c8b443d7ca74b3df1cddee1dc4ab5d20613affceb276aa204eecf8fd91baa673922df6110113841d82ca2cbf867d169c58046e035ffcebd9801865f817", 0x91, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 132.716477][ T3184] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 132.765675][ T3184] usb 3-1: USB disconnect, device number 3 07:12:26 executing program 5: syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f00000000c0)=[0x10001]) 07:12:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0101ae2f"], 0xa) 07:12:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000100)='\t', 0x1, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 07:12:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000100)="09b041f5497f2a0d6126fbd256b96c79d4dc28d4709107d496a84b82ba0f90e28f41ab411142a83012b05bf9506adbf875ad6f8f1498d150798a61466f67110d5d867095acf163f8e728d1d1da716819749f9ad9c8b443d7ca74b3df1cddee1dc4ab5d20613affceb276aa204eecf8fd91baa673922df6110113841d82ca2cbf867d169c58046e035ffcebd980", 0x8d, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) recvfrom(r2, 0x0, 0x8c, 0x2, 0x0, 0x0) 07:12:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0101"], 0xa) 07:12:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01013a14f9f246b9dd3a"], 0xa) 07:12:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 07:12:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01012e2f"], 0xa) 07:12:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000040)="09b041f5497f2a0d6126fbd256b96c79d4dc28d4709107d496a84b82ba226de28f41ab411142a83012b05bf9506adbf863ad6f8f1498d150798a61466f67110d5d867095acf163f8e728d1d1da716819749f9ad9c8b443d7ca74b3df1cddee1dc4ab5d20613affceb276aa204eecf8fd91baa673922df6110100841d82ca2cbf867d169c58046e035ffcebd980ec0a0000", 0x91, 0x61a, 0x0, 0x2) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/160, 0xa0}], 0x1}, 0x0) 07:12:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01013a"], 0xa) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 07:12:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2}, 0xc) 07:12:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000100)="09b041f5497f2a0d6126fbd256b96c79d4dc28d4709107d496a84b82ba0f90e28f41ab411142a83012b05bf9506adbf875ad6f8f1498d150798a61466f67110d5d867095acf163f8e728d1d1da716819749f9ad9c8b443d7ca74b3df1cddee1dc4ab5d20613affceb276aa204eecf8fd91baa673922df6110113841d82ca2cbf867d169c58046e035ffcebd9801865f817", 0x91, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) recvfrom(r2, 0x0, 0xc6, 0x0, 0x0, 0x0) 07:12:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 07:12:26 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0101f535"], 0xa) 07:12:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x20c, 0x0, 0xa) recvfrom(r0, 0x0, 0x7d55, 0x842, 0x0, 0x0) 07:12:26 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000140)=@abs, 0x8, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3000000000000000ffff00000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYBLOB="20000001"], 0x70}, 0x0) 07:12:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01013a"], 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 07:12:26 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000027c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000002700)=[@rights, @cred], 0x30}, 0x0) 07:12:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 07:12:27 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000002380)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000002340)=ANY=[], 0xffffffffffffffb8}, 0x0) 07:12:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000500)="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", 0x171, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) recvfrom(r2, 0x0, 0x22, 0x0, 0x0, 0x0) 07:12:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/160, 0xa0}], 0x3e}, 0x0) 07:12:27 executing program 2: r0 = socket(0x18, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) dup2(r1, r0) 07:12:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 07:12:27 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001540)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)) 07:12:27 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:27 executing program 2: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:12:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00', r0) 07:12:27 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:12:27 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:27 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 133.844094][ C1] hrtimer: interrupt took 45885 ns [ 133.921499][T10419] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 07:12:27 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) [ 134.023472][T10419] device team_slave_0 entered promiscuous mode [ 134.030067][T10419] device team_slave_1 entered promiscuous mode 07:12:27 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 134.099323][T10419] device macsec1 entered promiscuous mode [ 134.131586][T10419] device team0 entered promiscuous mode [ 134.174473][T10419] device team0 left promiscuous mode [ 134.213321][T10419] device team_slave_0 left promiscuous mode [ 134.219371][T10419] device team_slave_1 left promiscuous mode 07:12:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:28 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:28 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 135.287279][T10424] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 135.346569][T10424] device team_slave_0 entered promiscuous mode [ 135.352921][T10424] device team_slave_1 entered promiscuous mode [ 135.410347][T10424] device macsec1 entered promiscuous mode [ 135.424314][T10424] device team0 entered promiscuous mode [ 135.458070][T10424] device team0 left promiscuous mode [ 135.471434][T10424] device team_slave_0 left promiscuous mode [ 135.477612][T10424] device team_slave_1 left promiscuous mode 07:12:29 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:29 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 136.374629][T10446] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 136.436823][T10446] device dummy0 entered promiscuous mode [ 136.462614][T10446] device macsec1 entered promiscuous mode 07:12:30 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:30 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 137.017634][T10487] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 137.128724][T10424] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 137.177115][T10424] device team_slave_0 entered promiscuous mode [ 137.183443][T10424] device team_slave_1 entered promiscuous mode [ 137.247657][T10424] device macsec1 entered promiscuous mode [ 137.273492][T10424] device team0 entered promiscuous mode [ 137.311119][T10424] device team0 left promiscuous mode [ 137.333113][T10424] device team_slave_0 left promiscuous mode [ 137.339223][T10424] device team_slave_1 left promiscuous mode 07:12:31 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 138.080492][T10507] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 138.092803][T10507] device team_slave_0 entered promiscuous mode [ 138.099126][T10507] device team_slave_1 entered promiscuous mode [ 138.109646][T10507] device macsec1 entered promiscuous mode [ 138.117010][T10507] device team0 entered promiscuous mode [ 138.125729][T10507] device team0 left promiscuous mode [ 138.131407][T10507] device team_slave_0 left promiscuous mode [ 138.137452][T10507] device team_slave_1 left promiscuous mode 07:12:36 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:36 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:36 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:36 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:12:36 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:12:36 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 142.904413][T10523] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 142.945692][T10525] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 142.972012][T10525] device team_slave_0 entered promiscuous mode [ 142.978372][T10525] device team_slave_1 entered promiscuous mode 07:12:36 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 142.997023][T10525] device macsec1 entered promiscuous mode [ 143.009117][T10525] device team0 entered promiscuous mode [ 143.030941][T10525] device team0 left promiscuous mode [ 143.048003][T10525] device team_slave_0 left promiscuous mode [ 143.054176][T10525] device team_slave_1 left promiscuous mode 07:12:36 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:36 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:37 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:45 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:45 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:45 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:12:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 151.781137][T10580] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 151.806240][T10580] device team_slave_0 entered promiscuous mode [ 151.812610][T10580] device team_slave_1 entered promiscuous mode [ 151.823652][T10580] device macsec1 entered promiscuous mode [ 151.840389][T10580] device team0 entered promiscuous mode [ 151.861126][T10580] device team0 left promiscuous mode [ 151.870636][T10580] device team_slave_0 left promiscuous mode [ 151.876740][T10580] device team_slave_1 left promiscuous mode 07:12:45 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:12:45 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:45 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:12:46 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:12:53 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 07:12:53 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:53 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:53 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:12:53 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:12:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:12:54 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 07:12:54 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) [ 160.629675][T10620] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:12:54 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 07:12:54 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:12:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:12:54 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:12:54 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 161.458266][T10644] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:13:02 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:02 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:02 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:02 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) signalfd(r0, &(0x7f0000001480), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:02 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:02 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 169.477709][T10663] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:13:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:13 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:13 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:13 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 179.916405][T10704] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 179.985878][T10704] device bond_slave_0 entered promiscuous mode [ 179.992436][T10704] device bond_slave_1 entered promiscuous mode [ 180.031397][T10704] device macsec1 entered promiscuous mode [ 180.054407][T10704] device bond0 entered promiscuous mode [ 180.101070][T10704] device bond0 left promiscuous mode [ 180.136209][T10704] device bond_slave_0 left promiscuous mode [ 180.142258][T10704] device bond_slave_1 left promiscuous mode 07:13:13 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:13 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:14 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:24 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:24 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:24 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:24 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 190.776641][T10737] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 190.819589][T10737] device bond_slave_0 entered promiscuous mode [ 190.825961][T10737] device bond_slave_1 entered promiscuous mode 07:13:24 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 190.895118][T10737] device macsec1 entered promiscuous mode [ 190.923557][T10737] device bond0 entered promiscuous mode [ 190.983999][T10737] device bond0 left promiscuous mode [ 190.989995][T10737] device bond_slave_0 left promiscuous mode [ 190.996154][T10737] device bond_slave_1 left promiscuous mode 07:13:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 07:13:24 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:25 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 193.852475][ T3276] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.858824][ T3276] ieee802154 phy1 wpan1: encryption failed: -22 07:13:35 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:35 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:35 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 07:13:35 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:35 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 201.689741][T10787] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 201.747387][T10787] device bond_slave_0 entered promiscuous mode [ 201.753750][T10787] device bond_slave_1 entered promiscuous mode [ 201.804001][T10787] device macsec1 entered promiscuous mode [ 201.829376][T10787] device bond0 entered promiscuous mode 07:13:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) [ 201.864486][T10787] device bond0 left promiscuous mode [ 201.884209][T10787] device bond_slave_0 left promiscuous mode [ 201.890266][T10787] device bond_slave_1 left promiscuous mode 07:13:35 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) 07:13:35 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 07:13:35 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:36 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:36 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) 07:13:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:36 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:36 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) 07:13:36 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 07:13:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:36 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:37 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 203.637998][T10832] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:13:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:13:37 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:37 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:37 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 204.386072][T10852] loop2: detected capacity change from 0 to 1051 [ 204.453337][T10852] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:13:38 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) [ 204.538848][T10852] EXT4-fs (loop2): orphan cleanup on readonly fs [ 204.546823][T10865] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 204.569025][T10852] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 33554432 [ 204.599887][T10852] EXT4-fs (loop2): Remounting filesystem read-only 07:13:38 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 204.668747][T10852] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 07:13:38 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:13:38 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:13:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:38 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) [ 204.861408][T10852] loop2: detected capacity change from 0 to 1051 [ 204.881364][T10852] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 204.937653][T10852] EXT4-fs (loop2): orphan cleanup on readonly fs [ 204.965894][T10852] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 33554432 [ 205.047375][T10852] EXT4-fs (loop2): Remounting filesystem read-only 07:13:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) [ 205.097356][T10852] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 07:13:38 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socket$netlink(0x10, 0x3, 0x13) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:38 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:13:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:13:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 205.555317][T10897] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 205.568776][T10898] loop2: detected capacity change from 0 to 1051 [ 205.640171][T10898] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 205.674185][T10898] EXT4-fs (loop2): orphan cleanup on readonly fs [ 205.680691][T10898] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 33554432 [ 205.693758][T10898] EXT4-fs (loop2): Remounting filesystem read-only [ 205.700400][T10898] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 07:13:39 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 205.956346][T10920] loop2: detected capacity change from 0 to 1051 [ 206.016018][T10920] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 206.081272][T10920] EXT4-fs (loop2): orphan cleanup on readonly fs [ 206.107027][T10920] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 33554432 [ 206.163298][T10920] EXT4-fs (loop2): Remounting filesystem read-only 07:13:39 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:39 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) [ 206.210658][T10920] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 07:13:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) [ 206.463369][T10937] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:13:40 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 206.549218][T10937] device team_slave_0 entered promiscuous mode [ 206.555597][T10937] device team_slave_1 entered promiscuous mode [ 206.623203][T10937] device macsec1 entered promiscuous mode [ 206.647176][T10937] device team0 entered promiscuous mode [ 206.685937][T10937] device team0 left promiscuous mode [ 206.704741][T10937] device team_slave_0 left promiscuous mode [ 206.710913][T10937] device team_slave_1 left promiscuous mode 07:13:40 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:40 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) [ 206.906164][T10951] loop2: detected capacity change from 0 to 1051 07:13:40 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) [ 206.955933][T10951] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:13:40 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 207.108835][T10951] EXT4-fs (loop2): orphan cleanup on readonly fs [ 207.152748][T10951] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 33554432 [ 207.254348][T10951] EXT4-fs (loop2): Remounting filesystem read-only [ 207.277081][T10951] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 07:13:41 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) 07:13:41 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:41 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) 07:13:41 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:41 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 208.440658][T10984] loop2: detected capacity change from 0 to 1051 07:13:42 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 208.529590][T10984] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 208.563550][T10984] EXT4-fs (loop2): orphan cleanup on readonly fs [ 208.569932][T10984] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 33554432 [ 208.582629][T10984] EXT4-fs (loop2): Remounting filesystem read-only [ 208.589378][T10984] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 07:13:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) 07:13:42 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080), 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) [ 208.947138][T11001] loop2: detected capacity change from 0 to 1051 07:13:42 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) [ 209.021399][T11001] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:13:42 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 209.149670][T11001] EXT4-fs (loop2): orphan cleanup on readonly fs 07:13:42 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:42 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 209.202120][T11001] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 33554432 07:13:42 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x5b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0xb20c, &(0x7f0000000280)="b9ff0300600d698c389e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 209.261567][T11001] EXT4-fs (loop2): Remounting filesystem read-only [ 209.268124][T11001] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 07:13:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) 07:13:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 209.614023][T11026] loop2: detected capacity change from 0 to 1051 07:13:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 209.659522][T11026] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 209.713235][T11026] EXT4-fs (loop2): orphan cleanup on readonly fs [ 209.719778][T11026] EXT4-fs error (device loop2): ext4_orphan_get:1412: comm syz-executor.2: bad orphan inode 33554432 [ 209.732386][T11026] EXT4-fs (loop2): Remounting filesystem read-only [ 209.739076][T11026] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 07:13:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:43 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 210.170449][T11040] loop2: detected capacity change from 0 to 1051 07:13:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:43 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 210.481636][T11051] loop2: detected capacity change from 0 to 1051 07:13:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:44 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x111, 0x4b4, 0x150, 0xd4feffff, 0x298, 0x20a, 0x278, 0x298, 0x278, 0x3, 0x0, {[{{@ipv6={@empty={[0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0xae, 0x4]}, @empty={[0x0, 0x0, 0x0, 0x6c, 0x0, 0x54, 0x0, 0x68]}, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x11}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}, @common=@unspec=@connmark={{0x30, 'connmark\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00'}}, {{@ipv6={@mcast1, @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) listen(r5, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, &(0x7f00000000c0), &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0xa, r1, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x94ae572, 0xfffff001}, 0x10, 0x0, r1}, 0x78) write$binfmt_misc(r6, &(0x7f0000001580)={'syz0', "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"}, 0x112) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @multicast1}, &(0x7f0000001440)=0xc) close(r4) sendto$inet6(r3, &(0x7f0000000280)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x0, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000844}, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/187, 0xbb, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000440)="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", 0x1000) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 07:13:44 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 210.766442][T11062] loop2: detected capacity change from 0 to 1051 07:13:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 210.972735][T11071] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 210.985023][T11072] Cannot find add_set index 0 as target [ 211.046697][T11071] device bond_slave_0 entered promiscuous mode [ 211.053023][T11071] device bond_slave_1 entered promiscuous mode 07:13:44 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 211.095225][T11071] device macsec1 entered promiscuous mode [ 211.109331][T11071] device bond0 entered promiscuous mode [ 211.122454][T11079] loop2: detected capacity change from 0 to 1051 07:13:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 211.158776][T11071] device bond0 left promiscuous mode [ 211.174269][T11071] device bond_slave_0 left promiscuous mode [ 211.180305][T11071] device bond_slave_1 left promiscuous mode 07:13:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) [ 211.340049][T11088] loop2: detected capacity change from 0 to 1051 07:13:45 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 211.617490][T11100] loop2: detected capacity change from 0 to 1051 07:13:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:45 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) [ 211.788895][T11106] Cannot find add_set index 0 as target [ 211.881069][T11108] loop2: detected capacity change from 0 to 21 [ 211.920316][T11108] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (10 blocks) 07:13:45 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x0, 0x160, 0x160, 0x160, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc7}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 07:13:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 212.210055][T11122] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:13:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x0, 0x160, 0x160, 0x160, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc7}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 212.251104][T11122] device bond_slave_0 entered promiscuous mode [ 212.257351][T11122] device bond_slave_1 entered promiscuous mode [ 212.279571][T11128] loop2: detected capacity change from 0 to 21 07:13:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x0, 0x160, 0x160, 0x160, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc7}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 212.308499][T11122] device macsec1 entered promiscuous mode [ 212.322607][T11122] device bond0 entered promiscuous mode [ 212.328734][T11128] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (10 blocks) [ 212.351603][T11122] device bond0 left promiscuous mode [ 212.357341][T11122] device bond_slave_0 left promiscuous mode [ 212.363394][T11122] device bond_slave_1 left promiscuous mode 07:13:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x10, 0x3, 0x350, 0x0, 0x160, 0x160, 0x160, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@empty}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc7}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 07:13:46 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:46 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) splice(r2, 0x0, r1, 0x0, 0x101ff, 0x0) [ 212.601796][T11140] loop2: detected capacity change from 0 to 21 [ 212.640518][T11140] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (10 blocks) 07:13:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 07:13:46 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x0, 0x0, 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) splice(r2, 0x0, r1, 0x0, 0x101ff, 0x0) 07:13:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x0, 0x0, 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) splice(r2, 0x0, r1, 0x0, 0x101ff, 0x0) [ 213.238232][T11168] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 213.278152][T11168] device bond_slave_0 entered promiscuous mode [ 213.284465][T11168] device bond_slave_1 entered promiscuous mode 07:13:46 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x0, 0x0, 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) splice(r2, 0x0, r1, 0x0, 0x101ff, 0x0) [ 213.333102][T11168] device macsec1 entered promiscuous mode [ 213.348908][T11168] device bond0 entered promiscuous mode [ 213.397816][T11168] device bond0 left promiscuous mode 07:13:47 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 213.444279][T11168] device bond_slave_0 left promiscuous mode [ 213.450309][T11168] device bond_slave_1 left promiscuous mode 07:13:47 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) splice(r2, 0x0, r1, 0x0, 0x101ff, 0x0) 07:13:47 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) 07:13:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 213.759210][T11189] loop2: detected capacity change from 0 to 1051 [ 213.865745][T11189] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 213.942043][T11189] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 213.975092][T11189] EXT4-fs (loop2): get root inode failed [ 214.017111][T11189] EXT4-fs (loop2): mount failed 07:13:48 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:48 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) splice(r2, 0x0, r1, 0x0, 0x101ff, 0x0) 07:13:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:48 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) 07:13:48 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:48 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='skb_copy_datagram_iovec\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1000000000000010, 0x80802, 0x0) write(r2, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) splice(r2, 0x0, r1, 0x0, 0x101ff, 0x0) [ 214.602513][T11210] loop2: detected capacity change from 0 to 1051 [ 214.660157][T11210] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 214.707911][T11218] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 214.761697][T11210] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 214.802389][T11218] device bond_slave_0 entered promiscuous mode [ 214.808701][T11218] device bond_slave_1 entered promiscuous mode 07:13:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, "52ea6d3e3140f29e8903164371b08ab477b892848c30de39844e82627d"}], 0x5000}, 0x0) [ 214.858909][T11210] EXT4-fs (loop2): get root inode failed [ 214.900555][T11210] EXT4-fs (loop2): mount failed [ 214.907220][T11218] device macsec1 entered promiscuous mode [ 214.930982][T11218] device bond0 entered promiscuous mode [ 214.969280][T11218] device bond0 left promiscuous mode 07:13:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 215.011952][T11218] device bond_slave_0 left promiscuous mode [ 215.018057][T11218] device bond_slave_1 left promiscuous mode 07:13:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, &(0x7f0000000480)) 07:13:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:48 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) [ 215.240428][T11231] loop2: detected capacity change from 0 to 1051 [ 215.301319][T11231] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 215.365616][T11231] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 215.396421][T11231] EXT4-fs (loop2): get root inode failed [ 215.419536][T11231] EXT4-fs (loop2): mount failed 07:13:49 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000008c0)={0xb, 0x0, 0x0, 0x6}, 0x40) 07:13:49 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:49 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:49 executing program 0: bpf$BPF_LINK_UPDATE(0x4, 0x0, 0x0) 07:13:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in6={0x2, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x1c) [ 216.518507][T11259] loop2: detected capacity change from 0 to 1051 07:13:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x1e, 0x0, &(0x7f0000000480)) [ 216.607886][T11259] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 216.635770][T11262] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 216.678588][T11259] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 216.710350][T11259] EXT4-fs (loop2): get root inode failed [ 216.724617][T11262] device bond_slave_0 entered promiscuous mode [ 216.728550][T11259] EXT4-fs (loop2): mount failed [ 216.730951][T11262] device bond_slave_1 entered promiscuous mode [ 216.732176][T11262] device macsec1 entered promiscuous mode [ 216.764716][T11262] device bond0 entered promiscuous mode 07:13:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x29}], 0x10}, 0x0) [ 216.775376][T11262] device bond0 left promiscuous mode [ 216.783458][T11262] device bond_slave_0 left promiscuous mode [ 216.789580][T11262] device bond_slave_1 left promiscuous mode 07:13:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x19d7, 0x4) recvfrom$packet(r0, &(0x7f00000001c0)=""/70, 0x46, 0x20, &(0x7f0000000140)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @random="60dae701b4d2"}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060004003002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa0008016005c2fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 07:13:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=@gettclass={0x24, 0x2a, 0x1}, 0x24}}, 0x0) [ 217.011165][T11279] loop2: detected capacity change from 0 to 1051 [ 217.045329][T11279] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 217.075600][T11279] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 217.095600][T11279] EXT4-fs (loop2): get root inode failed [ 217.103496][T11279] EXT4-fs (loop2): mount failed 07:13:51 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:51 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:13:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:13:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:13:51 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00', r0) 07:13:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x11, 0x0, &(0x7f0000000480)) [ 217.961910][T11305] loop2: detected capacity change from 0 to 1051 [ 217.984957][T11305] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:13:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x19, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 07:13:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000012c0)=""/129, 0x2a, 0x81, 0x1}, 0x20) [ 218.029173][T11309] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 218.037929][T11305] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 218.054140][T11305] EXT4-fs (loop2): get root inode failed [ 218.060922][T11305] EXT4-fs (loop2): mount failed 07:13:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x6ca, 0x0, &(0x7f0000000480)) [ 218.166755][T11309] device bond_slave_0 entered promiscuous mode [ 218.173379][T11309] device bond_slave_1 entered promiscuous mode 07:13:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 218.231652][T11309] device macsec1 entered promiscuous mode [ 218.244437][T11309] device bond0 entered promiscuous mode [ 218.268160][T11309] device bond0 left promiscuous mode 07:13:51 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @loopback, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@remote}, {@private}]}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @multicast2, @private, @remote]}, @rr={0x7, 0x7, 0x0, [@rand_addr]}, @lsrr={0x83, 0x7, 0x0, [@dev]}]}}}}}}}, 0x0) [ 218.299326][T11309] device bond_slave_0 left promiscuous mode [ 218.305447][T11309] device bond_slave_1 left promiscuous mode 07:13:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev, 0x8}, 0x80, 0x0}, 0x0) [ 218.391985][T11324] loop2: detected capacity change from 0 to 1051 [ 218.463699][T11324] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 218.561680][T11324] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 218.673302][T11324] EXT4-fs (loop2): get root inode failed [ 218.729610][T11324] EXT4-fs (loop2): mount failed 07:13:52 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:13:52 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x1, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 219.309202][T11344] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 219.325081][T11344] device bond_slave_0 entered promiscuous mode [ 219.331524][T11344] device bond_slave_1 entered promiscuous mode [ 219.342014][T11344] device macsec1 entered promiscuous mode [ 219.348077][T11344] device bond0 entered promiscuous mode [ 219.358270][T11344] device bond0 left promiscuous mode [ 219.373144][T11344] device bond_slave_0 left promiscuous mode [ 219.379371][T11344] device bond_slave_1 left promiscuous mode 07:14:01 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:14:01 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @loopback, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@remote}, {@private}]}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @multicast2, @private, @remote]}, @rr={0x7, 0x7, 0x0, [@rand_addr]}, @lsrr={0x83, 0x7, 0x0, [@dev]}]}}}}}}}, 0x0) 07:14:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:01 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:14:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x25, 0x0, &(0x7f0000000480)) 07:14:01 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 228.464564][T11358] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 228.473074][T11360] loop2: detected capacity change from 0 to 1051 [ 228.484566][T11360] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 228.500387][T11358] device bond_slave_0 entered promiscuous mode [ 228.506668][T11358] device bond_slave_1 entered promiscuous mode 07:14:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x21, 0x0, &(0x7f0000000480)) [ 228.514599][T11360] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 228.530420][T11360] EXT4-fs (loop2): get root inode failed [ 228.536336][T11358] device macsec1 entered promiscuous mode [ 228.542744][T11360] EXT4-fs (loop2): mount failed [ 228.547768][T11358] device bond0 entered promiscuous mode 07:14:02 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @loopback, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@remote}, {@private}]}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @multicast2, @private, @remote]}, @rr={0x7, 0x7, 0x0, [@rand_addr]}, @lsrr={0x83, 0x7, 0x0, [@dev]}]}}}}}}}, 0x0) [ 228.581403][T11358] device bond0 left promiscuous mode [ 228.587239][T11358] device bond_slave_0 left promiscuous mode [ 228.593339][T11358] device bond_slave_1 left promiscuous mode 07:14:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:02 executing program 0: bpf$BPF_LINK_UPDATE(0x11, &(0x7f00000000c0), 0x10) 07:14:02 executing program 1: syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @loopback, {[@timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@broadcast}, {@local}, {@remote}, {@private}]}, @lsrr={0x83, 0x13, 0x0, [@multicast1, @multicast2, @private, @remote]}, @rr={0x7, 0x7, 0x0, [@rand_addr]}, @lsrr={0x83, 0x7, 0x0, [@dev]}]}}}}}}}, 0x0) [ 228.821412][T11378] loop2: detected capacity change from 0 to 1051 [ 228.897061][T11378] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:14:02 executing program 0: bpf$BPF_LINK_UPDATE(0xb, &(0x7f00000000c0), 0x10) [ 228.974521][T11378] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 229.016409][T11378] EXT4-fs (loop2): get root inode failed [ 229.022330][T11378] EXT4-fs (loop2): mount failed [ 236.887214][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 236.893682][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 236.897192][ T9699] Bluetooth: hci0: command 0x0406 tx timeout [ 236.908606][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 236.913843][ T9699] Bluetooth: hci3: command 0x0406 tx timeout [ 236.915688][ T7] Bluetooth: hci2: command 0x0406 tx timeout 07:14:12 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) 07:14:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x42, 0x0, &(0x7f0000000480)) 07:14:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 07:14:12 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:14:12 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 239.364226][T11411] loop2: detected capacity change from 0 to 1051 [ 239.368761][T11409] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:14:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x1, 0x0, 0x101, 0x100, 0x100, 0x880300}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, 0x14, 0x300, 0x70bd28, 0x25dfdbfc, {0x10, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "cecfe20bf0a6f294f76dd1c3178098913fff907be5378afae0219c53aa1cc09ef8bc560acf3211803f83a299487886e9666c9e25eb8b50499dd79ae431bb5c8672340854cb14c00633d03d79cbabe09d6f6877b0c902f5a55eb84037f317891c1ab645fcf43e5974aec73d48e12b5fddf14ceaeb970c0ee3c010ee5a609e0a69fa0fea729ad8ed7e5c9bd68c8240f3c57c4a8d0413b816fcb044dbbc0a7461ff26128a6e8f432e12b3bcea7d35c1486f4296"}]}, 0xcc}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@mcast2, 0x0, r2}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x8011) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x188001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x302, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3013}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, r2}) socket$inet6(0xa, 0x3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0xffffffffffffff66) 07:14:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 239.413523][T11411] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 239.415660][T11409] device bond_slave_0 entered promiscuous mode [ 239.429136][T11409] device bond_slave_1 entered promiscuous mode [ 239.435882][T11409] device macsec1 entered promiscuous mode [ 239.442079][T11409] device bond0 entered promiscuous mode [ 239.453269][T11409] device bond0 left promiscuous mode [ 239.470906][T11409] device bond_slave_0 left promiscuous mode [ 239.477005][T11409] device bond_slave_1 left promiscuous mode [ 239.503117][T11411] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 239.524480][T11411] EXT4-fs (loop2): get root inode failed [ 239.540392][T11411] EXT4-fs (loop2): mount failed 07:14:13 executing program 1: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb74a1004527f6ac3}, 0x10) 07:14:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0x80fe) 07:14:13 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 239.806890][T11434] loop2: detected capacity change from 0 to 1051 [ 239.836384][T11434] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 239.872671][T11434] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 239.886383][T11434] EXT4-fs (loop2): get root inode failed [ 239.893102][T11434] EXT4-fs (loop2): mount failed 07:14:23 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:14:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:23 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x14, 0x14, 0x1}, 0x14}}, 0x0) 07:14:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x1, 0x0, 0x101, 0x100, 0x100, 0x880300}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, 0x14, 0x300, 0x70bd28, 0x25dfdbfc, {0x10, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "cecfe20bf0a6f294f76dd1c3178098913fff907be5378afae0219c53aa1cc09ef8bc560acf3211803f83a299487886e9666c9e25eb8b50499dd79ae431bb5c8672340854cb14c00633d03d79cbabe09d6f6877b0c902f5a55eb84037f317891c1ab645fcf43e5974aec73d48e12b5fddf14ceaeb970c0ee3c010ee5a609e0a69fa0fea729ad8ed7e5c9bd68c8240f3c57c4a8d0413b816fcb044dbbc0a7461ff26128a6e8f432e12b3bcea7d35c1486f4296"}]}, 0xcc}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@mcast2, 0x0, r2}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x8011) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x188001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x302, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3013}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, r2}) socket$inet6(0xa, 0x3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0xffffffffffffff66) 07:14:23 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:14:23 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 249.579986][T11461] loop2: detected capacity change from 0 to 1051 [ 249.590193][T11461] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 249.617551][T11457] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 249.643846][T11461] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 249.671115][T11461] EXT4-fs (loop2): get root inode failed 07:14:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 249.691770][T11457] device bond_slave_0 entered promiscuous mode [ 249.698172][T11457] device bond_slave_1 entered promiscuous mode [ 249.702753][T11461] EXT4-fs (loop2): mount failed [ 249.762604][T11457] device macsec1 entered promiscuous mode [ 249.771386][T11457] device bond0 entered promiscuous mode [ 249.832187][T11457] device bond0 left promiscuous mode 07:14:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:23 executing program 1: bpf$BPF_LINK_UPDATE(0x6, &(0x7f00000000c0), 0x10) [ 249.877046][T11457] device bond_slave_0 left promiscuous mode [ 249.883270][T11457] device bond_slave_1 left promiscuous mode 07:14:23 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe8039001400080011000f6c00002d0000009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d24", 0x51}, {&(0x7f0000000000)="02044911", 0x4}], 0x2}, 0x0) [ 250.049547][T11485] loop2: detected capacity change from 0 to 1051 [ 250.083304][T11485] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:14:23 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) [ 250.155485][T11485] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated 07:14:23 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 250.211261][T11485] EXT4-fs (loop2): get root inode failed [ 250.236229][T11485] EXT4-fs (loop2): mount failed 07:14:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x1, 0x0, 0x101, 0x100, 0x100, 0x880300}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, 0x14, 0x300, 0x70bd28, 0x25dfdbfc, {0x10, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "cecfe20bf0a6f294f76dd1c3178098913fff907be5378afae0219c53aa1cc09ef8bc560acf3211803f83a299487886e9666c9e25eb8b50499dd79ae431bb5c8672340854cb14c00633d03d79cbabe09d6f6877b0c902f5a55eb84037f317891c1ab645fcf43e5974aec73d48e12b5fddf14ceaeb970c0ee3c010ee5a609e0a69fa0fea729ad8ed7e5c9bd68c8240f3c57c4a8d0413b816fcb044dbbc0a7461ff26128a6e8f432e12b3bcea7d35c1486f4296"}]}, 0xcc}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@mcast2, 0x0, r2}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x8011) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x188001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x302, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3013}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, r2}) socket$inet6(0xa, 0x3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0xffffffffffffff66) [ 250.567803][T11491] netlink: 'syz-executor.1': attribute type 20 has an invalid length. 07:14:24 executing program 1: bpf$BPF_LINK_UPDATE(0x1e, &(0x7f00000000c0), 0x10) [ 250.644482][T11503] loop2: detected capacity change from 0 to 1051 [ 250.670857][T11503] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:14:24 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) 07:14:24 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d0000002dbd7000fddbdf2505001a00ac1414aa000000000000000000000000ac1414aa00000000000000000000000023000414020013009d0000002abd700003350000010014004000000002000100000004d30e08190200000080010016"], 0x68}}, 0x4004084) socket$alg(0x26, 0x5, 0x0) [ 250.796797][T11503] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 250.858499][T11503] EXT4-fs (loop2): get root inode failed [ 250.864458][T11503] EXT4-fs (loop2): mount failed 07:14:24 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:14:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, 0x1, 0x0, 0x101, 0x100, 0x100, 0x880300}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, 0x14, 0x300, 0x70bd28, 0x25dfdbfc, {0x10, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "cecfe20bf0a6f294f76dd1c3178098913fff907be5378afae0219c53aa1cc09ef8bc560acf3211803f83a299487886e9666c9e25eb8b50499dd79ae431bb5c8672340854cb14c00633d03d79cbabe09d6f6877b0c902f5a55eb84037f317891c1ab645fcf43e5974aec73d48e12b5fddf14ceaeb970c0ee3c010ee5a609e0a69fa0fea729ad8ed7e5c9bd68c8240f3c57c4a8d0413b816fcb044dbbc0a7461ff26128a6e8f432e12b3bcea7d35c1486f4296"}]}, 0xcc}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@mcast2, 0x0, r2}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x8011) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x188001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x302, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3013}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, r2}) socket$inet6(0xa, 0x3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0xffffffffffffff66) 07:14:24 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d0000002dbd7000fddbdf2505001a00ac1414aa000000000000000000000000ac1414aa00000000000000000000000023000414020013009d0000002abd700003350000010014004000000002000100000004d30e08190200000080010016"], 0x68}}, 0x4004084) socket$alg(0x26, 0x5, 0x0) 07:14:24 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 251.197248][T11528] loop2: detected capacity change from 0 to 1051 [ 251.229032][T11528] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:14:24 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d0000002dbd7000fddbdf2505001a00ac1414aa000000000000000000000000ac1414aa00000000000000000000000023000414020013009d0000002abd700003350000010014004000000002000100000004d30e08190200000080010016"], 0x68}}, 0x4004084) socket$alg(0x26, 0x5, 0x0) 07:14:24 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040819, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) [ 251.272421][T11528] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 251.295029][T11528] EXT4-fs (loop2): get root inode failed [ 251.303247][T11534] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 251.308610][T11528] EXT4-fs (loop2): mount failed 07:14:24 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) [ 251.381463][T11534] device bond_slave_0 entered promiscuous mode [ 251.387795][T11534] device bond_slave_1 entered promiscuous mode 07:14:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 251.475900][T11534] device macsec1 entered promiscuous mode [ 251.523383][T11534] device bond0 entered promiscuous mode 07:14:25 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020902000d0000002dbd7000fddbdf2505001a00ac1414aa000000000000000000000000ac1414aa00000000000000000000000023000414020013009d0000002abd700003350000010014004000000002000100000004d30e08190200000080010016"], 0x68}}, 0x4004084) socket$alg(0x26, 0x5, 0x0) [ 251.582149][T11534] device bond0 left promiscuous mode [ 251.619291][T11534] device bond_slave_0 left promiscuous mode [ 251.625463][T11534] device bond_slave_1 left promiscuous mode [ 251.679763][T11548] loop2: detected capacity change from 0 to 1051 [ 251.694152][T11548] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 251.727391][T11548] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated 07:14:25 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:14:25 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='notify_on_release\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) [ 251.806310][T11548] EXT4-fs (loop2): get root inode failed [ 251.866715][T11548] EXT4-fs (loop2): mount failed [ 251.997961][T11561] new mount options do not match the existing superblock, will be ignored [ 252.059875][T11561] new mount options do not match the existing superblock, will be ignored 07:14:26 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:14:26 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) 07:14:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:26 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='notify_on_release\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 07:14:26 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040819, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) 07:14:26 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 253.054789][T11581] loop2: detected capacity change from 0 to 1051 [ 253.086390][T11581] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 253.132381][T11586] new mount options do not match the existing superblock, will be ignored [ 253.205582][T11581] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 253.232592][T11581] EXT4-fs (loop2): get root inode failed [ 253.258862][T11581] EXT4-fs (loop2): mount failed [ 253.270631][T11595] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:14:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:26 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='notify_on_release\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) [ 253.368492][T11595] device bond_slave_0 entered promiscuous mode [ 253.374814][T11595] device bond_slave_1 entered promiscuous mode [ 253.484834][T11595] device macsec1 entered promiscuous mode [ 253.515983][T11595] device bond0 entered promiscuous mode [ 253.559491][T11595] device bond0 left promiscuous mode [ 253.574185][T11601] loop2: detected capacity change from 0 to 1051 [ 253.589168][T11595] device bond_slave_0 left promiscuous mode [ 253.595313][T11595] device bond_slave_1 left promiscuous mode 07:14:27 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, 0x0) [ 253.611431][T11603] new mount options do not match the existing superblock, will be ignored [ 253.647024][T11601] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 253.762176][T11601] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated 07:14:27 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='notify_on_release\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 07:14:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040819, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) [ 253.897243][T11601] EXT4-fs (loop2): get root inode failed [ 253.953099][T11601] EXT4-fs (loop2): mount failed 07:14:27 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 254.211326][T11622] new mount options do not match the existing superblock, will be ignored 07:14:28 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:14:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:28 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040819, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) 07:14:28 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) [ 254.844282][T11631] loop2: detected capacity change from 0 to 1051 [ 254.854156][T11631] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 254.883125][T11639] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 254.897280][T11631] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 254.904551][T11631] EXT4-fs (loop2): mount failed 07:14:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:28 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) 07:14:28 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040819, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) [ 255.148223][T11649] loop2: detected capacity change from 0 to 1051 [ 255.182876][T11649] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:14:28 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 255.264150][T11649] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 255.364157][ T3276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.370584][ T3276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.421085][T11649] EXT4-fs (loop2): mount failed 07:14:29 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:14:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000000000000400", 0x1c, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:29 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) 07:14:29 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040819, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) [ 255.731572][T11666] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 255.752770][T11668] loop2: detected capacity change from 0 to 1051 [ 255.786892][T11668] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 255.800205][T11668] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 255.807325][T11668] EXT4-fs (loop2): mount failed 07:14:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:29 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) 07:14:29 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) [ 256.183469][T11681] loop2: detected capacity change from 0 to 1051 [ 256.248868][T11681] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 07:14:29 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 256.391922][T11681] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 256.431379][T11681] EXT4-fs (loop2): get root inode failed [ 256.436414][T11690] new mount options do not match the existing superblock, will be ignored [ 256.437740][T11681] EXT4-fs (loop2): mount failed [ 256.476050][T11690] new mount options do not match the existing superblock, will be ignored [ 256.507792][T11694] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 07:14:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000002c0)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004000821e7c8ad9d5d", 0x23, 0x4200}], 0x0, &(0x7f0000001280)=ANY=[]) 07:14:30 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:14:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 256.548215][T11690] new mount options do not match the existing superblock, will be ignored [ 256.565074][T11696] new mount options do not match the existing superblock, will be ignored 07:14:30 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) [ 256.656281][T11699] loop2: detected capacity change from 0 to 1051 [ 256.667495][T11699] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 256.681211][T11699] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 256.694049][T11699] EXT4-fs (loop2): get root inode failed [ 256.700036][T11699] EXT4-fs (loop2): mount failed [ 256.713343][T11704] loop1: detected capacity change from 0 to 512 07:14:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x4, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 256.766013][T11704] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 256.797497][T11704] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) 07:14:30 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040819, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) [ 256.853148][T11704] EXT4-fs (loop1): get root inode failed [ 256.853905][T11713] new mount options do not match the existing superblock, will be ignored [ 256.860497][T11704] EXT4-fs (loop1): mount failed [ 256.912050][T11713] new mount options do not match the existing superblock, will be ignored [ 256.932152][T11715] loop2: detected capacity change from 0 to 1051 [ 256.944274][T11704] loop1: detected capacity change from 0 to 512 07:14:30 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) [ 256.955963][T11704] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 256.971055][T11704] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 256.991289][T11704] EXT4-fs (loop1): get root inode failed [ 256.992200][T11715] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 256.997121][T11704] EXT4-fs (loop1): mount failed 07:14:30 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cpuset\x00', 0x0, 0x0) [ 257.044919][T11725] new mount options do not match the existing superblock, will be ignored [ 257.058527][T11725] new mount options do not match the existing superblock, will be ignored [ 257.095483][T11715] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 257.122233][T11715] EXT4-fs (loop2): get root inode failed [ 257.130289][T11715] EXT4-fs (loop2): mount failed 07:14:30 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:14:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000002c0)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004000821e7c8ad9d5d", 0x23, 0x4200}], 0x0, &(0x7f0000001280)=ANY=[]) [ 257.199774][T11731] new mount options do not match the existing superblock, will be ignored 07:14:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') [ 257.267501][T11735] new mount options do not match the existing superblock, will be ignored 07:14:31 executing program 0: timerfd_create(0x6, 0x0) [ 257.475852][T11738] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 257.527600][T11741] loop1: detected capacity change from 0 to 512 [ 257.539614][T11740] loop2: detected capacity change from 0 to 1051 [ 257.551882][T11738] device bond_slave_0 entered promiscuous mode [ 257.558199][T11738] device bond_slave_1 entered promiscuous mode [ 257.567520][T11740] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 257.580306][T11741] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 257.594818][T11738] device macsec1 entered promiscuous mode [ 257.601350][T11738] device bond0 entered promiscuous mode [ 257.609406][T11740] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated 07:14:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) [ 257.626759][T11740] EXT4-fs (loop2): get root inode failed [ 257.632971][T11740] EXT4-fs (loop2): mount failed [ 257.639423][T11738] device bond0 left promiscuous mode [ 257.642896][T11741] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 257.645886][T11738] device bond_slave_0 left promiscuous mode [ 257.668071][T11738] device bond_slave_1 left promiscuous mode [ 257.740501][T11741] EXT4-fs (loop1): get root inode failed [ 257.746372][T11741] EXT4-fs (loop1): mount failed 07:14:31 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) 07:14:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 07:14:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 07:14:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000002c0)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004000821e7c8ad9d5d", 0x23, 0x4200}], 0x0, &(0x7f0000001280)=ANY=[]) [ 257.952596][T11767] loop2: detected capacity change from 0 to 1051 [ 257.981515][T11767] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 07:14:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 07:14:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) [ 258.018411][T11767] EXT4-fs error (device loop2): ext4_fill_super:4942: inode #2: comm syz-executor.2: iget: root inode unallocated [ 258.031157][T11767] EXT4-fs (loop2): get root inode failed [ 258.037966][T11767] EXT4-fs (loop2): mount failed [ 258.298089][T11782] loop1: detected capacity change from 0 to 512 [ 258.388399][T11782] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 258.477705][T11782] EXT4-fs error (device loop1): ext4_ext_check_inode:459: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 258.567549][T11782] EXT4-fs (loop1): get root inode failed [ 258.594795][T11782] EXT4-fs (loop1): mount failed [ 258.892374][T11782] ------------[ cut here ]------------ [ 258.906841][T11782] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x1f0 [ 258.943948][T11782] WARNING: CPU: 1 PID: 11782 at lib/debugobjects.c:505 debug_print_object+0x16e/0x250 [ 258.962765][T11782] Modules linked in: [ 258.967569][T11782] CPU: 1 PID: 11782 Comm: syz-executor.1 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 258.989813][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.011554][T11782] RIP: 0010:debug_print_object+0x16e/0x250 [ 259.021155][T11782] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd c0 8a bf 89 4c 89 ee 48 c7 c7 c0 7e bf 89 e8 aa ae fb 04 <0f> 0b 83 05 55 67 ff 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 259.052421][T11782] RSP: 0018:ffffc90009e37990 EFLAGS: 00010282 [ 259.059226][T11782] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 259.074493][T11782] RDX: 0000000000040000 RSI: ffffffff815bc1b5 RDI: fffff520013c6f24 [ 259.083082][T11782] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 259.091644][T11782] R10: ffffffff815b528e R11: 0000000000000000 R12: ffffffff896d7b40 [ 259.100263][T11782] R13: ffffffff89bf8500 R14: ffffffff816283b0 R15: dffffc0000000000 [ 259.110386][T11782] FS: 00007f04370dc700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 259.119877][T11782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.127213][T11782] CR2: 0000001b31a25000 CR3: 0000000018f90000 CR4: 00000000001506e0 [ 259.138577][T11782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.147731][T11782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.156024][T11782] Call Trace: [ 259.159825][T11782] ? lockdep_hardirqs_on+0x79/0x100 [ 259.165498][T11782] debug_check_no_obj_freed+0x301/0x420 [ 259.171219][T11782] ? slab_free_freelist_hook+0xc4/0x1b0 [ 259.177507][T11782] slab_free_freelist_hook+0xd6/0x1b0 [ 259.183059][T11782] kfree+0xe5/0x7b0 [ 259.187628][T11782] ? ext4_fill_super+0x844/0xde40 [ 259.192954][T11782] ext4_fill_super+0x844/0xde40 [ 259.198624][T11782] ? ext4_calculate_overhead+0x13a0/0x13a0 [ 259.205368][T11782] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 259.211319][T11782] ? set_blocksize+0x1c1/0x400 [ 259.219977][T11782] mount_bdev+0x34d/0x410 [ 259.228140][T11782] ? ext4_calculate_overhead+0x13a0/0x13a0 [ 259.234143][T11782] ? rcu_read_unlock+0xa0/0xa0 [ 259.241318][T11782] legacy_get_tree+0x105/0x220 [ 259.247481][T11782] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 259.254035][T11782] vfs_get_tree+0x89/0x2f0 [ 259.260016][T11782] path_mount+0x132a/0x1fa0 [ 259.267146][T11782] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 259.273559][T11782] ? strncpy_from_user+0x2a0/0x3e0 [ 259.281106][T11782] ? finish_automount+0xad0/0xad0 [ 259.291068][T11782] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 259.298700][T11782] ? getname_flags.part.0+0x1dd/0x4f0 [ 259.305485][T11782] __x64_sys_mount+0x27f/0x300 [ 259.310487][T11782] ? copy_mnt_ns+0xae0/0xae0 [ 259.317076][T11782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 259.323141][T11782] do_syscall_64+0x2d/0x70 [ 259.330815][T11782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.339634][T11782] RIP: 0033:0x46748a [ 259.343782][T11782] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.374692][T11782] RSP: 002b:00007f04370dbfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 259.388394][T11782] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000046748a [ 259.439297][T11782] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f04370dc000 [ 259.484664][T11782] RBP: 00007f04370dc040 R08: 00007f04370dc040 R09: 0000000020000000 07:14:33 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100008000000008008000a0009d35b58003e00b0b9cad4a128"], 0x50}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 07:14:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)=""/231, 0xe7}], 0x61}}], 0x1, 0x0, 0x0) exit_group(0x0) preadv(r0, &(0x7f00000017c0), 0x47, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 07:14:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83600, 0x3, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x81, &(0x7f0000000180)={[{@errors_remount='errors=remount-ro'}]}) rmdir(&(0x7f0000000080)='./file0\x00') 07:14:33 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.apparmor\x00', 0x0, 0x0) 07:14:33 executing program 4: pipe2(0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000001480), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000001940)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000580)=""/4096, 0x20001580}], 0x2, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/106, 0x7ffff000}, {0x0}], 0x2, 0x0) [ 259.526860][T11782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 259.557214][T11782] R13: 0000000020000100 R14: 00007f04370dc000 R15: 0000000020001280 [ 259.614790][T11782] Kernel panic - not syncing: panic_on_warn set ... [ 259.621414][T11782] CPU: 1 PID: 11782 Comm: syz-executor.1 Not tainted 5.12.0-rc1-next-20210304-syzkaller #0 [ 259.631450][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.641537][T11782] Call Trace: [ 259.644832][T11782] dump_stack+0xfa/0x151 [ 259.645016][T11804] new mount options do not match the existing superblock, will be ignored [ 259.649160][T11782] panic+0x306/0x73d [ 259.649208][T11782] ? __warn_printk+0xf3/0xf3 [ 259.649238][T11782] ? __warn.cold+0x1a/0x44 [ 259.649263][T11782] ? debug_print_object+0x16e/0x250 [ 259.649294][T11782] __warn.cold+0x35/0x44 [ 259.649317][T11782] ? debug_print_object+0x16e/0x250 [ 259.649347][T11782] report_bug+0x1bd/0x210 [ 259.649383][T11782] handle_bug+0x3c/0x60 [ 259.649412][T11782] exc_invalid_op+0x14/0x40 [ 259.649441][T11782] asm_exc_invalid_op+0x12/0x20 [ 259.649472][T11782] RIP: 0010:debug_print_object+0x16e/0x250 [ 259.649504][T11782] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd c0 8a bf 89 4c 89 ee 48 c7 c7 c0 7e bf 89 e8 aa ae fb 04 <0f> 0b 83 05 55 67 ff 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 259.649527][T11782] RSP: 0018:ffffc90009e37990 EFLAGS: 00010282 [ 259.649550][T11782] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 259.649565][T11782] RDX: 0000000000040000 RSI: ffffffff815bc1b5 RDI: fffff520013c6f24 [ 259.687869][T11804] new mount options do not match the existing superblock, will be ignored [ 259.689938][T11782] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 259.689958][T11782] R10: ffffffff815b528e R11: 0000000000000000 R12: ffffffff896d7b40 [ 259.689975][T11782] R13: ffffffff89bf8500 R14: ffffffff816283b0 R15: dffffc0000000000 [ 259.689993][T11782] ? calc_wheel_index+0x3f0/0x3f0 [ 259.788713][T11782] ? wake_up_klogd.part.0+0x8e/0xd0 [ 259.794029][T11782] ? vprintk_func+0x95/0x1e0 [ 259.798712][T11782] ? lockdep_hardirqs_on+0x79/0x100 [ 259.803943][T11782] debug_check_no_obj_freed+0x301/0x420 [ 259.809618][T11782] ? slab_free_freelist_hook+0xc4/0x1b0 [ 259.815204][T11782] slab_free_freelist_hook+0xd6/0x1b0 [ 259.820622][T11782] kfree+0xe5/0x7b0 [ 259.824455][T11782] ? ext4_fill_super+0x844/0xde40 [ 259.829549][T11782] ext4_fill_super+0x844/0xde40 [ 259.834458][T11782] ? ext4_calculate_overhead+0x13a0/0x13a0 [ 259.840298][T11782] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 259.846048][T11782] ? set_blocksize+0x1c1/0x400 [ 259.850851][T11782] mount_bdev+0x34d/0x410 [ 259.855205][T11782] ? ext4_calculate_overhead+0x13a0/0x13a0 [ 259.861049][T11782] ? rcu_read_unlock+0xa0/0xa0 [ 259.865839][T11782] legacy_get_tree+0x105/0x220 [ 259.870632][T11782] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 259.877021][T11782] vfs_get_tree+0x89/0x2f0 [ 259.881463][T11782] path_mount+0x132a/0x1fa0 [ 259.885996][T11782] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 259.892263][T11782] ? strncpy_from_user+0x2a0/0x3e0 [ 259.897408][T11782] ? finish_automount+0xad0/0xad0 [ 259.902463][T11782] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 259.908731][T11782] ? getname_flags.part.0+0x1dd/0x4f0 [ 259.914141][T11782] __x64_sys_mount+0x27f/0x300 [ 259.918937][T11782] ? copy_mnt_ns+0xae0/0xae0 [ 259.923559][T11782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 259.929481][T11782] do_syscall_64+0x2d/0x70 [ 259.933925][T11782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.939842][T11782] RIP: 0033:0x46748a [ 259.943754][T11782] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.963382][T11782] RSP: 002b:00007f04370dbfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 259.971828][T11782] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000046748a [ 259.979823][T11782] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f04370dc000 [ 259.987928][T11782] RBP: 00007f04370dc040 R08: 00007f04370dc040 R09: 0000000020000000 [ 259.995927][T11782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 260.003922][T11782] R13: 0000000020000100 R14: 00007f04370dc000 R15: 0000000020001280 [ 260.012909][T11782] Kernel Offset: disabled [ 260.017425][T11782] Rebooting in 86400 seconds..