last executing test programs: 11m55.613917509s ago: executing program 4 (id=76): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffff8001, 0xfffffffffffffffe}, {0x0, 0x0, 0x200000000000, 0xb}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 11m45.884629131s ago: executing program 4 (id=99): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f000000000014"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x5, 0x1, 0x6}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="7800000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 11m40.415470821s ago: executing program 4 (id=104): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x8000) r1 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) 11m36.787895671s ago: executing program 4 (id=112): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x1004881, &(0x7f00000000c0)=ANY=[], 0x10, 0x7f4, &(0x7f0000002300)="$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") readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000002b00)=""/4095, 0xfff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x308}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$binfmt_script(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x4, 0x8, &(0x7f00000002c0)="b8000005", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x24, 0x0, &(0x7f00000000c0)) 11m35.655028029s ago: executing program 4 (id=113): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x1, 0x4, 0x6, 0x9}, {0x10, 0x6, 0x0, 0x9, 0x7, 0x6, 0x0, 0x2, 0x1, 0x7, 0x7f, 0xfb, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x48, 0x4, 0x4, 0x68, 0x7, 0x0, 0x2, 0xd}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x20000, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m29.082969696s ago: executing program 4 (id=126): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000007f0cff0a196e6d57113f3eab28c85d691f"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11m13.49664068s ago: executing program 32 (id=126): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000007f0cff0a196e6d57113f3eab28c85d691f"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8m13.03696312s ago: executing program 5 (id=604): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c9972293343", 0x88, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80), 0x0, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40), 0x0, 0xa}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m11.956569565s ago: executing program 5 (id=606): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8m11.766906801s ago: executing program 5 (id=608): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000dca9680e7571be03", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000003ffffffff00"/28], 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) eventfd(0xfffffc00) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x80400, 0x2) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 8m10.716200796s ago: executing program 5 (id=611): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2000c10, &(0x7f00000000c0)={[{@i_version}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x16}]) 8m9.655346111s ago: executing program 5 (id=612): r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000640)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@uni_xlate}, {@utf8no}, {@numtail}]}, 0x27, 0x358, &(0x7f00000008c0)="$eJzs3T1oJGUYAOB3bza/ciaFEBSE1U6Q4xKx0CrhOOEwhZ4s/jUuJtEzsx4ksJArsreNYqnYCFrZWWh5tViI2FnYeoKcJzZed3CHI7uzP7M/kSgm8bjnKcLLO9+73zszX9jJ35c3VmN7Yyq2bt26EbOzpSivnluN26VYjFORRO5qjGiNJgCAe8ntLIs/slwhvTR59EfzvWj6GHoDAI5G5/3/rdODxMxJdgMAHIcDvv4f9cLE7OUjawsAOEJj7/+PDx0e+TZ/uf87AQDAveulV197fm094mKlMhtRf79RbVTj2cHxtUdvXoo0NuNsLMTdiPxBIX9aaH987sL6+bOVtl8Xo9quaFQj6s1GNX9SWEuiXT8Ty7EQi936rF+ftOuXO/WViLja7Mwf9VKjOhXz7fqtuPTTfCSxEgvx0Fh9xIX18yuV7gtU6736ZkQrZnsn0e7/TCzED2/G5UhjI9q1g/73lyuVc9l6ob7W+UHIxkncEAAAAAAAAAAAAAAAAAAAAAAA7gtnKn2L/f1vsnqz8d7F0QGLxf11GtX88NpWZ3+fVr4/UDbT253ng2R0f6Dh/Xka1XKcOtEzBwAAAAAAAAAAAAAAAAAAgP+PUkxHLU03d3b3rmwXg2Yh8+53X34zF6Nj3kkGmSjnLzc0ppuLQlUS/fKsX54lQ2O6QRIxGPzFtX7HeSaZcC5jZzETEcOZUrenWpqefuyXT8cm3buy/ecgk8TYZRkOSt2ZC4fqD+apg6p6zU58wZW/masdXM+y7KB+9j8Zr4pSRHnsxv0Xwbc33n74qd2lpzuZr7ubPjzx5MLL1z/+/LftWhrdS5Om0zu7d7N/N1eWDK2fUvc6l2LCYpsYtAaZ1s7uXi358fdXHvnw+6Exc2OLpDd7IVPutzE7fLtrafrV6OzTeVA66C6PBFMTFv/k4PU7/dX7zy/m0mertWv7P988bFXhE8tGHQAAAAAAAAAAAAAAAAAAcCwKfyse8cBhq5558Wi7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjNfj//4WgNZY5THCnGeOHZjZ3dg+cfO5YTxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYXwEAAP//IZFqGg==") fspick(r0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000890}, 0x4040000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) 8m3.150437986s ago: executing program 5 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x7be, &(0x7f0000003080)="$eJzs3U1oHPfZAPBn9EqxooAJeUtqjOOM7RRs6iq7q0SpyCHdrEbyJNKu2F0Vm1KSEMvFWPkgJrTxoYkvST8pPfWY5hpy6a3QQ6GHtqdCc+ilh0Igp5JCA6WlFFRmdtdeyfpyLNlJ+vuJ6D8788x/npmdzLOz1swEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBJY7ZSqSYHI2L5bLq1xmy7tbjN9EF/v17XbLPciKT4L8bH41Bv1KEvXJ98f/HreBzpvToS4yODCfc+/v+jI4P5t0nokzq2y7gk4o0ioUvPra6uvLIPidxGP/jVTc/yr7Xi93zWzDutfLE+n6V5p5XOTE9XHj4z10nn8oWsc67TzRbTRjurd1vt9GTjVFqdmZlKs8lzreXm/Gx9IRuMfOwrtUplOn1qcimrtzut5sNPTXYaZ/KFhbw5X8bUKt+OIuaxYkd8Ou+m3ay+mKYXLq6uTO2UahFUXTfmwLod58hD93746gcfX1wpdsitOkn6+1+tWq3VqtOPzjz6WKUyWqvU1o+obBDXImIkoojYl52Wz5A9OnLDrRsp6v/HScRC5NGM5TgbaaQxUv6+/jMW4zEb7WjFYvH6T2Mbpt9Q/7/08N/+sN1yh+v/oMofuj75cJT1/2jv1dEYL5rxuHLPuvpfHJQ35rF/P833etkMj7scr8WVuBTPxWqsxkq8chvz+UQ/I3vb33xk0Yw8OtGKPBajXo5J+2PSmInpmI5KPBNnYi46kcZc5LEQWXTiXHR+ONp/vxvRjizq0Y1WtCONk9GIU5FGNWZiJqYijSwm41y0YjmaMR+zUS97uRAXy+0+tSGv+7/7bPLGHz98uxi+FlTdZkWS4sNcEfT3bYL6xfzB2FX9v7u/busj1P/Pm/H++7zb+L04bMOeWCvP/0fvdBoAAADAPkrKb9+TiBiLB8qhuXwh+8adTgsAAADYQ+XfNR8pmrFi6IFIivP/yiaR79/23AAAAIC9kZTX2CURMREP9oYGl0tt9iUAAAAA8BlU/vv/0aKZiHi9HOH8HwAAAD5nvjd0j/0YvsfuB3f179HbWTqQ/F8/eunsQ8kL9WKo/kJ/XL/5+rUeu3OHk4P9TspmevTKPUlEjDayI8ng7pf/OdBrPyp7OHz9BoQb87h2r992eyy5unUCsX0C5av4URzrxRw732vPD6b0ljIxly9kk43WwuPVpP/lSPfVFy9+J6JY+vebiweTuHBxdWXy+ZdWz5e5XC16ufpC//bwyU3kstbfAvHA5ms8Vl6I0V/uRG+5leH17z8SYWT7ZSbDy3wzjvdijk/02on16z9eLLM6+Xg16vWDI93sbPfVtaG172dRvcU1fzNO9GJOnDzRazbJorYuixdvzKI2nMXutsWus3j72Otn//HbVpJN7ZTF1C1mAXCnXCjv+nO9Ct1dVqF/r/UU9X9D3R3c1fymjnIXrn/KGMw/VOtGY2+q+5txshdzsvd5YvTwJnWlsskR/eWLL/+uf0R/5N2f/fybR3//i62r21qyfRbvxqleYL+J+35zQxZFF9Vyy/54Q1V9p5jjnS2ramehlsRYjPSmDCavfGvlxVptarrySKXyaC3Gyo8K/UbtAWATOz5jZxdP4Xlk87PqGFS8+679ScFkPB8vxWqcj9Pl1QYR8eDmvU4M/RnC6R3OWieGnvByeodzy+uxtY2xB04ksUXs1NAW++JPy+af+/eeAMB+O75DHd5N/T+9w3n3+lp+qvfg3MHZcWxdyzfz1f3eIADwPyBrf5RMdN9K2u186ZnqzEy13j2Tpe1W4+m0nc/OZ2ne7Gbtxpl6cz5Ll9qtbqsx+OJ4NuukneWlpVa7m8612ulSq5OfLZ/8nvYf/d7JFuvNbt7oLC1k9U6WNlrNbr3RTWfzTiNdWn5yIe+cydrlzJ2lrJHP5Y16N281005rud3IJtO0k2VDgfls1uzmc3kx2EyX2vlivX01IhaWF7N0Nus02vlSt9XrcLCsvDnXai+W3U7euPp/vd3bGwA+DS6/duXSc6urK6+sH1hLNo7ZfODPu4i5HLF2p1cTABgyXKUBAAAAAAAAAAAAAIBPpxsv1yvG7nhJ3/DAWNxE8IaBA/FJ5vr8Dnz5vd7bshcd3ko/d697T+/q7yx3fvvc9MCzTzxxaauYJ18/dOYvWcTO/Wz+f8rle27Ye+OtgxF3/fInvTFfu11r+n701iJGb2r2tWSbmDt2SAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf03AAD//2tvTu0=") name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/110, 0x6e) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000880)=""/4096, 0x1000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818858, &(0x7f00000000c0)={[{@fat=@check_strict}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}, {@utf8}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000002980)="$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") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e20, @multicast2}, {0x6, @multicast}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 'ip6gretap0\x00'}) capset(&(0x7f0000000040)={0x19980330}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004c406b322e293fa3e38bed1ec9a4444938394000001000000800000000000000ecfbf3950032a1c568f99"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x18, 0x2001}, 0x50) 8m2.680019731s ago: executing program 33 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x7be, &(0x7f0000003080)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/110, 0x6e) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000880)=""/4096, 0x1000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818858, &(0x7f00000000c0)={[{@fat=@check_strict}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}, {@utf8}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x371, &(0x7f0000002980)="$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") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e20, @multicast2}, {0x6, @multicast}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 'ip6gretap0\x00'}) capset(&(0x7f0000000040)={0x19980330}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004c406b322e293fa3e38bed1ec9a4444938394000001000000800000000000000ecfbf3950032a1c568f99"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x18, 0x2001}, 0x50) 1m10.457327163s ago: executing program 2 (id=1751): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 1m6.772971995s ago: executing program 2 (id=1763): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b", 0x66, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80), 0x0, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40), 0x0, 0xa}]}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m6.555354732s ago: executing program 2 (id=1764): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455", 0x78, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80), 0x0, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea36", 0x62, 0xa}]}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x58, 0x14, {{'cmac(aes)\x00'}, 0x60, 0x0, "3509fe8fd57fd44aa5074c50"}}]}, 0x148}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 1m4.648766745s ago: executing program 2 (id=1769): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m2.901034813s ago: executing program 2 (id=1775): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x2048dc, &(0x7f0000002000)=ANY=[@ANYRES64, @ANYBLOB="1db4b5d420b3174cdede844c43a43943be76e69001395ed98fefe2cc150ba97dfee750eb0d16409599bf6843a349f13575474e25f700f333547f2b05ac4871d53699075551f6b7ceffa343f9b24cb1f7987cea2dca3f741328e2b8aad5afcfbe8c95abfc249f821b3e6ce8d5fa6b956b36809115ec818d052d67c7086e531deecadfb52f776c9ee4548e6540125856515a77ab3ab8f0c49bca9d69ef6492d77968969c37020646292a30578404"], 0x1, 0x343, &(0x7f0000000bc0)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) 1m1.362933584s ago: executing program 2 (id=1778): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x5b) 1m0.182108383s ago: executing program 34 (id=1778): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x5b) 10.390720007s ago: executing program 0 (id=1914): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x60, 0x8001, 0x0, 0x4, 0xe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r7, &(0x7f0000000040)=""/45, 0x2d, 0x102, 0x0, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r8}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x40480d1) 9.593013653s ago: executing program 0 (id=1916): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 9.305932123s ago: executing program 0 (id=1918): clock_gettime(0x4, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000c000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r1, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) socket$l2tp(0x2, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x40384708, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x4) syz_usb_connect(0x2, 0x396, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 8.560880647s ago: executing program 1 (id=1919): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402280a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0xffc, 0x10ffff, 0xffffff88}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 8.47305705s ago: executing program 1 (id=1920): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000880)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) 8.045002824s ago: executing program 0 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a32000000"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 7.364987347s ago: executing program 1 (id=1924): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c997229", 0x86, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80), 0x0, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40), 0x0, 0xa}]}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.206288882s ago: executing program 7 (id=1925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r6, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="3000000000000000290000000b0000000002"], 0x30}, 0x0) 6.929309341s ago: executing program 1 (id=1927): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0), 0x0, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80), 0x0, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40), 0x0, 0xa}]}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.160626766s ago: executing program 7 (id=1928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000a80), 0x12) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb20a000, 0x0, 0x3, 0x1, 0x0, 0x89d3}, &(0x7f00000000c0)=0x20) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.356233953s ago: executing program 3 (id=1931): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 5.286651375s ago: executing program 7 (id=1941): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd", 0x7e}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x5a2}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18", 0xc1}], 0x2}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.413255514s ago: executing program 6 (id=1932): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000080), 0x1, 0x789, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000200)='./file0\x00', 0x1) io_setup(0x5, &(0x7f00000000c0)=0x0) r1 = eventfd2(0x7, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001940)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1002, r2, 0x0, 0x0, 0x3, 0x0, 0x1, r1}]) 3.518679254s ago: executing program 7 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "9b"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "82f753eee188754b12bb3ad99a"}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "95ab88dede4a980417261f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x92}, 0x0) r1 = gettid() openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x2) connect$netrom(r5, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000010000"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.757806929s ago: executing program 1 (id=1934): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) listen(0xffffffffffffffff, 0x2b) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) syz_emit_ethernet(0xd2, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "ade642", 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {0x4e20, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "34ed73d613fdb88255494d86f8aa905d656e884fbdac710d896925f490cd4f01", "a51375be1166764e7095927496b47ba20d4a11f75dc96dcc582051baff5d76b14ae5fec27a5a4bbac95c3c9c76b5fe8c", "24204c9409960e56e9417d59122c49f858a16ed1cc0b9e17b0acb529", {"1915b6fc1f1d207b00", "3d3af70f4219b8312f690ded2c8b44e4"}}}}}}}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) syz_usb_connect(0x0, 0xf2, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201000296fdcf084f1712521040010203010902e0000106e370130904dc02000e0100010a2401ff0729000201020b240406bea33c2d2031e80b240304020205000a0010092403040404010503052406000105240004000d240f0109000000810000020606241a04003c0c241b070008000b100008107c"], 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.755714359s ago: executing program 3 (id=1935): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @remote, 0x7}, 0x1c, &(0x7f0000000f00)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.696972031s ago: executing program 6 (id=1936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x60}, 0x28) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000040c0), 0x20000, 0x0) 1.696734724s ago: executing program 6 (id=1937): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000d40)={{r0, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x4, &(0x7f0000000e00)=[{0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d70aa7c997229", 0x86, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80), 0x0, 0x32}, {0x1, 0x80000001, &(0x7f0000000c00)=']\x00', &(0x7f0000000c40), 0x0, 0xa}]}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.476052191s ago: executing program 3 (id=1938): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.445445272s ago: executing program 7 (id=1939): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 1.424634943s ago: executing program 6 (id=1940): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001780)}}, {{&(0x7f0000000500)=@ll={0x11, 0x16, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)}, {&(0x7f0000000580)="b309d3ef91dd92a3b7e1c73ff0a368ae33c77fd11e3c04fdf36d2f9461a7ee76290ce0f6449e8a16fb86ee80c6ae62ec109763ae520d", 0x36}, {&(0x7f0000000740)="efded85c2c542acacf9d79eea389735832330080b0afe68599b4b850531e65e89deb1e", 0x23}], 0x3}}, {{&(0x7f0000000880)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000900)="a590902a494aeaa8345cc36e3baafae8603b7dca66a102375bff06a96fefcb42def096636b07c90f4fcc1e603e4344945d65949f8060d29943d637225ae1487d0e50cd650ef42c634bf4c96a466cd6a0bbaad461e8da5295d6e67b041e597a6204a4ea5d177c0895cbc60f2c6edbe0cf5ce787ba93d8d070f7a7d51cf0b81f6c48aecbc944db5a735cff3816ec24f77a43b59b905350d778ecbf80411ee62619f8dfc9559f98ab1459ab9c9d4d66c660959e0ea4ceb914", 0xb7}, {&(0x7f0000001200)="e03edf555ccc657c1f51f2e2d556c56634e24d753289e65d5c7fbaaf2a49182660fdc72e77d70ab6e91175c5ad36269eeea9cd41439c1c5c9c2b067776", 0x3d}, {&(0x7f00000009c0)="ec542e6e546621be55daa06ed7f545e327ecd8c48d3f7b8ae050bff8c90a3cb00173b653bc4096d3851480366de66f4b99be156191f797f123a3f23be8a22e76a5bd01e1cc80b1d2c45b133bc3eecc580700004210c7136885", 0x59}, {&(0x7f0000001000)="18a8583924039aadf86313c609284663d89bbf4926f433da348624e066f55a2241069c638f862039561bc732a9a380a05c6a8ab5adb65188f24882cb13f9dd604ef15ea43abc5ccdfc9bfe6b966c343da49e10cebdd875ae8793f2398278658eacbed7b13eaa2fe77a74ee08c4986f8683af3caacbe3b6c0a5a10f1fed7418a7d4af3f5bd43d33ea14afed50e430cd8dcf38a33f2a10456eaaa71a611a4f87dff266de2087d21e9965", 0xa9}], 0x4}}], 0x3, 0x200000c0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{0x0}, {0x0}, {&(0x7f00000006c0)="138b9f8300af1d79", 0x8}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f", 0x12}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19b", 0x59}], 0x5}}], 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001440), 0x7953bb0c2b576ac9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x26000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x6, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x5800, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.193090771s ago: executing program 3 (id=1942): mkdir(0x0, 0xa5) mkdir(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x14507e, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={0x2, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x78) openat(0xffffffffffffff9c, 0x0, 0x533201, 0x80) 1.185820621s ago: executing program 0 (id=1943): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="050427bd7000fcdbdf2501000100080001", @ANYRES32=r1, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003"], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.055364765s ago: executing program 7 (id=1944): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 947.058719ms ago: executing program 3 (id=1945): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @remote, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 888.6084ms ago: executing program 6 (id=1946): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x2048dc, &(0x7f0000002000)=ANY=[@ANYRES64, @ANYBLOB="1db4b5d420b3174cdede844c43a43943be76e69001395ed98fefe2cc150ba97dfee750eb0d16409599bf6843a349f13575474e25f700f333547f2b05ac4871d53699075551f6b7ceffa343f9b24cb1f7987cea2dca3f741328e2b8aad5afcfbe8c95abfc249f821b3e6ce8d5fa6b956b36809115ec818d052d67c7086e531deecadfb52f776c9ee4548e6540125856515a77ab3ab8f0c49bca9d69ef6492d77968969c37020646292a30578404"], 0x1, 0x343, &(0x7f0000000bc0)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 839.030262ms ago: executing program 0 (id=1947): socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) 0s ago: executing program 3 (id=1948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x4b65, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB], 0x0, 0x60}, 0x28) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) openat$ptp0(0xffffffffffffff9c, 0x0, 0x20000, 0x0) kernel console output (not intermixed with test programs): nge from 0 to 512 [ 360.534456][ T7353] BTRFS info (device loop0): turning off barriers [ 360.543315][ T7387] EXT4-fs (loop6): 1 truncate cleaned up [ 360.624553][ T7387] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 360.638187][ T7353] BTRFS info (device loop0): enabling auto defrag [ 360.684629][ T7353] BTRFS info (device loop0): use zlib compression, level 3 [ 360.770457][ T7353] BTRFS info (device loop0): disk space caching is enabled [ 360.835158][ T7353] BTRFS info (device loop0): has skinny extents [ 361.583671][ T7353] BTRFS error (device loop0): open_ctree failed: -12 [ 361.608189][ T4264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4264) [ 361.929204][ T7420] loop3: detected capacity change from 0 to 32768 [ 363.515760][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.6.701'. [ 363.617559][ T7438] loop2: detected capacity change from 0 to 256 [ 364.407897][ T7448] loop3: detected capacity change from 0 to 256 [ 365.123974][ T7448] FAT-fs (loop3): Directory bread(block 64) failed [ 365.175329][ T7448] FAT-fs (loop3): Directory bread(block 65) failed [ 365.182012][ T7448] FAT-fs (loop3): Directory bread(block 66) failed [ 365.292829][ T7458] loop6: detected capacity change from 0 to 512 [ 365.415261][ T7448] FAT-fs (loop3): Directory bread(block 67) failed [ 365.436818][ T7458] EXT4-fs (loop6): 1 truncate cleaned up [ 365.442585][ T7458] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 365.575179][ T7448] FAT-fs (loop3): Directory bread(block 68) failed [ 365.717630][ T7448] FAT-fs (loop3): Directory bread(block 69) failed [ 365.839695][ T7448] FAT-fs (loop3): Directory bread(block 70) failed [ 365.991309][ T7448] FAT-fs (loop3): Directory bread(block 71) failed [ 366.087891][ T7448] FAT-fs (loop3): Directory bread(block 72) failed [ 366.094701][ T7448] FAT-fs (loop3): Directory bread(block 73) failed [ 368.925890][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.715'. [ 370.425966][ T7508] loop6: detected capacity change from 0 to 512 [ 372.479396][ T7512] sctp: failed to load transform for md5: -2 [ 373.615203][ T7508] EXT4-fs: error -4 creating inode table initialization thread [ 373.674857][ T7508] EXT4-fs (loop6): mount failed [ 373.697396][ T7524] loop0: detected capacity change from 0 to 256 [ 373.865120][ T7524] FAT-fs (loop0): Directory bread(block 64) failed [ 373.871909][ T7524] FAT-fs (loop0): Directory bread(block 65) failed [ 373.915792][ T7524] FAT-fs (loop0): Directory bread(block 66) failed [ 373.951162][ T7524] FAT-fs (loop0): Directory bread(block 67) failed [ 374.007801][ T7524] FAT-fs (loop0): Directory bread(block 68) failed [ 374.032487][ T7524] FAT-fs (loop0): Directory bread(block 69) failed [ 374.063045][ T7524] FAT-fs (loop0): Directory bread(block 70) failed [ 374.180031][ T7524] FAT-fs (loop0): Directory bread(block 71) failed [ 374.188279][ T7524] FAT-fs (loop0): Directory bread(block 72) failed [ 374.203258][ T7524] FAT-fs (loop0): Directory bread(block 73) failed [ 376.774000][ T7561] loop6: detected capacity change from 0 to 512 [ 378.463024][ T7561] EXT4-fs (loop6): 1 truncate cleaned up [ 378.469026][ T7561] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 378.618212][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.624818][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.889731][ T7570] fuse: Bad value for 'fd' [ 379.196144][ T7567] sctp: failed to load transform for md5: -2 [ 379.287386][ T7571] loop1: detected capacity change from 0 to 256 [ 380.155488][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 380.216275][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.226594][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 380.237346][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.247428][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 380.296071][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.306466][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 380.316448][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.050799][ T7571] FAT-fs (loop1): Directory bread(block 64) failed [ 381.136198][ T7571] FAT-fs (loop1): Directory bread(block 65) failed [ 381.149716][ T7571] FAT-fs (loop1): Directory bread(block 66) failed [ 381.269771][ T7571] FAT-fs (loop1): Directory bread(block 67) failed [ 381.367444][ T7571] FAT-fs (loop1): Directory bread(block 68) failed [ 381.456844][ T7571] FAT-fs (loop1): Directory bread(block 69) failed [ 381.505923][ T7571] FAT-fs (loop1): Directory bread(block 70) failed [ 381.655180][ T7571] FAT-fs (loop1): Directory bread(block 71) failed [ 382.026141][ T7571] FAT-fs (loop1): Directory bread(block 72) failed [ 382.032732][ T7571] FAT-fs (loop1): Directory bread(block 73) failed [ 383.535545][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.747'. [ 384.828035][ T7635] sctp: failed to load transform for md5: -2 [ 385.067015][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 385.077077][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.087028][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 385.097205][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.118135][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 385.128222][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.138336][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 385.148519][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.470288][ T7654] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=42 (84 ns) > initial count (14 ns). Using initial count to start timer. [ 387.512858][ T7656] loop0: detected capacity change from 0 to 256 [ 387.562435][ T7656] FAT-fs (loop0): Directory bread(block 64) failed [ 387.577143][ T7656] FAT-fs (loop0): Directory bread(block 65) failed [ 387.607082][ T7656] FAT-fs (loop0): Directory bread(block 66) failed [ 387.657719][ T7656] FAT-fs (loop0): Directory bread(block 67) failed [ 387.679904][ T7656] FAT-fs (loop0): Directory bread(block 68) failed [ 387.708013][ T7656] FAT-fs (loop0): Directory bread(block 69) failed [ 387.749295][ T7656] FAT-fs (loop0): Directory bread(block 70) failed [ 387.767029][ T7656] FAT-fs (loop0): Directory bread(block 71) failed [ 387.779009][ T7656] FAT-fs (loop0): Directory bread(block 72) failed [ 387.786617][ T7656] FAT-fs (loop0): Directory bread(block 73) failed [ 388.721711][ T7669] loop0: detected capacity change from 0 to 512 [ 390.413480][ T7669] EXT4-fs (loop0): 1 truncate cleaned up [ 390.419401][ T7669] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 390.690408][ T7678] loop2: detected capacity change from 0 to 512 [ 391.095159][ T7685] sctp: failed to load transform for md5: -2 [ 391.910251][ T7678] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 391.922592][ T7678] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.407922][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 392.418139][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.428791][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 392.439093][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.461126][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 392.471158][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.481512][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 392.491619][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.194243][ T7711] loop2: detected capacity change from 0 to 256 [ 394.416406][ T7711] FAT-fs (loop2): Directory bread(block 64) failed [ 394.443662][ T7711] FAT-fs (loop2): Directory bread(block 65) failed [ 394.460116][ T7711] FAT-fs (loop2): Directory bread(block 66) failed [ 394.513359][ T7711] FAT-fs (loop2): Directory bread(block 67) failed [ 394.525491][ T7711] FAT-fs (loop2): Directory bread(block 68) failed [ 394.649662][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 396.134991][ T7711] FAT-fs (loop2): Directory bread(block 69) failed [ 396.332623][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 396.346893][ T7711] FAT-fs (loop2): Directory bread(block 70) failed [ 396.472878][ T7711] FAT-fs (loop2): Directory bread(block 71) failed [ 396.586573][ T7711] FAT-fs (loop2): Directory bread(block 72) failed [ 396.908730][ T7711] FAT-fs (loop2): Directory bread(block 73) failed [ 397.629653][ T7743] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 397.636227][ T7743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.643902][ T7743] vhci_hcd vhci_hcd.0: Device attached [ 397.672154][ T7743] loop2: detected capacity change from 0 to 8 [ 397.752419][ T7743] unable to read inode lookup table [ 397.924459][ T4277] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 398.210628][ T7745] vhci_hcd: connection reset by peer [ 398.258706][ T4306] vhci_hcd: stop threads [ 398.263763][ T4306] vhci_hcd: release socket [ 398.301285][ T4306] vhci_hcd: disconnect device [ 398.587664][ T7754] loop3: detected capacity change from 0 to 40427 [ 398.678770][ T7754] F2FS-fs (loop3): invalid crc value [ 398.689633][ T7754] F2FS-fs (loop3): Found nat_bits in checkpoint [ 398.756325][ T7754] F2FS-fs (loop3): Start checkpoint disabled! [ 398.786769][ T7754] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 400.584174][ T7776] loop1: detected capacity change from 0 to 512 [ 402.274926][ T7776] EXT4-fs (loop1): 1 truncate cleaned up [ 402.280831][ T7776] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 402.941452][ T7793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'. [ 403.000615][ T4240] attempt to access beyond end of device [ 403.000615][ T4240] loop3: rw=2049, want=40976, limit=40427 [ 403.094584][ T4277] vhci_hcd: vhci_device speed not set [ 403.333878][ T7796] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 403.340453][ T7796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.348559][ T7796] vhci_hcd vhci_hcd.0: Device attached [ 403.363445][ T7796] loop6: detected capacity change from 0 to 8 [ 403.403028][ T7796] unable to read inode lookup table [ 403.627044][ T4174] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 403.764604][ T7798] vhci_hcd: connection reset by peer [ 403.856677][ T4547] vhci_hcd: stop threads [ 403.860992][ T4547] vhci_hcd: release socket [ 403.873566][ T4547] vhci_hcd: disconnect device [ 403.954982][ T7808] loop3: detected capacity change from 0 to 256 [ 403.986669][ T7808] FAT-fs (loop3): Directory bread(block 64) failed [ 404.009249][ T7808] FAT-fs (loop3): Directory bread(block 65) failed [ 404.031759][ T7808] FAT-fs (loop3): Directory bread(block 66) failed [ 404.066453][ T7808] FAT-fs (loop3): Directory bread(block 67) failed [ 404.119756][ T7808] FAT-fs (loop3): Directory bread(block 68) failed [ 404.157380][ T7808] FAT-fs (loop3): Directory bread(block 69) failed [ 404.182348][ T7808] FAT-fs (loop3): Directory bread(block 70) failed [ 404.212570][ T7808] FAT-fs (loop3): Directory bread(block 71) failed [ 404.246268][ T4295] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.271218][ T7808] FAT-fs (loop3): Directory bread(block 72) failed [ 404.323695][ T7808] FAT-fs (loop3): Directory bread(block 73) failed [ 404.545483][ T4295] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.767803][ T4295] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.920611][ T7821] loop0: detected capacity change from 0 to 512 [ 407.027924][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 407.055126][ T7821] EXT4-fs (loop0): 1 truncate cleaned up [ 407.060956][ T7821] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 407.324590][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.390114][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 407.784070][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.892046][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 407.922834][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.943422][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:34) already exists on: macsec1 [ 408.555346][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.774723][ T4174] vhci_hcd: vhci_device speed not set [ 408.805410][ T4295] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.418387][ T4295] tipc: Left network mode [ 410.612815][ T7858] loop6: detected capacity change from 0 to 256 [ 410.853691][ T7858] FAT-fs (loop6): Directory bread(block 64) failed [ 410.915309][ T7858] FAT-fs (loop6): Directory bread(block 65) failed [ 410.972521][ T7858] FAT-fs (loop6): Directory bread(block 66) failed [ 411.017538][ T7858] FAT-fs (loop6): Directory bread(block 67) failed [ 411.065375][ T7858] FAT-fs (loop6): Directory bread(block 68) failed [ 411.177760][ T7858] FAT-fs (loop6): Directory bread(block 69) failed [ 411.185128][ T7858] FAT-fs (loop6): Directory bread(block 70) failed [ 411.199837][ T7858] FAT-fs (loop6): Directory bread(block 71) failed [ 411.212364][ T7858] FAT-fs (loop6): Directory bread(block 72) failed [ 411.224332][ T7858] FAT-fs (loop6): Directory bread(block 73) failed [ 411.243195][ T7865] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 411.249769][ T7865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.259409][ T7865] vhci_hcd vhci_hcd.0: Device attached [ 411.260259][ T7874] loop1: detected capacity change from 0 to 8 [ 411.292763][ T7868] loop0: detected capacity change from 0 to 512 [ 411.335324][ T7874] unable to read inode lookup table [ 411.941087][ T7868] EXT4-fs (loop0): 1 truncate cleaned up [ 411.947006][ T7868] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 411.959865][ T7] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 412.014030][ T7867] vhci_hcd: connection reset by peer [ 412.022348][ T4240] vhci_hcd: stop threads [ 412.030092][ T4240] vhci_hcd: release socket [ 412.254283][ T4240] vhci_hcd: disconnect device [ 412.409120][ T7894] loop0: detected capacity change from 0 to 64 [ 412.455579][ T7894] hfs: can't find a HFS filesystem on dev loop0 [ 412.612631][ T7896] loop2: detected capacity change from 0 to 40427 [ 412.934874][ T7896] F2FS-fs (loop2): invalid crc value [ 412.957183][ T7896] F2FS-fs (loop2): Found nat_bits in checkpoint [ 413.001602][ T7896] F2FS-fs (loop2): Start checkpoint disabled! [ 413.271267][ T7896] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 414.804268][ T7927] loop6: detected capacity change from 0 to 32768 [ 414.818963][ T4295] device hsr_slave_0 left promiscuous mode [ 415.270127][ T4295] device hsr_slave_1 left promiscuous mode [ 415.280831][ T7927] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.821 (7927) [ 415.311398][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.319418][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.327736][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.335520][ T4277] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 415.343234][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.356026][ T7927] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 415.365708][ T7927] BTRFS info (device loop6): enabling disk space caching [ 415.372891][ T7927] BTRFS info (device loop6): force clearing of disk cache [ 415.380360][ T7927] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 415.389959][ T7927] BTRFS info (device loop6): use zstd compression, level 3 [ 415.397344][ T7927] BTRFS info (device loop6): disk space caching is enabled [ 415.404732][ T7927] BTRFS info (device loop6): has skinny extents [ 415.449817][ T4295] device bridge_slave_1 left promiscuous mode [ 415.464655][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.506208][ T4295] device bridge_slave_0 left promiscuous mode [ 415.524587][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.544502][ T4295] device veth1_macvtap left promiscuous mode [ 415.654497][ T4295] device veth0_macvtap left promiscuous mode [ 415.744854][ T4277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.754645][ T4547] attempt to access beyond end of device [ 415.754645][ T4547] loop2: rw=2049, want=40976, limit=40427 [ 415.755470][ T4295] device veth1_vlan left promiscuous mode [ 415.795202][ T4277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.841893][ T7927] BTRFS info (device loop6): enabling ssd optimizations [ 415.851377][ T4295] device veth0_vlan left promiscuous mode [ 415.858010][ T7927] BTRFS info (device loop6): clearing free space tree [ 415.865887][ T7927] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 415.876740][ T7927] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 415.942146][ T7953] loop2: detected capacity change from 0 to 256 [ 416.037506][ T7953] FAT-fs (loop2): Directory bread(block 64) failed [ 416.054935][ T4277] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.064056][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.066749][ T7953] FAT-fs (loop2): Directory bread(block 65) failed [ 416.099938][ T26] audit: type=1800 audit(1774990343.389:12): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.821" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 416.112335][ T4277] usb 4-1: Product: syz [ 416.131415][ T7953] FAT-fs (loop2): Directory bread(block 66) failed [ 416.135422][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.6.821'. [ 416.147667][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.821'. [ 416.154517][ T7953] FAT-fs (loop2): Directory bread(block 67) failed [ 416.156522][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.821'. [ 416.174593][ T7953] FAT-fs (loop2): Directory bread(block 68) failed [ 416.181739][ T7953] FAT-fs (loop2): Directory bread(block 69) failed [ 416.212577][ T4277] usb 4-1: Manufacturer: syz [ 416.217944][ T7953] FAT-fs (loop2): Directory bread(block 70) failed [ 416.232341][ T4277] usb 4-1: SerialNumber: syz [ 416.263509][ T7953] FAT-fs (loop2): Directory bread(block 71) failed [ 416.281054][ T7953] FAT-fs (loop2): Directory bread(block 72) failed [ 416.310524][ T7953] FAT-fs (loop2): Directory bread(block 73) failed [ 416.646868][ T4277] usb 4-1: 0:2 : does not exist [ 416.696376][ T4277] usb 4-1: USB disconnect, device number 6 [ 416.954192][ T7962] loop6: detected capacity change from 0 to 512 [ 416.967045][ T4275] udevd[4275]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.050170][ T7962] EXT4-fs (loop6): 1 truncate cleaned up [ 417.055888][ T7962] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 417.106958][ T7] vhci_hcd: vhci_device speed not set [ 417.273443][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 417.297340][ T7969] loop1: detected capacity change from 0 to 64 [ 417.336495][ T7969] hfs: can't find a HFS filesystem on dev loop1 [ 417.361528][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 417.550071][ T7973] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 417.556640][ T7973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.572615][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.584609][ T7979] loop3: detected capacity change from 0 to 8 [ 417.644303][ T7979] unable to read inode lookup table [ 417.693237][ T7973] vhci_hcd vhci_hcd.0: Device attached [ 417.811303][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.984632][ T4378] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 418.294730][ T7977] vhci_hcd: connection reset by peer [ 418.313569][ T4290] vhci_hcd: stop threads [ 418.322228][ T4290] vhci_hcd: release socket [ 418.446638][ T4290] vhci_hcd: disconnect device [ 418.949241][ T4295] bond0 (unregistering): Released all slaves [ 419.083718][ T7992] loop1: detected capacity change from 0 to 2048 [ 419.141901][ T7992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.860311][ T8007] loop1: detected capacity change from 0 to 256 [ 421.240030][ T8010] loop2: detected capacity change from 0 to 512 [ 421.346130][ T8010] EXT4-fs (loop2): 1 truncate cleaned up [ 421.352021][ T8010] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 421.386705][ T8007] FAT-fs (loop1): Directory bread(block 64) failed [ 421.393443][ T8007] FAT-fs (loop1): Directory bread(block 65) failed [ 421.400853][ T8007] FAT-fs (loop1): Directory bread(block 66) failed [ 421.408029][ T8007] FAT-fs (loop1): Directory bread(block 67) failed [ 421.415500][ T8007] FAT-fs (loop1): Directory bread(block 68) failed [ 421.422238][ T8007] FAT-fs (loop1): Directory bread(block 69) failed [ 421.429455][ T8007] FAT-fs (loop1): Directory bread(block 70) failed [ 421.436432][ T8007] FAT-fs (loop1): Directory bread(block 71) failed [ 421.443538][ T8007] FAT-fs (loop1): Directory bread(block 72) failed [ 421.451107][ T8007] FAT-fs (loop1): Directory bread(block 73) failed [ 421.751297][ T8013] fuse: Bad value for 'fd' [ 422.227010][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.6.843'. [ 422.266725][ T8028] loop2: detected capacity change from 0 to 64 [ 422.274452][ T8028] hfs: can't find a HFS filesystem on dev loop2 [ 422.676623][ T8044] loop0: detected capacity change from 0 to 8 [ 422.699196][ T8038] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 422.705761][ T8038] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 422.713605][ T8038] vhci_hcd vhci_hcd.0: Device attached [ 422.759305][ T8044] unable to read inode lookup table [ 422.986695][ T8040] vhci_hcd: connection closed [ 422.987083][ T144] vhci_hcd: stop threads [ 423.004807][ T4174] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 423.009719][ T144] vhci_hcd: release socket [ 423.047027][ T8051] loop6: detected capacity change from 0 to 256 [ 423.061604][ T144] vhci_hcd: disconnect device [ 423.114438][ T4378] vhci_hcd: vhci_device speed not set [ 423.233804][ T8051] FAT-fs (loop6): Directory bread(block 64) failed [ 423.282276][ T8051] FAT-fs (loop6): Directory bread(block 65) failed [ 423.312993][ T8051] FAT-fs (loop6): Directory bread(block 66) failed [ 423.348786][ T8051] FAT-fs (loop6): Directory bread(block 67) failed [ 423.374500][ T8051] FAT-fs (loop6): Directory bread(block 68) failed [ 423.391523][ T8051] FAT-fs (loop6): Directory bread(block 69) failed [ 423.411945][ T8051] FAT-fs (loop6): Directory bread(block 70) failed [ 423.437202][ T8051] FAT-fs (loop6): Directory bread(block 71) failed [ 423.494588][ T8051] FAT-fs (loop6): Directory bread(block 72) failed [ 423.585216][ T8051] FAT-fs (loop6): Directory bread(block 73) failed [ 424.829444][ T8069] loop1: detected capacity change from 0 to 512 [ 425.097293][ T8069] EXT4-fs (loop1): 1 truncate cleaned up [ 425.124553][ T8069] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 425.658827][ T8094] loop3: detected capacity change from 0 to 64 [ 425.705779][ T8094] hfs: can't find a HFS filesystem on dev loop3 [ 425.882345][ T8103] loop6: detected capacity change from 0 to 8 [ 426.389698][ T8103] SQUASHFS error: xz decompression failed, data probably corrupt [ 426.397738][ T8103] SQUASHFS error: Failed to read block 0x108: -5 [ 426.404153][ T8103] SQUASHFS error: Unable to read metadata cache entry [106] [ 426.411561][ T8103] SQUASHFS error: Unable to read inode 0x11f [ 428.154593][ T4174] vhci_hcd: vhci_device speed not set [ 429.163486][ T8110] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 429.170142][ T8110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.177835][ T8110] vhci_hcd vhci_hcd.0: Device attached [ 429.186703][ T8110] loop1: detected capacity change from 0 to 8 [ 429.256022][ T8110] unable to read inode lookup table [ 429.265549][ T8132] loop6: detected capacity change from 0 to 256 [ 429.374621][ T8126] vhci_hcd: connection closed [ 429.375602][ T4501] vhci_hcd: stop threads [ 429.419693][ T4501] vhci_hcd: release socket [ 429.427704][ T8132] FAT-fs (loop6): Directory bread(block 64) failed [ 429.453489][ T4501] vhci_hcd: disconnect device [ 429.454446][ T8132] FAT-fs (loop6): Directory bread(block 65) failed [ 429.458380][ T7960] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 429.494939][ T8132] FAT-fs (loop6): Directory bread(block 66) failed [ 429.522418][ T8132] FAT-fs (loop6): Directory bread(block 67) failed [ 429.567461][ T8132] FAT-fs (loop6): Directory bread(block 68) failed [ 429.637267][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 429.748317][ T8132] FAT-fs (loop6): Directory bread(block 69) failed [ 430.632266][ T8132] FAT-fs (loop6): Directory bread(block 70) failed [ 430.653420][ T8132] FAT-fs (loop6): Directory bread(block 71) failed [ 430.742980][ T8132] FAT-fs (loop6): Directory bread(block 72) failed [ 430.767349][ T8132] FAT-fs (loop6): Directory bread(block 73) failed [ 430.895727][ T8148] loop2: detected capacity change from 0 to 512 [ 431.219266][ T7960] usb 35-1: enqueue for inactive port 0 [ 431.247968][ T8148] EXT4-fs (loop2): 1 truncate cleaned up [ 431.253813][ T8148] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 431.304496][ T7960] vhci_hcd: vhci_device speed not set [ 432.398348][ T8161] loop2: detected capacity change from 0 to 64 [ 432.457076][ T8161] hfs: can't find a HFS filesystem on dev loop2 [ 432.466196][ T8164] loop6: detected capacity change from 0 to 256 [ 432.704675][ T1108] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 432.781380][ T8164] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 433.234629][ T1108] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.268224][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.543174][ T8193] loop3: detected capacity change from 0 to 8 [ 433.582323][ T8188] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 433.588960][ T8188] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.598541][ T8188] vhci_hcd vhci_hcd.0: Device attached [ 433.603892][ T8193] unable to read inode lookup table [ 433.623232][ T8191] vhci_hcd: connection closed [ 433.623378][ T4501] vhci_hcd: stop threads [ 433.674951][ T1108] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.697367][ T8195] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 433.734294][ T4501] vhci_hcd: release socket [ 433.841345][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.923652][ T4501] vhci_hcd: disconnect device [ 434.077628][ T1108] usb 2-1: Product: syz [ 434.362508][ T1108] usb 2-1: Manufacturer: syz [ 434.367480][ T1108] usb 2-1: SerialNumber: syz [ 434.441973][ T8199] loop0: detected capacity change from 0 to 256 [ 434.541819][ T8199] FAT-fs (loop0): Directory bread(block 64) failed [ 434.590493][ T8199] FAT-fs (loop0): Directory bread(block 65) failed [ 434.634677][ T8199] FAT-fs (loop0): Directory bread(block 66) failed [ 434.654899][ T8199] FAT-fs (loop0): Directory bread(block 67) failed [ 434.661538][ T8199] FAT-fs (loop0): Directory bread(block 68) failed [ 434.674553][ T8199] FAT-fs (loop0): Directory bread(block 69) failed [ 434.681393][ T8199] FAT-fs (loop0): Directory bread(block 70) failed [ 434.693633][ T8199] FAT-fs (loop0): Directory bread(block 71) failed [ 434.724743][ T8199] FAT-fs (loop0): Directory bread(block 72) failed [ 434.731428][ T8199] FAT-fs (loop0): Directory bread(block 73) failed [ 434.887313][ T1108] usb 2-1: 0:2 : does not exist [ 435.834276][ T1108] usb 2-1: USB disconnect, device number 6 [ 435.868266][ T8214] loop0: detected capacity change from 0 to 512 [ 435.986042][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 438.446410][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.728838][ T8214] EXT4-fs: error -4 creating inode table initialization thread [ 438.760230][ T8214] EXT4-fs (loop0): mount failed [ 440.210839][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.222195][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.546385][ T8258] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 442.552945][ T8258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 442.560633][ T8258] vhci_hcd vhci_hcd.0: Device attached [ 442.568239][ T8258] loop6: detected capacity change from 0 to 8 [ 442.718545][ T8267] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 442.869947][ T4277] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 443.387935][ T8269] loop0: detected capacity change from 0 to 256 [ 443.402178][ T8258] unable to read inode lookup table [ 443.414783][ T8262] vhci_hcd: connection reset by peer [ 443.421458][ T4240] vhci_hcd: stop threads [ 443.444425][ T4240] vhci_hcd: release socket [ 443.467158][ T4240] vhci_hcd: disconnect device [ 444.550908][ T8269] FAT-fs (loop0): Directory bread(block 64) failed [ 444.604319][ T8269] FAT-fs (loop0): Directory bread(block 65) failed [ 444.742127][ T8269] FAT-fs (loop0): Directory bread(block 66) failed [ 444.773129][ T8283] loop6: detected capacity change from 0 to 512 [ 444.801744][ T8269] FAT-fs (loop0): Directory bread(block 67) failed [ 444.853635][ T8269] FAT-fs (loop0): Directory bread(block 68) failed [ 445.073335][ T8283] EXT4-fs (loop6): 1 truncate cleaned up [ 445.123764][ T8269] FAT-fs (loop0): Directory bread(block 69) failed [ 445.290399][ T8283] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 445.400280][ T8269] FAT-fs (loop0): Directory bread(block 70) failed [ 445.608468][ T8269] FAT-fs (loop0): Directory bread(block 71) failed [ 445.667728][ T8269] FAT-fs (loop0): Directory bread(block 72) failed [ 445.747975][ T8269] FAT-fs (loop0): Directory bread(block 73) failed [ 447.449754][ T8318] loop0: detected capacity change from 0 to 64 [ 447.457713][ T8318] hfs: can't find a HFS filesystem on dev loop0 [ 447.600278][ T8295] loop1: detected capacity change from 0 to 32768 [ 447.629946][ T8295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.895 (8295) [ 447.778197][ T8295] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 447.812266][ T8295] BTRFS info (device loop1): setting nodatasum [ 447.843321][ T8295] BTRFS info (device loop1): force zlib compression, level 3 [ 447.881316][ T8295] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 447.930214][ T8295] BTRFS info (device loop1): use lzo compression, level 0 [ 447.965539][ T8295] BTRFS info (device loop1): turning on flush-on-commit [ 447.993559][ T8295] BTRFS info (device loop1): enabling auto defrag [ 448.025364][ T8295] BTRFS info (device loop1): max_inline at 4096 [ 448.064539][ T8295] BTRFS info (device loop1): using free space tree [ 448.071113][ T8295] BTRFS info (device loop1): has skinny extents [ 448.319048][ T8295] BTRFS info (device loop1): enabling ssd optimizations [ 448.544848][ T4277] vhci_hcd: vhci_device speed not set [ 449.564547][ T4174] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 449.824897][ T4174] usb 7-1: Using ep0 maxpacket: 8 [ 449.945714][ T4174] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 450.002913][ T4174] usb 7-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 450.268063][ T4174] usb 7-1: config 0 has no interface number 0 [ 450.529637][ T4174] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 450.570134][ T4174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.617376][ T4174] usb 7-1: Product: syz [ 450.621638][ T4174] usb 7-1: Manufacturer: syz [ 450.644921][ T4174] usb 7-1: SerialNumber: syz [ 450.702513][ T4174] usb 7-1: config 0 descriptor?? [ 450.767080][ T4174] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 450.845310][ T4174] usb 7-1: No valid video chain found. [ 450.864714][ T8385] loop2: detected capacity change from 0 to 256 [ 451.234846][ T8379] usb 7-1: USB disconnect, device number 2 [ 451.752959][ T8385] FAT-fs (loop2): Directory bread(block 64) failed [ 451.803495][ T8385] FAT-fs (loop2): Directory bread(block 65) failed [ 451.810353][ T8385] FAT-fs (loop2): Directory bread(block 66) failed [ 451.817634][ T8385] FAT-fs (loop2): Directory bread(block 67) failed [ 451.824950][ T8385] FAT-fs (loop2): Directory bread(block 68) failed [ 451.831610][ T8385] FAT-fs (loop2): Directory bread(block 69) failed [ 451.914659][ T8385] FAT-fs (loop2): Directory bread(block 70) failed [ 451.960905][ T8385] FAT-fs (loop2): Directory bread(block 71) failed [ 451.978376][ T8385] FAT-fs (loop2): Directory bread(block 72) failed [ 451.998630][ T8385] FAT-fs (loop2): Directory bread(block 73) failed [ 453.741824][ T4378] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 454.093992][ T8432] loop1: detected capacity change from 0 to 256 [ 454.144611][ T4378] usb 1-1: Using ep0 maxpacket: 32 [ 454.324800][ T4378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.684739][ T4378] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 195, changing to 7 [ 454.869784][ T8415] loop6: detected capacity change from 0 to 32768 [ 454.885560][ T8415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.914 (8415) [ 454.934889][ T4378] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.944008][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.027401][ T4378] usb 1-1: Product: syz [ 455.031623][ T4378] usb 1-1: Manufacturer: syz [ 455.054472][ T4378] usb 1-1: SerialNumber: syz [ 455.264802][ T8415] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 455.555010][ T8415] BTRFS info (device loop6): setting nodatasum [ 455.596648][ T8415] BTRFS info (device loop6): force zlib compression, level 3 [ 455.654419][ T8415] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 455.702845][ T8415] BTRFS info (device loop6): use lzo compression, level 0 [ 455.782815][ T8415] BTRFS info (device loop6): turning on flush-on-commit [ 455.850352][ T8415] BTRFS info (device loop6): enabling auto defrag [ 455.888764][ T8415] BTRFS info (device loop6): max_inline at 4096 [ 455.915993][ T8415] BTRFS info (device loop6): using free space tree [ 455.922767][ T8415] BTRFS info (device loop6): has skinny extents [ 455.944821][ T4378] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 455.964651][ T4378] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 456.080530][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.098440][ T4378] usb 1-1: USB disconnect, device number 7 [ 456.105525][ T8457] loop1: detected capacity change from 0 to 64 [ 456.145847][ T8457] hfs: can't find a HFS filesystem on dev loop1 [ 456.965047][ T8415] BTRFS error (device loop6): open_ctree failed: -12 [ 457.346937][ T8508] loop3: detected capacity change from 0 to 512 [ 457.456596][ T8508] EXT4-fs (loop3): 1 truncate cleaned up [ 457.486280][ T8508] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 457.839893][ T8517] loop0: detected capacity change from 0 to 256 [ 458.602550][ T8517] FAT-fs (loop0): Directory bread(block 64) failed [ 458.683119][ T8517] FAT-fs (loop0): Directory bread(block 65) failed [ 458.731413][ T8523] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 458.737984][ T8523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.765353][ T8517] FAT-fs (loop0): Directory bread(block 66) failed [ 458.780999][ T8507] loop2: detected capacity change from 0 to 8 [ 458.786275][ T8517] FAT-fs (loop0): Directory bread(block 67) failed [ 458.824282][ T8517] FAT-fs (loop0): Directory bread(block 68) failed [ 458.828701][ T8523] vhci_hcd vhci_hcd.0: Device attached [ 458.853441][ T8507] unable to read inode lookup table [ 458.869390][ T8517] FAT-fs (loop0): Directory bread(block 69) failed [ 458.896304][ T8517] FAT-fs (loop0): Directory bread(block 70) failed [ 458.918111][ T8517] FAT-fs (loop0): Directory bread(block 71) failed [ 458.970318][ T8524] vhci_hcd: connection closed [ 458.972264][ T400] vhci_hcd: stop threads [ 459.002301][ T400] vhci_hcd: release socket [ 459.020128][ T400] vhci_hcd: disconnect device [ 459.059277][ T8517] FAT-fs (loop0): Directory bread(block 72) failed [ 459.091983][ T8517] FAT-fs (loop0): Directory bread(block 73) failed [ 459.109213][ T8534] loop6: detected capacity change from 0 to 512 [ 459.402281][ T8534] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 459.437859][ T8534] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.751223][ T26] audit: type=1326 audit(1774990390.039:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 462.825340][ T26] audit: type=1326 audit(1774990390.039:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 462.896383][ T26] audit: type=1326 audit(1774990390.039:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 462.989741][ T26] audit: type=1326 audit(1774990390.039:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 463.032758][ T8576] loop6: detected capacity change from 0 to 64 [ 463.073438][ T26] audit: type=1326 audit(1774990390.039:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 463.152381][ T26] audit: type=1326 audit(1774990390.039:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 463.177553][ T26] audit: type=1326 audit(1774990390.039:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 463.224499][ T26] audit: type=1326 audit(1774990390.039:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 463.282190][ T26] audit: type=1326 audit(1774990390.039:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 463.312843][ T26] audit: type=1326 audit(1774990390.039:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcbca44e819 code=0x7ffc0000 [ 465.568474][ T8599] loop2: detected capacity change from 0 to 256 [ 465.594689][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 465.711408][ T8599] FAT-fs (loop2): Directory bread(block 64) failed [ 465.729801][ T8599] FAT-fs (loop2): Directory bread(block 65) failed [ 465.774543][ T8599] FAT-fs (loop2): Directory bread(block 66) failed [ 465.815550][ T8599] FAT-fs (loop2): Directory bread(block 67) failed [ 465.822220][ T8599] FAT-fs (loop2): Directory bread(block 68) failed [ 465.861168][ T8599] FAT-fs (loop2): Directory bread(block 69) failed [ 465.874528][ T8599] FAT-fs (loop2): Directory bread(block 70) failed [ 465.884581][ T8599] FAT-fs (loop2): Directory bread(block 71) failed [ 465.901562][ T8599] FAT-fs (loop2): Directory bread(block 72) failed [ 465.928966][ T8599] FAT-fs (loop2): Directory bread(block 73) failed [ 466.015587][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.031414][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.134726][ T7] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 466.156000][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 466.209477][ T7] usb 7-1: SerialNumber: syz [ 466.528522][ T7] usb 7-1: cannot find UAC_HEADER [ 466.574069][ T7] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 466.603115][ T7] usb 7-1: USB disconnect, device number 3 [ 466.647811][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.935442][ T8639] loop1: detected capacity change from 0 to 512 [ 466.997678][ T8639] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 467.051841][ T8639] ext4 filesystem being mounted at /212/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.693780][ T8649] loop3: detected capacity change from 0 to 32768 [ 468.731981][ T8649] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.958 (8649) [ 468.772036][ T8649] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 468.802421][ T8649] BTRFS info (device loop3): setting nodatasum [ 468.813921][ T8649] BTRFS info (device loop3): force zlib compression, level 3 [ 468.823198][ T8649] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 468.836561][ T8649] BTRFS info (device loop3): use lzo compression, level 0 [ 468.846227][ T8649] BTRFS info (device loop3): turning on flush-on-commit [ 468.853214][ T8649] BTRFS info (device loop3): enabling auto defrag [ 468.874636][ T8649] BTRFS info (device loop3): max_inline at 4096 [ 468.890254][ T8649] BTRFS info (device loop3): using free space tree [ 468.904436][ T8649] BTRFS info (device loop3): has skinny extents [ 469.083450][ T8649] BTRFS info (device loop3): enabling ssd optimizations [ 469.260790][ T8623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.985651][ T8733] vivid-000: disconnect [ 473.098638][ T8729] vivid-000: reconnect [ 473.294218][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.975'. [ 473.916438][ T8768] loop3: detected capacity change from 0 to 128 [ 473.973852][ T8768] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 474.030699][ T8768] EXT4-fs (loop3): Test dummy encryption mode enabled [ 474.092510][ T8768] EXT4-fs (loop3): DAX unsupported by block device. [ 475.459168][ T8769] loop0: detected capacity change from 0 to 32768 [ 475.529147][ T8769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.976 (8769) [ 475.672469][ T8784] loop6: detected capacity change from 0 to 512 [ 475.681211][ T8769] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 475.733761][ T8769] BTRFS info (device loop0): setting nodatasum [ 475.759857][ T8769] BTRFS info (device loop0): force zlib compression, level 3 [ 475.793586][ T8769] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 475.861404][ T8769] BTRFS info (device loop0): use lzo compression, level 0 [ 475.869932][ T8784] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 475.872856][ T8794] loop2: detected capacity change from 0 to 64 [ 475.948120][ T8769] BTRFS info (device loop0): turning on flush-on-commit [ 475.967530][ T8784] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.014106][ T8769] BTRFS info (device loop0): enabling auto defrag [ 476.044235][ T8769] BTRFS info (device loop0): max_inline at 4096 [ 476.092688][ T8769] BTRFS info (device loop0): using free space tree [ 476.142601][ T8769] BTRFS info (device loop0): has skinny extents [ 477.329605][ T8769] BTRFS error (device loop0): open_ctree failed: -12 [ 479.177767][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 479.177785][ T26] audit: type=1326 audit(1774990406.469:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3bf05819 code=0x7ffc0000 [ 479.283559][ T8832] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 479.290137][ T8832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 479.308640][ T8843] loop2: detected capacity change from 0 to 8 [ 479.344170][ T8855] loop6: detected capacity change from 0 to 64 [ 479.353777][ T8832] vhci_hcd vhci_hcd.0: Device attached [ 479.375867][ T8855] hfs: can't find a HFS filesystem on dev loop6 [ 479.399205][ T8843] unable to read inode lookup table [ 479.443763][ T26] audit: type=1326 audit(1774990406.469:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3bf05819 code=0x7ffc0000 [ 480.490303][ T8862] vivid-001: disconnect [ 480.601403][ T8850] vhci_hcd: connection closed [ 480.767371][ T8853] vivid-001: reconnect [ 480.843424][ T4501] vhci_hcd: stop threads [ 480.848057][ T4501] vhci_hcd: release socket [ 480.889598][ T26] audit: type=1326 audit(1774990406.469:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3bf05819 code=0x7ffc0000 [ 480.915186][ T26] audit: type=1326 audit(1774990406.469:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1f3bf05819 code=0x7ffc0000 [ 480.951062][ T4501] vhci_hcd: disconnect device [ 481.007723][ T8871] netlink: 28 bytes leftover after parsing attributes in process `syz.6.991'. [ 481.029570][ T26] audit: type=1326 audit(1774990406.469:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3bf05819 code=0x7ffc0000 [ 481.784477][ T26] audit: type=1326 audit(1774990406.469:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f3bf05819 code=0x7ffc0000 [ 481.908945][ T26] audit: type=1326 audit(1774990406.469:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz.3.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f3bf05819 code=0x7ffc0000 [ 482.237514][ T8886] loop1: detected capacity change from 0 to 512 [ 482.419906][ T8886] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 482.436259][ T8886] ext4 filesystem being mounted at /218/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.263065][ T8907] loop2: detected capacity change from 0 to 64 [ 483.504306][ T8911] loop3: detected capacity change from 0 to 64 [ 483.555770][ T8911] hfs: can't find a HFS filesystem on dev loop3 [ 484.777980][ T8938] binder: 8932:8938 ioctl c0306201 0 returned -14 [ 484.802119][ T8938] binder: BINDER_SET_CONTEXT_MGR already set [ 484.808619][ T8938] binder: 8932:8938 ioctl 4018620d 200000004a80 returned -16 [ 486.798362][ T8950] loop6: detected capacity change from 0 to 8 [ 486.805565][ T8935] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 486.812114][ T8935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.836559][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'. [ 486.853905][ T8935] vhci_hcd vhci_hcd.0: Device attached [ 486.866731][ T8950] unable to read inode lookup table [ 487.005782][ T8952] vhci_hcd: connection closed [ 487.005996][ T1395] vhci_hcd: stop threads [ 487.043850][ T1395] vhci_hcd: release socket [ 487.082852][ T1395] vhci_hcd: disconnect device [ 487.114460][ T4548] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 487.127834][ T4548] usb 45-1: enqueue for inactive port 0 [ 487.225921][ T4548] vhci_hcd: vhci_device speed not set [ 488.110939][ T8996] loop0: detected capacity change from 0 to 512 [ 488.265711][ T8996] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 488.281793][ T8996] ext4 filesystem being mounted at /204/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.727826][ T9034] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 489.734404][ T9034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.742238][ T9034] vhci_hcd vhci_hcd.0: Device attached [ 489.749155][ T9035] loop3: detected capacity change from 0 to 8 [ 489.800765][ T9035] unable to read inode lookup table [ 490.034434][ T4381] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 490.319958][ T9036] vhci_hcd: connection reset by peer [ 490.338166][ T4295] vhci_hcd: stop threads [ 490.342658][ T4295] vhci_hcd: release socket [ 490.354704][ T4295] vhci_hcd: disconnect device [ 490.641163][ T9046] loop0: detected capacity change from 0 to 8 [ 490.711537][ T9046] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 490.885864][ T9048] loop0: detected capacity change from 0 to 128 [ 490.985139][ T9048] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 491.039545][ T9048] hpfs: filesystem error: improperly stopped [ 491.068258][ T9048] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 491.085131][ T9048] hpfs: You really don't want any checks? You are crazy... [ 491.106190][ T9048] hpfs: hpfs_map_sector(): read error [ 491.107741][ T9050] loop1: detected capacity change from 0 to 64 [ 491.121057][ T9048] hpfs: code page support is disabled [ 491.133367][ T9048] hpfs: hpfs_map_4sectors(): unaligned read [ 491.147660][ T9048] hpfs: hpfs_map_4sectors(): unaligned read [ 491.160314][ T9048] hpfs: filesystem error: unable to find root dir [ 491.189220][ T9050] hfs: can't find a HFS filesystem on dev loop1 [ 494.286541][ T9084] loop3: detected capacity change from 0 to 512 [ 494.299801][ T9082] loop2: detected capacity change from 0 to 512 [ 494.345678][ T9082] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 494.596334][ T9084] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 494.619135][ T9084] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.835742][ T9090] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 494.993112][ T9090] overlayfs: failed to look up (tracing) for ino (-66) [ 495.205503][ T4381] vhci_hcd: vhci_device speed not set [ 496.059337][ T9078] loop0: detected capacity change from 0 to 32768 [ 496.142148][ T9078] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1031 (9078) [ 496.889205][ T9078] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 496.898883][ T9078] BTRFS info (device loop0): force clearing of disk cache [ 496.902890][ T9096] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1035'. [ 496.906464][ T9078] BTRFS info (device loop0): metadata ratio 0 [ 496.922148][ T9078] BTRFS info (device loop0): enabling ssd optimizations [ 496.929285][ T9078] BTRFS info (device loop0): using spread ssd allocation scheme [ 496.937578][ T9078] BTRFS info (device loop0): using free space tree [ 496.995405][ T9078] BTRFS info (device loop0): has skinny extents [ 497.854765][ T9078] BTRFS error (device loop0): open_ctree failed: -12 [ 498.065916][ T9120] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 498.072502][ T9120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 498.080217][ T9120] vhci_hcd vhci_hcd.0: Device attached [ 498.354577][ T1108] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 498.411658][ T9133] loop0: detected capacity change from 0 to 512 [ 498.621604][ T9133] EXT4-fs (loop0): 1 truncate cleaned up [ 498.635129][ T9133] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 498.663880][ T9124] loop1: detected capacity change from 0 to 8 [ 498.750643][ T9124] unable to read inode lookup table [ 499.602741][ T9125] vhci_hcd: connection reset by peer [ 499.644940][ T9] vhci_hcd: stop threads [ 499.656447][ T9] vhci_hcd: release socket [ 499.676697][ T9] vhci_hcd: disconnect device [ 500.268755][ T9154] loop1: detected capacity change from 0 to 64 [ 500.386334][ T9155] binder: 9150:9155 ioctl c0306201 0 returned -14 [ 500.414897][ T9155] binder: BINDER_SET_CONTEXT_MGR already set [ 500.421182][ T9155] binder: 9150:9155 ioctl 4018620d 200000004a80 returned -16 [ 500.445751][ T9154] hfs: can't find a HFS filesystem on dev loop1 [ 501.512366][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.520988][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.843740][ T9173] loop3: detected capacity change from 0 to 512 [ 502.865088][ T9173] EXT4-fs (loop3): 1 truncate cleaned up [ 502.870786][ T9173] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 503.407923][ T9185] loop0: detected capacity change from 0 to 512 [ 503.494655][ T1108] vhci_hcd: vhci_device speed not set [ 503.741380][ T9187] loop3: detected capacity change from 0 to 40427 [ 503.771483][ T9185] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 503.787897][ T9187] F2FS-fs (loop3): invalid crc value [ 503.824695][ T9185] ext4 filesystem being mounted at /212/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.861469][ T9187] F2FS-fs (loop3): Found nat_bits in checkpoint [ 503.912391][ T9187] F2FS-fs (loop3): Start checkpoint disabled! [ 504.133149][ T9187] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 505.298371][ T4238] attempt to access beyond end of device [ 505.298371][ T4238] loop3: rw=2049, want=40976, limit=40427 [ 505.747495][ T9201] loop2: detected capacity change from 0 to 40427 [ 505.802368][ T9201] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 505.810530][ T9201] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 505.829408][ T9201] F2FS-fs (loop2): invalid crc value [ 506.281451][ T9201] F2FS-fs (loop2): Found nat_bits in checkpoint [ 506.417784][ T9201] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 506.425242][ T9201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 506.506236][ T26] audit: type=1800 audit(1774990433.799:89): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1060" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 506.598916][ T26] audit: type=1800 audit(1774990433.799:90): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1060" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 506.710081][ T4186] attempt to access beyond end of device [ 506.710081][ T4186] loop2: rw=2049, want=40968, limit=40427 [ 507.416247][ T9223] loop3: detected capacity change from 0 to 512 [ 507.620264][ T9223] EXT4-fs (loop3): 1 truncate cleaned up [ 507.666337][ T9223] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 511.322859][ T9246] loop6: detected capacity change from 0 to 40427 [ 511.503406][ T9246] F2FS-fs (loop6): invalid crc value [ 511.529093][ T9246] F2FS-fs (loop6): Found nat_bits in checkpoint [ 511.691748][ T9246] F2FS-fs (loop6): Start checkpoint disabled! [ 512.481208][ T9246] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 512.811363][ T9273] loop2: detected capacity change from 0 to 512 [ 512.883797][ T9272] loop3: detected capacity change from 0 to 512 [ 513.116289][ T9273] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 513.210170][ T9273] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1079: bad orphan inode 131083 [ 513.228782][ T9272] EXT4-fs (loop3): 1 truncate cleaned up [ 513.249509][ T9272] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 513.261175][ T4547] attempt to access beyond end of device [ 513.261175][ T4547] loop6: rw=2049, want=40976, limit=40427 [ 513.272665][ T9273] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 514.147842][ T9283] ip6t_rpfilter: unknown options [ 514.824430][ T9277] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 515.662206][ T9303] loop6: detected capacity change from 0 to 512 [ 515.760439][ T9303] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 515.797971][ T9303] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.336577][ T9323] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 518.733882][ T9329] loop1: detected capacity change from 0 to 512 [ 518.821582][ T9327] gre0 speed is unknown, defaulting to 1000 [ 519.284216][ T9329] EXT4-fs (loop1): 1 truncate cleaned up [ 519.466475][ T9329] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 519.773331][ T9337] device syzkaller1 entered promiscuous mode [ 519.795275][ T9339] loop1: detected capacity change from 0 to 64 [ 520.104780][ T9347] loop6: detected capacity change from 0 to 512 [ 521.298107][ T9347] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 521.334231][ T9347] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.867727][ T9380] loop6: detected capacity change from 0 to 512 [ 521.892383][ T9380] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 521.953833][ T9385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 522.674979][ T9390] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 522.960367][ T9390] overlayfs: failed to look up (tracing) for ino (-66) [ 525.409473][ T9410] loop6: detected capacity change from 0 to 512 [ 525.575595][ T9410] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 525.646271][ T9410] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.680762][ T9409] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 525.687328][ T9409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 525.710594][ T9409] vhci_hcd vhci_hcd.0: Device attached [ 525.974479][ T8375] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 526.286768][ T9418] vhci_hcd: connection reset by peer [ 526.295783][ T4290] vhci_hcd: stop threads [ 526.300303][ T4290] vhci_hcd: release socket [ 526.374769][ T4290] vhci_hcd: disconnect device [ 527.581419][ T9444] loop3: detected capacity change from 0 to 512 [ 527.651187][ T9444] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 527.845489][ T9451] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 527.991787][ T9454] netlink: 'syz.6.1125': attribute type 10 has an invalid length. [ 528.037016][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.046472][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.069754][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.076899][ T9454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.086219][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.093322][ T9454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.112371][ T9454] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 529.158435][ T9463] loop1: detected capacity change from 0 to 512 [ 529.332173][ T9472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 529.338748][ T9472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 529.348081][ T9472] vhci_hcd vhci_hcd.0: Device attached [ 529.348629][ T9477] loop3: detected capacity change from 0 to 8 [ 529.548500][ T9477] unable to read inode lookup table [ 529.721469][ T9463] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 530.004432][ T9474] vhci_hcd: connection closed [ 530.035193][ T4295] vhci_hcd: stop threads [ 530.078903][ T9463] ext4 filesystem being mounted at /241/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.090227][ T4295] vhci_hcd: release socket [ 530.166727][ T4295] vhci_hcd: disconnect device [ 531.094487][ T8375] vhci_hcd: vhci_device speed not set [ 531.261797][ T9503] loop3: detected capacity change from 0 to 736 [ 531.420307][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'. [ 531.537758][ T9503] overlayfs: missing 'lowerdir' [ 531.810852][ T9514] loop3: detected capacity change from 0 to 512 [ 531.873180][ T9514] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 532.088619][ T9515] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 534.134755][ T9536] loop2: detected capacity change from 0 to 512 [ 534.315651][ T9536] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 534.357815][ T9536] ext4 filesystem being mounted at /253/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.204653][ T9552] loop3: detected capacity change from 0 to 8 [ 535.454733][ T9548] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 535.461452][ T9548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.469109][ T9548] vhci_hcd vhci_hcd.0: Device attached [ 535.600344][ T9552] unable to read inode lookup table [ 535.744497][ T4381] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 535.893111][ T9549] vhci_hcd: connection reset by peer [ 535.899266][ T4297] vhci_hcd: stop threads [ 535.903556][ T4297] vhci_hcd: release socket [ 535.928828][ T4297] vhci_hcd: disconnect device [ 538.062185][ T9592] loop3: detected capacity change from 0 to 512 [ 538.225890][ T9592] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 538.312260][ T9592] ext4 filesystem being mounted at /217/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.509348][ T9601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1158'. [ 539.562289][ T9616] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 539.568959][ T9616] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 539.577309][ T9616] vhci_hcd vhci_hcd.0: Device attached [ 539.585065][ T9616] loop6: detected capacity change from 0 to 8 [ 539.644653][ T9616] unable to read inode lookup table [ 539.924614][ T4174] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 540.837006][ T9617] vhci_hcd: connection reset by peer [ 540.854678][ T4381] vhci_hcd: vhci_device speed not set [ 540.861340][ T9] vhci_hcd: stop threads [ 540.865776][ T9] vhci_hcd: release socket [ 540.874609][ T9] vhci_hcd: disconnect device [ 541.101498][ T9636] loop6: detected capacity change from 0 to 512 [ 541.219368][ T9636] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 541.964976][ T9639] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 543.333291][ T9646] loop3: detected capacity change from 0 to 512 [ 543.609127][ T9646] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 543.691094][ T9646] ext4 filesystem being mounted at /220/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.143635][ T9643] loop2: detected capacity change from 0 to 32768 [ 544.203266][ T9643] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1170 (9643) [ 544.277312][ T9643] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 544.293394][ T9643] BTRFS info (device loop2): setting nodatacow, compression disabled [ 544.303434][ T9643] BTRFS info (device loop2): force clearing of disk cache [ 544.329589][ T9643] BTRFS info (device loop2): turning off barriers [ 544.435988][ T9643] BTRFS info (device loop2): use no compression [ 544.491309][ T9643] BTRFS info (device loop2): disabling free space tree [ 544.564783][ T9643] BTRFS info (device loop2): enabling ssd optimizations [ 545.025229][ T9643] BTRFS info (device loop2): using spread ssd allocation scheme [ 545.033363][ T9643] BTRFS info (device loop2): not using ssd optimizations [ 545.058547][ T9643] BTRFS info (device loop2): not using spread ssd allocation scheme [ 545.069912][ T9643] BTRFS info (device loop2): has skinny extents [ 545.253980][ T4174] vhci_hcd: vhci_device speed not set [ 545.340342][ T9680] loop1: detected capacity change from 0 to 512 [ 545.451055][ T9643] BTRFS info (device loop2): clearing free space tree [ 545.464656][ T9680] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 545.530173][ T9643] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 545.629200][ T9643] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 545.711361][ T9643] BTRFS info (device loop2): checking UUID tree [ 545.723486][ T9697] netlink: 'syz.6.1181': attribute type 1 has an invalid length. [ 545.874209][ T9702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 546.260912][ T9697] device bond1 entered promiscuous mode [ 546.317430][ T9697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.456261][ T9698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.504206][ T9698] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 546.585127][ T9698] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 546.670002][ T9698] bond1: (slave ip6gre1): making interface the new active one [ 546.687403][ T9698] device ip6gre1 entered promiscuous mode [ 546.699995][ T9698] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 546.743151][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 547.352440][ T9713] loop3: detected capacity change from 0 to 512 [ 547.448971][ T9713] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 547.528883][ T9713] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.360871][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1182'. [ 549.983068][ T9755] nfs: Unknown parameter 'ÿÿÿÿ' [ 550.437339][ T9762] loop2: detected capacity change from 0 to 512 [ 550.536019][ T9762] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 550.573108][ T9766] loop3: detected capacity change from 0 to 512 [ 550.805879][ T9766] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 550.846855][ T9766] ext4 filesystem being mounted at /228/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.884781][ T9773] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 557.526473][ T9829] loop6: detected capacity change from 0 to 512 [ 557.910472][ T9829] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 557.936455][ T9824] Process accounting resumed [ 557.985249][ T9829] ext4 filesystem being mounted at /136/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.754954][ T9859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1217'. [ 561.379223][ T9876] Cannot find add_set index 0 as target [ 562.134980][ T9872] loop3: detected capacity change from 0 to 64 [ 562.228523][ T9872] hfs: can't find a HFS filesystem on dev loop3 [ 562.272143][ T9884] loop6: detected capacity change from 0 to 512 [ 562.453691][ T9884] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 562.531892][ T9884] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.937356][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.944247][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.599010][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1230'. [ 566.080297][ T9930] loop1: detected capacity change from 0 to 512 [ 566.154021][ T9930] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 566.230773][ T9930] ext4 filesystem being mounted at /256/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.122679][ T9938] loop3: detected capacity change from 0 to 512 [ 567.420519][ T9938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c118, mo2=0002] [ 567.429381][ T9938] System zones: 1-12 [ 567.438275][ T9938] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.1238: corrupted in-inode xattr [ 567.451686][ T9938] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1238: couldn't read orphan inode 15 (err -117) [ 567.470800][ T9938] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,stripe=0x0000000000000080,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000008,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 568.625195][ T9966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1243'. [ 570.649794][ T9983] loop1: detected capacity change from 0 to 64 [ 570.657007][ T9986] loop6: detected capacity change from 0 to 512 [ 570.846139][ T9983] hfs: can't find a HFS filesystem on dev loop1 [ 570.910195][ T9986] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 570.931296][ T9986] ext4 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.423358][ T9994] loop3: detected capacity change from 0 to 256 [ 573.497851][ T9994] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 574.111370][T10015] loop3: detected capacity change from 0 to 8 [ 574.154246][T10013] loop6: detected capacity change from 0 to 2048 [ 574.445456][T10013] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 574.466267][T10013] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.326167][T10042] tmpfs: Bad value for 'mpol' [ 578.394642][ T4308] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 579.585054][ T4308] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.354510][ T4308] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 580.363700][ T4308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.374976][ T4308] usb 4-1: config 0 descriptor?? [ 580.384539][ T4226] Bluetooth: hci3: command 0x0406 tx timeout [ 580.427424][ T4308] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 580.629234][T10035] udc-core: couldn't find an available UDC or it's busy [ 580.658472][T10035] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 580.684125][ T4308] usb 4-1: USB disconnect, device number 7 [ 583.569132][T10094] loop2: detected capacity change from 0 to 512 [ 583.767847][T10094] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 583.825971][T10094] ext4 filesystem being mounted at /285/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.027131][T10124] loop1: detected capacity change from 0 to 64 [ 588.591023][T10149] loop3: detected capacity change from 0 to 512 [ 589.126278][T10149] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 589.569390][T10149] ext4 filesystem being mounted at /242/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.252427][T10175] loop3: detected capacity change from 0 to 64 [ 591.308750][T10175] hfs: can't find a HFS filesystem on dev loop3 [ 592.370987][T10187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 592.444882][T10188] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 596.061101][T10212] loop2: detected capacity change from 0 to 512 [ 596.113401][T10212] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 596.153643][T10212] ext4 filesystem being mounted at /293/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.154408][ T8494] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 596.172718][T10217] loop6: detected capacity change from 0 to 512 [ 596.309416][T10217] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 596.804538][ T8494] usb 2-1: Using ep0 maxpacket: 32 [ 597.134672][ T8494] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 597.159341][ T8494] usb 2-1: config 0 has no interface number 0 [ 597.354648][ T8494] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 597.370503][ T8494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.379588][ T8494] usb 2-1: Product: syz [ 597.385727][T10217] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 597.389000][ T8494] usb 2-1: Manufacturer: syz [ 597.393992][T10217] overlayfs: overlapping lowerdir path [ 597.409896][ T8494] usb 2-1: SerialNumber: syz [ 597.440754][ T8494] usb 2-1: config 0 descriptor?? [ 597.502942][ T8494] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 597.526324][ T8494] usb 2-1: selecting invalid altsetting 1 [ 597.543778][ T8494] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 597.725425][ T8494] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 597.736775][ T8494] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 597.746712][ T8494] usb 2-1: media controller created [ 598.573228][ T8494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.665034][ T8494] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 598.673377][ T8494] zl10353_read_register: readreg error (reg=127, ret==-71) [ 598.729930][ T8494] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 598.774153][T10245] loop3: detected capacity change from 0 to 64 [ 598.815861][T10245] hfs: can't find a HFS filesystem on dev loop3 [ 598.869591][T10252] autofs4:pid:10252:autofs_fill_super: called with bogus options [ 599.574923][ T8494] usb 2-1: USB disconnect, device number 7 [ 599.901905][T10261] loop1: detected capacity change from 0 to 512 [ 600.372900][T10267] loop2: detected capacity change from 0 to 512 [ 600.395137][T10261] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 600.458789][T10261] ext4 filesystem being mounted at /270/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.566428][T10267] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 601.601002][T10278] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 601.620069][T10278] overlayfs: failed to look up (tracing) for ino (-66) [ 603.129438][T10297] netlink: 'syz.3.1326': attribute type 9 has an invalid length. [ 603.344376][ T5135] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 603.595361][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 603.725840][ T5135] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 603.756355][ T5135] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 603.787717][ T5135] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 603.816749][ T5135] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.850005][ T5135] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 603.880803][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.184081][T10309] loop3: detected capacity change from 0 to 64 [ 604.195281][ T5135] usb 3-1: GET_CAPABILITIES returned 0 [ 604.200936][ T5135] usbtmc 3-1:16.0: can't read capabilities [ 604.215690][T10309] hfs: can't find a HFS filesystem on dev loop3 [ 604.453513][ T5135] usb 3-1: USB disconnect, device number 8 [ 605.390883][T10307] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 605.391620][T10314] loop6: detected capacity change from 0 to 512 [ 605.397476][T10307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 605.440839][T10320] loop3: detected capacity change from 0 to 512 [ 605.459212][T10307] vhci_hcd vhci_hcd.0: Device attached [ 605.516170][T10320] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 605.575358][T10314] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 605.587356][T10315] vhci_hcd: connection closed [ 605.591033][ T4238] vhci_hcd: stop threads [ 605.592788][T10314] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.597193][ T4238] vhci_hcd: release socket [ 605.796409][ T4238] vhci_hcd: disconnect device [ 606.138185][T10326] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 606.711880][T10320] overlayfs: failed to look up (tracing) for ino (-66) [ 606.722157][ T5135] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 606.732268][ T5135] usb 33-1: enqueue for inactive port 0 [ 606.816898][ T5135] vhci_hcd: vhci_device speed not set [ 607.177215][T10340] loop6: detected capacity change from 0 to 128 [ 610.507937][T10374] loop1: detected capacity change from 0 to 512 [ 610.559407][T10374] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 611.002103][T10378] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 611.023450][T10378] overlayfs: failed to look up (tracing) for ino (-66) [ 616.292441][T10449] usb usb8: usbfs: process 10449 (syz.2.1371) did not claim interface 2 before use [ 618.028333][T10465] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 618.083851][T10466] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 618.111022][T10470] loop2: detected capacity change from 0 to 512 [ 618.319458][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1377'. [ 618.367060][T10470] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,quota,nojournal_checksum,grpjquota=,lazytime,block_validity,bsddf,,errors=continue. Quota mode: writeback. [ 618.412521][T10470] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.449025][ T26] audit: type=1800 audit(1774990545.739:91): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1376" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 623.359618][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1395'. [ 625.414964][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.422344][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.771964][T10552] fuse: Bad value for 'fd' [ 626.024094][T10550] netlink: 'syz.2.1398': attribute type 1 has an invalid length. [ 626.494661][T10550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.551051][T10558] bond1: (slave macvlan1): making interface the new active one [ 626.582272][T10558] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 626.634976][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 628.260909][T10594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1408'. [ 631.617322][T10620] fuse: Bad value for 'fd' [ 634.668764][T10635] loop6: detected capacity change from 0 to 512 [ 634.714658][T10635] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 634.743053][T10635] ext4 filesystem being mounted at /182/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.919301][T10645] loop1: detected capacity change from 0 to 512 [ 635.967596][T10645] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 636.679383][T10653] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 636.702268][T10653] overlayfs: failed to look up (tracing) for ino (-66) [ 637.834019][T10666] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 637.840731][T10666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.848632][T10666] vhci_hcd vhci_hcd.0: Device attached [ 637.856481][T10666] loop3: detected capacity change from 0 to 8 [ 637.933357][T10666] unable to read inode lookup table [ 637.941905][T10668] vhci_hcd: connection closed [ 637.942717][ T4297] vhci_hcd: stop threads [ 638.040566][ T4297] vhci_hcd: release socket [ 638.111079][ T4297] vhci_hcd: disconnect device [ 638.134553][ T4381] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 638.162821][T10676] loop6: detected capacity change from 0 to 64 [ 638.369337][T10676] hfs: can't find a HFS filesystem on dev loop6 [ 639.357637][T10690] loop2: detected capacity change from 0 to 512 [ 639.495811][T10690] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 639.558607][T10690] ext4 filesystem being mounted at /319/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.147582][T10711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1438'. [ 643.132011][T10725] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 643.138593][T10725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 643.155993][T10725] vhci_hcd vhci_hcd.0: Device attached [ 643.163739][T10725] loop3: detected capacity change from 0 to 8 [ 643.708145][T10725] unable to read inode lookup table [ 643.845854][T10726] vhci_hcd: connection reset by peer [ 644.100659][ T4293] vhci_hcd: stop threads [ 644.107028][ T4293] vhci_hcd: release socket [ 644.114085][ T4293] vhci_hcd: disconnect device [ 644.184520][ T4381] vhci_hcd: vhci_device speed not set [ 644.210403][T10740] loop6: detected capacity change from 0 to 512 [ 644.716368][T10740] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 644.787445][T10740] ext4 filesystem being mounted at /187/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.873959][T10771] loop6: detected capacity change from 0 to 64 [ 645.883405][T10771] hfs: can't find a HFS filesystem on dev loop6 [ 646.031443][T10774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1457'. [ 649.229535][T10803] loop3: detected capacity change from 0 to 8 [ 649.276572][T10797] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 649.283136][T10797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.290924][T10797] vhci_hcd vhci_hcd.0: Device attached [ 649.399689][T10803] unable to read inode lookup table [ 649.584446][ T5135] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 649.633331][T10809] loop6: detected capacity change from 0 to 512 [ 649.718580][T10809] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 649.738194][T10809] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.914505][T10801] vhci_hcd: connection reset by peer [ 649.939750][ T144] vhci_hcd: stop threads [ 649.944804][ T144] vhci_hcd: release socket [ 649.953577][ T144] vhci_hcd: disconnect device [ 651.828470][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1473'. [ 652.312960][T10843] loop2: detected capacity change from 0 to 64 [ 652.393653][T10843] hfs: can't find a HFS filesystem on dev loop2 [ 653.794005][T10860] loop6: detected capacity change from 0 to 512 [ 653.933741][T10862] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 653.940307][T10862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 653.948266][T10862] vhci_hcd vhci_hcd.0: Device attached [ 653.954505][T10869] loop3: detected capacity change from 0 to 8 [ 653.989010][T10860] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 654.005740][T10860] ext4 filesystem being mounted at /195/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.030031][T10869] unable to read inode lookup table [ 654.567096][T10864] vhci_hcd: connection closed [ 654.567650][ T4297] vhci_hcd: stop threads [ 654.600216][ T4297] vhci_hcd: release socket [ 654.644582][ T4297] vhci_hcd: disconnect device [ 654.694690][ T5135] vhci_hcd: vhci_device speed not set [ 655.921159][T10893] loop1: detected capacity change from 0 to 64 [ 655.995626][T10893] hfs: can't find a HFS filesystem on dev loop1 [ 658.540558][T10925] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1496'. [ 658.650540][T10924] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 658.657105][T10924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.665099][T10924] vhci_hcd vhci_hcd.0: Device attached [ 658.672667][T10924] loop2: detected capacity change from 0 to 8 [ 658.772150][T10924] unable to read inode lookup table [ 658.781908][T10927] vhci_hcd: connection closed [ 658.782268][ T1395] vhci_hcd: stop threads [ 658.824478][ T1395] vhci_hcd: release socket [ 658.829412][ T1395] vhci_hcd: disconnect device [ 658.881889][ T8494] vhci_hcd: vhci_device speed not set [ 661.721729][T10962] loop1: detected capacity change from 0 to 512 [ 661.855510][T10962] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 661.981919][T10962] ext4 filesystem being mounted at /304/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.589916][T10987] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 663.596498][T10987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 663.604406][T10987] vhci_hcd vhci_hcd.0: Device attached [ 663.612909][T10987] loop1: detected capacity change from 0 to 8 [ 663.671108][T10987] unable to read inode lookup table [ 663.678879][T10992] vhci_hcd: connection closed [ 663.679449][ T144] vhci_hcd: stop threads [ 663.708838][ T144] vhci_hcd: release socket [ 663.713408][ T144] vhci_hcd: disconnect device [ 664.719488][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1519'. [ 668.095892][T11046] loop1: detected capacity change from 0 to 8 [ 668.113705][T11043] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 668.120238][T11043] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 668.128045][T11043] vhci_hcd vhci_hcd.0: Device attached [ 668.234388][T11046] unable to read inode lookup table [ 668.346012][T11047] vhci_hcd: connection closed [ 668.347008][ T4297] vhci_hcd: stop threads [ 668.394394][ T4297] vhci_hcd: release socket [ 668.407956][ T4297] vhci_hcd: disconnect device [ 668.417922][ T4308] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 669.915651][T11071] loop6: detected capacity change from 0 to 64 [ 670.117782][T11071] hfs: can't find a HFS filesystem on dev loop6 [ 673.594602][ T4308] vhci_hcd: vhci_device speed not set [ 674.671615][T11113] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1541'. [ 674.812453][T11108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 674.819029][T11108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 675.024540][T11108] vhci_hcd vhci_hcd.0: Device attached [ 675.324405][ T4174] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 675.990261][T11112] vhci_hcd: connection reset by peer [ 676.023860][ T4293] vhci_hcd: stop threads [ 676.045617][ T4293] vhci_hcd: release socket [ 676.119932][ T4293] vhci_hcd: disconnect device [ 676.162405][T11129] loop3: detected capacity change from 0 to 512 [ 676.359900][T11129] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 676.760147][T11129] ext4 filesystem being mounted at /298/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.800079][T11136] loop2: detected capacity change from 0 to 64 [ 676.866684][T11136] hfs: can't find a HFS filesystem on dev loop2 [ 681.717802][ T4174] vhci_hcd: vhci_device speed not set [ 682.041212][T11175] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 682.047893][T11175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.055842][T11175] vhci_hcd vhci_hcd.0: Device attached [ 682.064027][T11175] loop2: detected capacity change from 0 to 8 [ 682.261438][T11175] unable to read inode lookup table [ 682.656848][T11178] vhci_hcd: connection closed [ 682.657331][ T4240] vhci_hcd: stop threads [ 682.689274][ T4240] vhci_hcd: release socket [ 682.724756][ T4240] vhci_hcd: disconnect device [ 682.761127][ T1324] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 682.856966][T11196] loop3: detected capacity change from 0 to 64 [ 682.895625][T11196] hfs: can't find a HFS filesystem on dev loop3 [ 685.046321][T11218] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1571'. [ 685.845571][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.852181][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.632591][T11251] loop1: detected capacity change from 0 to 64 [ 687.665735][T11251] hfs: can't find a HFS filesystem on dev loop1 [ 687.674377][T11249] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 687.680932][T11249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 687.688620][T11249] vhci_hcd vhci_hcd.0: Device attached [ 687.902250][ T1324] vhci_hcd: vhci_device speed not set [ 687.984596][ T4230] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 688.263633][T11253] vhci_hcd: connection reset by peer [ 688.269501][ T4297] vhci_hcd: stop threads [ 688.273788][ T4297] vhci_hcd: release socket [ 688.278896][ T4297] vhci_hcd: disconnect device [ 691.300858][T11293] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1590'. [ 693.104722][ T4230] vhci_hcd: vhci_device speed not set [ 693.983983][T11314] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 693.990547][T11314] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 693.999518][T11314] vhci_hcd vhci_hcd.0: Device attached [ 694.701571][T11321] vhci_hcd: connection closed [ 694.702235][ T4297] vhci_hcd: stop threads [ 694.844342][ T4297] vhci_hcd: release socket [ 694.848885][ T4297] vhci_hcd: disconnect device [ 695.093525][T11332] loop6: detected capacity change from 0 to 64 [ 695.235399][T11332] hfs: can't find a HFS filesystem on dev loop6 [ 699.883658][T11387] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1616'. [ 699.985645][T11390] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 699.992507][T11390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 700.000068][T11390] vhci_hcd vhci_hcd.0: Device attached [ 700.007644][T11390] loop2: detected capacity change from 0 to 8 [ 700.175747][T11390] unable to read inode lookup table [ 700.304743][ T4174] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 700.530609][T11393] vhci_hcd: connection closed [ 700.863961][ T4297] vhci_hcd: stop threads [ 701.092356][ T4297] vhci_hcd: release socket [ 701.232753][ T4297] vhci_hcd: disconnect device [ 702.370308][T11421] loop1: detected capacity change from 0 to 64 [ 702.415755][T11421] hfs: can't find a HFS filesystem on dev loop1 [ 706.054387][ T4174] vhci_hcd: vhci_device speed not set [ 706.233365][T11451] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 706.239929][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 706.247668][T11451] vhci_hcd vhci_hcd.0: Device attached [ 706.670686][ T1108] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 706.877242][T11453] vhci_hcd: connection reset by peer [ 706.885104][ T144] vhci_hcd: stop threads [ 706.889573][ T144] vhci_hcd: release socket [ 706.923362][ T144] vhci_hcd: disconnect device [ 707.013882][T11464] fuse: Bad value for 'group_id' [ 708.530498][T11492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1645'. [ 710.042342][T11506] loop2: detected capacity change from 0 to 64 [ 710.076196][T11506] hfs: can't find a HFS filesystem on dev loop2 [ 710.459955][T11510] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 710.466528][T11510] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 710.554706][T11510] vhci_hcd vhci_hcd.0: Device attached [ 710.824405][ T4230] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 711.101795][T11515] vhci_hcd: connection reset by peer [ 711.116251][ T1395] vhci_hcd: stop threads [ 711.122215][ T1395] vhci_hcd: release socket [ 711.148590][ T1395] vhci_hcd: disconnect device [ 711.825439][ T1108] vhci_hcd: vhci_device speed not set [ 713.129151][T11550] fuse: Bad value for 'group_id' [ 713.420722][T11554] loop1: detected capacity change from 0 to 64 [ 713.455691][T11554] hfs: can't find a HFS filesystem on dev loop1 [ 714.205656][T11570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1667'. [ 714.446203][T11573] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 714.452779][T11573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 714.460543][T11573] vhci_hcd vhci_hcd.0: Device attached [ 714.467881][T11573] loop3: detected capacity change from 0 to 8 [ 714.523097][T11573] unable to read inode lookup table [ 714.744507][ T4174] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 714.842126][T11575] vhci_hcd: connection reset by peer [ 714.848254][ T1395] vhci_hcd: stop threads [ 714.852621][ T1395] vhci_hcd: release socket [ 714.876794][ T1395] vhci_hcd: disconnect device [ 716.565024][ T4230] vhci_hcd: vhci_device speed not set [ 717.172833][T11597] loop2: detected capacity change from 0 to 64 [ 717.205791][T11597] hfs: can't find a HFS filesystem on dev loop2 [ 718.306914][T11611] fuse: Bad value for 'group_id' [ 719.177619][T11620] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 719.184187][T11620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 719.194490][T11620] vhci_hcd vhci_hcd.0: Device attached [ 719.203519][T11621] loop1: detected capacity change from 0 to 8 [ 719.276838][T11621] unable to read inode lookup table [ 720.280224][T11622] vhci_hcd: connection closed [ 720.287822][ T4240] vhci_hcd: stop threads [ 720.303088][ T4230] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 720.541078][ T4240] vhci_hcd: release socket [ 720.608958][ T4240] vhci_hcd: disconnect device [ 720.733367][ T4174] vhci_hcd: vhci_device speed not set [ 721.012633][T11637] loop1: detected capacity change from 0 to 64 [ 721.085890][T11637] hfs: can't find a HFS filesystem on dev loop1 [ 725.654586][ T4230] vhci_hcd: vhci_device speed not set [ 727.434534][T11690] loop3: detected capacity change from 0 to 8 [ 727.546261][T11690] unable to read inode lookup table [ 727.616703][T11689] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 727.623270][T11689] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 727.631184][T11689] vhci_hcd vhci_hcd.0: Device attached [ 727.796320][T11692] vhci_hcd: connection closed [ 727.799428][ T144] vhci_hcd: stop threads [ 727.816839][ T144] vhci_hcd: release socket [ 728.065387][ T144] vhci_hcd: disconnect device [ 730.005877][T11716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1703'. [ 734.421434][T11758] loop3: detected capacity change from 0 to 64 [ 734.465903][T11758] hfs: can't find a HFS filesystem on dev loop3 [ 740.510888][T11831] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1735'. [ 742.144468][T11850] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 742.151317][T11850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 742.158874][T11850] vhci_hcd vhci_hcd.0: Device attached [ 742.167952][T11850] loop3: detected capacity change from 0 to 8 [ 742.238576][T11850] unable to read inode lookup table [ 742.444331][ T5135] usb 39-1: new low-speed USB device number 10 using vhci_hcd [ 742.699285][T11852] vhci_hcd: connection reset by peer [ 742.728995][ T4240] vhci_hcd: stop threads [ 742.735270][ T4240] vhci_hcd: release socket [ 742.774626][ T4240] vhci_hcd: disconnect device [ 743.258130][T11868] loop3: detected capacity change from 0 to 64 [ 743.858266][T11868] hfs: can't find a HFS filesystem on dev loop3 [ 746.700571][T11912] loop1: detected capacity change from 0 to 8 [ 747.120959][T11912] unable to read inode lookup table [ 747.134874][T11909] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 747.141726][T11909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 747.150071][T11909] vhci_hcd vhci_hcd.0: Device attached [ 747.258606][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.265599][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.328325][T11913] vhci_hcd: connection closed [ 747.328727][ T4290] vhci_hcd: stop threads [ 747.355426][ T4290] vhci_hcd: release socket [ 747.369240][ T4290] vhci_hcd: disconnect device [ 747.540372][ T4174] vhci_hcd: vhci_device speed not set [ 747.624877][ T5135] vhci_hcd: vhci_device speed not set [ 748.392208][T11930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1761'. [ 749.766844][T11944] loop2: detected capacity change from 0 to 64 [ 752.170187][ T4240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.008299][ T4240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.088574][ T4240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.252726][ T4240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.994847][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1785'. [ 756.012431][ T4240] tipc: Left network mode [ 756.138014][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1785'. [ 756.298200][T12013] loop1: detected capacity change from 0 to 512 [ 756.365716][T12013] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 756.368274][T12006] gre0 speed is unknown, defaulting to 1000 [ 756.584973][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1785'. [ 756.689866][T12021] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 756.710928][T12021] overlayfs: failed to look up (tracing) for ino (-66) [ 758.294512][ T4381] Bluetooth: hci2: command 0x0409 tx timeout [ 758.950390][T12006] chnl_net:caif_netlink_parms(): no params data found [ 760.115125][T12006] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.152867][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.186644][T12006] device bridge_slave_0 entered promiscuous mode [ 760.270950][T12035] loop6: detected capacity change from 0 to 32768 [ 760.266879][T12006] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.340403][T12006] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.402349][ T4381] Bluetooth: hci2: command 0x041b tx timeout [ 760.573663][T12073] loop3: detected capacity change from 0 to 32768 [ 760.583629][T12006] device bridge_slave_1 entered promiscuous mode [ 760.600418][T12035] XFS (loop6): Mounting V5 Filesystem [ 760.904749][T12080] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 760.904749][T12080] [ 760.919946][T12080] ERROR: (device loop3): remounting filesystem as read-only [ 761.155214][T12006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.235277][T12006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.361171][T12006] team0: Port device team_slave_0 added [ 761.370726][T12035] XFS (loop6): Starting recovery (logdev: internal) [ 761.391336][T12006] team0: Port device team_slave_1 added [ 761.522650][ T4240] device hsr_slave_0 left promiscuous mode [ 761.560948][T12035] XFS (loop6): Ending recovery (logdev: internal) [ 761.566836][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.599601][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.618728][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.694844][ T7111] XFS (loop6): Unmounting Filesystem [ 761.715662][ T4240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.735188][ T4240] batman_adv: batadv0: Interface deactivated: macsec1 [ 761.742563][ T4240] batman_adv: batadv0: Removing interface: macsec1 [ 761.917591][ T4240] device bridge_slave_1 left promiscuous mode [ 761.924064][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.037165][ T4240] device bridge_slave_0 left promiscuous mode [ 762.084749][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.155636][ T4240] device veth1_macvtap left promiscuous mode [ 762.172167][ T4240] device veth0_macvtap left promiscuous mode [ 762.214416][ T4240] device veth1_vlan left promiscuous mode [ 762.220474][ T4240] device veth0_vlan left promiscuous mode [ 762.568806][T12099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1804'. [ 762.614518][ T4381] Bluetooth: hci2: command 0x040f tx timeout [ 763.234907][ T4240] bond1 (unregistering): (slave macvlan1): Releasing active interface [ 763.266067][ T4240] bond1 (unregistering): Released all slaves [ 763.746415][ T4240] team0 (unregistering): Port device team_slave_1 removed [ 763.795304][ T4240] team0 (unregistering): Port device team_slave_0 removed [ 763.829830][ T4240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.866845][ T4240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.183546][ T4240] bond0 (unregistering): Released all slaves [ 764.372651][T12006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.437055][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.495419][T12006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.453870][T12006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.468221][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.469961][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 765.584392][T12006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.742991][T12006] device hsr_slave_0 entered promiscuous mode [ 765.793352][T12006] device hsr_slave_1 entered promiscuous mode [ 766.266485][T12144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1814'. [ 766.613731][T12006] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 766.693364][T12006] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 766.793080][T12006] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 766.872870][T12006] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 766.995699][T12154] loop6: detected capacity change from 0 to 512 [ 767.144557][T12154] EXT4-fs (loop6): Ignoring removed nobh option [ 767.195907][T12154] EXT4-fs (loop6): Ignoring removed bh option [ 767.205818][T12154] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 767.284749][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.327031][T12154] EXT4-fs (loop6): 1 truncate cleaned up [ 767.332969][T12154] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,nobh,grpjquota=,bh,,errors=continue. Quota mode: none. [ 767.529173][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 767.538242][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 767.549565][T12006] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.086687][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 769.183364][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 769.228200][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.235396][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.347916][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 769.377425][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 769.439072][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.446259][ T4547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.508188][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 769.581148][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 769.639094][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 770.083645][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 770.084558][T12188] loop6: detected capacity change from 0 to 512 [ 770.113360][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 770.157104][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 770.209189][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 770.248651][T12188] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 770.279815][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 770.406293][T12188] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 770.425051][T12188] overlayfs: failed to look up (tracing) for ino (-66) [ 770.452315][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 770.503680][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 770.549636][T12006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 770.596542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 770.700709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 772.302188][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 772.320180][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 772.335483][T12006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.468807][T12227] loop6: detected capacity change from 0 to 512 [ 773.795673][T12252] fuse: Unknown parameter 'grou00000000000000000000' [ 773.867754][T12256] loop3: detected capacity change from 0 to 512 [ 773.955542][T12256] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 774.217243][T12256] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 774.235915][T12256] overlayfs: failed to look up (tracing) for ino (-66) [ 774.404510][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 774.427248][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 774.507636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 774.528994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 774.604472][T12006] device veth0_vlan entered promiscuous mode [ 774.623876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 774.661247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 774.718186][T12006] device veth1_vlan entered promiscuous mode [ 774.779795][T12276] loop6: detected capacity change from 0 to 8 [ 774.895985][T12006] device veth0_macvtap entered promiscuous mode [ 774.925665][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 774.985462][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 775.099497][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 775.318638][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 775.406767][T12006] device veth1_macvtap entered promiscuous mode [ 776.568824][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 776.614052][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 776.695317][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.770064][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.821002][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.881648][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.914358][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.941335][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.964335][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.989428][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.004815][T12006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.202750][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.220114][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.723391][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.175570][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.254413][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.322853][T12313] fuse: Unknown parameter 'group_i00000000000000000000' [ 778.331021][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.356299][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.372447][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.390319][T12006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.401379][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 778.420848][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 778.436540][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 778.449752][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 778.476015][T12006] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.490794][T12006] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.500977][T12006] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.517266][T12006] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.723170][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.748611][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.817169][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 778.871125][ T4547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.903461][ T4547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.948603][ T1395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 779.413176][T12339] loop1: detected capacity change from 0 to 512 [ 779.599800][T12338] loop3: detected capacity change from 0 to 40427 [ 779.669064][T12339] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,quota,nojournal_checksum,grpjquota=,lazytime,block_validity,bsddf,,errors=continue. Quota mode: writeback. [ 779.691324][T12339] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 779.713442][T12338] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 779.721427][T12338] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 779.731828][T12338] F2FS-fs (loop3): invalid crc value [ 779.770553][T12338] F2FS-fs (loop3): Found nat_bits in checkpoint [ 779.775168][ T26] audit: type=1800 audit(1774990707.069:92): pid=12339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1853" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 779.836782][T12338] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 779.843918][T12338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 779.898354][ T26] audit: type=1800 audit(1774990707.189:93): pid=12338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1852" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 779.973292][ T4187] attempt to access beyond end of device [ 779.973292][ T4187] loop3: rw=2049, want=40968, limit=40427 [ 780.275411][T12358] loop6: detected capacity change from 0 to 64 [ 780.439734][T12358] hfs: can't find a HFS filesystem on dev loop6 [ 781.629955][T12380] loop6: detected capacity change from 0 to 512 [ 781.765676][T12380] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 782.803458][T12388] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 782.824586][T12388] overlayfs: failed to look up (tracing) for ino (-66) [ 782.958708][T12393] loop3: detected capacity change from 0 to 64 [ 786.309091][T12410] fuse: Unknown parameter 'group_i00000000000000000000' [ 786.487853][T12412] loop1: detected capacity change from 0 to 512 [ 787.051096][T12412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c118, mo2=0002] [ 787.059664][T12412] System zones: 1-12 [ 787.116694][T12412] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.1863: corrupted in-inode xattr [ 787.129424][T12412] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1863: couldn't read orphan inode 15 (err -117) [ 787.142219][T12412] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,stripe=0x0000000000000080,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000008,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 787.799465][T12429] loop7: detected capacity change from 0 to 64 [ 787.826861][T12429] hfs: can't find a HFS filesystem on dev loop7 [ 789.929299][T12443] loop1: detected capacity change from 0 to 512 [ 790.794856][T12446] loop3: detected capacity change from 0 to 256 [ 790.865085][T12446] exfat: Deprecated parameter 'utf8' [ 790.885529][T12443] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 791.073733][T12446] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 791.399404][T12457] loop7: detected capacity change from 0 to 40427 [ 791.409375][T12463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 791.430395][T12463] overlayfs: failed to look up (tracing) for ino (-66) [ 791.519920][T12457] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 791.528860][T12457] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 791.541317][T12457] F2FS-fs (loop7): invalid crc value [ 791.674628][T12457] F2FS-fs (loop7): Found nat_bits in checkpoint [ 791.796078][T12457] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 791.803215][T12457] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 792.839945][ T26] audit: type=1800 audit(1774990720.129:94): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1877" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 793.642334][T12006] attempt to access beyond end of device [ 793.642334][T12006] loop7: rw=2049, want=40968, limit=40427 [ 794.620889][T12512] device syzkaller0 entered promiscuous mode [ 794.832140][T12519] loop7: detected capacity change from 0 to 64 [ 794.906049][T12519] hfs: can't find a HFS filesystem on dev loop7 [ 797.345737][T12533] loop6: detected capacity change from 0 to 40427 [ 797.512252][T12533] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 797.520120][T12533] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 797.531083][T12533] F2FS-fs (loop6): invalid crc value [ 798.246082][ T4226] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 798.264410][ T4226] Bluetooth: hci4: Injecting HCI hardware error event [ 798.271746][ T4193] Bluetooth: hci4: hardware error 0x00 [ 798.293879][T12550] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1894'. [ 798.396343][T12533] F2FS-fs (loop6): Found nat_bits in checkpoint [ 798.458893][T12533] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 798.466206][T12533] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 798.543918][ T26] audit: type=1800 audit(1774990725.829:95): pid=12533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1893" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 798.579794][T12529] attempt to access beyond end of device [ 798.579794][T12529] loop6: rw=10241, want=45104, limit=40427 [ 798.645294][ T26] audit: type=1800 audit(1774990725.869:96): pid=12533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1893" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 798.907757][T12564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.915765][T12564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.933268][T12564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.940979][T12564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.953541][T12564] batman_adv: batadv0: Interface deactivated: macsec1 [ 798.960848][T12564] batman_adv: batadv0: Removing interface: macsec1 [ 801.221671][ T4547] attempt to access beyond end of device [ 801.221671][ T4547] loop6: rw=1, want=45104, limit=40427 [ 802.877863][T12587] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 803.950205][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1912'. [ 804.026987][T12608] bridge1: port 1(veth3) entered blocking state [ 804.033429][T12608] bridge1: port 1(veth3) entered disabled state [ 804.061732][T12608] device veth3 entered promiscuous mode [ 804.282227][T12614] bridge1: port 2(vlan2) entered blocking state [ 804.357536][T12614] bridge1: port 2(vlan2) entered disabled state [ 804.380513][T12614] device vlan2 entered promiscuous mode [ 804.386860][T12614] device vlan0 entered promiscuous mode [ 804.554616][ T4231] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 804.811317][T12626] loop1: detected capacity change from 0 to 64 [ 804.845690][T12626] hfs: can't find a HFS filesystem on dev loop1 [ 804.994474][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.006729][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 805.076382][ T4231] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 805.103057][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.176143][ T4231] usb 4-1: config 0 descriptor?? [ 806.096317][ T4231] usb 4-1: string descriptor 0 read error: -71 [ 807.269083][ T4231] usbhid 4-1:0.0: can't add hid device: -71 [ 807.277734][ T4231] usbhid: probe of 4-1:0.0 failed with error -71 [ 807.456725][ T4231] usb 4-1: USB disconnect, device number 8 [ 808.255823][T12670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1923'. [ 808.754871][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.761614][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.941985][T12686] loop6: detected capacity change from 0 to 64 [ 808.987380][T12686] hfs: can't find a HFS filesystem on dev loop6 [ 810.679150][T12703] loop6: detected capacity change from 0 to 2048 [ 810.850651][T12703] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 810.920763][ T26] audit: type=1804 audit(1774990738.209:97): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1932" name=2F6E6577726F6F742F3238352F66696C65302F02 dev="loop6" ino=18 res=1 errno=0 [ 811.418828][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1933'. [ 811.770046][T12722] binder: BINDER_SET_CONTEXT_MGR already set [ 811.777264][T12722] binder: 12721:12722 ioctl 4018620d 200000004a80 returned -16 [ 812.534285][ T4230] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 812.984598][ T4230] usb 2-1: Using ep0 maxpacket: 8 [ 813.044178][T12741] loop7: detected capacity change from 0 to 512 [ 813.126814][ T4230] usb 2-1: config 6 has an invalid interface number: 220 but max is 0 [ 813.145253][ T4230] usb 2-1: config 6 has no interface number 0 [ 813.159556][ T4230] usb 2-1: config 6 interface 220 has no altsetting 0 [ 813.171001][T12741] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 813.220572][T12741] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.227780][T12750] autofs4:pid:12750:autofs_fill_super: called with bogus options [ 813.374598][ T4230] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 813.404251][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.412382][ T4230] usb 2-1: Product: syz [ 813.467717][ T4230] usb 2-1: Manufacturer: syz [ 813.472459][ T4230] usb 2-1: SerialNumber: syz [ 813.985827][T12722] binder: 12721:12722 ioctl c0306201 0 returned -14 [ 814.240766][T12769] loop6: detected capacity change from 0 to 512 [ 814.275654][T12769] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿ´µÔ ³LÞÞ„LC¤9C¾væ9^ÙïâÌ ©}þçPë@•™¿hC£Iñ5uGN%÷" or missing value [ 814.414493][ T4230] usb 2-1: Found UVC 7.ff device syz (174f:5212) [ 814.420969][ T4230] uvcvideo 2-1:6.220: Entity type for entity Output 4 was not initialized! [ 814.458576][ T4230] ------------[ cut here ]------------ [ 814.464097][ T4230] WARNING: CPU: 0 PID: 4230 at drivers/media/mc/mc-entity.c:667 media_create_pad_link+0x98a/0xae0 [ 814.520872][ T4230] Modules linked in: [ 814.539760][ T4230] CPU: 0 PID: 4230 Comm: kworker/0:5 Not tainted syzkaller #0 [ 814.572212][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.632660][ T4230] Workqueue: usb_hub_wq hub_event [ 814.669127][ T4230] RIP: 0010:media_create_pad_link+0x98a/0xae0 [ 814.675822][ T4230] Code: 01 00 00 66 ff 03 31 c0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 04 23 06 fb 0f 0b b8 ea ff ff ff eb e3 e8 f6 22 06 fb <0f> 0b b8 ea ff ff ff eb d5 e8 e8 22 06 fb 0f 0b b8 ea ff ff ff eb [ 815.463103][ T4230] RSP: 0018:ffffc9000322eaa0 EFLAGS: 00010287 [ 815.469609][ T4230] RAX: ffffffff8672fe1a RBX: 0000000000000002 RCX: 0000000000100000 [ 815.478038][ T4230] RDX: ffffc90013338000 RSI: 00000000000277ce RDI: 00000000000277cf [ 815.486502][ T4230] RBP: 0000000000000000 R08: 0000000000000003 R09: 1ffff1100c0a1297 [ 815.495898][ T4230] R10: dffffc0000000000 R11: ffffed100c0a1298 R12: ffff88807ee90880 [ 815.503964][ T4230] R13: ffff8880734b1080 R14: 0000000000000000 R15: ffff8880734b11c0 [ 815.512554][ T4230] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 815.523280][ T4230] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.532397][ T4230] CR2: 000000110c3a1ff7 CR3: 000000007ebe2000 CR4: 00000000003506f0 [ 815.541068][ T4230] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 815.549577][ T4230] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 815.565459][ T4230] Call Trace: [ 815.568830][ T4230] [ 815.571799][ T4230] ? _raw_spin_unlock+0x36/0x40 [ 815.581136][ T4230] ? v4l2_device_register_subdev+0x51b/0x5a0 [ 815.605635][ T4230] uvc_mc_register_entities+0x6be/0x930 [ 815.614660][ T4230] uvc_register_chains+0x3cf/0x4b0 [ 815.643841][ T4230] uvc_probe+0xa356/0xac00 [ 815.654115][ T4230] ? mark_lock+0x94/0x320 [ 815.659805][ T4230] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 815.671373][ T4230] ? lock_chain_count+0x20/0x20 [ 815.676726][ T4230] ? lockdep_hardirqs_on+0x94/0x140 [ 815.682148][ T4230] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 815.693473][ T4230] ? _raw_spin_unlock+0x40/0x40 [ 815.698895][ T4230] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 815.710252][ T4230] ? pm_runtime_enable+0x1b8/0x300 [ 815.715931][ T4230] usb_probe_interface+0x5c5/0xb20 [ 815.721288][ T4230] ? usb_register_driver+0x3d0/0x3d0 [ 815.737689][ T4230] really_probe+0x284/0xc80 [ 815.745153][ T4230] __driver_probe_device+0x18c/0x330 [ 815.750798][ T4230] driver_probe_device+0x4f/0x420 [ 815.756445][ T4230] __device_attach_driver+0x2b0/0x500 [ 815.762126][ T4230] ? deferred_probe_work_func+0x230/0x230 [ 815.768356][ T4230] bus_for_each_drv+0x184/0x210 [ 815.773415][ T4230] ? deferred_probe_work_func+0x230/0x230 [ 815.779685][ T4230] ? subsys_find_device_by_id+0x360/0x360 [ 815.785992][ T4230] __device_attach+0x2a8/0x480 [ 815.790900][ T4230] ? kobject_uevent_env+0x371/0x890 [ 815.796636][ T4230] ? device_attach+0x20/0x20 [ 815.801364][ T4230] ? kobject_uevent_env+0x371/0x890 [ 815.807057][ T4230] bus_probe_device+0xbc/0x1e0 [ 815.811943][ T4230] ? device_add+0x97c/0xfb0 [ 815.816928][ T4230] device_add+0xa00/0xfb0 [ 815.821416][ T4230] usb_set_configuration+0x1991/0x1fd0 [ 815.831003][ T4230] ? kernfs_activate+0x1eb/0x210 [ 815.836456][ T4230] usb_generic_driver_probe+0x89/0x150 [ 815.848974][ T4230] usb_probe_device+0x139/0x270 [ 815.858560][ T4230] ? usb_register_device_driver+0x230/0x230 [ 815.864963][ T4230] really_probe+0x284/0xc80 [ 815.869617][ T4230] __driver_probe_device+0x18c/0x330 [ 815.878682][ T4230] driver_probe_device+0x4f/0x420 [ 815.889453][ T4230] __device_attach_driver+0x2b0/0x500 [ 815.901963][ T4230] ? deferred_probe_work_func+0x230/0x230 [ 815.913751][ T4230] bus_for_each_drv+0x184/0x210 [ 815.924874][ T4230] ? deferred_probe_work_func+0x230/0x230 [ 815.937534][ T4230] ? subsys_find_device_by_id+0x360/0x360 [ 815.946619][ T4230] ? lockdep_hardirqs_on+0x94/0x140 [ 815.952620][ T4230] __device_attach+0x2a8/0x480 [ 815.958003][ T4230] ? device_attach+0x20/0x20 [ 815.963850][ T4230] ? kobject_uevent_env+0x371/0x890 [ 815.980150][ T4230] bus_probe_device+0xbc/0x1e0 [ 815.985602][ T4230] ? device_add+0x97c/0xfb0 [ 815.990248][ T4230] device_add+0xa00/0xfb0 [ 815.998355][ T4230] usb_new_device+0xd65/0x1660 [ 816.009082][ T4230] ? lock_chain_count+0x20/0x20 [ 816.018705][ T4230] ? usb_disconnect+0x8a0/0x8a0 [ 816.029507][ T4230] ? _raw_spin_unlock_irq+0x1f/0x40 [ 816.040722][ T4230] ? lockdep_hardirqs_on+0x94/0x140 [ 816.052822][ T4230] hub_event+0x2e4a/0x55e0 [ 816.061563][ T4230] ? hub_post_resume+0x120/0x120 [ 816.066714][ T4230] ? read_lock_is_recursive+0x10/0x10 [ 816.076791][ T4230] ? preempt_schedule_thunk+0x16/0x18 [ 816.089087][ T4230] process_one_work+0x85f/0x1010 [ 816.100426][ T4230] ? worker_detach_from_pool+0x240/0x240 [ 816.106398][ T4230] ? lockdep_hardirqs_off+0x70/0x100 [ 816.111875][ T4230] ? _raw_spin_lock_irq+0xb7/0xf0 [ 816.117188][ T4230] ? _raw_spin_lock_irqsave+0x100/0x100 [ 816.123155][ T4230] ? wq_worker_running+0x97/0x170 [ 816.128481][ T4230] worker_thread+0xaa6/0x1290 [ 816.133342][ T4230] kthread+0x436/0x520 [ 816.137782][ T4230] ? rcu_lock_release+0x20/0x20 [ 816.142765][ T4230] ? kthread_blkcg+0xd0/0xd0 [ 816.150682][ T4230] ret_from_fork+0x1f/0x30 [ 816.160530][ T4230] [ 816.167115][ T4230] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 816.174533][ T4230] CPU: 0 PID: 4230 Comm: kworker/0:5 Not tainted syzkaller #0 [ 816.182021][ T4230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.192188][ T4230] Workqueue: usb_hub_wq hub_event [ 816.197342][ T4230] Call Trace: [ 816.200638][ T4230] [ 816.203586][ T4230] dump_stack_lvl+0x188/0x250 [ 816.208314][ T4230] ? show_regs_print_info+0x20/0x20 [ 816.213562][ T4230] ? load_image+0x400/0x400 [ 816.218105][ T4230] panic+0x2e5/0x810 [ 816.222094][ T4230] ? bpf_jit_dump+0xd0/0xd0 [ 816.226729][ T4230] ? ret_from_fork+0x1f/0x30 [ 816.231404][ T4230] ? media_create_pad_link+0x98a/0xae0 [ 816.236900][ T4230] __warn+0x248/0x2b0 [ 816.240916][ T4230] ? media_create_pad_link+0x98a/0xae0 [ 816.246403][ T4230] report_bug+0x1b7/0x2e0 [ 816.250769][ T4230] handle_bug+0x3a/0x70 [ 816.254956][ T4230] exc_invalid_op+0x16/0x40 [ 816.259485][ T4230] asm_exc_invalid_op+0x16/0x20 [ 816.264445][ T4230] RIP: 0010:media_create_pad_link+0x98a/0xae0 [ 816.270546][ T4230] Code: 01 00 00 66 ff 03 31 c0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 04 23 06 fb 0f 0b b8 ea ff ff ff eb e3 e8 f6 22 06 fb <0f> 0b b8 ea ff ff ff eb d5 e8 e8 22 06 fb 0f 0b b8 ea ff ff ff eb [ 816.290741][ T4230] RSP: 0018:ffffc9000322eaa0 EFLAGS: 00010287 [ 816.296934][ T4230] RAX: ffffffff8672fe1a RBX: 0000000000000002 RCX: 0000000000100000 [ 816.305030][ T4230] RDX: ffffc90013338000 RSI: 00000000000277ce RDI: 00000000000277cf [ 816.313038][ T4230] RBP: 0000000000000000 R08: 0000000000000003 R09: 1ffff1100c0a1297 [ 816.321046][ T4230] R10: dffffc0000000000 R11: ffffed100c0a1298 R12: ffff88807ee90880 [ 816.329051][ T4230] R13: ffff8880734b1080 R14: 0000000000000000 R15: ffff8880734b11c0 [ 816.337073][ T4230] ? media_create_pad_link+0x98a/0xae0 [ 816.342584][ T4230] ? _raw_spin_unlock+0x36/0x40 [ 816.347486][ T4230] ? v4l2_device_register_subdev+0x51b/0x5a0 [ 816.353521][ T4230] uvc_mc_register_entities+0x6be/0x930 [ 816.359125][ T4230] uvc_register_chains+0x3cf/0x4b0 [ 816.364372][ T4230] uvc_probe+0xa356/0xac00 [ 816.368897][ T4230] ? mark_lock+0x94/0x320 [ 816.373296][ T4230] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 816.379404][ T4230] ? lock_chain_count+0x20/0x20 [ 816.384314][ T4230] ? lockdep_hardirqs_on+0x94/0x140 [ 816.389563][ T4230] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 816.395578][ T4230] ? _raw_spin_unlock+0x40/0x40 [ 816.400460][ T4230] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 816.406044][ T4230] ? pm_runtime_enable+0x1b8/0x300 [ 816.411198][ T4230] usb_probe_interface+0x5c5/0xb20 [ 816.416448][ T4230] ? usb_register_driver+0x3d0/0x3d0 [ 816.421863][ T4230] really_probe+0x284/0xc80 [ 816.426405][ T4230] __driver_probe_device+0x18c/0x330 [ 816.431736][ T4230] driver_probe_device+0x4f/0x420 [ 816.436794][ T4230] __device_attach_driver+0x2b0/0x500 [ 816.442198][ T4230] ? deferred_probe_work_func+0x230/0x230 [ 816.447950][ T4230] bus_for_each_drv+0x184/0x210 [ 816.452834][ T4230] ? deferred_probe_work_func+0x230/0x230 [ 816.458692][ T4230] ? subsys_find_device_by_id+0x360/0x360 [ 816.464557][ T4230] __device_attach+0x2a8/0x480 [ 816.469358][ T4230] ? kobject_uevent_env+0x371/0x890 [ 816.474723][ T4230] ? device_attach+0x20/0x20 [ 816.479451][ T4230] ? kobject_uevent_env+0x371/0x890 [ 816.484702][ T4230] bus_probe_device+0xbc/0x1e0 [ 816.489501][ T4230] ? device_add+0x97c/0xfb0 [ 816.494160][ T4230] device_add+0xa00/0xfb0 [ 816.498528][ T4230] usb_set_configuration+0x1991/0x1fd0 [ 816.504025][ T4230] ? kernfs_activate+0x1eb/0x210 [ 816.509017][ T4230] usb_generic_driver_probe+0x89/0x150 [ 816.514728][ T4230] usb_probe_device+0x139/0x270 [ 816.519616][ T4230] ? usb_register_device_driver+0x230/0x230 [ 816.525536][ T4230] really_probe+0x284/0xc80 [ 816.530177][ T4230] __driver_probe_device+0x18c/0x330 [ 816.535499][ T4230] driver_probe_device+0x4f/0x420 [ 816.540673][ T4230] __device_attach_driver+0x2b0/0x500 [ 816.546162][ T4230] ? deferred_probe_work_func+0x230/0x230 [ 816.552172][ T4230] bus_for_each_drv+0x184/0x210 [ 816.557064][ T4230] ? deferred_probe_work_func+0x230/0x230 [ 816.562816][ T4230] ? subsys_find_device_by_id+0x360/0x360 [ 816.568741][ T4230] ? lockdep_hardirqs_on+0x94/0x140 [ 816.574076][ T4230] __device_attach+0x2a8/0x480 [ 816.578906][ T4230] ? device_attach+0x20/0x20 [ 816.583531][ T4230] ? kobject_uevent_env+0x371/0x890 [ 816.588766][ T4230] bus_probe_device+0xbc/0x1e0 [ 816.593563][ T4230] ? device_add+0x97c/0xfb0 [ 816.598109][ T4230] device_add+0xa00/0xfb0 [ 816.602578][ T4230] usb_new_device+0xd65/0x1660 [ 816.607395][ T4230] ? lock_chain_count+0x20/0x20 [ 816.612439][ T4230] ? usb_disconnect+0x8a0/0x8a0 [ 816.617371][ T4230] ? _raw_spin_unlock_irq+0x1f/0x40 [ 816.622602][ T4230] ? lockdep_hardirqs_on+0x94/0x140 [ 816.627853][ T4230] hub_event+0x2e4a/0x55e0 [ 816.632455][ T4230] ? hub_post_resume+0x120/0x120 [ 816.637532][ T4230] ? read_lock_is_recursive+0x10/0x10 [ 816.642953][ T4230] ? preempt_schedule_thunk+0x16/0x18 [ 816.648373][ T4230] process_one_work+0x85f/0x1010 [ 816.653455][ T4230] ? worker_detach_from_pool+0x240/0x240 [ 816.659118][ T4230] ? lockdep_hardirqs_off+0x70/0x100 [ 816.664458][ T4230] ? _raw_spin_lock_irq+0xb7/0xf0 [ 816.669520][ T4230] ? _raw_spin_lock_irqsave+0x100/0x100 [ 816.675145][ T4230] ? wq_worker_running+0x97/0x170 [ 816.680206][ T4230] worker_thread+0xaa6/0x1290 [ 816.684956][ T4230] kthread+0x436/0x520 [ 816.689229][ T4230] ? rcu_lock_release+0x20/0x20 [ 816.694186][ T4230] ? kthread_blkcg+0xd0/0xd0 [ 816.698806][ T4230] ret_from_fork+0x1f/0x30 [ 816.703274][ T4230] [ 816.706712][ T4230] Kernel Offset: disabled [ 816.711280][ T4230] Rebooting in 86400 seconds..