last executing test programs: 1m26.981272342s ago: executing program 4 (id=82): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000000044e230000000080003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000ffffffff0000000009000000000000000600000000000000ffff0000000000000c2508000000000002000000000000008300000000000000fdfffffffffffffffcffffffffffffffff7f0000000000000600000000000000ff0100000000000002000000fcffffff000100002abd700000000000020001fc2000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x8, 0x1, 0x0, 0x8260}, {0x97b, 0x5, 0x6, 0x6}, {0x2, 0x4, 0x6, 0x7ff}, {0x6, 0x2, 0x3, 0x100}, {0x0, 0x9, 0x7, 0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c0001002bbd7000fe9122257f"], 0x28}}, 0x0) 1m26.925772834s ago: executing program 4 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x800}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfbc}]}]}, 0x88}}, 0x0) 1m26.878553525s ago: executing program 4 (id=84): r0 = syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1444c, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="68dc27454d2e2e9040c99f2221a7ac0d9b621736f9", @ANYRES64=0x0, @ANYRES16], 0xfe, 0xc17, &(0x7f0000001dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000180)=0x32648a4) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r1, &(0x7f0000001c80)=[{&(0x7f0000000280)="002145000b2c000b0000400600000a0000010a000002005000500000000200000001601003e80000010101010000", 0x2e}, {&(0x7f00000002c0)="77d67ff67c982bdf9464b63ca64d7c138e2c58f5", 0x14}, {&(0x7f0000000300)="b6e0d75bdbacd59349aaf48e5ddcfdb5789d1fdcd653e54aa994580a10b18865d6fd748a2c10dca78976a9da78fe549b2702fad8a29b9179d191fcb6f3e58289939a4d990b5d22f346fae672e6c886d58ca5986096d442f8c965b8ca54eac15524c4d3d4fae8ae10", 0x68}, {&(0x7f0000000c80)="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", 0x1000}], 0x4, 0xffffffff, 0xfffffffd) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000005c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) r3 = syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000640)=r3) sendto$inet(r2, &(0x7f0000000680), 0xffffffffffffff94, 0xb, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) recvfrom$inet(r2, &(0x7f00000006c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) read$FUSE(r0, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r0, 0x26, &(0x7f0000004a40)={0x2, 0x2, 0x8000000000000001, 0x4a1, r4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) 1m25.90737466s ago: executing program 4 (id=87): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc777000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/io_uring_mock\x00', 0x2, 0x0) dup2(r1, 0x0) r2 = io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x10000000) pipe2(&(0x7f0000000400)={0x0, 0x0}, 0x0) write(r4, &(0x7f0000000440)="2e00000000000000010000000000000000010020000000008000"/64, 0x40) read(r3, &(0x7f0000000480)=""/64, 0x40) write(r4, &(0x7f00000004c0)="01000000", 0x4) read(r3, &(0x7f0000000500)=""/4, 0x4) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000100)=[{0xb, 0xa000, 0x0, 0x0}], 0x1}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc3}}) 1m25.16995981s ago: executing program 2 (id=93): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') 1m24.983740345s ago: executing program 2 (id=95): syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000080)='./file0/file0\x00', 0x210000, &(0x7f00000004c0)={[{@user_xattr}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3e35}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}]}, 0x0, 0x585, &(0x7f00000008c0)="$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") setns(0xffffffffffffffff, 0x40000000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) getpid() r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setrlimit(0xd, &(0x7f0000000100)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 1m24.659068313s ago: executing program 2 (id=96): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x22, 0x0, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x63) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000001c0)=""/98, &(0x7f0000000240)=0x62) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000100)="01") r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000080)) read$char_usb(r3, &(0x7f0000000100)=""/165, 0xa5) 1m22.754381403s ago: executing program 4 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000090603000000000000000000070000002c0007800c000180080001987f0000010c001480080001400a0101000600044050000000050007000600000005000100060000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1m21.657700012s ago: executing program 4 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="7c0000001800051105000000000000000a400000fe040001000000001400010000000db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050008000100aac5391a8bf617660000", 0x7c) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x41) 1m21.422977868s ago: executing program 32 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="7c0000001800051105000000000000000a400000fe040001000000001400010000000db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050008000100aac5391a8bf617660000", 0x7c) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x41) 1m20.95173354s ago: executing program 2 (id=122): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x6d, &(0x7f0000000f80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x7, 0x5f, 0x64, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x4e20, 0x4e21, 0x4b, 0x0, @wg=@data={0x4, 0xa662, 0x100, "283c41a859774d2df7ac3b7f3e9a7f44b7dcac26595a64cb156d1af1084c87df808eb713428172f51a53ec5b7b5b16e180a683"}}}}}}, 0x0) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x9800, &(0x7f0000001dc0)={0xe, 0x1, 0x80000}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000980)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002c80)="$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") (async) getpid() (async) syz_pidfd_open(r1, 0x0) (async) setns(r2, 0x24020000) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) (async) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r4, 0x0) (async) setns(r5, 0x24020000) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) syz_emit_ethernet(0x6d, &(0x7f0000000f80)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x7, 0x5f, 0x64, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x4e20, 0x4e21, 0x4b, 0x0, @wg=@data={0x4, 0xa662, 0x100, "283c41a859774d2df7ac3b7f3e9a7f44b7dcac26595a64cb156d1af1084c87df808eb713428172f51a53ec5b7b5b16e180a683"}}}}}}, 0x0) (async) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x9800, &(0x7f0000001dc0)={0xe, 0x1, 0x80000}, 0x20) (async) 1m20.58409825s ago: executing program 2 (id=125): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b1136000000000d8510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1m18.155790183s ago: executing program 2 (id=134): syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000001082057d0040000102030109026b000301f140020904000100010100000a2401c0ff0a00020102090401000001020000090400eb01010200000b2402010b0402012b601e09050109400003810407250104fe0000090402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c0001800600060088480000"], 0x24}}, 0x800) (async) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x7) (async) prlimit64(r2, 0x4, &(0x7f0000000180)={0x9, 0x40}, &(0x7f00000001c0)) (async, rerun: 64) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (rerun: 64) 1m18.155526493s ago: executing program 33 (id=134): syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000001082057d0040000102030109026b000301f140020904000100010100000a2401c0ff0a00020102090401000001020000090400eb01010200000b2402010b0402012b601e09050109400003810407250104fe0000090402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000003b0007010000000000000000036c0000040000000c0001800600060088480000"], 0x24}}, 0x800) (async) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x7) (async) prlimit64(r2, 0x4, &(0x7f0000000180)={0x9, 0x40}, &(0x7f00000001c0)) (async, rerun: 64) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (rerun: 64) 7.766918447s ago: executing program 0 (id=320): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 6.944933408s ago: executing program 0 (id=333): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x23d1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010f00000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES32=r4], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r5, 0x1}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="ffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4ffffffffffff13010000000000000000000000320000b400000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0, r7}, 0xc) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES8=r2, @ANYRES32=0x0], 0xfd85) 3.43982804s ago: executing program 5 (id=326): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000140)={[{@nogrpid}]}, 0xff, 0x4c8, &(0x7f00000006c0)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4000011}, 0xffffffffffffff1b) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000c40), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000000c80), 0x8, 0x0, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000012c0)=[{}], 0x6, 0x0, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000001540)={0x80000000, &(0x7f0000001480), &(0x7f00000014c0)}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x183200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000400), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'vlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5000000010000d04fcfffffffbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002801c0003800c000100000000800c00010040230000eee6ffff00000000"], 0x50}}, 0x40) sendto$packet(r4, &(0x7f0000000680)="00445552e82f647e2b3a64c0491b", 0xe, 0x40000, &(0x7f0000000bc0)={0x11, 0x0, r5}, 0x14) r6 = socket$kcm(0xa, 0x2, 0x73) close(r6) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x20, 0x1) 2.473245886s ago: executing program 3 (id=334): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x36, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200)=[r1], 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800050200000000000000000a4c0000000000070000000014000100ff0100000000000000000000000000014526d07834aacbd939bfe7ee5f4680fcff"], 0x30}}, 0x0) 2.242411712s ago: executing program 1 (id=335): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x45}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800f8ff00000000bfa200080000000007020000f8ffffffb703000007ed0000b70400000000000085000000010000009580000000000000757dccc2566d01ab88b45f86096c21cd3e0bd3a906b9ba100cac5022f85d650bf29dcde72ac39ef6a65954e39a50ca20e04814982ba2039b14ff84f5daa6cf9e28e02020763a1f89618c58c2def05e979def467b6ebdfb4f9197dea7c1310b0def2ce3c2d3764863a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x3, 0xc, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000000701000059000000b702000008000000b7030000110b0008850000000800000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r3, 0x0, 0x8, 0x0, &(0x7f0000001e80)="8ebfa8645a093258", 0x0, 0x81, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000001ec0)="9a6c62725847b592a5318f38af8b2c632121416a5830155171a56377d9491d14e06fca6f95311622e830e4a8069433c977be7172b664583ec035ee89c2210325cd091d0725ebbdae989d44dd49f769", 0x4, 0x0, 0xfffffffa}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000001fc0)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$vim2m(&(0x7f0000002080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000020c0)={0x1, 0x3, 0x0, "5a309a426be809a48aa9bc68b9de658caf5999a76c019fefcf54e97d739d47b9", 0x50313134}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000002040)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f00000003c0)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4007}, 0x40000) mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000680)={0x0, 0x0, 0x1f, 0x11, 0x845, &(0x7f00000006c0)="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"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000b00)=""/4096, 0x1000) getdents64(r7, &(0x7f0000001b00)=""/94, 0x5e) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x70bd2d, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x4, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) 2.239820952s ago: executing program 0 (id=336): r0 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000180)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8003, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='veno', 0x4) shutdown(r1, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000300)=0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x40000000040301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000380), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x4e, 0xfa00, {0x4, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0684113, &(0x7f0000000440)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x500, 0xe, 0x9, 0x40, 0xfffffff7, 0x1}) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) pselect6(0x40, &(0x7f0000000040)={0x4, 0x8000000000000001, 0x6e11, 0xfffffffffffffffc, 0x22, 0x100000001, 0xe, 0x9}, &(0x7f0000000080)={0x4, 0x3, 0x0, 0x5, 0x7, 0xe5, 0x4, 0x3}, &(0x7f00000000c0)={0xb, 0x2, 0x1, 0x9, 0x8, 0xffff, 0x9, 0xf}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f00000004c0)) 2.226080012s ago: executing program 3 (id=338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x4000) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 2.114416825s ago: executing program 5 (id=339): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="24a25eab2baabbc1721cb2b4f3cf1af94e1bd45a", 0x14, 0x34040891, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0x4}, 0x14) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/video4linux/video0/dev_debug\x00', 0x2, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, 0x0) write(r6, &(0x7f0000000340)='65', 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000400)=@fd={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a0006c090000080057"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 2.105452815s ago: executing program 3 (id=340): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="c99b57381801238c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="fe55fc2733656cd9", 0x8}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 2.044077666s ago: executing program 6 (id=341): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x6, 0x7}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000480), 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x442, 0xd2) pipe2(&(0x7f0000000540)={0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffe0f) 2.042135596s ago: executing program 3 (id=342): r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x20006dde, &(0x7f00000002c0)={0x0, 0x682, 0x10, 0x1, 0x28b}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206030000000000000000000000000705000100070000000900020073797a32000000000c00078008001240600000000500050002000000050041420d64ede46366870710fa8065683a6e742c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{}, {@force}, {@nls={'nls', 0x3d, 'macromanian'}}]}, 0x1, 0x5df, &(0x7f0000000340)="$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") r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000940)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000a80)=0x10) mount(0x0, &(0x7f0000000ac0)='./sec\x00', &(0x7f0000000b00)='securityfs\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000b40)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x2280, 0x101) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000d40)='3', 0x4e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x40, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x1c, 0x0, 0x800, 0x0, 0x10, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000e40)='bridge0\x00') recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000009c0)={&(0x7f0000000a00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_batadv\x00', {0x3}, 0xfff3}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') lseek(r8, 0x400, 0x0) close_range(r5, r5, 0x2) 1.994127918s ago: executing program 5 (id=343): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'syztnl1\x00', 0x0}) 1.945097539s ago: executing program 5 (id=344): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000007bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000800)=""/222}, 0x78) 1.887850351s ago: executing program 6 (id=345): r0 = syz_mount_image$nilfs2(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x10000, &(0x7f0000000680)=ANY=[], 0x0, 0xdab, &(0x7f00000006c0)="$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") ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000001480)={&(0x7f00000014c0)=[{0x3, 0x0, 0x5, 0xfb, 0x8, 0x7, 0x8, 0x7}], 0x1, 0x38, 0x1, 0x1}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40000) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x7ff}, 0xb) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='.', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1001}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x1}, {}, {0x300, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000580)='syzkaller0\x00', 0xb) sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x4e20, @loopback}, 0x10) keyctl$link(0x8, r3, r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x24, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)={0x88, r13, 0x5, 0x70bd26, 0xffffffff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @broadcast, @device_b, @random="71738fbad66f"}, 0x2, @default, 0x1, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x8, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x1, 0x2}}, @void}}], @beacon=[@NL80211_ATTR_BEACON_TAIL={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x88}}, 0x20000054) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={r11, 0xa, 0x3}, 0x8) 1.842803962s ago: executing program 5 (id=346): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 1.784788784s ago: executing program 1 (id=347): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x23d1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010f00000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES32=r4], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r5, 0x1}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="ffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4ffffffffffff13010000000000000000000000320000b400000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0, r7}, 0xc) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="6502000002fd0a4f0524010100001f00000000000000000000000000000000000000000000000c00000001040000000000007dff0a6e6f6465767b65766f03d38b9200000000000000000000000000280070673effeb09b5351f5bde054000000000187899a916638814e5708103b494e1000000000000000002000800ac00f8f669fb716dcf315ecaf385409ace5b9408678c2c3b9e1d52c36cde7ba4a440b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a3700398641631d44f4a39b1191937a280e8d881c0081ca9fc220d115ac8e2f184b9a61758d26772ab0f2044d8ef0263ddd97d3c427b3a532efab1d1ce32ca7c1fc231af48408e02b255028b7c9bb85396f4d8af0eb95fc0ecc99f780e22c016f6465762f6eb17b2300f9daa5ee1c2642d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0ee63f96e9b76989310000dba0c2f7f09ff53c1ad66e2d070198019f30118447aa9a74f51685f506ae89480687826779644d5c91b84ff2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7f97ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff0000000000", @ANYRES32=r8, @ANYRES8=r2, @ANYRES32=0x0], 0xfd85) 1.367999294s ago: executing program 0 (id=348): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}, {@data_journal}, {@jqfmt_vfsv1}, {@oldalloc}, {@dioread_nolock}, {@test_dummy_encryption_v1, 0x2e}, {@init_itable}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'init_itable'}}], 0x2e}, 0x1, 0x489, &(0x7f0000000e00)="$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") (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}, {@data_journal}, {@jqfmt_vfsv1}, {@oldalloc}, {@dioread_nolock}, {@test_dummy_encryption_v1, 0x2e}, {@init_itable}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'init_itable'}}], 0x2e}, 0x1, 0x489, &(0x7f0000000e00)="$eJzs3M9vFFUcAPDv7HZbftqK+IMfahWNjT9aWhA5eMFowsXERA94rKUQpFBDayKESDUGj4S/QD2a+Bd40otRTxqvmngxMSbEcBE9mDGzOwPbdrfubrddoJ9PMvDezBve+87M230zb5YANqzh7I8kYltE/NwfMVjLLi4wXPvrxvWLU39fvziVRJq+/mdSLffX9YtTRdFiv615ZqQUUfooiT0N6p07f+H05MzM9Lk8PzZ/5p2xufMXnjt1ZvLk9MnpsxOHDx88MP7CoYnnuxLn9qytu9+f3bvr6JtXX506dvWt777I1m/Lt9fHUTO06jqHY3jxsazzZMRvaZquuo7bxfa6dNLXw4bQlnJEZKerkvX/GIxy3Dp5g/HKhz1tHLCm0jRNB2rJTbfWlovEQgrcxZLodQuA3ii+6LP732JZ5yFIT107UrsByuK+kS+1LX1RystUltzfdtNwRBxb+OeTbImGzyEAALrrq2z882yj8V8pHqgrd0/U5oaGIuLeiNgREfdFxM6IuD+iWvbBiHiozfqHl+SXj39+3NxRYC3Kxn8v5nNbi8d/xegvhsp5bns1/kpy4tTM9P78mIxEZSDLj69Qx9cv/3Sl2bb68V+2ZPUXY8G8HX/0DSze5/jk/ORqYq537YOI3X2N4k9uzgQkEbErDsXuDv797Jidevrzvc22/3/8K+jCPFP6WcRTtfO/EEviLyQrz0+ObYqZ6f1jxVWx3Pc/XH6tWf2rir8LsvO/peH1fzP+oaR+vnau/Tou//Jx03uaTq///uSNaro/X/fe5Pz8ufGI/mRh+fqJW/sW+aJ8Fv/Ivsb9f0fEv5/m++2JiOwifjgiHomIR/O2PxYRj0fEvhXi//alJ97uPP61lcV/vK3z30riypH6NeXT33zZrP7Wzv/BamokX9PK51+rLV3NsQMAAIA7RVJ9Bz4pjebPOLdFqTQ6WnuHf2dsKc3Mzs0/c2L23bPHa+/KD0WlVDzpGqx7HjqePxsu8hNL8geqz43TNE03V/OjU7MzazWnDrRma5P+n/m93OvWAWuurXm0Zr9oA+5Iy/p//nLwpd40B1hHfq8NG1er/b+yxu0A1l+H3/8eD8JdoFH/vxRxY+k63/9w93H/DxuX/g8bl/4PG5f+DxtSe7/rbz2x42jHu6erqr34X4w73P3XNTkaKyXK61hXNxNRaripEhG3SQtXSJRuj2bUEgMR0WrhS51e2G0nevzBBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CX/BQAA///swPAr") r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ef0ec47200f739b9dc25dbd7b91813660000000001090224000100000001090400080203000300092100000001221800090581030004000000"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x82000, 0x100) openat2(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x800, 0x143, 0x139517af1d689005}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40042, 0x1) socket$inet6(0xa, 0x80002, 0x0) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0x0, "bf24ed83"}, @main=@item_4={0x3, 0x0, 0x3, "01980734"}, @local=@item_012={0x1, 0x2, 0x5, "e9"}, @main=@item_012={0x1, 0x0, 0xb, 'U'}, @global=@item_4={0x3, 0x1, 0x0, "bf515547"}, @main=@item_4={0x3, 0x0, 0x8, "d152bd96"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf5de, 0xf3, 0x1, {0x22, 0x1b5}}}}, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0}) 1.355260255s ago: executing program 1 (id=349): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000140)={[{@nogrpid}]}, 0xff, 0x4c8, &(0x7f00000006c0)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4000011}, 0xffffffffffffff1b) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000c40), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001400)={0x0, 0x0, 0x0, &(0x7f0000000c80), 0x8, 0x0, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000012c0)=[{}], 0x6, 0x0, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000001540)={0x80000000, &(0x7f0000001480), &(0x7f00000014c0)}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x183200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000400), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'vlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5000000010000d04fcfffffffbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002801c0003800c000100000000800c00010040230000eee6ffff00000000"], 0x50}}, 0x40) sendto$packet(r4, &(0x7f0000000680)="00445552e82f647e2b3a64c0491b", 0xe, 0x40000, &(0x7f0000000bc0)={0x11, 0x0, r5}, 0x14) r6 = socket$kcm(0xa, 0x2, 0x73) close(r6) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x20, 0x1) 1.237236118s ago: executing program 3 (id=350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x4000) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 1.173976109s ago: executing program 5 (id=351): syz_emit_ethernet(0x15, &(0x7f0000001780)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) (async) syz_emit_ethernet(0x15, &(0x7f0000001780)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0xb}}}}, 0x0) socket(0x5, 0x5, 0x0) (async) r0 = socket(0x5, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000028c0)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x1, @private1, 0xa}], 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="b40500000000000079105f00000000000500000000000000950000000000"], &(0x7f0000001500)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001540)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001640), 0x22e, 0x10, &(0x7f0000001680), 0x1dd}, 0x48) syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000080)='./file6\x00', 0x98, &(0x7f00000000c0), 0x1, 0x10ef, &(0x7f0000000280)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r1 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x103a42, 0x100) lsetxattr$security_capability(&(0x7f00000013c0)='./file1\x00', &(0x7f0000002880), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) truncate(&(0x7f0000001440)='./file0\x00', 0x3a6800) openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002000)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x3, 0x0) (async) sched_setscheduler(0x0, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000002080)={0x0, ""/88}, 0x60, 0x1, 0x0) msgsnd(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0100"], 0x17, 0x800) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001840)={'syzkaller1\x00', @random="bf76f64727d5"}) syz_extract_tcp_res$synack(&(0x7f0000001400)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000002980)=ANY=[@ANYBLOB="000086dd0201110004000000a60c0000000000000000614273d00f980600ff010000000000000000000000000001fe8000000000000000000020000000aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=r4, @ANYBLOB="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"], 0xfd6) (async) write$tun(r2, &(0x7f0000002980)=ANY=[@ANYBLOB="000086dd0201110004000000a60c0000000000000000614273d00f980600ff010000000000000000000000000001fe8000000000000000000020000000aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=r4, @ANYBLOB="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"], 0xfd6) r5 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00', 0x101041, 0xf0) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000001900)={0x10, 0x30, 0xfa00, {&(0x7f00000018c0)={0xffffffffffffffff}, 0x2, {0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000001940)={0x11, 0x10, 0xfa00, {&(0x7f00000016c0), r6}}, 0x18) syz_mount_image$msdos(&(0x7f0000001a00), &(0x7f0000001a40)='./file0\x00', 0x180c8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000001bc0)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000001e40)='\\\x00') 933.540976ms ago: executing program 3 (id=352): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000140001000000000000080000640101010000000000000000000000000000000000000000000000000000000000000800100000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000002400000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000e900000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x48ecedaa7bbd76df}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000800)={0x0, 0xfffffffffffffe46, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x108902, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000480)={'lo\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f00000003c0)=0xb, 0x4) recvmmsg(r5, &(0x7f0000000400), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007518950109308102c0c0ad815d96158765cbadf1b0a5b0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="0030050000005e6c2eb294bc791fa1fd642a105bf36fd1712a1012ca4b609cbdcc83bfc60d1068c95fc996e38674eb3be2df9b0a518dffcba2b84b246eab50d9c8515309c3f5e807da0509"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) 544.024656ms ago: executing program 6 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000180)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0x1, 0xffffbfff, 0x1, 0xffffdfff, 0x3, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3fc, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000005c0)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000600)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000500)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[@ANYBLOB="e904a20000000180c20000008100020008004500001c0000e000001190780000510000200005eaffffffff079078"], 0x0) 451.037068ms ago: executing program 1 (id=354): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x5}}, 0x20) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'wlc\x00', 0x28, 0xa7e, 0x2f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000480)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@local, 0x4e20, 0x1, 0xcd}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000500)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, 0xb, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffe4e}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x775}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf4}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff6252}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000002) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000300)=r8, 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 449.569368ms ago: executing program 0 (id=363): r0 = syz_mount_image$nilfs2(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x10000, &(0x7f0000000680)=ANY=[], 0x0, 0xdab, &(0x7f00000006c0)="$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") ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000001480)={&(0x7f00000014c0)=[{0x3, 0x0, 0x5, 0xfb, 0x8, 0x7, 0x8, 0x7}], 0x1, 0x38, 0x1, 0x1}) 311.044882ms ago: executing program 6 (id=355): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x6, 0x7}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000480), 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x442, 0xd2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffe0f) 212.042305ms ago: executing program 6 (id=356): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) getdents64(r0, 0x0, 0x4f) 211.698094ms ago: executing program 0 (id=357): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x45}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800f8ff00000000bfa200080000000007020000f8ffffffb703000007ed0000b70400000000000085000000010000009580000000000000757dccc2566d01ab88b45f86096c21cd3e0bd3a906b9ba100cac5022f85d650bf29dcde72ac39ef6a65954e39a50ca20e04814982ba2039b14ff84f5daa6cf9e28e02020763a1f89618c58c2def05e979def467b6ebdfb4f9197dea7c1310b0def2ce3c2d3764863a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x3, 0xc, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000000701000059000000b702000008000000b7030000110b0008850000000800000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r3, 0x0, 0x8, 0x0, &(0x7f0000001e80)="8ebfa8645a093258", 0x0, 0x81, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000001ec0)="9a6c62725847b592a5318f38af8b2c632121416a5830155171a56377d9491d14e06fca6f95311622e830e4a8069433c977be7172b664583ec035ee89c2210325cd091d0725ebbdae989d44dd49f769", 0x4, 0x0, 0xfffffffa}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000001fc0)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$vim2m(&(0x7f0000002080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000020c0)={0x1, 0x3, 0x0, "5a309a426be809a48aa9bc68b9de658caf5999a76c019fefcf54e97d739d47b9", 0x50313134}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000002040)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f00000003c0)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4007}, 0x40000) mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000680)={0x0, 0x0, 0x1f, 0x11, 0x845, &(0x7f00000006c0)="40639ebeaa2a64606b03f1d2e55a08d25ad300392b28a178cab61a8d65264aad9b1391ea8c9cf947e86a6ed829f3d0c3d60cc1dfd5a7cf7ec826b5501134ff8115a648966016a0d8efe753ba0c353e9f6a552d9913dee0546df79a248836d23b93ea04c29eaeb862540b39dbfbec0fbfd45143dd7f4a87f1b70af8fab7d922c70f670d3f7b853d8d7464beefb1478d7864de34dfaadba7a54c7def45a2680b3ba8e02aa4a499b4f7d0d78a56477b3d6d17ab2e7593b17314a395f3a39eb22e6b55b90e8799845e19161ef51308796b10e6a981d5bf8e19d453171bc2571b0f909905e81a598a14dcaa712e08aa373adb7aabdc223a79c1b54f52abd23989e7e78b2b9aea804b5272b1a54292a17141745a7c1df9d3e3bf4107cb5bcadf1cba3017606ccc16c00726ccde758f548795790dd853f382c0b89c17be40be968ab759c9e6f649e8fbd4abcdd8f825c00b968a909a2948d153f40662564cac1d22b29f0a8f63191c24da9a6d52317e7b1529ace3b5c2f1474019b8402196abade9afbb6c0e9cdf49c7a0aac8eb744962a9a7c7c220e1160faa2d20c2738b58e37c944a9117c4b23e2073b48d33b25bc3ac8c2936ecd4709504317c9faca518a80c77ad41dbb2a9a677267543cb6b71be9b705281d15572e5e4a0b44ea5734e0b507b41ab482cc76c15f705ea20109948903d726e65b40c2d1fe325aafcd570ce1d514776a7f30293b0e1d45f727a50d421daa4b72e6b20e3468c4526297b1ac70c5ea00321aedb156baadd4fbe15cdf32832fbe49729be9476c4cfc754583d9a9c4feee5b9719fbe7f2cc113440480e1ced18991dd289b923d138a3eba8fbf0870dad7ed2e59d47235b3600a5329310626f50d720bc98f42bd9da55188df97f1c5c3c4c075a04f8e40880223affabf9f7eac86c72eee7287194668d07e3c857e622bbc6d0bb6412daf831d07162d988e221cff9fbeb1d8901f74e1ab28573a9195e81f133baf721e4d678688d887a105b8cb4cfe85b832f42e68de803cc5224ae16280ba8e10d1f8237115190d95259699c9df1fdf27d6a313ba4382d966b20253cce553980959a6e217b4fc34531cec0b8a69f3a51d87b406c4846952161903038d305ec5b605a4425fa2641c3c8494321d454984f76d6a2f40fef46b816de903b8cc01cdb18248a8536f40f65d0374d477c999c2dcac197f347b13bf173d09c8b65cb52bc8a9e6e5b0c42f814d313049e534540b282db73176bb2b661d084ec1570c6ddfd7e04f49e36983c718341f873fd09c1368221046dd9fc1636d904a57d8756dbd77d66d5bc41441c9a4fd9115ecbb579753879521b6e57454c24bba41c1268f03d8cdfc6abae233dda6d34fba42cbd4d62df7b33805a8a71e84358bb573385b9a6501fa95d830c9f58628cbf2a825a09ba51f7b25433488a46678a12be35a"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000b00)=""/4096, 0x1000) getdents64(r7, &(0x7f0000001b00)=""/94, 0x5e) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x70bd2d, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x4, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) 194.658815ms ago: executing program 1 (id=358): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe0000000abfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000800)=""/222}, 0x78) 169.838855ms ago: executing program 6 (id=359): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x23d1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010f00000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES32=r4], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r5, 0x1}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="ffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e4ffffffffffff13010000000000000000000000320000b400000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0, r7}, 0xc) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES8=r2, @ANYRES32=0x0], 0xfd85) 0s ago: executing program 1 (id=360): r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x20006dde, &(0x7f00000002c0)={0x0, 0x682, 0x10, 0x1, 0x28b}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206030000000000000000000000000705000100070000000900020073797a32000000000c00078008001240600000000500050002000000050041420d64ede46366870710fa8065683a6e742c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{}, {@force}, {@nls={'nls', 0x3d, 'macromanian'}}]}, 0x1, 0x5df, &(0x7f0000000340)="$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") r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000940)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000a80)=0x10) mount(0x0, &(0x7f0000000ac0)='./sec\x00', &(0x7f0000000b00)='securityfs\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000b40)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x2280, 0x101) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000d40)='3', 0x4e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x40, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x1c, 0x0, 0x800, 0x0, 0x10, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000e40)='bridge0\x00') recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000009c0)={&(0x7f0000000a00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_to_batadv\x00', {0x3}, 0xfff3}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') lseek(r8, 0x400, 0x0) close_range(r5, r5, 0x2) kernel console output (not intermixed with test programs): 7.192321][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.201060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.210324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.232881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 57.274480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.287882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.300075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.309895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.318351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.328621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.337821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.347372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.363269][ T4270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 57.447110][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.461185][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.477101][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.491446][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.506089][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.519220][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.532564][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.548645][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.561340][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.581291][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.614882][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.623651][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.632344][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.642053][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.653835][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.962891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 57.972906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 57.993747][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.008796][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.017898][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.039607][ T4281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6'. [ 58.281480][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 58.297161][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 58.310388][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 58.321107][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 58.363506][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 58.375837][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.813571][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.839696][ T4297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.851116][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.871591][ T4303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9'. [ 58.931136][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.966444][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.974115][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.997047][ T4305] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11'. [ 59.168432][ T4307] loop0: detected capacity change from 0 to 16 [ 59.179387][ T4310] loop1: detected capacity change from 0 to 1024 [ 59.288474][ T4307] erofs: (device loop0): mounted with root inode @ nid 36. [ 59.434407][ T4307] overlayfs: failed to resolve './file0': -2 [ 59.500866][ T4310] hfsplus: catalog searching failed [ 59.671005][ T4315] FAULT_INJECTION: forcing a failure. [ 59.671005][ T4315] name failslab, interval 1, probability 0, space 0, times 1 [ 59.714547][ T4315] CPU: 1 PID: 4315 Comm: syz.0.13 Not tainted syzkaller #0 [ 59.721784][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 59.729177][ T9] hfsplus: b-tree write err: -5, ino 3 [ 59.731852][ T4315] Call Trace: [ 59.731878][ T4315] [ 59.731887][ T4315] dump_stack_lvl+0x188/0x250 [ 59.748220][ T4315] ? show_regs_print_info+0x20/0x20 [ 59.753402][ T4315] ? load_image+0x410/0x410 [ 59.757890][ T4315] ? __might_sleep+0xf0/0xf0 [ 59.762474][ T4315] ? __lock_acquire+0x7d40/0x7d40 [ 59.767477][ T4315] should_fail+0x383/0x4b0 [ 59.771892][ T4315] should_failslab+0x5/0x20 [ 59.776380][ T4315] slab_pre_alloc_hook+0x51/0xc0 [ 59.781317][ T4315] kmem_cache_alloc_trace+0x47/0x290 [ 59.786580][ T4315] ? nf_tables_newchain+0x1eed/0x2ad0 [ 59.791932][ T4315] ? nf_tables_register_hook+0x8e/0x310 [ 59.797458][ T4315] nf_tables_newchain+0x1eed/0x2ad0 [ 59.802643][ T4315] ? nf_tables_deltable+0xd90/0xd90 [ 59.807831][ T4315] ? __lock_acquire+0x7d40/0x7d40 [ 59.812842][ T4315] ? nf_tables_newtable+0xce0/0x1680 [ 59.818139][ T4315] ? __nla_parse+0x3c/0x50 [ 59.822546][ T4315] nfnetlink_rcv+0x1117/0x2450 [ 59.827314][ T4315] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 59.832874][ T4315] ? skb_clone+0x1f1/0x350 [ 59.832892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.842904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.846104][ T4315] ? rcu_lock_release+0x5/0x20 [ 59.859683][ T4315] ? __lock_acquire+0x7d40/0x7d40 [ 59.862894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 59.864701][ T4315] netlink_unicast+0x78f/0x940 [ 59.878265][ T4315] netlink_sendmsg+0x8ba/0xbe0 [ 59.882891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 59.883015][ T4315] ? netlink_getsockopt+0x570/0x570 [ 59.897004][ T4315] ? aa_sock_msg_perm+0x94/0x150 [ 59.901926][ T4315] ? apparmor_socket_sendmsg+0x88/0x230 [ 59.907451][ T4315] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 59.912715][ T4315] ? security_socket_sendmsg+0x7c/0xa0 [ 59.918153][ T4315] ? netlink_getsockopt+0x570/0x570 [ 59.923332][ T4315] ____sys_sendmsg+0x5be/0x8f0 [ 59.928077][ T4315] ? __sys_sendmsg_sock+0x30/0x30 [ 59.933081][ T4315] ? import_iovec+0x6f/0xa0 [ 59.937562][ T4315] ___sys_sendmsg+0x236/0x2e0 [ 59.942223][ T4315] ? __sys_sendmsg+0x290/0x290 [ 59.946983][ T4315] __se_sys_sendmsg+0x1b7/0x2a0 [ 59.951816][ T4315] ? __x64_sys_sendmsg+0x80/0x80 [ 59.956730][ T4315] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 59.962696][ T4315] ? lockdep_hardirqs_on+0x94/0x140 [ 59.967878][ T4315] do_syscall_64+0x4c/0xa0 [ 59.972273][ T4315] ? clear_bhb_loop+0x30/0x80 [ 59.976928][ T4315] ? clear_bhb_loop+0x30/0x80 [ 59.981582][ T4315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.987463][ T4315] RIP: 0033:0x7f5b42b941d9 [ 59.991854][ T4315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.011551][ T4315] RSP: 002b:00007f5b40dec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.019954][ T4315] RAX: ffffffffffffffda RBX: 00007f5b42e1bfa0 RCX: 00007f5b42b941d9 [ 60.027933][ T4315] RDX: 0000000000000000 RSI: 000020000000ae40 RDI: 0000000000000005 [ 60.035908][ T4315] RBP: 00007f5b42c2b888 R08: 0000000000000000 R09: 0000000000000000 [ 60.043873][ T4315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.051852][ T4315] R13: 00007f5b42e1c038 R14: 00007f5b42e1bfa0 R15: 00007ffc5c6874f8 [ 60.059830][ T4315] [ 60.126499][ T4320] loop3: detected capacity change from 0 to 256 [ 60.208670][ T4313] loop4: detected capacity change from 0 to 32768 [ 60.363854][ T4313] ======================================================= [ 60.363854][ T4313] WARNING: The mand mount option has been deprecated and [ 60.363854][ T4313] and is ignored by this kernel. Remove the mand [ 60.363854][ T4313] option from the mount to silence this warning. [ 60.363854][ T4313] ======================================================= [ 60.461057][ T4324] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15'. [ 61.123153][ T4320] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 61.162217][ T4313] JBD2: Ignoring recovery information on journal [ 61.162697][ T4320] FAT-fs (loop3): Filesystem has been set read-only [ 61.375679][ T4189] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 61.443651][ T4313] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 61.703905][ T25] audit: type=1800 audit(1791798523.430:2): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="bus" dev="loop4" ino=17058 res=0 errno=0 [ 62.241750][ T4317] loop0: detected capacity change from 0 to 32768 [ 62.305372][ T4317] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.13 (4317) [ 62.353289][ T4317] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 62.460975][ T4317] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 62.478253][ T4317] BTRFS info (device loop0): use zstd compression, level 3 [ 62.536155][ T4351] Illegal XDP return value 5, expect packet loss! [ 62.635588][ T4317] BTRFS info (device loop0): using free space tree [ 62.717432][ T4317] BTRFS info (device loop0): has skinny extents [ 63.084163][ T4317] BTRFS error (device loop0): open_ctree failed: -12 [ 63.188142][ T25] audit: type=1800 audit(1791798524.910:3): pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12" name="bus" dev="ramfs" ino=33033 res=0 errno=0 [ 63.273030][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 63.297178][ T25] audit: type=1800 audit(1791798524.990:4): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18" name="bus" dev="ramfs" ino=33845 res=0 errno=0 [ 63.814991][ T4389] loop2: detected capacity change from 0 to 512 [ 63.850034][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25'. [ 63.884779][ T4389] EXT4-fs (loop2): inline encryption not supported [ 63.891319][ T4389] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.962450][ T4390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23'. [ 64.651349][ T4389] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 64.696919][ T4395] Unknown options in mask b7f2 [ 64.753797][ T4389] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.26: bg 0: block 248: padding at end of block bitmap is not set [ 64.838880][ T4389] Quota error (device loop2): write_blk: dquota write failed [ 64.903231][ T4385] loop4: detected capacity change from 0 to 32768 [ 64.910663][ T4389] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 64.931005][ T4389] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.26: Failed to acquire dquot type 1 [ 65.147443][ T4389] EXT4-fs (loop2): 1 truncate cleaned up [ 65.328459][ T4385] JBD2: Ignoring recovery information on journal [ 65.520487][ T4389] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 65.606368][ T4399] loop3: detected capacity change from 0 to 4096 [ 65.710759][ T4385] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 65.765217][ T4399] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 65.816641][ T4385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.939690][ T4413] netlink: zone id is out of range [ 66.009675][ T25] audit: type=1804 audit(1791798527.730:5): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.22" name="/newroot/1/bus/file1" dev="loop4" ino=17059 res=1 errno=0 [ 66.131018][ T4389] syz.2.26 (4389) used greatest stack depth: 20864 bytes left [ 66.187376][ T4385] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 66.254793][ T4385] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 66.264703][ T4385] OCFS2: File system is now read-only. [ 66.270967][ T4385] (syz.4.22,4385,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 66.279763][ T4385] (syz.4.22,4385,1):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 66.289613][ T4385] (syz.4.22,4385,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 66.298545][ T4385] (syz.4.22,4385,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 66.308061][ T4385] (syz.4.22,4385,1):ocfs2_local_alloc_slide_window:1295 ERROR: status = -30 [ 66.322315][ T4385] (syz.4.22,4385,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 66.336571][ T4385] (syz.4.22,4385,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 66.546722][ T4385] (syz.4.22,4385,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 66.669883][ T4385] (syz.4.22,4385,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 66.742292][ T4385] (syz.4.22,4385,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 66.789903][ T4385] (syz.4.22,4385,0):ocfs2_lock_refcount_allocators:2908 ERROR: status = -30 [ 66.850348][ T4385] (syz.4.22,4385,1):ocfs2_make_clusters_writable:3254 ERROR: status = -30 [ 66.860233][ T4420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 66.903037][ T4385] (syz.4.22,4385,1):ocfs2_replace_cow:3414 ERROR: status = -30 [ 66.943907][ T4385] (syz.4.22,4385,1):ocfs2_refcount_cow_hunk:3489 ERROR: status = -30 [ 66.976983][ T4385] (syz.4.22,4385,1):ocfs2_refcount_cow:3533 ERROR: status = -30 [ 66.996042][ T4385] (syz.4.22,4385,1):ocfs2_prepare_inode_for_write:2348 ERROR: status = -30 [ 67.038273][ T4385] (syz.4.22,4385,0):ocfs2_file_write_iter:2457 ERROR: status = -30 [ 67.242835][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 67.283582][ T4301] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 67.337191][ T4434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34'. [ 67.724994][ T4301] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.844050][ T4301] usb 3-1: not running at top speed; connect to a high speed hub [ 68.006675][ T4301] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 68.175946][ T4452] loop1: detected capacity change from 0 to 512 [ 68.213225][ T4301] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 68.231339][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.270478][ T4301] usb 3-1: Product: syz [ 68.274935][ T4301] usb 3-1: Manufacturer: syz [ 68.279541][ T4301] usb 3-1: SerialNumber: syz [ 68.321749][ T4455] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.336290][ T4452] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 68.354602][ T4452] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.405693][ T4452] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 509 (only 1 groups) [ 68.735216][ T4301] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 68.943302][ T4301] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 68.965788][ T4301] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 69.121860][ T4472] loop4: detected capacity change from 0 to 512 [ 69.235717][ T4472] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 69.235820][ T4472] System zones: [ 69.293136][ T4472] 1-12 [ 69.309528][ T4472] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.44: missing EA_INODE flag [ 69.518749][ T4482] loop0: detected capacity change from 0 to 512 [ 69.521938][ T4472] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.44: error while reading EA inode 12 err=-117 [ 69.542050][ T4301] usb 3-1: invalid uac2 rates [ 69.556196][ T4301] usb 3-1: invalid uac2 rates [ 69.568303][ T4301] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 69.576960][ T4301] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 69.586727][ T4482] EXT4-fs (loop0): Test dummy encryption mode enabled [ 69.593312][ T4472] EXT4-fs (loop4): 1 orphan inode deleted [ 69.604283][ T4483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.45'. [ 69.623748][ T4482] EXT4-fs (loop0): Ignoring removed nobh option [ 69.628320][ T4472] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 69.631163][ T4482] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.692407][ T4485] loop1: detected capacity change from 0 to 512 [ 69.725941][ T4426] udc-core: couldn't find an available UDC or it's busy [ 69.738108][ T4485] EXT4-fs (loop1): Ignoring removed nobh option [ 69.742441][ T4426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.769570][ T4485] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.783207][ T4485] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.48: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 69.786776][ T4482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.823223][ T4301] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 69.846421][ T4485] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.48: ea_inode dec ref err=-117 [ 69.874477][ T4482] EXT4-fs (loop0): 1 truncate cleaned up [ 69.892913][ T4482] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,test_dummy_encryption=v1,debug_want_extra_isize=0x0000000000000068,lazytime,nobh,nombcache,noquota,,errors=continue. Quota mode: none. [ 69.894484][ T4485] EXT4-fs (loop1): 1 orphan inode deleted [ 69.997942][ T4301] usb 3-1: USB disconnect, device number 2 [ 70.013083][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,min_batch_time=0x000000000000000f,init_itable,nobh,lazytime,acl,init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 70.043112][ T4482] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.118596][ T4485] usb usb8: usbfs: process 4485 (syz.1.48) did not claim interface 0 before use [ 70.279275][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.476463][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 70.550432][ T4492] Zero length message leads to an empty skb [ 70.681075][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 70.690538][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 70.763479][ T4505] process 'syz.1.50' launched './file0' with NULL argv: empty string added [ 70.993000][ C0] net_ratelimit: 58 callbacks suppressed [ 71.003114][ T4301] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.162754][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.169628][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.264653][ T4504] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.273916][ T4504] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.282647][ T4504] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.291906][ T4504] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.332978][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 71.428336][ T4517] netlink: 56 bytes leftover after parsing attributes in process `syz.1.58'. [ 71.453868][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 71.492415][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 71.501463][ T4301] usb 3-1: unable to get BOS descriptor or descriptor too short [ 71.583239][ T4301] usb 3-1: config 121 has an invalid descriptor of length 105, skipping remainder of the config [ 71.632078][ T4301] usb 3-1: config 121 has 0 interfaces, different from the descriptor's value: 1 [ 71.668253][ T4521] loop4: detected capacity change from 0 to 4096 [ 71.684330][ T4522] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 71.904720][ T4529] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.989315][ T4530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.61'. [ 72.005284][ T4301] usb 3-1: string descriptor 0 read error: -22 [ 72.011582][ T4301] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 72.023779][ T4521] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.052451][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.364086][ T4376] usb 3-1: USB disconnect, device number 3 [ 72.427621][ T4534] loop1: detected capacity change from 0 to 512 [ 72.534603][ T4534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.546116][ T4534] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.691932][ T4539] FAULT_INJECTION: forcing a failure. [ 72.691932][ T4539] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.713592][ T4541] loop3: detected capacity change from 0 to 256 [ 72.732884][ T4539] CPU: 0 PID: 4539 Comm: syz.4.63 Not tainted syzkaller #0 [ 72.740104][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.750166][ T4539] Call Trace: [ 72.753445][ T4539] [ 72.756377][ T4539] dump_stack_lvl+0x188/0x250 [ 72.761064][ T4539] ? show_regs_print_info+0x20/0x20 [ 72.766367][ T4539] ? load_image+0x410/0x410 [ 72.770875][ T4539] ? __lock_acquire+0x7d40/0x7d40 [ 72.775903][ T4539] should_fail+0x383/0x4b0 [ 72.780329][ T4539] _copy_from_user+0x2e/0x170 [ 72.785011][ T4539] __sys_bpf+0x26d/0x6f0 [ 72.789261][ T4539] ? bpf_link_show_fdinfo+0x380/0x380 [ 72.789304][ T4539] __x64_sys_bpf+0x78/0x90 [ 72.789325][ T4539] do_syscall_64+0x4c/0xa0 [ 72.799322][ T4539] ? clear_bhb_loop+0x30/0x80 [ 72.799348][ T4539] ? clear_bhb_loop+0x30/0x80 [ 72.813280][ T4539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.819173][ T4539] RIP: 0033:0x7fd8f64771d9 [ 72.819194][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.819216][ T4539] RSP: 002b:00007fd8f46cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 72.819238][ T4539] RAX: ffffffffffffffda RBX: 00007fd8f66fefa0 RCX: 00007fd8f64771d9 [ 72.843396][ T4539] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 2000000000000000 [ 72.843412][ T4539] RBP: 00007fd8f650e888 R08: 0000000000000000 R09: 0000000000000000 [ 72.843424][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.843435][ T4539] R13: 00007fd8f66ff038 R14: 00007fd8f66fefa0 R15: 00007ffd825bd7f8 [ 72.843461][ T4539] [ 72.997025][ T4546] loop3: detected capacity change from 0 to 256 [ 73.203088][ T4377] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.222938][ C1] raw-gadget.0 gadget: ignoring, device is not running [ 73.393019][ T4377] usb 5-1: device descriptor read/64, error -32 [ 74.333094][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 74.593095][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 74.713122][ T4231] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 74.741240][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 74.835220][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.849010][ T1108] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 74.970022][ T4231] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 75.062447][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.193501][ T1108] usb 4-1: not running at top speed; connect to a high speed hub [ 75.248027][ T4231] usb 3-1: config 0 descriptor?? [ 75.334037][ T1108] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 75.342916][ T4377] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.431301][ T4231] pxrc 3-1:0.0: Could not find endpoint [ 75.488536][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.515932][ T4231] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 75.583077][ T4377] usb 5-1: Using ep0 maxpacket: 8 [ 75.609544][ T4553] sctp: [Deprecated]: syz.2.68 (pid 4553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.609544][ T4553] Use struct sctp_sack_info instead [ 75.642650][ T1108] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 75.840411][ T1108] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 75.955575][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.202887][ C1] net_ratelimit: 39 callbacks suppressed [ 76.227467][ T1108] usb 4-1: config 0 descriptor?? [ 76.286506][ T2175] cfg80211: failed to load regulatory.db [ 76.413822][ T1108] usb 4-1: can't set config #0, error -71 [ 76.588335][ T1108] usb 4-1: USB disconnect, device number 2 [ 76.613599][ T4377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.693207][ T4377] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 76.722363][ T4377] usb 5-1: can't read configurations, error -71 [ 76.776163][ T4377] usb usb5-port1: attempt power cycle [ 77.145617][ T4567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.74'. [ 77.222985][ T4377] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.243180][ T4376] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.474332][ T4377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.502377][ T4377] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 77.527193][ T4377] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 77.540254][ T4377] usb 5-1: New USB device found, idVendor=0a5c, idProduct=21e8, bcdDevice= 1.00 [ 77.551307][ T4376] usb 2-1: Using ep0 maxpacket: 32 [ 77.562171][ T4377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.603671][ T4555] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.622786][ T4555] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.631283][ T25] audit: type=1800 audit(1791798539.350:6): pid=4568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.71" name="bus" dev="ramfs" ino=33466 res=0 errno=0 [ 77.743456][ T4376] usb 2-1: unable to get BOS descriptor or descriptor too short [ 77.898056][ T4377] usb 5-1: USB disconnect, device number 4 [ 77.907356][ T4555] 9pnet: Insufficient options for proto=fd [ 77.923041][ T4555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.69'. [ 77.979246][ T2175] usb 3-1: USB disconnect, device number 4 [ 78.047457][ T4376] usb 2-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 78.058753][ T4376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.062924][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.077365][ T4376] usb 2-1: Product: syz [ 78.081537][ T4376] usb 2-1: Manufacturer: syz [ 78.089048][ T4376] usb 2-1: SerialNumber: syz [ 78.241074][ T4580] loop2: detected capacity change from 0 to 4096 [ 78.279611][ T4580] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 78.293049][ T4241] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.332949][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 78.451068][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 78.494554][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.529646][ T4590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.82'. [ 78.558482][ T4241] usb 4-1: Using ep0 maxpacket: 32 [ 78.564335][ T4376] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 78.573155][ T4231] usb 1-1: config index 0 descriptor too short (expected 8297, got 105) [ 78.590045][ T4376] usb 2-1: USB disconnect, device number 2 [ 78.671234][ T4596] loop4: detected capacity change from 0 to 2048 [ 78.749193][ T4231] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 78.758863][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.769845][ T4596] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 78.772028][ T4231] usb 1-1: Product: syz [ 78.791987][ T4596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.800999][ T4231] usb 1-1: Manufacturer: syz [ 78.810759][ T4231] usb 1-1: SerialNumber: syz [ 78.849500][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.883785][ T4241] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 78.903469][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 78.911613][ T4241] usb 4-1: Product: syz [ 78.911630][ T4241] usb 4-1: Manufacturer: syz [ 78.911645][ T4241] usb 4-1: SerialNumber: syz [ 78.938617][ T4241] usb 4-1: config 0 descriptor?? [ 79.001892][ T4241] usb 4-1: selecting invalid altsetting 3 [ 79.022968][ T4241] comedi comedi5: could not set alternate setting 3 in high speed [ 79.067210][ T4241] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 79.083579][ T4603] udc-core: couldn't find an available UDC or it's busy [ 79.110706][ T4609] blktrace: Concurrent blktraces are not allowed on loop0 [ 79.126085][ T4241] usbdux: probe of 4-1:0.0 failed with error -22 [ 79.148873][ T4603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.160213][ T4262] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 79.202434][ T4187] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 79.210063][ T4241] usb 4-1: USB disconnect, device number 3 [ 79.218511][ T4187] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 79.251267][ T4187] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 79.259029][ T4262] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 79.280445][ T4187] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 79.343630][ T4231] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 79.361509][ T4612] dlm: dev_write: no op 0 74000000000000 [ 79.490767][ T4231] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 79.510687][ T4231] usb 1-1: USB disconnect, device number 2 [ 79.527089][ T4615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.86'. [ 79.699477][ T4617] loop4: detected capacity change from 0 to 512 [ 79.730240][ T4617] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.759077][ T4617] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.87: invalid indirect mapped block 32768 (level 2) [ 79.774784][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.921979][ T4617] EXT4-fs (loop4): Remounting filesystem read-only [ 80.018951][ T4617] EXT4-fs (loop4): 1 orphan inode deleted [ 80.039782][ T4617] EXT4-fs (loop4): 1 truncate cleaned up [ 80.071488][ T4617] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,usrquota,. Quota mode: writeback. [ 80.102168][ T4622] loop3: detected capacity change from 0 to 32768 [ 80.122086][ T4634] futex_wake_op: syz.0.91 tries to shift op by 144; fix this program [ 80.131234][ T4634] futex_wake_op: syz.0.91 tries to shift op by 144; fix this program [ 80.151829][ T4622] (syz.3.88,4622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.165577][ T4622] (syz.3.88,4622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 80.194673][ T4625] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 80.251291][ T4622] JBD2: Ignoring recovery information on journal [ 80.281762][ T4633] comedi comedi3: board detection failed [ 80.318483][ T4622] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 80.479085][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 80.573109][ T4651] loop2: detected capacity change from 0 to 1024 [ 80.923376][ T4649] loop3: detected capacity change from 0 to 8192 [ 80.949454][ T4649] FAT-fs (loop3): Unrecognized mount option "017777777777777777777770xffffffffffffffff" or missing value [ 80.967304][ T4656] udc-core: couldn't find an available UDC or it's busy [ 80.988208][ T4656] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.154207][ T4231] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 81.232913][ C0] net_ratelimit: 71 callbacks suppressed [ 81.239288][ T4301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.403894][ T4661] capability: warning: `syz.1.98' uses deprecated v2 capabilities in a way that may be insecure [ 81.440456][ T4661] loop1: detected capacity change from 0 to 1024 [ 81.459003][ T4662] device syzkaller0 entered promiscuous mode [ 81.474938][ T4661] hfsplus: unable to parse mount options [ 81.482990][ T4301] usb 1-1: Using ep0 maxpacket: 8 [ 81.513340][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.538494][ T4231] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.547902][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.583934][ T4231] usb 3-1: config 0 descriptor?? [ 81.648632][ T4667] loop3: detected capacity change from 0 to 256 [ 81.757627][ T4667] loop3: detected capacity change from 0 to 2048 [ 81.923301][ T4301] usb 1-1: string descriptor 0 read error: -22 [ 81.929764][ T4301] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 81.939394][ T4231] usbhid 3-1:0.0: can't add hid device: -71 [ 81.945836][ T4231] usbhid: probe of 3-1:0.0 failed with error -71 [ 81.961785][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.983543][ T4231] usb 3-1: USB disconnect, device number 5 [ 82.010694][ T4675] overlayfs: failed to set xattr on upper [ 82.018638][ T4675] overlayfs: ...falling back to index=off,metacopy=off. [ 82.026237][ T4675] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 82.222412][ T4675] loop3: detected capacity change from 0 to 32768 [ 82.293537][ T4301] usb 1-1: MIDIStreaming interface descriptor not found [ 82.332540][ T4675] XFS (loop3): Mounting V5 Filesystem [ 82.388655][ T4301] usb 1-1: USB disconnect, device number 3 [ 82.413564][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 82.472791][ T4675] XFS (loop3): Ending clean mount [ 82.483804][ T4675] XFS (loop3): Unmounting Filesystem [ 82.495472][ T4697] fuse: Bad value for 'fd' [ 82.502702][ T4697] capability: warning: `syz.1.106' uses 32-bit capabilities (legacy support in use) [ 82.555804][ T4699] sctp: [Deprecated]: syz.1.107 (pid 4699) Use of int in max_burst socket option deprecated. [ 82.555804][ T4699] Use struct sctp_assoc_value instead [ 82.629594][ T4701] device vlan0 entered promiscuous mode [ 82.676122][ T4693] udevd[4693]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.715047][ T4701] team0: Port device vlan0 added [ 82.729247][ T4188] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 82.744660][ T4701] syz.1.108 (4701) used greatest stack depth: 20208 bytes left [ 82.758191][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 82.779366][ T4188] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 82.801529][ T4231] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 82.823668][ T4231] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 82.858488][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 82.863228][ T4231] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.867441][ T4188] EXT4-fs error (device loop4): ext4_lookup:1860: inode #15: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 82.929651][ T4704] binder: 4703:4704 ioctl c018620c 200000000040 returned -1 [ 82.964577][ T4188] EXT4-fs (loop4): Remounting filesystem read-only [ 83.017268][ T4705] NILFS (loop1): invalid segment: Magic number mismatch [ 83.061203][ T4705] NILFS (loop1): trying rollback from an earlier position [ 83.073387][ T4231] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 83.082455][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.109110][ T4231] usb 3-1: Product: syz [ 83.124011][ T4705] NILFS (loop1): recovery complete [ 83.132325][ T4231] usb 3-1: Manufacturer: syz [ 83.139806][ T4711] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.150866][ T4231] usb 3-1: SerialNumber: syz [ 83.170123][ T4705] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 83.213269][ T4654] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 83.493448][ T4254] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.646119][ T4721] input: syz0 as /devices/virtual/input/input5 [ 84.122978][ T4254] usb 4-1: Using ep0 maxpacket: 32 [ 84.243100][ T4254] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 33, using maximum allowed: 30 [ 84.256762][ T4732] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 84.293232][ T4254] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.310747][ T4254] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 84.329839][ T4737] set_capacity_and_notify: 1 callbacks suppressed [ 84.329850][ T4737] loop0: detected capacity change from 0 to 64 [ 84.346289][ T4254] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.365959][ T4254] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 84.403376][ T4254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.480781][ T4254] usb 4-1: config 0 descriptor?? [ 84.519257][ T4231] usb 3-1: USB disconnect, device number 6 [ 84.559071][ T4254] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 84.581259][ T4743] loop2: detected capacity change from 0 to 164 [ 84.763859][ T3542] bcm5974 4-1:0.0: could not read from device [ 84.879769][ T4254] usb 4-1: USB disconnect, device number 4 [ 84.904570][ T3542] bcm5974 4-1:0.0: could not read from device [ 84.955311][ T4187] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 84.981668][ T4764] loop0: detected capacity change from 0 to 1024 [ 85.017251][ T4764] hfsplus: invalid length 1033 has been corrected to 255 [ 85.042311][ T4764] hfsplus: invalid length 1033 has been corrected to 255 [ 85.050250][ T4187] ISOFS: unable to read i-node block [ 85.123411][ T4187] ISOFS: unable to read i-node block [ 85.138597][ T4404] hfsplus: invalid length 1033 has been corrected to 255 [ 85.169237][ T4404] hfsplus: b-tree write err: -5, ino 25 [ 85.195418][ T4404] hfsplus: b-tree write err: -5, ino 4 [ 85.201762][ T4404] hfsplus: invalid length 1033 has been corrected to 255 [ 85.220905][ T4404] hfsplus: b-tree write err: -5, ino 2 [ 85.272564][ T4692] udevd[4692]: Error opening device "/dev/input/event4": No such file or directory [ 85.382559][ T4692] udevd[4692]: Unable to EVIOCGABS device "/dev/input/event4" [ 85.414080][ T4772] overlayfs: filesystem on './file0' not supported as upperdir [ 85.424615][ T4692] udevd[4692]: Unable to EVIOCGABS device "/dev/input/event4" [ 85.432215][ T4692] udevd[4692]: Unable to EVIOCGABS device "/dev/input/event4" [ 85.466259][ T4740] chnl_net:caif_netlink_parms(): no params data found [ 85.479979][ T4692] udevd[4692]: Unable to EVIOCGABS device "/dev/input/event4" [ 86.003362][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.010558][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.022398][ T4740] device bridge_slave_0 entered promiscuous mode [ 86.062526][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.085856][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.108358][ T4740] device bridge_slave_1 entered promiscuous mode [ 86.243962][ T4404] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.352948][ C0] net_ratelimit: 62 callbacks suppressed [ 86.379686][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.436616][ T4404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.524931][ T4241] Bluetooth: hci3: command 0x0409 tx timeout [ 86.550372][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.567795][ T4769] loop0: detected capacity change from 0 to 40427 [ 86.575542][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 86.621244][ T4797] batman_adv: Cannot find parent device [ 86.637726][ T4769] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 86.676530][ T4798] loop1: detected capacity change from 0 to 1024 [ 86.695275][ T4404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.757919][ T4769] F2FS-fs (loop0): invalid crc value [ 86.779533][ T4798] EXT4-fs (loop1): inline encryption not supported [ 86.840161][ T4798] EXT4-fs (loop1): inline encryption not supported [ 86.846901][ T4769] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.861620][ T4792] loop3: detected capacity change from 0 to 40427 [ 86.881296][ T4404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.898342][ T4798] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 86.935777][ T4798] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.038250][ T4740] team0: Port device team_slave_0 added [ 87.050308][ T4740] team0: Port device team_slave_1 added [ 87.070399][ T4769] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.169387][ T4798] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,inlinecrypt,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: none. [ 87.207867][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.214856][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.214878][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.252259][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.259542][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.286356][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.449739][ T4186] attempt to access beyond end of device [ 87.449739][ T4186] loop0: rw=2049, want=45112, limit=40427 [ 87.631240][ T4740] device hsr_slave_0 entered promiscuous mode [ 87.653142][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.679042][ T4740] device hsr_slave_1 entered promiscuous mode [ 87.701254][ T4740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.729770][ T4740] Cannot create hsr debugfs directory [ 87.863210][ T4231] usb 2-1: device descriptor read/64, error -71 [ 88.143144][ T4231] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.172497][ T4792] loop3: detected capacity change from 0 to 40427 [ 88.240998][ T4792] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 88.267110][ T4792] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.336186][ T4231] usb 2-1: device descriptor read/64, error -71 [ 88.343511][ T4792] F2FS-fs (loop3): invalid crc value [ 88.396248][ T4792] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.453501][ T4231] usb usb2-port1: attempt power cycle [ 88.549025][ T4792] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.558313][ T4792] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.597579][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 88.730764][ T4835] netlink: 52 bytes leftover after parsing attributes in process `syz.0.138'. [ 88.753922][ T4802] chnl_net:caif_netlink_parms(): no params data found [ 88.863064][ T4231] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.953270][ T4231] usb 2-1: device descriptor read/8, error -71 [ 89.082877][ T4377] Bluetooth: hci1: command 0x0409 tx timeout [ 89.123190][ T4802] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.143375][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.169643][ T4802] device bridge_slave_0 entered promiscuous mode [ 89.222914][ T4231] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.230741][ T4802] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.242679][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.269506][ T4802] device bridge_slave_1 entered promiscuous mode [ 89.313415][ T4231] usb 2-1: device descriptor read/8, error -71 [ 89.330301][ T4837] loop0: detected capacity change from 0 to 32768 [ 89.414626][ T4837] (syz.0.138,4837,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ÿÿ00000000000000000000003acl" or missing value [ 89.433212][ T4231] usb usb2-port1: unable to enumerate USB device [ 89.439676][ T4846] loop3: detected capacity change from 0 to 256 [ 89.456274][ T4802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.465581][ T4837] (syz.0.138,4837,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 89.485125][ T4802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.745026][ T4802] team0: Port device team_slave_0 added [ 89.829769][ T4740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.884203][ T4802] team0: Port device team_slave_1 added [ 90.007929][ T4740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.043974][ T4740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.082925][ T4273] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.184233][ T4837] relay: one or more items not logged [item size (48) > sub-buffer size (10)] [ 90.206617][ T4802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.226184][ T4802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.261914][ T4802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.297036][ T4740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.353456][ T4802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.364910][ T4802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.421355][ T4802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.476338][ T4404] device hsr_slave_0 left promiscuous mode [ 90.494379][ T4404] device hsr_slave_1 left promiscuous mode [ 90.509578][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.533206][ T4273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.540590][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.552010][ T4273] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 90.582883][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.601481][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.622830][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.632813][ T4404] device bridge_slave_1 left promiscuous mode [ 90.654315][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.679557][ T4376] Bluetooth: hci3: command 0x040f tx timeout [ 90.723056][ T4404] device bridge_slave_0 left promiscuous mode [ 90.743132][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.788330][ T4404] device veth1_macvtap left promiscuous mode [ 90.801920][ T4404] device veth0_macvtap left promiscuous mode [ 90.808383][ T4404] device veth1_vlan left promiscuous mode [ 90.822580][ T4404] device veth0_vlan left promiscuous mode [ 90.956429][ T4273] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 91.163066][ T4376] Bluetooth: hci1: command 0x041b tx timeout [ 91.338890][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 91.379938][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 91.424867][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.473462][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.658116][ T4404] bond0 (unregistering): Released all slaves [ 91.780374][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 91.802900][ C1] net_ratelimit: 61 callbacks suppressed [ 91.832931][ T4273] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 06:94:bc:44:38:f7 [ 91.910470][ T4273] usb 4-1: USB disconnect, device number 5 [ 91.947565][ T4273] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 91.999331][ T4802] device hsr_slave_0 entered promiscuous mode [ 92.036580][ T4802] device hsr_slave_1 entered promiscuous mode [ 92.058321][ T4802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.087289][ T4802] Cannot create hsr debugfs directory [ 92.265132][ T4888] loop1: detected capacity change from 0 to 16 [ 92.360102][ T4888] erofs: Unknown parameter '' [ 92.404774][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.543610][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.572354][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.625774][ T4740] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.708772][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.738030][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.759093][ T4241] Bluetooth: hci3: command 0x0419 tx timeout [ 92.773476][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.780576][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.837356][ T4898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 92.980512][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.990706][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.027332][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.051730][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.058845][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.099213][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.124903][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.143769][ T4917] loop1: detected capacity change from 0 to 16 [ 93.167746][ T4917] erofs: (device loop1): mounted with root inode @ nid 36. [ 93.245338][ T4241] Bluetooth: hci1: command 0x040f tx timeout [ 93.285572][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.314293][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.332505][ T4922] udc-core: couldn't find an available UDC or it's busy [ 93.367843][ T4740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.374391][ T4922] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.412500][ T4740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.606715][ T4273] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.628861][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.649141][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.673477][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.731705][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.759267][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.793547][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.821959][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.851630][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.873254][ T4273] usb 2-1: Using ep0 maxpacket: 8 [ 94.039888][ T4273] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.133588][ T4273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 152, changing to 7 [ 94.215674][ T4802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 94.286700][ T4802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 94.356082][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.373264][ T4273] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 94.382339][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.399610][ T4273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.410505][ T4197] Bluetooth: Frame is too long (len 18, expected len 4) [ 94.429495][ T4273] usb 2-1: Product: syz [ 94.440866][ T4802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 94.441863][ T4273] usb 2-1: Manufacturer: syz [ 94.452393][ T4273] usb 2-1: SerialNumber: syz [ 94.507512][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.546643][ T4802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 94.844482][ T4802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.897595][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.913675][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.955862][ T4802] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.990629][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.017024][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.052471][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.059611][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.097949][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.139758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.153329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.187140][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.194251][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.201945][ T4937] loop3: detected capacity change from 0 to 40427 [ 95.249555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.276782][ T4937] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(1024) [ 95.313146][ T4376] Bluetooth: hci1: command 0x0419 tx timeout [ 95.326921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.347270][ T4937] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 95.426343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.494925][ T4937] F2FS-fs (loop3): build fault injection attr: rate: 15, type: 0x1ffff [ 95.596101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.635280][ T4937] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x3bf [ 95.767835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.864277][ T4937] F2FS-fs (loop3): invalid crc value [ 95.969762][ T4937] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x48a3/0x7050 [ 95.989393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.111227][ T4937] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 96.142134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.303265][ T4273] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.323941][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.336979][ T4273] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 96.361157][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.373636][ T4273] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 96.405479][ T4273] usb 2-1: 2:1 : unsupported sample bitwidth 2 in 7 bytes [ 96.430644][ T4740] device veth0_vlan entered promiscuous mode [ 96.444270][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.473358][ T4273] usb 2-1: USB disconnect, device number 7 [ 96.499545][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.538262][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.570151][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.594733][ T4967] netlink: 244 bytes leftover after parsing attributes in process `syz.1.156'. [ 96.639315][ T4802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.701102][ T4802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.765507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.791428][ T4970] FAULT_INJECTION: forcing a failure. [ 96.791428][ T4970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.810704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.826886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.842259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.859333][ T4693] udevd[4693]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.877498][ T4971] loop3: detected capacity change from 0 to 2048 [ 96.891879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.899318][ T4970] CPU: 1 PID: 4970 Comm: syz.0.158 Not tainted syzkaller #0 [ 96.906601][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.906613][ T4970] Call Trace: [ 96.906619][ T4970] [ 96.906627][ T4970] dump_stack_lvl+0x188/0x250 [ 96.906652][ T4970] ? show_regs_print_info+0x20/0x20 [ 96.906671][ T4970] ? load_image+0x410/0x410 [ 96.906691][ T4970] ? __lock_acquire+0x7d40/0x7d40 [ 96.906716][ T4970] should_fail+0x383/0x4b0 [ 96.906738][ T4970] _copy_from_user+0x2e/0x170 [ 96.906757][ T4970] ___sys_recvmsg+0x173/0x5c0 [ 96.906776][ T4970] ? __sys_recvmsg+0x280/0x280 [ 96.927954][ T4970] ? __fget_files+0x402/0x470 [ 96.947030][ T4970] ? __fdget+0x18b/0x210 [ 96.956332][ T4970] ? do_recvmmsg+0x18e/0x7f0 [ 96.956358][ T4970] do_recvmmsg+0x360/0x7f0 [ 96.956384][ T4970] ? __sys_recvmmsg+0x290/0x290 [ 96.956411][ T4970] ? __context_tracking_exit+0x4c/0x80 [ 96.956433][ T4970] ? __lock_acquire+0x7d40/0x7d40 [ 96.956459][ T4970] __x64_sys_recvmmsg+0x195/0x250 [ 96.956481][ T4970] ? do_recvmmsg+0x7f0/0x7f0 [ 96.956503][ T4970] ? lockdep_hardirqs_on+0x94/0x140 [ 96.970213][ T4970] do_syscall_64+0x4c/0xa0 [ 96.979171][ T4970] ? clear_bhb_loop+0x30/0x80 [ 96.979194][ T4970] ? clear_bhb_loop+0x30/0x80 [ 96.979213][ T4970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.994763][ T4970] RIP: 0033:0x7f5b42b941d9 [ 96.994782][ T4970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.994796][ T4970] RSP: 002b:00007f5b40dec028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 96.994815][ T4970] RAX: ffffffffffffffda RBX: 00007f5b42e1bfa0 RCX: 00007f5b42b941d9 [ 96.994827][ T4970] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000004 [ 96.994839][ T4970] RBP: 00007f5b40dec090 R08: 0000000000000000 R09: 0000000000000000 [ 96.994850][ T4970] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 96.994861][ T4970] R13: 00007f5b42e1c038 R14: 00007f5b42e1bfa0 R15: 00007ffc5c6874f8 [ 96.994885][ T4970] [ 97.109267][ T4971] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27742, location=27742 [ 97.152930][ C1] net_ratelimit: 54 callbacks suppressed [ 97.162771][ T4971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.198293][ T4740] device veth1_vlan entered promiscuous mode [ 97.223969][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.339193][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.364101][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.414617][ T4740] device veth0_macvtap entered promiscuous mode [ 97.444955][ T4740] device veth1_macvtap entered promiscuous mode [ 97.537705][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.552275][ T4967] loop1: detected capacity change from 0 to 32768 [ 97.587123][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.622971][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.659915][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.681128][ T4988] loop3: detected capacity change from 0 to 4096 [ 97.688529][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.707627][ T4967] XFS (loop1): Mounting V5 Filesystem [ 97.726602][ T4988] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 97.760381][ T4988] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 97.772343][ T4988] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 97.782894][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.784490][ T4988] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 97.814332][ T4988] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 97.826177][ T4988] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 97.839279][ T4988] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 97.860533][ T4988] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 97.873119][ T4988] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 97.888704][ T4988] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 97.911025][ T4967] XFS (loop1): Ending clean mount [ 97.915424][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.926738][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.943779][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.955156][ T4988] ntfs: volume version 3.1. [ 97.972414][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.014528][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.058240][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.125108][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.134724][ T4185] XFS (loop1): Unmounting Filesystem [ 98.160522][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.210159][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.236286][ T4988] loop3: detected capacity change from 0 to 1024 [ 98.249107][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.288062][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.312896][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.343843][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.354022][ T4740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.364529][ T4740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.375721][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.385789][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.402283][ T4988] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,nolazytime,nogrpid,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: none. [ 98.454981][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.506525][ T4740] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.565590][ T4740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.574443][ T4740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.583221][ T4740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.688011][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.714373][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.796376][ T4802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.954498][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.976213][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.058162][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.075676][ T5039] FAULT_INJECTION: forcing a failure. [ 99.075676][ T5039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.140601][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.147588][ T5039] CPU: 0 PID: 5039 Comm: syz.3.168 Not tainted syzkaller #0 [ 99.155689][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.163926][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.165738][ T5039] Call Trace: [ 99.165747][ T5039] [ 99.165755][ T5039] dump_stack_lvl+0x188/0x250 [ 99.165780][ T5039] ? show_regs_print_info+0x20/0x20 [ 99.183890][ T5039] ? load_image+0x410/0x410 [ 99.183916][ T5039] ? __lock_acquire+0x7d40/0x7d40 [ 99.183943][ T5039] should_fail+0x383/0x4b0 [ 99.183968][ T5039] _copy_from_user+0x2e/0x170 [ 99.183985][ T5039] ___sys_recvmsg+0x173/0x5c0 [ 99.184006][ T5039] ? __sys_recvmsg+0x280/0x280 [ 99.203322][ T5039] ? __lock_acquire+0x7d40/0x7d40 [ 99.203354][ T5039] ? __might_fault+0xb3/0x110 [ 99.217406][ T5039] do_recvmmsg+0x360/0x7f0 [ 99.217437][ T5039] ? __sys_recvmmsg+0x290/0x290 [ 99.236342][ T5039] ? __context_tracking_exit+0x4c/0x80 [ 99.241827][ T5039] ? __lock_acquire+0x7d40/0x7d40 [ 99.241857][ T5039] __x64_sys_recvmmsg+0x195/0x250 [ 99.241879][ T5039] ? do_recvmmsg+0x7f0/0x7f0 [ 99.241898][ T5039] ? lockdep_hardirqs_on+0x94/0x140 [ 99.241920][ T5039] do_syscall_64+0x4c/0xa0 [ 99.241937][ T5039] ? clear_bhb_loop+0x30/0x80 [ 99.241955][ T5039] ? clear_bhb_loop+0x30/0x80 [ 99.241974][ T5039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.241994][ T5039] RIP: 0033:0x7f0bce5841d9 [ 99.242011][ T5039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.242026][ T5039] RSP: 002b:00007f0bcc7dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 99.242047][ T5039] RAX: ffffffffffffffda RBX: 00007f0bce80bfa0 RCX: 00007f0bce5841d9 [ 99.242060][ T5039] RDX: 0000000000000002 RSI: 0000200000000200 RDI: 0000000000000004 [ 99.242072][ T5039] RBP: 00007f0bcc7dc090 R08: 0000000000000000 R09: 0000000000000000 [ 99.242083][ T5039] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 99.242094][ T5039] R13: 00007f0bce80c038 R14: 00007f0bce80bfa0 R15: 00007ffd613c0628 [ 99.242121][ T5039] [ 99.379003][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.527993][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.541517][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.640435][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.662553][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.697947][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.727898][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.765343][ T4802] device veth0_vlan entered promiscuous mode [ 99.777178][ T4802] device veth1_vlan entered promiscuous mode [ 99.890798][ T4802] device veth0_macvtap entered promiscuous mode [ 99.912476][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.939297][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.985510][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.021620][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.054684][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.112872][ T4802] device veth1_macvtap entered promiscuous mode [ 100.178505][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.217955][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.248253][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.279188][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.315770][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.342017][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.364005][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.403069][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.436657][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.457128][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.505743][ T4802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.535162][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.550231][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.558333][ T5059] loop3: detected capacity change from 0 to 40427 [ 100.588990][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.621945][ T5059] F2FS-fs (loop3): invalid crc value [ 100.637233][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.674569][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.698813][ T5059] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.704437][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.736071][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.746622][ T5089] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 100.772587][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.794452][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.805953][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.816625][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.826856][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.837763][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.849525][ T4802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.896063][ T5059] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.938452][ T5098] device ip6gre1 entered promiscuous mode [ 100.970578][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.009147][ T5102] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.032106][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.174887][ T4802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.220344][ T4802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.317504][ T4802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.353043][ T4802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.366704][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.471352][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.499535][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.537558][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.593105][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.762225][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.828605][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.917318][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.926117][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.943253][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 101.951785][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.963243][ T5108] netlink: 'syz.5.179': attribute type 4 has an invalid length. [ 102.003091][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.089635][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.110648][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.169664][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.189288][ T4189] attempt to access beyond end of device [ 102.189288][ T4189] loop3: rw=2049, want=45112, limit=40427 [ 102.443115][ C1] net_ratelimit: 127 callbacks suppressed [ 103.161374][ T5160] loop5: detected capacity change from 0 to 4096 [ 103.274276][ T5160] __ntfs_error: 13 callbacks suppressed [ 103.274288][ T5160] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 103.279917][ T5160] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 103.373458][ T5160] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 103.405201][ T5160] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 103.494858][ T5160] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 103.586306][ T5160] ntfs: volume version 3.1. [ 103.630206][ T5160] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 103.693434][ T5160] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 103.813041][ T5160] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 103.832959][ T5160] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 103.844378][ T5160] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 104.142936][ T4552] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 104.392922][ T4552] usb 7-1: Using ep0 maxpacket: 16 [ 104.513307][ T4552] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 104.548538][ T4552] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 104.579830][ T4552] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.631187][ T5217] loop5: detected capacity change from 0 to 4096 [ 104.653175][ T4552] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 104.692778][ T4552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.734465][ T4552] usb 7-1: config 0 descriptor?? [ 104.769432][ T5217] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 104.824620][ T4552] pxrc 7-1:0.0: Could not find endpoint [ 104.878403][ T4552] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 104.887148][ T5210] loop1: detected capacity change from 0 to 32768 [ 104.945475][ T5210] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.200 (5210) [ 105.059104][ T5187] sctp: [Deprecated]: syz.6.196 (pid 5187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.059104][ T5187] Use struct sctp_sack_info instead [ 105.117372][ T5210] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 105.139156][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.175755][ T5210] BTRFS info (device loop1): force clearing of disk cache [ 105.213347][ T5210] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 105.247466][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.281523][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.289213][ T5210] BTRFS info (device loop1): trying to use backup root at mount time [ 105.310404][ T5210] BTRFS info (device loop1): enabling auto defrag [ 105.336652][ T5210] BTRFS info (device loop1): max_inline at 6 [ 105.342652][ T5210] BTRFS info (device loop1): enabling disk space caching [ 105.497756][ T5210] BTRFS info (device loop1): disk space caching is enabled [ 105.525549][ T5210] BTRFS info (device loop1): has skinny extents [ 105.541000][ T5238] device bridge_slave_0 left promiscuous mode [ 105.600918][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.772501][ T5238] device bridge_slave_1 left promiscuous mode [ 105.790509][ T5210] BTRFS info (device loop1): enabling ssd optimizations [ 105.817608][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.845604][ T5210] BTRFS info (device loop1): clearing free space tree [ 105.880213][ T5210] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.904073][ T5210] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.921148][ T5238] bond0: (slave bond_slave_0): Releasing backup interface [ 106.016849][ T5238] bond0: (slave bond_slave_1): Releasing backup interface [ 106.036098][ T4174] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.230807][ T5238] team0: Port device team_slave_0 removed [ 106.267432][ T5238] team0: Port device team_slave_1 removed [ 106.294461][ T5238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.313001][ T5238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.327148][ T5241] loop5: detected capacity change from 0 to 32768 [ 106.350508][ T5238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.370923][ T5238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.604800][ T5236] tipc: Started in network mode [ 106.617959][ T5236] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.635813][ T5236] tipc: New replicast peer: 172.20.20.187 [ 106.641859][ T5265] loop3: detected capacity change from 0 to 512 [ 106.650166][ T5236] tipc: Enabled bearer , priority 10 [ 106.725371][ T1108] usb 7-1: USB disconnect, device number 2 [ 106.844861][ T5265] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.867114][ T5278] netlink: 32 bytes leftover after parsing attributes in process `syz.0.208'. [ 106.925273][ T5281] loop6: detected capacity change from 0 to 1024 [ 106.945861][ T5280] loop5: detected capacity change from 0 to 764 [ 107.163999][ T5280] Symlink component flag not implemented [ 107.184511][ T5279] loop1: detected capacity change from 0 to 256 [ 107.243502][ T5279] exfat: Deprecated parameter 'namecase' [ 107.249185][ T5279] exfat: Deprecated parameter 'namecase' [ 107.265236][ T5279] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 107.322266][ T5280] Symlink component flag not implemented [ 107.422904][ T5274] validate_nla: 56 callbacks suppressed [ 107.422917][ T5274] netlink: 'syz.5.207': attribute type 10 has an invalid length. [ 107.487221][ C0] net_ratelimit: 68 callbacks suppressed [ 107.502277][ T5274] device rose10 entered promiscuous mode [ 107.643164][ T5291] loop6: detected capacity change from 0 to 8 [ 107.764542][ T5291] SQUASHFS error: zlib decompression failed, data probably corrupt [ 107.774006][ T2175] tipc: Node number set to 2886997162 [ 107.780706][ T5296] loop5: detected capacity change from 0 to 2048 [ 107.873533][ T5291] SQUASHFS error: Failed to read block 0x9b: -5 [ 107.879830][ T5291] SQUASHFS error: Unable to read metadata cache entry [99] [ 107.901115][ T5296] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=27742, location=27742 [ 108.003741][ T5291] SQUASHFS error: Unable to read inode 0x127 [ 108.040529][ T5296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.533794][ T5298] loop3: detected capacity change from 0 to 131072 [ 108.559538][ T4552] Bluetooth: hci0: command 0x0406 tx timeout [ 108.660546][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f74e000: rx timeout, send abort [ 108.696555][ T5298] F2FS-fs (loop3): invalid crc value [ 108.848856][ T5298] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.886119][ T5298] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 108.899160][ T5298] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 109.033036][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.161587][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801fb1d400: rx timeout, send abort [ 109.170013][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f74e000: abort rx timeout. Force session deactivation [ 109.442897][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 109.563265][ T1108] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 109.593155][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.625375][ T1108] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.669812][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801fb1d400: abort rx timeout. Force session deactivation [ 109.701368][ T1108] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 109.742125][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.782626][ T1108] usb 6-1: config 0 descriptor?? [ 109.844965][ T1108] pxrc 6-1:0.0: Could not find endpoint [ 109.851276][ T1108] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 110.014345][ T5322] loop6: detected capacity change from 0 to 40427 [ 110.098077][ T5316] sctp: [Deprecated]: syz.5.216 (pid 5316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.098077][ T5316] Use struct sctp_sack_info instead [ 110.121025][ T5331] loop1: detected capacity change from 0 to 32768 [ 110.196721][ T5322] F2FS-fs (loop6): invalid crc value [ 110.213426][ T5331] gfs2: Unknown parameter '' [ 110.266608][ T5322] F2FS-fs (loop6): Found nat_bits in checkpoint [ 110.496008][ T5322] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 111.024335][ T4802] attempt to access beyond end of device [ 111.024335][ T4802] loop6: rw=2049, want=45112, limit=40427 [ 111.545502][ T1108] usb 6-1: USB disconnect, device number 2 [ 113.002897][ C1] net_ratelimit: 70 callbacks suppressed [ 118.202916][ C1] net_ratelimit: 71 callbacks suppressed [ 123.322180][ T5477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.220'. [ 123.352217][ T5474] loop5: detected capacity change from 0 to 512 [ 123.364450][ T5477] netlink: 56 bytes leftover after parsing attributes in process `syz.0.220'. [ 123.392974][ C1] net_ratelimit: 68 callbacks suppressed [ 123.442434][ T5477] device netdevsim0 entered promiscuous mode [ 123.453107][ T5474] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 123.471934][ T5480] loop1: detected capacity change from 0 to 1024 [ 123.480550][ T5474] EXT4-fs (loop5): journaled quota format not specified [ 123.603478][ T5480] EXT4-fs (loop1): Mount option "journal_checksum" incompatible with ext2 [ 123.688670][ T4372] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.345767][ T5489] loop6: detected capacity change from 0 to 1024 [ 124.544055][ T5489] hfsplus: unknown catalog record type 0 [ 124.553285][ T4372] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.592629][ T4372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 124.643044][ T4372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.702333][ T4327] hfsplus: b-tree write err: -5, ino 25 [ 124.718458][ T4327] hfsplus: b-tree write err: -5, ino 4 [ 124.735816][ T4327] hfsplus: b-tree write err: -5, ino 2 [ 124.752342][ T4327] hfsplus: b-tree write err: -5, ino 26 [ 124.773392][ T4372] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 124.798845][ T4372] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 124.822910][ T4372] usb 4-1: Manufacturer: syz [ 124.854986][ T4372] usb 4-1: config 0 descriptor?? [ 124.916644][ T4372] smsusb:smsusb_probe: board id=9, interface number 0 [ 124.953763][ T4372] smsusb:smsusb_probe: Device initialized with return code -19 [ 125.262809][ T5480] loop1: detected capacity change from 0 to 2048 [ 126.535695][ T5480] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.763072][ T4372] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 127.033005][ T4372] usb 7-1: Using ep0 maxpacket: 16 [ 127.153399][ T4372] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 127.204621][ T4372] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 127.392128][ T4372] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.412327][ T4372] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 127.868023][ T4372] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.885835][ T4228] usb 4-1: USB disconnect, device number 6 [ 127.918603][ T4372] usb 7-1: config 0 descriptor?? [ 128.052984][ T4372] pxrc 7-1:0.0: Could not find endpoint [ 128.103322][ T4372] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 128.247867][ T5504] sctp: [Deprecated]: syz.6.230 (pid 5504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.247867][ T5504] Use struct sctp_sack_info instead [ 128.625122][ C1] net_ratelimit: 55 callbacks suppressed [ 129.569693][ T5515] loop1: detected capacity change from 0 to 2048 [ 129.602117][ T5517] device-mapper: ioctl: Empty message received. [ 130.319710][ T13] usb 7-1: USB disconnect, device number 3 [ 130.425872][ T5515] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27742, location=27742 [ 130.470151][ T5515] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.549897][ T5529] loop3: detected capacity change from 0 to 512 [ 130.585023][ T5531] device veth1_to_bond entered promiscuous mode [ 130.640667][ T5529] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 130.649729][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.240'. [ 130.712989][ T5529] EXT4-fs (loop3): journaled quota format not specified [ 130.971110][ T5531] device veth1_to_bond left promiscuous mode [ 131.263092][ T5531] bond0: (slave bond_slave_1): Releasing backup interface [ 131.624474][ T5561] loop3: detected capacity change from 0 to 512 [ 132.020414][ T5561] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.245: invalid indirect mapped block 256 (level 2) [ 132.227903][ T5534] loop5: detected capacity change from 0 to 8192 [ 132.334734][ T5561] EXT4-fs (loop3): Remounting filesystem read-only [ 132.491370][ T5561] EXT4-fs (loop3): 2 truncates cleaned up [ 132.501178][ T5534] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "hash=rupasov" [ 132.597862][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.604237][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.622073][ T5561] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,barrier,. Quota mode: writeback. [ 132.748080][ T5561] Invalid ELF header len 10 [ 133.341790][ T5544] loop1: detected capacity change from 0 to 32768 [ 133.477866][ T5544] XFS (loop1): Mounting V5 Filesystem [ 133.490880][ T5583] loop6: detected capacity change from 0 to 2048 [ 133.632864][ C1] net_ratelimit: 60 callbacks suppressed [ 133.647684][ T5544] XFS (loop1): Ending clean mount [ 133.769619][ T5583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.804027][ T4185] XFS (loop1): Unmounting Filesystem [ 134.193309][ T5596] jffs2: notice: (5596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 134.607573][ T5599] loop6: detected capacity change from 0 to 512 [ 134.719544][ T5599] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.860463][ T5599] EXT4-fs (loop6): 1 truncate cleaned up [ 134.882867][ T5599] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,resuid=0x0000000000000000,bsdgroups,nombcache,nojournal_checksum,dax=never,grpid,,errors=continue. Quota mode: none. [ 134.978518][ T5603] loop5: detected capacity change from 0 to 2048 [ 135.051259][ T5603] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=27742, location=27742 [ 135.168163][ T5603] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.623090][ T4227] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 135.813046][ T2175] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.895842][ T5626] loop1: detected capacity change from 0 to 2048 [ 136.013482][ T4227] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.073058][ T2175] usb 4-1: Using ep0 maxpacket: 16 [ 136.115639][ T4227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 136.133060][ T5626] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27742, location=27742 [ 136.193210][ T2175] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 136.251287][ T2175] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 136.326524][ T4227] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.446114][ T2175] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.486447][ T5626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.653986][ T4227] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 136.677175][ T2175] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 136.746069][ T4227] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 136.844275][ T2175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.902472][ T4227] usb 7-1: Manufacturer: syz [ 137.153531][ T2175] usb 4-1: config 0 descriptor?? [ 137.170729][ T4227] usb 7-1: config 0 descriptor?? [ 137.451029][ T2175] pxrc 4-1:0.0: Could not find endpoint [ 137.574856][ T5635] sctp: [Deprecated]: syz.3.259 (pid 5635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.574856][ T5635] Use struct sctp_sack_info instead [ 137.630548][ T2175] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 137.667384][ T4227] smsusb:smsusb_probe: board id=9, interface number 0 [ 137.893594][ T4227] smsusb:smsusb_probe: Device initialized with return code -19 [ 138.646302][ C1] net_ratelimit: 48 callbacks suppressed [ 140.139790][ T5646] device veth1_to_bond entered promiscuous mode [ 140.153415][ T5650] netlink: 25 bytes leftover after parsing attributes in process `syz.5.263'. [ 140.166707][ T5650] device eql entered promiscuous mode [ 140.176899][ T5650] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.263'. [ 140.189620][ T5650] 0ªX¹¦Dö»: renamed from eql [ 140.204735][ T5650] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 140.214097][ T5650] device 00ªX¹¦Dö» left promiscuous mode [ 140.220281][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 140.229808][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 140.241698][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 140.349043][ T5646] device veth1_to_bond left promiscuous mode [ 140.446232][ T4232] usb 7-1: USB disconnect, device number 4 [ 140.486613][ T4227] usb 4-1: USB disconnect, device number 7 [ 140.512703][ T5646] bond0: (slave bond_slave_1): Releasing backup interface [ 140.586694][ T5658] loop3: detected capacity change from 0 to 128 [ 140.936634][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 140.962985][ T5666] tc_dump_action: action bad kind [ 141.216193][ T5650] loop5: detected capacity change from 0 to 32768 [ 141.265727][ T5650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.263 (5650) [ 141.314549][ T5650] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 141.346782][ T5650] BTRFS info (device loop5): setting nodatasum [ 141.367558][ T5650] BTRFS info (device loop5): force zlib compression, level 3 [ 141.402980][ T5650] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 141.429088][ T5650] BTRFS info (device loop5): use lzo compression, level 0 [ 141.446458][ T5650] BTRFS info (device loop5): turning on flush-on-commit [ 141.466698][ T5650] BTRFS info (device loop5): use zlib compression, level 3 [ 141.498594][ T5656] loop6: detected capacity change from 0 to 32768 [ 141.535409][ T5650] BTRFS info (device loop5): max_inline at 7 [ 141.561723][ T5650] BTRFS info (device loop5): using free space tree [ 141.592915][ T5650] BTRFS info (device loop5): has skinny extents [ 141.636739][ T5656] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 scanned by syz.6.264 (5656) [ 141.707235][ T5656] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 141.726383][ T5656] BTRFS info (device loop6): using free space tree [ 141.738928][ T5656] BTRFS info (device loop6): has skinny extents [ 141.938492][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 141.985258][ T5658] FAT-fs (loop3): Filesystem has been set read-only [ 142.263129][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.281961][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.317895][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.365628][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.421956][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.449561][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.458487][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.467171][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.476421][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.490410][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.490897][ T5650] BTRFS info (device loop5): enabling ssd optimizations [ 142.508173][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.553123][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.585042][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.593876][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.602399][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.603119][ T5656] BTRFS info (device loop6): enabling ssd optimizations [ 142.611860][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.630230][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.638956][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.647625][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.689802][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.763895][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 142.871109][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 143.007270][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 143.093219][ T4376] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.154549][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 143.372996][ T4376] usb 2-1: Using ep0 maxpacket: 16 [ 143.396808][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 143.513285][ T4376] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 143.559164][ T4376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 143.572788][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 143.712880][ C1] net_ratelimit: 60 callbacks suppressed [ 144.161161][ T4376] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.224977][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.438945][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.509148][ T4376] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 144.641917][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 145.742321][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 145.768987][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 145.770479][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.869282][ T4376] usb 2-1: config 0 descriptor?? [ 145.876528][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 145.906676][ T4376] usb 2-1: can't set config #0, error -71 [ 145.953618][ T4376] usb 2-1: USB disconnect, device number 8 [ 145.963026][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.027211][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.098095][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.168019][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.225706][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.240516][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.250746][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.282896][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.291439][ T5658] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.337610][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 146.337622][ T25] audit: type=1800 audit(36824590.061:10): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.265" name="file1" dev="loop3" ino=1048661 res=0 errno=0 [ 146.393083][ T4376] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 146.509549][ T5763] loop5: detected capacity change from 0 to 512 [ 146.649978][ T5763] EXT4-fs (loop5): inline encryption not supported [ 146.679940][ T5763] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.693130][ T5765] device ip6_vti0 entered promiscuous mode [ 146.825923][ T5779] loop3: detected capacity change from 0 to 64 [ 146.843474][ T4376] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.887469][ T4376] usb 2-1: not running at top speed; connect to a high speed hub [ 146.904822][ T5763] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 146.990755][ T5763] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.277: bg 0: block 248: padding at end of block bitmap is not set [ 147.006384][ T5763] Quota error (device loop5): write_blk: dquota write failed [ 147.015409][ T5763] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 147.025703][ T5763] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.277: Failed to acquire dquot type 1 [ 147.053678][ T4376] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 147.210828][ T5763] EXT4-fs (loop5): 1 truncate cleaned up [ 147.253444][ T5763] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 147.283669][ T4376] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 147.318642][ T4376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.539606][ T4376] usb 2-1: Product: syz [ 147.543852][ T4376] usb 2-1: Manufacturer: syz [ 147.548441][ T4376] usb 2-1: SerialNumber: syz [ 147.960253][ T5805] netlink: 132 bytes leftover after parsing attributes in process `syz.6.285'. [ 148.506036][ T4376] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 148.689648][ T4376] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 148.707154][ T4376] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 148.752954][ C0] net_ratelimit: 43 callbacks suppressed [ 149.254146][ T4376] usb 2-1: invalid uac2 rates [ 149.260319][ T4376] usb 2-1: invalid uac2 rates [ 149.380168][ T4376] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 149.464480][ T5750] udc-core: couldn't find an available UDC or it's busy [ 149.535102][ T5750] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.580385][ T4376] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 149.773477][ T4376] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 150.103090][ T2175] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 150.403040][ T2175] usb 7-1: Using ep0 maxpacket: 16 [ 150.529830][ T4376] usb 2-1: USB disconnect, device number 9 [ 150.536799][ T2175] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 150.636854][ T2175] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 150.892307][ T2175] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.910918][ T2175] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 151.094099][ T2175] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.408313][ T2175] usb 7-1: config 0 descriptor?? [ 151.639568][ T2175] pxrc 7-1:0.0: Could not find endpoint [ 151.824508][ T5820] sctp: [Deprecated]: syz.6.289 (pid 5820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.824508][ T5820] Use struct sctp_sack_info instead [ 151.853749][ T2175] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 152.285833][ T5475] udevd[5475]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.799475][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 152.854618][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 152.977726][ T5835] bond0: (slave bond_slave_1): Releasing backup interface [ 153.294201][ T5844] tmpfs: Bad value for 'mpol' [ 153.355669][ T5770] usb 7-1: USB disconnect, device number 5 [ 153.630037][ T5862] loop5: detected capacity change from 0 to 8 [ 153.647231][ T5863] 9pnet: Insufficient options for proto=fd [ 153.725008][ T5871] 9pnet: Insufficient options for proto=fd [ 153.802884][ C1] net_ratelimit: 63 callbacks suppressed [ 153.922965][ T4227] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 153.944048][ T2175] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 154.278017][ T5848] loop1: detected capacity change from 0 to 32768 [ 154.353707][ T2175] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.363816][ T5770] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.372910][ T4227] usb 7-1: Using ep0 maxpacket: 32 [ 154.437589][ T5848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.303 (5848) [ 154.653036][ T5770] usb 4-1: Using ep0 maxpacket: 16 [ 154.773371][ T5770] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 154.823999][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 154.974539][ T5770] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.193333][ T5770] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 155.319718][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.516522][ T5770] usb 4-1: config 0 descriptor?? [ 155.608648][ T5848] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 155.743250][ T5770] pxrc 4-1:0.0: Could not find endpoint [ 155.779820][ T5848] BTRFS info (device loop1): turning off barriers [ 155.856914][ T5770] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 155.880976][ T5848] BTRFS info (device loop1): setting nodatasum [ 155.889041][ T5884] sctp: [Deprecated]: syz.3.314 (pid 5884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.889041][ T5884] Use struct sctp_sack_info instead [ 155.953114][ T4227] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 155.973685][ T5848] BTRFS info (device loop1): metadata ratio 772 [ 156.151364][ T5848] BTRFS info (device loop1): setting nodatacow, compression disabled [ 156.335894][ T5848] BTRFS info (device loop1): turning on flush-on-commit [ 156.500757][ T5848] BTRFS info (device loop1): setting datacow [ 156.583674][ T2175] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.649078][ T5848] BTRFS info (device loop1): enabling disk space caching [ 156.800235][ T5848] BTRFS info (device loop1): force clearing of disk cache [ 156.937722][ T5848] BTRFS info (device loop1): disk space caching is enabled [ 157.102031][ T5848] BTRFS info (device loop1): has skinny extents [ 157.414887][ T4227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.422959][ T2175] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.429594][ T2175] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 157.438653][ T4227] usb 7-1: Product: syz [ 157.442788][ T4227] usb 7-1: Manufacturer: syz [ 157.447390][ T4227] usb 7-1: SerialNumber: syz [ 157.455021][ T4227] usb 7-1: config 0 descriptor?? [ 157.462174][ T2175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.478902][ T2175] usb 1-1: config 0 descriptor?? [ 157.484168][ T4227] usb 7-1: can't set config #0, error -71 [ 157.492282][ T4227] usb 7-1: USB disconnect, device number 6 [ 157.513105][ T2175] usb 1-1: can't set config #0, error -71 [ 157.523257][ T2175] usb 1-1: USB disconnect, device number 4 [ 157.637072][ T5848] BTRFS error (device loop1): open_ctree failed: -12 [ 157.979089][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 157.989937][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 157.997492][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.007545][ T4197] Workqueue: hci3 hci_rx_work [ 158.012231][ T4197] Call Trace: [ 158.015507][ T4197] [ 158.018436][ T4197] dump_stack_lvl+0x188/0x250 [ 158.023132][ T4197] ? show_regs_print_info+0x20/0x20 [ 158.028336][ T4197] ? load_image+0x410/0x410 [ 158.032853][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 158.037973][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 158.042654][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 158.047851][ T4197] kobject_add_internal+0x5ba/0xcd0 [ 158.047914][ T4197] kobject_add+0x160/0x230 [ 158.047935][ T4197] ? kobject_init+0x1c0/0x1c0 [ 158.047953][ T4197] ? __raw_spin_lock_init+0x41/0x100 [ 158.047970][ T4197] ? klist_children_get+0x50/0x50 [ 158.047989][ T4197] ? get_device_parent+0x121/0x3e0 [ 158.048010][ T4197] device_add+0x470/0x1050 [ 158.077582][ T4197] ? device_initialize+0x2a5/0x4d0 [ 158.087068][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 158.092006][ T4197] le_conn_complete_evt+0xc55/0x14d0 [ 158.092036][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 158.102408][ T4197] hci_le_meta_evt+0x285/0x3ca0 [ 158.107274][ T4197] ? hci_event_packet+0x363/0x1310 [ 158.112391][ T4197] ? __lock_acquire+0x7d40/0x7d40 [ 158.117422][ T4197] ? _printk+0xda/0x130 [ 158.117446][ T4197] ? hci_remote_host_features_evt+0x240/0x240 [ 158.117467][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 158.117482][ T4197] ? mark_lock+0x94/0x320 [ 158.128005][ T4197] ? mutex_unlock+0x10/0x10 [ 158.128032][ T4197] ? __dynamic_pr_debug+0x196/0x240 [ 158.128052][ T4197] ? __rwlock_init+0x140/0x140 [ 158.128071][ T4197] hci_event_packet+0xe0b/0x1310 [ 158.128094][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 158.128113][ T4197] ? rcu_lock_release+0x20/0x20 [ 158.138024][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 158.147691][ T4197] hci_rx_work+0x255/0xa10 [ 158.147723][ T4197] process_one_work+0x867/0xff0 [ 158.181373][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 158.186991][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 158.192255][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 158.197255][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 158.202818][ T4197] ? wq_worker_running+0x97/0x170 [ 158.202841][ T4197] worker_thread+0xad7/0x12a0 [ 158.202881][ T4197] kthread+0x42e/0x520 [ 158.202894][ T4197] ? rcu_lock_release+0x20/0x20 [ 158.212880][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 158.212902][ T4197] ret_from_fork+0x1f/0x30 [ 158.212934][ T4197] [ 158.235235][ T5905] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.243552][ T4197] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 158.256878][ T4197] Bluetooth: hci3: failed to register connection device [ 158.301363][ T5931] udc-core: couldn't find an available UDC or it's busy [ 158.308457][ T5931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 158.551159][ T2175] usb 4-1: USB disconnect, device number 8 [ 158.603146][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.622921][ T4227] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 158.639891][ T5937] loop3: detected capacity change from 0 to 8 [ 158.643086][ T5905] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.678941][ T5905] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.849183][ T5502] net_ratelimit: 32 callbacks suppressed [ 158.973120][ T4227] usb 6-1: not running at top speed; connect to a high speed hub [ 159.093579][ T4227] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.212636][ T4227] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 159.272951][ T5754] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.345707][ T4227] usb 6-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 159.463031][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.553953][ T5754] usb 1-1: Using ep0 maxpacket: 16 [ 159.703056][ T5754] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 159.754043][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 159.876198][ T5925] udc-core: couldn't find an available UDC or it's busy [ 159.921313][ T5754] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.921526][ T5925] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.943491][ T5754] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 160.046432][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.113339][ T5754] usb 1-1: config 0 descriptor?? [ 160.268692][ T5754] pxrc 1-1:0.0: Could not find endpoint [ 160.384946][ T5754] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 160.476085][ T5940] sctp: [Deprecated]: syz.0.333 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.476085][ T5940] Use struct sctp_sack_info instead [ 160.873472][ T4227] usb 6-1: string descriptor 0 read error: -71 [ 160.893537][ T4227] usb 6-1: Found UVC 1.00 device (0000:d970) [ 160.905164][ T4227] usb 6-1: No streaming interface found for terminal 2. [ 161.037032][ T4227] usb 6-1: No streaming interface found for terminal 1. [ 161.413289][ T4227] usb 6-1: USB disconnect, device number 3 [ 162.029664][ T5905] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.046350][ T5905] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 162.055425][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.083147][ T5905] usb 2-1: can't set config #1, error -71 [ 162.098379][ T5905] usb 2-1: USB disconnect, device number 10 [ 162.172330][ T5945] loop1: detected capacity change from 0 to 4096 [ 162.196037][ T5946] loop5: detected capacity change from 0 to 512 [ 162.255735][ T5949] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.297241][ T5948] loop3: detected capacity change from 0 to 2048 [ 162.327763][ T5946] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.326: casefold flag without casefold feature [ 162.355305][ T5948] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27742, location=27742 [ 162.447722][ T5948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.473555][ T5946] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.326: couldn't read orphan inode 15 (err -117) [ 162.558032][ T5946] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,,errors=continue. Quota mode: writeback. [ 162.661801][ T5945] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.983857][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.326'. [ 163.197434][ T4227] usb 1-1: USB disconnect, device number 5 [ 163.305593][ T5972] UBIFS error (pid: 5972): cannot open "(null)", error -22 [ 163.357223][ T5970] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.447490][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.5.339'. [ 163.505792][ T5970] overlayfs: failed to look up (tracing) for ino (-66) [ 163.509244][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.342'. [ 163.608537][ T5985] loop3: detected capacity change from 0 to 1024 [ 163.681108][ T5989] loop6: detected capacity change from 0 to 4096 [ 163.708262][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.346'. [ 163.795182][ T5985] FAULT_INJECTION: forcing a failure. [ 163.795182][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 163.822425][ T5993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.831768][ T5996] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.855443][ T5993] bond1: (slave batadv1): Error -99 calling set_mac_address [ 163.863393][ T5985] CPU: 0 PID: 5985 Comm: syz.3.342 Not tainted syzkaller #0 [ 163.870681][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.880718][ T5985] Call Trace: [ 163.883980][ T5985] [ 163.886892][ T5985] dump_stack_lvl+0x188/0x250 [ 163.891552][ T5985] ? show_regs_print_info+0x20/0x20 [ 163.896725][ T5985] ? load_image+0x410/0x410 [ 163.901207][ T5985] ? __might_sleep+0xf0/0xf0 [ 163.905776][ T5985] ? __lock_acquire+0x7d40/0x7d40 [ 163.910784][ T5985] should_fail+0x383/0x4b0 [ 163.915189][ T5985] should_failslab+0x5/0x20 [ 163.919676][ T5985] slab_pre_alloc_hook+0x51/0xc0 [ 163.924593][ T5985] ? security_inode_alloc+0x30/0x110 [ 163.929876][ T5985] kmem_cache_alloc+0x3d/0x280 [ 163.934623][ T5985] security_inode_alloc+0x30/0x110 [ 163.939715][ T5985] inode_init_always+0x8e5/0xc90 [ 163.944633][ T5985] new_inode_pseudo+0x8e/0x210 [ 163.949378][ T5985] __sock_create+0x128/0x910 [ 163.953950][ T5985] __sys_socket+0xe2/0x170 [ 163.958353][ T5985] __x64_sys_socket+0x76/0x80 [ 163.963009][ T5985] do_syscall_64+0x4c/0xa0 [ 163.967402][ T5985] ? clear_bhb_loop+0x30/0x80 [ 163.972059][ T5985] ? clear_bhb_loop+0x30/0x80 [ 163.976714][ T5985] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.982608][ T5985] RIP: 0033:0x7f0bce5841d9 [ 163.987006][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.006591][ T5985] RSP: 002b:00007f0bcc7dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 164.014996][ T5985] RAX: ffffffffffffffda RBX: 00007f0bce80bfa0 RCX: 00007f0bce5841d9 [ 164.022948][ T5985] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 164.030900][ T5985] RBP: 00007f0bce61b888 R08: 0000000000000000 R09: 0000000000000000 [ 164.038875][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.046847][ T5985] R13: 00007f0bce80c038 R14: 00007f0bce80bfa0 R15: 00007ffd613c0628 [ 164.054832][ T5985] [ 164.057856][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.093779][ T5985] net_ratelimit: 40 callbacks suppressed [ 164.093792][ T5985] socket: no more sockets [ 164.254919][ T5989] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.273094][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.286809][ T6004] loop1: detected capacity change from 0 to 512 [ 164.446868][ T6004] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.349: casefold flag without casefold feature [ 164.543692][ T6004] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.349: couldn't read orphan inode 15 (err -117) [ 164.555987][ T6015] loop5: detected capacity change from 0 to 8192 [ 164.593099][ T6004] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,,errors=continue. Quota mode: writeback. [ 164.638016][ T6015] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 164.661161][ T6015] REISERFS (device loop5): using ordered data mode [ 164.679559][ T6015] reiserfs: using flush barriers [ 164.713167][ T6015] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.754356][ T6015] REISERFS (device loop5): checking transaction log (loop5) [ 164.904872][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 164.922950][ T5774] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 165.188835][ T6015] REISERFS (device loop5): Using tea hash to sort names [ 165.226908][ T6015] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 165.283202][ T5774] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.335130][ T5774] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.374600][ T6038] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.382347][ T6015] syz.5.351 uses obsolete (PF_INET,SOCK_PACKET) [ 165.399038][ T5774] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.425229][ T6010] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 165.444888][ T5774] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.453528][ T5774] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 165.462934][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.496524][ T5774] usb 4-1: config 0 descriptor?? [ 165.524750][ T6010] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 165.525966][ T6038] overlayfs: getxattr(/swiotlb, "trusted.overlay.opaque", "", 1, 0) = -95 [ 165.536480][ T6010] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 165.536494][ T6010] CPU: 0 PID: 6010 Comm: syz.5.351 Not tainted syzkaller #0 [ 165.536510][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 165.536519][ T6010] RIP: 0010:reiserfs_get_block+0x16bf/0x4360 [ 165.536539][ T6010] Code: ab 7e ff 31 db 4d 89 ec e9 6d 05 00 00 8b 94 24 40 03 00 00 48 89 5c 24 28 4c 89 7c 24 10 4a 8d 5c bb fc 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 b1 0d 00 00 49 89 d7 89 13 48 8b 44 24 [ 165.536553][ T6010] RSP: 0018:ffffc900032ef320 EFLAGS: 00010203 [ 165.536568][ T6010] RAX: 0000000000000001 RBX: 000000000000000c RCX: ffff88807f168000 [ 165.536579][ T6010] RDX: 0000000000000217 RSI: 00000000000003f4 RDI: 0000000000000000 [ 165.536594][ T6010] RBP: ffffc900032ef890 R08: ffffc900032ef7ff R09: ffffc900032ef7e0 [ 165.536605][ T6010] R10: dffffc0000000000 R11: fffff5200065df00 R12: dffffc0000000000 [ 165.536617][ T6010] R13: 00000000000003f4 R14: ffff88805c5a43a0 R15: 0000000000000000 [ 165.548997][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.360'. [ 165.553477][ T6010] FS: 00007fa7e87726c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 165.553495][ T6010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.567844][ T6048] kcov: kcov_start: t = ffff88802125bb80, size = 524288, area = ffffc900101e0000 [ 165.570788][ T6010] CR2: 00007f8a056e2eb8 CR3: 0000000051a8e000 CR4: 00000000003506f0 [ 165.581479][ T6047] kobject: 'loop1' (ffff888140835e40): kobject_uevent_env [ 165.596322][ T6010] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 165.596336][ T6010] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 165.596346][ T6010] Call Trace: [ 165.596352][ T6010] [ 165.596369][ T6010] ? make_le_item_head+0x510/0x510 [ 165.596387][ T6010] ? __kasan_slab_alloc+0xa9/0xc0 [ 165.596405][ T6010] ? kmem_cache_alloc+0x15d/0x280 [ 165.596420][ T6010] ? create_empty_buffers+0x3a/0x6d0 [ 165.596437][ T6010] ? __generic_file_write_iter+0x261/0x4e0 [ 165.596452][ T6010] ? generic_file_write_iter+0xa6/0x1b0 [ 165.596469][ T6010] ? verify_lock_unused+0x140/0x140 [ 165.596503][ T6010] ? __lock_acquire+0x7d40/0x7d40 [ 165.596523][ T6010] ? do_raw_spin_unlock+0x11d/0x230 [ 165.596538][ T6010] ? create_page_buffers+0x238/0x320 [ 165.596552][ T6010] __block_write_begin_int+0x565/0x15d0 [ 165.596574][ T6010] ? make_le_item_head+0x510/0x510 [ 165.596594][ T6010] ? page_zero_new_buffers+0x490/0x490 [ 165.596608][ T6010] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 165.596625][ T6010] ? ktime_get_real_ts64+0x440/0x440 [ 165.596643][ T6010] reiserfs_write_begin+0x353/0x820 [ 165.596662][ T6010] generic_perform_write+0x2b6/0x550 [ 165.596684][ T6010] ? atime_needs_update+0x770/0x770 [ 165.596706][ T6010] ? grab_cache_page_write_begin+0xa0/0xa0 [ 165.596723][ T6010] ? file_remove_privs+0x5d0/0x5d0 [ 165.596740][ T6010] ? rwsem_write_trylock+0x135/0x1c0 [ 165.604767][ T6038] overlayfs: getxattr(/swiotlb, "trusted.overlay.redirect", "", 0, 0) = -95 [ 165.610732][ T6010] ? clear_nonspinnable+0x60/0x60 [ 165.619005][ T6047] kobject: 'loop1' (ffff888140835e40): kobject_uevent_env: uevent_suppress caused the event to drop! [ 165.626633][ T6010] __generic_file_write_iter+0x261/0x4e0 [ 165.626655][ T6010] ? generic_write_checks+0x3be/0x460 [ 165.635210][ T6038] overlayfs: getxattr(/swiotlb, "trusted.overlay.origin", "", 0, 0) = -95 [ 165.642642][ T6010] generic_file_write_iter+0xa6/0x1b0 [ 165.642671][ T6010] vfs_write+0x748/0xd70 [ 165.656403][ T6047] loop1: detected capacity change from 0 to 1024 [ 165.660396][ T6010] ? file_end_write+0x250/0x250 [ 165.667406][ T6038] overlayfs: getxattr(/suspend_stats, "trusted.overlay.metacopy", "", 0, 0) = -95 [ 165.676040][ T6010] ? mutex_lock_nested+0x17/0x20 [ 165.676063][ T6010] ? __fdget_pos+0x2bf/0x370 [ 165.676078][ T6010] ? ksys_write+0x70/0x260 [ 165.684126][ T6047] kobject: 'loop1' (ffff888140835e40): kobject_uevent_env [ 165.691116][ T6010] ksys_write+0x153/0x260 [ 165.705659][ T6038] overlayfs: getxattr(/mce, "trusted.overlay.opaque", "", 1, 0) = -95 [ 165.707014][ T6010] ? __ia32_sys_read+0x80/0x80 [ 165.707036][ T6010] ? lockdep_hardirqs_on+0x94/0x140 [ 165.718840][ T6038] overlayfs: getxattr(/mce, "trusted.overlay.redirect", "", 0, 0) = -95 [ 165.723302][ T6010] do_syscall_64+0x4c/0xa0 [ 165.723323][ T6010] ? clear_bhb_loop+0x30/0x80 [ 165.723341][ T6010] ? clear_bhb_loop+0x30/0x80 [ 165.733383][ T6047] kobject: 'loop1' (ffff888140835e40): kobject_uevent_env: uevent_suppress caused the event to drop! [ 165.733597][ T6010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.739399][ T6047] kobject: 'loop1' (ffff888140835e40): kobject_uevent_env [ 165.744895][ T6010] RIP: 0033:0x7fa7ea53b1d9 [ 165.744911][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.744924][ T6010] RSP: 002b:00007fa7e8772028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.744941][ T6010] RAX: ffffffffffffffda RBX: 00007fa7ea7c3090 RCX: 00007fa7ea53b1d9 [ 165.744952][ T6010] RDX: 0000000000000018 RSI: 0000200000001940 RDI: 0000000000000009 [ 165.744961][ T6010] RBP: 00007fa7ea5d2888 R08: 0000000000000000 R09: 0000000000000000 [ 165.744971][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.744979][ T6010] R13: 00007fa7ea7c3128 R14: 00007fa7ea7c3090 R15: 00007fff6ee5a868 [ 165.744997][ T6010] [ 165.745016][ T6010] Modules linked in: [ 165.752217][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.761008][ T6038] overlayfs: getxattr(/mce, "trusted.overlay.origin", "", 0, 0) = -95 [ 165.765771][ C0] virtqueue callback for ffff8880235ad800 (ffffffff85497fd0) [ 165.793960][ T6038] overlayfs: getxattr(/hsr, "trusted.overlay.opaque", "", 1, 0) = -95 [ 165.798452][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.821556][ T6047] kobject: 'loop1' (ffff888140835e40): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 165.825038][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.825060][ C0] virtqueue callback for ffff8880235ad800 (ffffffff85497fd0) [ 165.825178][ C0] nf_conntrack: normal packet for ffff8880774fe180 [ 165.825194][ C0] tcp_in_window: START [ 165.836530][ T6038] overlayfs: getxattr(/hsr, "trusted.overlay.redirect", "", 0, 0) = -95 [ 165.838872][ C0] tcp_in_window: [ 165.873341][ T6047] send_to_group: group=ffff888147ddb000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88801f6c6a10 data_type=1 dir=0000000000000000 cookie=0 [ 165.874600][ C0] seq=2662690148 ack=321266885+(0) sack=321266885+(0) win=21664 end=2662690148 [ 165.878795][ T6047] inotify_handle_inode_event: group=ffff888147ddb000 mark=ffff888026674a28 mask=8 [ 165.885208][ C0] tcp_in_window: sender end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 receiver end=321266885 maxend=324039685 maxwin=3144576 scale=7 [ 165.885234][ C0] tcp_in_window: [ 165.885240][ C0] seq=2662690148 ack=321266885+(0) sack=321266885+(0) win=21664 end=2662690148 [ 165.885259][ C0] tcp_in_window: sender end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 receiver end=321266885 maxend=324039685 maxwin=3144576 scale=7 [ 165.885281][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 165.885294][ C0] tcp_in_window: res=1 sender end=2662690148 maxend=2665834724 maxwin=2772992 receiver end=321266885 maxend=324039877 maxwin=3144576 [ 165.885312][ C0] tcp_conntracks: [ 165.885318][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 165.885388][ C0] No more buffers in queue [ 165.885397][ C0] eth0: xmit ffff8880663e5140 42:01:0a:80:00:01 [ 165.885417][ C0] Added buffer head 22 to ffff8880235ad900 [ 165.885464][ C0] virtqueue callback for ffff8880235ad900 (ffffffff854980c0) [ 165.886078][ C0] Sent skb ffff8880663e5140 [ 165.898899][ T6038] overlayfs: getxattr(/hsr, "trusted.overlay.origin", "", 0, 0) = -95 [ 165.899585][ C0] No more buffers in queue [ 165.917597][ T6038] overlayfs: getxattr(/ceph, "trusted.overlay.opaque", "", 1, 0) = -95 [ 165.920579][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 165.935441][ T6047] fsnotify_insert_event: group=ffff888147ddb000 event=ffff888061edfa00 [ 165.937838][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 165.949410][ T6038] overlayfs: getxattr(/ceph, "trusted.overlay.redirect", "", 0, 0) = -95 [ 165.951330][ C0] Receiving skb proto 0x0800 len 244 type 0 [ 165.956107][ T6010] ---[ end trace fc148edf68bc53a8 ]--- [ 165.960393][ C0] No more buffers in queue [ 165.960432][ C0] tcp_in_window: START [ 165.965828][ T6021] misc raw-gadget: fail, bad endpoint maxpacket [ 165.975923][ C0] tcp_in_window: [ 165.975934][ C0] seq=321266885 ack=2662690148+(0) sack=2662690148+(0) win=24567 end=321266886 [ 166.053999][ T5821] inotify_handle_inode_event: group=ffff888147ddb000 mark=ffff888026674a28 mask=8000 [ 166.061104][ C0] tcp_in_window: sender end=321266885 maxend=324039877 maxwin=3144576 scale=7 receiver end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 [ 166.061130][ C0] tcp_in_window: [ 166.061136][ C0] seq=321266885 ack=2662690148+(0) sack=2662690148+(0) win=24567 end=321266886 [ 166.061162][ C0] tcp_in_window: sender end=321266885 maxend=324039877 maxwin=3144576 scale=7 receiver end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 [ 166.061187][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 166.061201][ C0] tcp_in_window: res=1 sender end=321266886 maxend=324039877 maxwin=3144576 receiver end=2662690148 maxend=2665834724 maxwin=2772992 [ 166.061225][ C0] tcp_conntracks: [ 166.061232][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 166.061258][ C0] tcp_in_window: START [ 166.061265][ C0] tcp_in_window: [ 166.061271][ C0] seq=321266885 ack=2662690148+(0) sack=2662690148+(0) win=24567 end=321266886 [ 166.061290][ C0] tcp_in_window: sender end=321266886 maxend=324039877 maxwin=3144576 scale=7 receiver end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 [ 166.068201][ C0] virtqueue callback for ffff88801f7a2e00 (ffffffff84450960) [ 166.068243][ C0] virtqueue interrupt with no work for ffff88801f7a2d00 [ 166.068254][ C0] virtqueue interrupt with no work for ffff88801f7a2c00 [ 166.288339][ C0] virtqueue callback for ffff8880235ad800 (ffffffff85497fd0) [ 166.505890][ C0] tcp_in_window: [ 166.505899][ C0] seq=321266885 ack=2662690148+(0) sack=2662690148+(0) win=24567 end=321266886 [ 166.518420][ C0] tcp_in_window: sender end=321266886 maxend=324039877 maxwin=3144576 scale=7 receiver end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 [ 166.523163][ C1] nf_conntrack: new packet for ffff8880211ea600 [ 166.532913][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 166.539125][ C1] nf_nat: Already setup manip DST for ct ffff8880211ea600 (status bits 0x188) [ 166.539149][ C1] nf_nat: Already setup manip SRC for ct ffff8880211ea600 (status bits 0x188) [ 166.544410][ C0] tcp_in_window: res=1 sender end=321266886 maxend=324039877 maxwin=3144576 receiver end=2662690148 maxend=2665834724 maxwin=2772992 [ 166.575664][ C0] tcp_conntracks: [ 166.575673][ C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 166.584724][ C0] tcp_in_window: START [ 166.588772][ C0] tcp_in_window: [ 166.588778][ C0] seq=321266693 ack=2662690148+(0) sack=2662690148+(0) win=24567 end=321266886 [ 166.601290][ C0] tcp_in_window: sender end=321266886 maxend=324039877 maxwin=3144576 scale=7 receiver end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 [ 166.615772][ C0] tcp_in_window: [ 166.615779][ C0] seq=321266693 ack=2662690148+(0) sack=2662690148+(0) win=24567 end=321266886 [ 166.628302][ C0] tcp_in_window: sender end=321266886 maxend=324039877 maxwin=3144576 scale=7 receiver end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 [ 166.642781][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 166.648056][ C0] tcp_in_window: res=1 sender end=321266886 maxend=324039877 maxwin=3144576 receiver end=2662690148 maxend=2665834724 maxwin=2772992 [ 166.661666][ C0] tcp_conntracks: [ 166.661672][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 166.670810][ C0] nf_conntrack: normal packet for ffff8880774fe180 [ 166.677304][ C0] tcp_in_window: START [ 166.681343][ C0] tcp_in_window: [ 166.681349][ C0] seq=2662690148 ack=321266886+(0) sack=321266886+(0) win=21664 end=2662690148 [ 166.693896][ C0] tcp_in_window: sender end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 receiver end=321266886 maxend=324039877 maxwin=3144576 scale=7 [ 166.708402][ C0] tcp_in_window: [ 166.708412][ C0] seq=2662690148 ack=321266886+(0) sack=321266886+(0) win=21664 end=2662690148 [ 166.720938][ C0] tcp_in_window: sender end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 receiver end=321266886 maxend=324039877 maxwin=3144576 scale=7 [ 166.735427][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 166.740696][ C0] tcp_in_window: res=1 sender end=2662690148 maxend=2665834724 maxwin=2772992 receiver end=321266886 maxend=324039878 maxwin=3144576 [ 166.754312][ C0] tcp_conntracks: [ 166.754321][ C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 166.763439][ C0] No more buffers in queue [ 166.767830][ C0] eth0: xmit ffff88802241b8c0 42:01:0a:80:00:01 [ 166.774065][ C0] Added buffer head 22 to ffff8880235ad900 [ 166.779846][ C0] virtqueue callback for ffff8880235ad900 (ffffffff854980c0) [ 166.787280][ C0] nf_conntrack: normal packet for ffff8880774fe180 [ 166.793775][ C0] tcp_in_window: START [ 166.797829][ C0] tcp_in_window: [ 166.797835][ C0] seq=2662690148 ack=321266886+(0) sack=321266886+(0) win=21664 end=2662690148 [ 166.810370][ C0] tcp_in_window: sender end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 receiver end=321266886 maxend=324039878 maxwin=3144576 scale=7 [ 166.824866][ C0] tcp_in_window: [ 166.824874][ C0] seq=2662690148 ack=321266886+(0) sack=321266886+(0) win=21664 end=2662690148 [ 166.837395][ C0] tcp_in_window: sender end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 receiver end=321266886 maxend=324039878 maxwin=3144576 scale=7 [ 166.851886][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 166.857182][ C0] tcp_in_window: res=1 sender end=2662690148 maxend=2665834724 maxwin=2772992 receiver end=321266886 maxend=324039878 maxwin=3144576 [ 166.870793][ C0] tcp_conntracks: [ 166.870800][ C0] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 166.879906][ C0] Sent skb ffff88802241b8c0 [ 166.884434][ C0] No more buffers in queue [ 166.888833][ C0] eth0: xmit ffff88802241bb40 42:01:0a:80:00:01 [ 166.895075][ C0] Added buffer head 22 to ffff8880235ad900 [ 166.900858][ C0] virtqueue callback for ffff8880235ad900 (ffffffff854980c0) [ 166.908554][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88807920a718 is addr:fe80::4e5f:be34:7a9b:9b93 for cmd:0 at entry:ffff8880750d8f80 [ 166.920268][ T5754] nf_conntrack: new packet for ffff888077085800 [ 166.923687][ C0] Sent skb ffff88802241bb40 [ 166.929477][ T5754] nf_nat: Already setup manip DST for ct ffff888077085800 (status bits 0x188) [ 166.933975][ C0] No more buffers in queue [ 166.942783][ T5754] nf_nat: Already setup manip SRC for ct ffff888077085800 (status bits 0x188) [ 166.956324][ C0] No more buffers in queue [ 166.960752][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 166.966558][ C0] No more buffers in queue [ 166.970969][ C0] tcp_in_window: START [ 166.975029][ C0] tcp_in_window: [ 166.975036][ C0] seq=321266885 ack=2662690148+(0) sack=2662690148+(0) win=24567 end=321266886 [ 166.987582][ C0] tcp_in_window: sender end=321266886 maxend=324039878 maxwin=3144576 scale=7 receiver end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 [ 167.002073][ C0] tcp_in_window: [ 167.002080][ C0] seq=321266885 ack=2662690148+(0) sack=2662690148+(0) win=24567 end=321266886 [ 167.014621][ C0] tcp_in_window: sender end=321266886 maxend=324039878 maxwin=3144576 scale=7 receiver end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 [ 167.029119][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 167.034397][ C0] tcp_in_window: res=1 sender end=321266886 maxend=324039878 maxwin=3144576 receiver end=2662690148 maxend=2665834724 maxwin=2772992 [ 167.048035][ C0] tcp_conntracks: [ 167.048042][ C0] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 167.057165][ C0] nf_conntrack: normal packet for ffff8880774fe180 [ 167.063657][ C0] tcp_in_window: START [ 167.067698][ C0] tcp_in_window: [ 167.067704][ C0] seq=2662690148 ack=321266886+(0) sack=321266886+(0) win=21664 end=2662690148 [ 167.080249][ C0] tcp_in_window: sender end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 receiver end=321266886 maxend=324039878 maxwin=3144576 scale=7 [ 167.094733][ C0] tcp_in_window: [ 167.094740][ C0] seq=2662690148 ack=321266886+(0) sack=321266886+(0) win=21664 end=2662690148 [ 167.107257][ C0] tcp_in_window: sender end=2662690148 maxend=2665834724 maxwin=2772992 scale=7 receiver end=321266886 maxend=324039878 maxwin=3144576 scale=7 [ 167.121734][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 167.127025][ C0] tcp_in_window: res=1 sender end=2662690148 maxend=2665834724 maxwin=2772992 receiver end=321266886 maxend=324039878 maxwin=3144576 [ 167.140657][ C0] tcp_conntracks: [ 167.140664][ C0] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 167.149761][ C0] No more buffers in queue [ 167.154159][ C0] eth0: xmit ffff888051e1a780 42:01:0a:80:00:01 [ 167.160386][ C0] Added buffer head 22 to ffff8880235ad900 [ 167.166181][ C0] virtqueue callback for ffff8880235ad900 (ffffffff854980c0) [ 167.173996][ T4231] Added buffer head 0 to ffff88801f7a2e00 [ 167.179806][ C0] virtqueue callback for ffff88801f7a2e00 (ffffffff84450960) [ 167.187163][ C0] virtqueue interrupt with no work for ffff88801f7a2d00 [ 167.194066][ C0] virtqueue interrupt with no work for ffff88801f7a2c00 [ 167.201188][ T4231] Added buffer head 0 to ffff88801f7a2e00 [ 167.206964][ T4231] nf_conntrack: new packet for ffff8880212b5200 [ 167.213196][ T4231] nf_nat: Already setup manip DST for ct ffff8880212b5200 (status bits 0x188) [ 167.222028][ T4231] nf_nat: Already setup manip SRC for ct ffff8880212b5200 (status bits 0x188) [ 167.230958][ T5905] nf_conntrack: new packet for ffff8880774eb380 [ 167.237197][ T5905] nf_nat: Already setup manip DST for ct ffff8880774eb380 (status bits 0x188) [ 167.246063][ T5905] nf_nat: Already setup manip SRC for ct ffff8880774eb380 (status bits 0x188) [ 167.255126][ C0] Sent skb ffff888051e1a780 [ 167.259613][ C0] No more buffers in queue [ 167.271483][ C0] No more buffers in queue [ 167.276051][ T3557] get_one_event: group=ffff888147ddb000 event=ffff888061edfa00 [ 167.276831][ C0] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 167.283631][ T3557] fsnotify_remove_first_event: group=ffff888147ddb000 event=ffff888061edfa00 [ 167.291716][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc90002049000 [ 167.291744][ C0] kcov: kcov_move_area: ffffc90010de2000 1048576 <= ffffc90002049000 10 [ 167.292083][ T5774] kobject: '4-1' (ffff88805ce280a8): kobject_uevent_env [ 167.330918][ T6048] kcov: kcov_task_exit: t = ffff88802125bb80, kcov->t = ffff88802125bb80 [ 167.339591][ T6038] overlayfs: getxattr(/ceph, "trusted.overlay.origin", "", 0, 0) = -95 [ 167.348139][ T4230] nf_conntrack: new packet for ffff888077084600 [ 167.354402][ T4230] nf_nat: Already setup manip DST for ct ffff888077084600 (status bits 0x188) [ 167.363240][ T4230] nf_nat: Already setup manip SRC for ct ffff888077084600 (status bits 0x188) [ 167.373616][ T4228] nf_conntrack: new packet for ffff8880211ebe00 [ 167.379844][ T4228] nf_nat: Already setup manip DST for ct ffff8880211ebe00 (status bits 0x188) [ 167.388688][ T4228] nf_nat: Already setup manip SRC for ct ffff8880211ebe00 (status bits 0x188) [ 167.435637][ T6049] kcov: kcov_start: t = ffff888023ae5940, size = 524288, area = ffffc900155ee000 [ 167.445144][ T5774] kobject: '4-1' (ffff88805ce280a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1' [ 167.456359][ T6049] sctp: sctp_init_sock: sk:ffff88814c83d100 [ 167.456523][ T5774] usb 4-1: adding 4-1:0.0 (config #0, interface 0) [ 167.461591][ T6010] RIP: 0010:reiserfs_get_block+0x16bf/0x4360 [ 167.462428][ T5774] device: '4-1:0.0': device_add [ 167.473832][ C1] virtqueue callback for ffff88802397d200 (ffffffff85497fd0) [ 167.483278][ T6038] kcov: kcov_task_exit: t = ffff8880505e5940, kcov->t = ffff8880505e5940 [ 167.487169][ C1] No more buffers in queue [ 167.499950][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 167.505765][ C1] No more buffers in queue [ 167.510170][ C1] Added buffer head 3236 to ffff88802397d200 [ 167.516136][ C1] Added buffer head 3235 to ffff88802397d200 [ 167.522090][ C1] Added buffer head 3234 to ffff88802397d200 [ 167.528054][ C1] Added buffer head 3233 to ffff88802397d200 [ 167.534017][ C1] Added buffer head 3232 to ffff88802397d200 [ 167.540001][ C1] Added buffer head 3231 to ffff88802397d200 [ 167.545992][ C1] Added buffer head 3230 to ffff88802397d200 [ 167.551966][ C1] Added buffer head 3229 to ffff88802397d200 [ 167.556089][ T6047] FAULT_INJECTION: forcing a failure. [ 167.556089][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 167.557960][ C1] Added buffer head 3228 to ffff88802397d200 [ 167.573192][ T5821] fsnotify_insert_event: group=ffff888147ddb000 event=ffff88807f2016c0 [ 167.576502][ C1] Added buffer head 3227 to ffff88802397d200 [ 167.590692][ C1] Added buffer head 3226 to ffff88802397d200 [ 167.596658][ C1] Added buffer head 3225 to ffff88802397d200 [ 167.602609][ C1] Added buffer head 3224 to ffff88802397d200 [ 167.604679][ T6042] sctp: sctp_init_sock: sk:ffff88814c83c800 [ 167.608607][ C1] Added buffer head 3223 to ffff88802397d200 [ 167.614606][ T6044] overlayfs: getxattr(/binder, "trusted.overlay.opaque", "", 1, 0) = -95 [ 167.620431][ C1] Added buffer head 3222 to ffff88802397d200 [ 167.620447][ C1] Added buffer head 3221 to ffff88802397d200 [ 167.630614][ T5774] kobject: '4-1:0.0' (ffff888019f8a030): kobject_add_internal: parent: '4-1', set: 'devices' [ 167.634844][ C1] Added buffer head 3220 to ffff88802397d200 [ 167.634859][ C1] Added buffer head 3219 to ffff88802397d200 [ 167.634870][ C1] Added buffer head 3218 to ffff88802397d200 [ 167.634882][ C1] Added buffer head 3217 to ffff88802397d200 [ 167.648914][ T3557] inotify_read: group=ffff888147ddb000 kevent=ffff888061edfa00 [ 167.650978][ C1] Added buffer head 3216 to ffff88802397d200 [ 167.657391][ T6043] udc dummy_udc.6: registering UDC driver [USB Raw Gadget] [ 167.662937][ C1] Added buffer head 3215 to ffff88802397d200 [ 167.662953][ C1] Added buffer head 3214 to ffff88802397d200 [ 167.662966][ C1] Added buffer head 3213 to ffff88802397d200 [ 167.662979][ C1] Added buffer head 3212 to ffff88802397d200 [ 167.662992][ C1] Added buffer head 3211 to ffff88802397d200 [ 167.663005][ C1] Added buffer head 3210 to ffff88802397d200 [ 167.663016][ C1] Added buffer head 3209 to ffff88802397d200 [ 167.663029][ C1] Added buffer head 3208 to ffff88802397d200 [ 167.669031][ T6043] dummy_hcd dummy_hcd.6: port status 0x00010101 has changes [ 167.674979][ C1] Added buffer head 3207 to ffff88802397d200 [ 167.682499][ T6043] kobject: 'dummy_udc.6' (ffff888025696018): kobject_uevent_env [ 167.688425][ C1] Added buffer head 3206 to ffff88802397d200 [ 167.688441][ C1] Added buffer head 3205 to ffff88802397d200 [ 167.695649][ T6043] kobject: 'dummy_udc.6' (ffff888025696018): fill_kobj_path: path = '/devices/platform/dummy_udc.6/udc/dummy_udc.6' [ 167.701576][ C1] Added buffer head 3204 to ffff88802397d200 [ 167.701683][ C1] No more buffers in queue [ 167.709954][ T6047] CPU: 0 PID: 6047 Comm: syz.1.360 Tainted: G D syzkaller #0 [ 167.713586][ C1] eth0: xmit ffff8880264e73c0 42:01:0a:80:00:01 [ 167.719524][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.725521][ C1] Added buffer head 10 to ffff88802397d300 [ 167.731449][ T6047] Call Trace: [ 167.731453][ C1] virtqueue callback for ffff88802397d300 (ffffffff854980c0) [ 167.731459][ T6047] [ 167.731466][ T6047] dump_stack_lvl+0x188/0x250 [ 167.737683][ T6050] kcov: kcov_start: t = ffff888026219dc0, size = 524288, area = ffffc9000cdf1000 [ 167.743392][ T6047] ? show_regs_print_info+0x20/0x20 [ 167.752583][ C1] nf_conntrack: new packet for ffff8880211ea600 [ 167.756606][ T6047] ? load_image+0x410/0x410 [ 167.756630][ T6047] ? __might_sleep+0xf0/0xf0 [ 167.764261][ C1] nf_nat: Already setup manip DST for ct ffff8880211ea600 (status bits 0x188) [ 167.770181][ T6047] ? rcu_is_watching+0x11/0xa0 [ 167.776156][ C1] nf_nat: Already setup manip SRC for ct ffff8880211ea600 (status bits 0x188) [ 167.788360][ T6047] ? __lock_acquire+0x7d40/0x7d40 [ 167.788390][ T6047] should_fail+0x383/0x4b0 [ 167.794624][ C1] Sent skb ffff8880264e73c0 [ 167.798735][ T6047] should_failslab+0x5/0x20 [ 167.807417][ C1] No more buffers in queue [ 167.813595][ T6047] slab_pre_alloc_hook+0x51/0xc0 [ 167.813614][ T6047] ? security_inode_alloc+0x30/0x110 [ 167.824075][ C1] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 6) [ 167.829430][ T6047] kmem_cache_alloc+0x3d/0x280 [ 167.835691][ T2175] nf_conntrack: new packet for ffff8880774ffc80 [ 167.840043][ T6047] security_inode_alloc+0x30/0x110 [ 167.842977][ T2175] nf_nat: Already setup manip DST for ct ffff8880774ffc80 (status bits 0x188) [ 167.847604][ T6047] inode_init_always+0x8e5/0xc90 [ 167.856711][ T2175] nf_nat: Already setup manip SRC for ct ffff8880774ffc80 (status bits 0x188) [ 167.861863][ T6047] new_inode_pseudo+0x8e/0x210 [ 167.987044][ T6047] __sock_create+0x128/0x910 [ 167.991618][ T6047] ? account_other_time+0x64/0x280 [ 167.996703][ T6047] __sys_socket+0xe2/0x170 [ 168.001095][ T6047] __x64_sys_socket+0x76/0x80 [ 168.005746][ T6047] do_syscall_64+0x4c/0xa0 [ 168.010142][ T6047] ? clear_bhb_loop+0x30/0x80 [ 168.014797][ T6047] ? clear_bhb_loop+0x30/0x80 [ 168.019447][ T6047] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.025315][ T6047] RIP: 0033:0x7fb8e47911d9 [ 168.029709][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.049289][ T6047] RSP: 002b:00007fb8e29e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 168.057683][ T6047] RAX: ffffffffffffffda RBX: 00007fb8e4a18fa0 RCX: 00007fb8e47911d9 [ 168.065629][ T6047] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 168.073576][ T6047] RBP: 00007fb8e4828888 R08: 0000000000000000 R09: 0000000000000000 [ 168.081527][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.089472][ T6047] R13: 00007fb8e4a19038 R14: 00007fb8e4a18fa0 R15: 00007ffc10c66d48 [ 168.097434][ T6047] [ 168.100488][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.106565][ C0] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 5) [ 168.119464][ T6051] kcov: kcov_start: t = ffff888029f9bb80, size = 524288, area = ffffc9000d1f2000 [ 168.129092][ T6010] Code: ab 7e ff 31 db 4d 89 ec e9 6d 05 00 00 8b 94 24 40 03 00 00 48 89 5c 24 28 4c 89 7c 24 10 4a 8d 5c bb fc 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 b1 0d 00 00 49 89 d7 89 13 48 8b 44 24 [ 168.135750][ T5774] usb 4-1:0.0: No ACPI support [ 168.150092][ T5747] nf_conntrack: new packet for ffff8880774eb380 [ 168.154211][ T9] nf_conntrack: new packet for ffff8880212b5200 [ 168.159821][ T5747] nf_nat: Already setup manip DST for ct ffff8880774eb380 (status bits 0x188) [ 168.159843][ T5747] nf_nat: Already setup manip SRC for ct ffff8880774eb380 (status bits 0x188) [ 168.166067][ T9] nf_nat: Already setup manip DST for ct ffff8880212b5200 (status bits 0x188) [ 168.183774][ C0] virtqueue callback for ffff88801f7a2e00 (ffffffff84450960) [ 168.183811][ C0] virtqueue interrupt with no work for ffff88801f7a2d00 [ 168.183821][ C0] virtqueue interrupt with no work for ffff88801f7a2c00 [ 168.188018][ T6044] overlayfs: getxattr(/binder, "trusted.overlay.redirect", "", 0, 0) = -95 [ 168.192697][ T9] nf_nat: Already setup manip SRC for ct ffff8880212b5200 (status bits 0x188) [ 168.202492][ T6044] overlayfs: getxattr(/binder, "trusted.overlay.origin", "", 0, 0) = -95 [ 168.227683][ T3557] copy_event_to_user: group=ffff888147ddb000 event=ffff888061edfa00 [ 168.232275][ T6052] kcov: kcov_start: t = ffff8880232dbb80, size = 524288, area = ffffc9000f5dd000 [ 168.258321][ T6044] kcov: kcov_task_exit: t = ffff88801afc1dc0, kcov->t = ffff88801afc1dc0 [ 168.262409][ T5774] bus: 'usb': add device 4-1:0.0 [ 168.267484][ T6052] tap0 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 168.272628][ T3557] get_one_event: group=ffff888147ddb000 event=ffff88807f2016c0 [ 168.287422][ T3557] fsnotify_remove_first_event: group=ffff888147ddb000 event=ffff88807f2016c0 [ 168.296172][ T6052] (null): siw: event 17 [ 168.296294][ T6052] device: 'tap0': device_add [ 168.305650][ T6052] kobject: 'tap0' (ffff888020314608): kobject_add_internal: parent: 'net', set: 'devices' [ 168.319120][ T5774] PM: Adding info for usb:4-1:0.0 [ 168.322839][ T6010] RSP: 0018:ffffc900032ef320 EFLAGS: 00010203 [ 168.335176][ T5774] kobject: '4-1:0.0' (ffff888019f8a030): kobject_uevent_env [ 168.342491][ T5774] kobject: '4-1:0.0' (ffff888019f8a030): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 168.343055][ T6052] net tap0: No ACPI support [ 168.360887][ T2175] nf_conntrack: new packet for ffff888077084600 [ 168.367163][ T2175] nf_nat: Already setup manip DST for ct ffff888077084600 (status bits 0x188) [ 168.371860][ T3557] inotify_read: group=ffff888147ddb000 kevent=ffff88807f2016c0 [ 168.376025][ T2175] nf_nat: Already setup manip SRC for ct ffff888077084600 (status bits 0x188) [ 168.378355][ T6010] RAX: 0000000000000001 RBX: 000000000000000c RCX: ffff88807f168000 [ 168.401878][ T5774] bus: 'usb': __driver_probe_device: matched device 4-1:0.0 with driver usbtest [ 168.409197][ T6047] kcov: kcov_task_exit: t = ffff888021258000, kcov->t = ffff888021258000 [ 168.422225][ T3557] copy_event_to_user: group=ffff888147ddb000 event=ffff88807f2016c0 [ 168.422611][ T6052] PM: Adding info for No Bus:tap0 [ 168.436187][ T2175] nf_conntrack: new packet for ffff8880211ebe00 [ 168.442447][ T2175] nf_nat: Already setup manip DST for ct ffff8880211ebe00 (status bits 0x188) [ 168.447484][ T5774] bus: 'usb': really_probe: probing driver usbtest with device 4-1:0.0 [ 168.451310][ T2175] nf_nat: Already setup manip SRC for ct ffff8880211ebe00 (status bits 0x188) [ 168.459896][ T3557] inotify_read: group=ffff888147ddb000 kevent=0000000000000000 [ 168.472056][ T6052] kobject: 'tap0' (ffff888020314608): kobject_uevent_env [ 168.477112][ T6021] raw-gadget.0 gadget: event fetching interrupted [ 168.484984][ T6010] RDX: 0000000000000217 RSI: 00000000000003f4 RDI: 0000000000000000 [ 168.497956][ T6052] kobject: 'tap0' (ffff888020314608): fill_kobj_path: path = '/devices/virtual/net/tap0' [ 168.510233][ T5774] usbtest 4-1:0.0: usb_probe_interface [ 168.512045][ T6010] RBP: ffffc900032ef890 R08: ffffc900032ef7ff R09: ffffc900032ef7e0 [ 168.522298][ T5774] usbtest 4-1:0.0: usb_probe_interface - got id [ 168.525116][ T6050] kcov: kcov_task_exit: t = ffff888026219dc0, kcov->t = ffff888026219dc0 [ 168.530422][ T5774] usbtest: probe of 4-1:0.0 rejects match -19 [ 168.542466][ T6052] kobject: 'queues' (ffff888020f45c50): kobject_add_internal: parent: 'tap0', set: '' [ 168.544960][ T6021] kcov: kcov_task_exit: t = ffff888065f88000, kcov->t = ffff888065f88000 [ 168.563700][ T5774] kernfs 4-1:0.0: removing [ 168.568348][ T5774] kernfs driver: removing [ 168.573311][ T5774] bus: 'usb': __driver_probe_device: matched device 4-1:0.0 with driver usbhid [ 168.574647][ T6052] kobject: 'queues' (ffff888020f45c50): kobject_uevent_env [ 168.582296][ T5774] bus: 'usb': really_probe: probing driver usbhid with device 4-1:0.0 [ 168.591083][ T6052] kobject: 'queues' (ffff888020f45c50): kobject_uevent_env: filter function caused the event to drop! [ 168.598063][ T5774] usbhid 4-1:0.0: usb_probe_interface [ 168.611004][ C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0 [ 168.614586][ T5774] usbhid 4-1:0.0: usb_probe_interface - got id [ 168.627110][ T6052] kobject: 'rx-0' (ffff88806676fe50): kobject_add_internal: parent: 'queues', set: 'queues' [ 168.640225][ T5905] usb usb7: usb wakeup-resume [ 168.640719][ T6052] kobject: 'rx-0' (ffff88806676fe50): kobject_uevent_env [ 168.645240][ T5905] usb usb7: usb auto-resume [ 168.652446][ T6052] kobject: 'rx-0' (ffff88806676fe50): fill_kobj_path: path = '/devices/virtual/net/tap0/queues/rx-0' [ 168.656747][ T5905] usb usb7: dummy_bus_resume [ 168.669517][ T6052] kobject: 'tx-0' (ffff88804db5c818): kobject_add_internal: parent: 'queues', set: 'queues' [ 168.672382][ T5905] hub 7-0:1.0: hub_resume [ 168.682591][ T6052] kobject: 'tx-0' (ffff88804db5c818): kobject_uevent_env [ 168.686977][ T6010] R10: dffffc0000000000 R11: fffff5200065df00 R12: dffffc0000000000 [ 168.695863][ T6052] kobject: 'tx-0' (ffff88804db5c818): fill_kobj_path: path = '/devices/virtual/net/tap0/queues/tx-0' [ 168.701997][ T5905] dummy_hcd dummy_hcd.6: port status 0x00010101 has changes [ 168.712705][ T6052] tap0: Features changed: 0x00002000001558c9 -> 0x00002000000058c1 [ 168.720135][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 168.735841][ C0] kcov: kcov_start: t = ffff88813fea9dc0, size = 262144, area = ffffc90002049000 [ 168.737747][ T6052] Registering net sysctl (net ffff888079208000): net/ipv4/neigh/tap0 [ 168.744979][ C0] kcov: kcov_move_area: ffffc900185f6000 1048576 <= ffffc90002049000 26 [ 168.757131][ T6052] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880259f7654 [ 168.761562][ T5905] usb usb7-port1: status 0101 change 0001 [ 168.772424][ C1] nf_conntrack: new packet for ffff8880211ea600 [ 168.778135][ T6010] R13: 00000000000003f4 R14: ffff88805c5a43a0 R15: 0000000000000000 [ 168.784318][ C1] nf_nat: Already setup manip DST for ct ffff8880211ea600 (status bits 0x188) [ 168.793080][ C0] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 168.801122][ C1] nf_nat: Already setup manip SRC for ct ffff8880211ea600 (status bits 0x188) [ 168.809303][ C0] kcov: kcov_start: t = ffff888061d83b80, size = 262144, area = ffffc90002049000 [ 168.821109][ T6052] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880259f7658 [ 168.827258][ C0] kcov: kcov_move_area: ffffc900185f6000 1048576 <= ffffc90002049000 42 [ 168.827777][ T5767] nf_conntrack: normal packet for ffff8880774fe780 [ 168.840784][ T2175] nf_conntrack: new packet for ffff888077085500 [ 168.846819][ T5767] nf_conntrack: normal packet for ffff888077084a80 [ 168.853256][ T2175] nf_nat: Already setup manip DST for ct ffff888077085500 (status bits 0x188) [ 168.859631][ T5766] Added buffer head 0 to ffff88801f7a2e00 [ 168.865968][ T2175] nf_nat: Already setup manip SRC for ct ffff888077085500 (status bits 0x188) [ 168.875156][ T1108] nf_conntrack: normal packet for ffff8880211ea000 [ 168.885091][ T6052] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880259f765c [ 168.890361][ T6051] kcov: kcov_task_exit: t = ffff888029f9bb80, kcov->t = ffff888029f9bb80 [ 168.895978][ T6010] FS: 00007fa7e87726c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 168.906835][ T1108] nf_conntrack: normal packet for ffff8880211ea000 [ 168.917606][ T6052] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880259f7660 [ 168.925037][ T6010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.931778][ T4228] nf_conntrack: new packet for ffff8880212b5c80 [ 168.941945][ T6010] CR2: 00007fa2b7270201 CR3: 0000000051a8e000 CR4: 00000000003506e0 [ 168.948376][ T4228] nf_nat: Already setup manip DST for ct ffff8880212b5c80 (status bits 0x188) [ 168.948398][ T4228] nf_nat: Already setup manip SRC for ct ffff8880212b5c80 (status bits 0x188) [ 168.953143][ T6052] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff8880259f7664 [ 168.954922][ T6010] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.965533][ T6052] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=ffff8880259f7668 [ 168.971713][ T6010] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.980820][ T6052] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff8880259f766c [ 168.994606][ T5905] kcov: kcov_remote_start: handle = 100000000000007, context: task [ 169.007443][ T6052] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff8880259f7670 [ 169.011044][ T5905] kcov: kcov_start: t = ffff8880259f9dc0, size = 1048576, area = ffffc900141eb000 [ 169.019176][ T6052] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff8880259f7674 [ 169.032916][ T6010] Kernel panic - not syncing: Fatal exception [ 169.075880][ T6010] Kernel Offset: disabled [ 169.080196][ T6010] Rebooting in 86400 seconds..