last executing test programs: 12m28.828090299s ago: executing program 0 (id=1): setresgid(0xee00, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 12m26.543718071s ago: executing program 0 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendfile(r4, r5, 0x0, 0x200002) 12m23.792587052s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r4, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 12m21.992748325s ago: executing program 0 (id=28): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x12c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x4005) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000280)={0x0, 0x211d, 0x400, 0x40205, 0x11e}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x20000004) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 12m14.828038139s ago: executing program 0 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 11m59.634578827s ago: executing program 32 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8080, 0x8, 0x6, 0xa, 0xfa, 0x7, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x1000, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0xff, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 10m44.546128035s ago: executing program 4 (id=207): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 10m37.660342301s ago: executing program 4 (id=215): r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "f687d58cbd653a29", "abf12e3042d5526581db3126df41a0d2a8b995d7487386e29b72433fe3a3e92b", "a3174dc9", "1e2883b1aa3fbf6c"}, 0x38) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff004) 10m36.462274641s ago: executing program 4 (id=217): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) readv(r5, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 10m32.906464434s ago: executing program 4 (id=222): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000640), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000080000000300000005000062fbe72063003bb7b1778ab6bc82e97d6996a79a96b9fbcd0700000082594bb79e0b983ce970140e00bfbeb305431f1258fc91ac8baa2d5156f067f74cd75d524de38ab3"]) 10m30.809419827s ago: executing program 4 (id=225): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45b, 0x700000000000000) 10m28.045863647s ago: executing program 4 (id=238): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m12.261330701s ago: executing program 33 (id=238): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1013}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m32.585038262s ago: executing program 1 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601}) socket$kcm(0xa, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc00"], 0x0) r1 = syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x200001, &(0x7f0000000440)=ANY=[@ANYBLOB="6c6f63636f6f6b69652c6e6f7265636f766572792c6c6f63636f6f6b69652c6c6f636b7461626c653d6261746164765f736c6176655f31002c71756f74613d6f6e2c6e6f626172726965722c6e6f626172726965722c646174613d77726974656261636b2c757067725964652c6572726f72733d77697468647261772c6e6f64656275672c6c6f63616c666c6f636b732c6e6f646973637d72642c757067726164652c726772706c76622c61636c2c6c6f636b70726f746f3d646c6d2c757067726164652c00272f6515cb47dc0b6a6759d3437dee2a664f975fdfd6f034818f381bab628b39bd7c9b7562a78cae30fd97d9"], 0x1, 0x125d5, &(0x7f0000024b40)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xb770b3f6ef8f772, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@private0, 0x4e28, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0xfffffffffffffffc, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@loopback, 0x3507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f00000000c0)={&(0x7f0000000040)=0x5, 0xffffffff, &(0x7f0000000540)=[{}, {}, {}, {}, {}], &(0x7f0000000080)}) 7m28.345628167s ago: executing program 1 (id=541): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6a0, &(0x7f0000000d80)="$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") socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(0xffffffffffffffff, 0x6) mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x4}, 0xe) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000)={0x1, 0x20}, 0x2) 7m17.692397612s ago: executing program 1 (id=556): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x6f6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 7m10.289771529s ago: executing program 1 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000023c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xffffffff, 0xa55}, 0x28) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 6m58.755083114s ago: executing program 1 (id=585): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x20, 0x3, 0x1, 0xc, 0x0, 0x42, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) getcwd(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 6m56.539822491s ago: executing program 1 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000680)="b0fef2", 0x3}], 0x2}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020) listen(r5, 0x6) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x205e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000000200)=0x1) 6m41.168901072s ago: executing program 34 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000680)="b0fef2", 0x3}], 0x2}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) read$FUSE(r4, &(0x7f0000002580)={0x2020}, 0x2020) listen(r5, 0x6) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x205e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f0000000200)=0x1) 2m32.488619979s ago: executing program 2 (id=974): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x7, 0x4, 0x8, 0xfffbffff, 0x1, 0x1a449, 0x6, 0x40000003, 0x87, 0x2, 0xf27, 0x0, 0x3, 0x8, 0x7, 0x8, 0x4, 0x10000, 0xfffffff8]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) r3 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80800) poll(&(0x7f0000000500)=[{r0, 0x20}, {0xffffffffffffffff, 0x8}, {r3, 0x800}, {r1, 0x1120}], 0x4, 0x7) r4 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r5, &(0x7f0000000040)=[{0x0}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 2m27.723846538s ago: executing program 2 (id=980): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(r7, &(0x7f0000000280)='./file0/file0\x00', 0x200) 2m24.243940517s ago: executing program 2 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) close(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socketpair(0x3, 0xa, 0x52e84892, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2m23.769678439s ago: executing program 2 (id=990): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x14) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1}, @l2cap_cid_le_signaling={{}, @l2cap_conn_param_update_req={{0x12, 0x3}, {0x4b, 0x4, 0xd, 0x3ff}}}}, 0x67) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x3ff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) 2m21.398386207s ago: executing program 2 (id=993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) add_key$user(0x0, &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}, 0x20) 2m18.762636689s ago: executing program 2 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x4, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m2.566214272s ago: executing program 35 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x4, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 56.284651622s ago: executing program 5 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 55.203819185s ago: executing program 5 (id=1126): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = memfd_secret(0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8408e000) accept4$phonet_pipe(r2, &(0x7f0000000100), &(0x7f0000000280)=0x10, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x10880, &(0x7f0000000480)=ANY=[], 0x1, 0x15b, &(0x7f0000000580)="$eJzskD1rWlEch5/Te32h1WrBgi20FDr00mJ9w24dtFTq0AotLp2EeqWCVlEobm0C2TLkAzgkCJnEIWTMYMxkohDMp8ggZBAyhJBw7r1BDH6E82zn+f/+L/d+/jgxCIKGzad6rdE0Wy2z9Op7/mv2x97+wWPpPYDXStQaTRkuWY/rQRp+AwMdZmu2PvK7KVeq5vtf9ap8z9JgAJlHUK64OMfOPpQuhJWNO854DcOntkuscEnHPdchE7CcPI2bHXgj5z1ZzJsD7c67fu/423iUi7zdfaGxkXM+lIV/aW4mss+6vrBGwRQChOw7i44ip9F+bzoZe52WxIdkLB6Lpab5k3Eu9X8L/YvvL/wUy3vcbqAA6wI6AnpWfXYl/MBw+zJfC3hCwMWfIIh259/hXUV3FlkV+XuKYVe3GAo+QDPkVcvMcd1XCoVCoVAoFAqFQqFQrOQ2AAD//80bY1k=") execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x8000, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f00000000c0)={0x0, 'vlan1\x00', {0x3}, 0xfff8}) 53.120481276s ago: executing program 5 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x6f6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 51.971872371s ago: executing program 5 (id=1135): syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) r5 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000380)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 49.710702921s ago: executing program 5 (id=1138): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) syz_open_dev$I2C(0x0, 0x1, 0x402) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 45.490912052s ago: executing program 5 (id=1148): syz_open_dev$vbi(0x0, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x33) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="05000000000400"], 0x48}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_init_net_socket$ax25(0x3, 0x2, 0x6) syz_emit_ethernet(0x26, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000de205c5b6f0666ff9286a8b073b2aaaaaaaaaa00080045cb001840680000d289defa065f31327a55738dd8eb6aad9552264cbb33e04235a43354b62348c082842dc4aeebc3074ccb9e07c9d8c1d05eef9d24299cf0ba3a0832e92bd1d0a8856199934310fc8613826f1059a3b26fa5e07d5f9778fb5c1dbe"], 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='source', &(0x7f0000000580)='//\xf2X&\xf2\xae\xd7?p\x1d@\xb5\xfau\x7f\xfe/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, 0x0) r6 = socket(0x2d, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000740)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x3, 0x9}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000700)={'sit0\x00', &(0x7f00000001c0)={@mcast1, @remote, 0x12, 0x4}}) r7 = semget$private(0x0, 0x6, 0x0) semop(r7, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semctl$GETZCNT(r7, 0x3, 0xf, 0x0) bind$xdp(r6, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x1c}, 0x10) 18.415816432s ago: executing program 6 (id=1200): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x10880, &(0x7f0000000480)=ANY=[], 0x1, 0x15b, &(0x7f0000000580)="$eJzskD1rWlEch5/Te32h1WrBgi20FDr00mJ9w24dtFTq0AotLp2EeqWCVlEobm0C2TLkAzgkCJnEIWTMYMxkohDMp8ggZBAyhJBw7r1BDH6E82zn+f/+L/d+/jgxCIKGzad6rdE0Wy2z9Op7/mv2x97+wWPpPYDXStQaTRkuWY/rQRp+AwMdZmu2PvK7KVeq5vtf9ap8z9JgAJlHUK64OMfOPpQuhJWNO854DcOntkuscEnHPdchE7CcPI2bHXgj5z1ZzJsD7c67fu/423iUi7zdfaGxkXM+lIV/aW4mss+6vrBGwRQChOw7i44ip9F+bzoZe52WxIdkLB6Lpab5k3Eu9X8L/YvvL/wUy3vcbqAA6wI6AnpWfXYl/MBw+zJfC3hCwMWfIIh259/hXUV3FlkV+XuKYVe3GAo+QDPkVcvMcd1XCoVCoVAoFAqFQqFQrOQ2AAD//80bY1k=") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'vlan1\x00', {0x3}, 0xfff8}) 14.739484343s ago: executing program 3 (id=1205): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xbd}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) 14.098008465s ago: executing program 7 (id=1206): syz_emit_ethernet(0x2a, &(0x7f0000000900)=ANY=[@ANYBLOB="83b6a82dcf490000625ca90a08004500001c0000000000739078e0000001e00000010000000000089078"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) 13.462796079s ago: executing program 8 (id=1207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=[{0x10, 0x1, 0x51}], 0x10}}], 0x1, 0x20000081) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f000086c000/0x3000)=nil, &(0x7f0000a71000/0x2000)=nil, &(0x7f0000e7f000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000d47000/0x1000)=nil, &(0x7f0000df9000/0x1000)=nil, &(0x7f0000fd3000/0x1000)=nil, &(0x7f0000000200)="a840b230b59195eb70c8e8857d040057596c3f05db0afc61256d6bf73ed231aa7cae465416af8432efc7b3ccdf88c30015e565fc6f8e912387ecbae56f1476ddc9bed81ed190e83f0412041ef0af444ae864ee4fad57d8ea38477bbc8bb25ee105b4056029a0fa0c4d146d88b7faaac0884a6171d2d116be5caaa2c66e50f4e6379390eb02a5624acacca0547fa8ae65dace62571f31644515b08e63c9498317a3262953", 0xa4, r1}, 0x68) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newspdinfo={0x24, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_io_uring_setup(0x239, 0x0, &(0x7f00000000c0), &(0x7f0000000340)) select(0x40, &(0x7f0000000680)={0x7, 0x800, 0x80, 0x6, 0xfffffffffffffffb, 0x34, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0x1, 0xac, 0xed6f, 0xe21}, &(0x7f0000000740)={0x0, 0xea60}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) listen(r0, 0x200b) 13.362113446s ago: executing program 6 (id=1208): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 13.219375323s ago: executing program 3 (id=1209): r0 = syz_open_dev$dri(0x0, 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, 0x0) r6 = socket(0x2d, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000740)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x3, 0x9}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000700)={'sit0\x00', &(0x7f00000001c0)={@mcast1, @remote, 0x12, 0x4}}) r7 = semget$private(0x0, 0x6, 0x0) semop(r7, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semctl$GETZCNT(r7, 0x3, 0xf, 0x0) bind$xdp(r6, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x1c}, 0x10) 9.337921336s ago: executing program 8 (id=1210): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r3, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) prlimit64(r2, 0x9, &(0x7f0000000180)={0x1, 0x8}, &(0x7f00000001c0)) 9.322337652s ago: executing program 7 (id=1211): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023893) capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) futex(&(0x7f0000000140)=0x1, 0x100, 0x0, 0x0, &(0x7f0000000000), 0x0) 9.141844639s ago: executing program 6 (id=1212): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_enter(r6, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r3, &(0x7f0000000080), 0x4003) timer_create(0x0, 0x0, 0x0) io_uring_setup(0x79c4, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000001) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) 7.423652342s ago: executing program 7 (id=1213): r0 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) rmdir(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e00000000000000"], 0x4c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x200001, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0xfd, 0x22c, &(0x7f0000000580)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIQ4QYPjJB6KlQ+iaUZmOE0FegtC9UvB1K/zWviohiYGDMVLpnxnRAPEWRkQMiwZDMwB/LYDnPG6RwylWht0v3g0S9Qis3MTCqp/AvmrNhgtNMXrCxjJFRyOYwH5CZxaHICHbZ5D8R9x6wSDKIgM1acykoc8pVUY5/Yqdalq8y67zPMKNjWhoDo8EskK16R3Rn2hnwdjNBzSyurMpOzMlJLSo+w4Bq/mTG/UyKjCB1Z/5eDWZk+A8B9fX+aou//ZGq3LipPnJ6VUTN1O6mm0vXxzFs0/97xUTq/cSMsP8PDglqWeTlf5gno/R9c8OcDzV1T0wcOxuV5/K3Xv777n1MbXGCGtNj8a5CNv4Exn81n1gZ3Cwfz02vbt9SrLggK81l4rGpF/8mHF/LwDD5whNb/Zozh+IVYzil3Crnxtx1ixe05mBgqHvDwHAw6vNEBpCnmBgYZobt3AP1FzvIX+UN0MhgYGZgYFABKWJnYEjLzEk18GDgY2BmYAFzDFmgqqCqWaHcVL3k/JyUdgZ2cFIAa1vOwMLABNNW7MMA5xg9ZmCFc4wtGqBGMLRDaRUo7QGll0PpxwwMbCBaHi3ZsIBN6IfyNBpAyioSS0qKDEHKISy4mBFczEgAbjMT1Na5TCieYzgO5f/8z8Dwv55hFIyCUTAKRsEoGAWjYBSMglEwCkYaAAQAAP//Sb25qQ==") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040d1}, 0x4000010) 7.371596306s ago: executing program 6 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) 4.850813014s ago: executing program 8 (id=1215): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast1, @in6=@private0, 0x1, 0x314, 0x4e21, 0x9, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xffffeffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfc, 0x20}, [@algo_comp={0x60, 0x3, {{'deflate\x00'}, 0xc0, "2316fad0ff50ef52d77b4f4acb812988403b8d1fabb904b2"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) 4.667177246s ago: executing program 3 (id=1216): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x7}]}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) socket$inet6(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000001040), 0x0) pipe2(&(0x7f0000000240), 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.663624655s ago: executing program 7 (id=1217): r0 = syz_open_dev$dri(0x0, 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, 0x0) socket(0x2d, 0x2, 0x0) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) 3.412064103s ago: executing program 7 (id=1218): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xbd}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) 3.409292237s ago: executing program 3 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) dup(r7) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x2f, 0xd, 0x4, {0x1c, @usr_ip6_spec={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @loopback, 0xad8, 0x3, 0x2e}, {0x0, @remote, 0x46, 0x6, [0xfffffffc, 0x6]}, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4e23, 0x8}, {0x0, @broadcast, 0x8000, 0x6, [0x6, 0x1]}, 0x3, 0x80000001}}}) 2.549993784s ago: executing program 8 (id=1220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) keyctl$unlink(0x9, r5, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) close(r3) 2.258862976s ago: executing program 7 (id=1221): syz_emit_ethernet(0x2a, &(0x7f0000000900)=ANY=[@ANYBLOB="83b6a82dcf490000625ca90a08004500001c0000000000739078e0000001e00000010000000000089078"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) 1.678651156s ago: executing program 3 (id=1222): semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) keyctl$set_reqkey_keyring(0xe, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0}, 0x84) socket(0x10, 0x3, 0x0) 1.366764827s ago: executing program 8 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0xf0) sendto$inet6(r1, 0x0, 0x0, 0x400c804, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'hsr0\x00', 0x2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xb8f7) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x6, &(0x7f0000000080)={0x0, "14abd83463604d70b41d4008e300000000fcffffff000000000000006d803e8800"}}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) 185.329226ms ago: executing program 8 (id=1224): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000180)=r3, 0xffffff0d) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) syz_io_uring_setup(0x3dad, &(0x7f0000000200)={0x0, 0x5634, 0x8, 0x0, 0x20}, &(0x7f0000000280), &(0x7f0000000340)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x509001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f00000003c0)=0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) ioctl$TCFLSH(r5, 0x400455c8, 0x1) r7 = dup3(r2, r6, 0x0) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000400)) 176.557456ms ago: executing program 6 (id=1225): r0 = syz_open_dev$dri(0x0, 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x1, 0x6}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, 0x0) r6 = socket(0x2d, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000740)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x3, 0x9}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000700)={'sit0\x00', &(0x7f00000001c0)={@mcast1, @remote, 0x12, 0x4}}) r7 = semget$private(0x0, 0x6, 0x0) semop(r7, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000100)={'ip6gretap0\x00'}) bind$xdp(r6, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x1c}, 0x10) 0s ago: executing program 3 (id=1226): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) readahead(r0, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x3) accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) kernel console output (not intermixed with test programs): ngth 0, skipping remainder of the config [ 376.246517][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.287264][ T5987] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 376.333511][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.375179][ T5987] usb 2-1: Product: syz [ 376.388288][ T5987] usb 2-1: Manufacturer: syz [ 376.400851][ T5987] usb 2-1: SerialNumber: syz [ 378.759441][ T5987] usb 2-1: config 0 descriptor?? [ 378.779377][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.792077][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.051050][ T5987] usb 2-1: can't set config #0, error -71 [ 379.093768][ T5987] usb 2-1: USB disconnect, device number 5 [ 379.227822][ T5824] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 380.096073][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.125523][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.155448][ T5824] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 380.179085][ T5815] ocfs2: Unmounting device (7,1) on (node local) [ 380.180046][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.331142][ T8567] Invalid source name [ 380.693572][ T5824] usb 6-1: config 0 descriptor?? [ 382.428311][ T8577] lo speed is unknown, defaulting to 1000 [ 383.325575][ T5824] playstation 0003:054C:0BA0.0004: unknown main item tag 0x0 [ 383.371258][ T5824] playstation 0003:054C:0BA0.0004: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0 [ 383.584689][ T5824] playstation 0003:054C:0BA0.0004: Failed to retrieve feature with reportID 18: -71 [ 383.671483][ T5824] playstation 0003:054C:0BA0.0004: Failed to retrieve DualShock4 pairing info: -71 [ 383.809581][ T5824] playstation 0003:054C:0BA0.0004: Failed to get MAC address from DualShock4 [ 383.836047][ T5824] playstation 0003:054C:0BA0.0004: Failed to create dualshock4. [ 384.665514][ T5824] playstation 0003:054C:0BA0.0004: probe with driver playstation failed with error -71 [ 384.713755][ T5824] usb 6-1: USB disconnect, device number 3 [ 386.309500][ T29] audit: type=1800 audit(1772505061.755:61): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.538" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 386.754209][ T8596] loop1: detected capacity change from 0 to 1024 [ 389.869288][ T8614] xt_hashlimit: size too large, truncated to 1048576 [ 391.459303][ T29] audit: type=1326 audit(1772505066.975:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 392.077885][ T29] audit: type=1326 audit(1772505066.985:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 392.185975][ T29] audit: type=1326 audit(1772505067.015:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 392.316508][ T29] audit: type=1326 audit(1772505067.015:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 392.374898][ T8633] loop5: detected capacity change from 0 to 128 [ 392.388561][ T29] audit: type=1326 audit(1772505067.565:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 392.423640][ T8634] loop3: detected capacity change from 0 to 256 [ 392.469456][ T8633] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 392.482996][ T29] audit: type=1326 audit(1772505067.655:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 392.483043][ T29] audit: type=1326 audit(1772505067.655:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 392.589610][ T8633] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 393.024553][ T7347] udevd[7347]: incorrect jbd checksum on /dev/loop5 [ 393.455699][ T29] audit: type=1326 audit(1772505067.655:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 393.877274][ T29] audit: type=1326 audit(1772505067.785:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 393.901468][ T29] audit: type=1326 audit(1772505067.785:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.6.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 394.136681][ T8645] loop6: detected capacity change from 0 to 4096 [ 394.729129][ T8645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.765130][ T8645] overlayfs: missing 'lowerdir' [ 395.720751][ T8661] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 395.733813][ T8661] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 396.921423][ T8664] loop5: detected capacity change from 0 to 128 [ 396.935617][ T7199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.968599][ T8664] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 397.011903][ T7397] udevd[7397]: incorrect jbd checksum on /dev/loop5 [ 397.146811][ T8664] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 398.489877][ T7397] udevd[7397]: incorrect jbd checksum on /dev/loop5 [ 398.935884][ T8678] dvmrp6: entered allmulticast mode [ 399.860231][ T8681] loop5: detected capacity change from 0 to 32768 [ 399.905830][ T8681] (syz.5.570,8681,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 399.919544][ T8681] (syz.5.570,8681,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 400.008045][ T8681] JBD2: Ignoring recovery information on journal [ 400.037368][ T8681] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 400.447842][ T8689] loop2: detected capacity change from 0 to 128 [ 400.561380][ T7397] udevd[7397]: incorrect jbd checksum on /dev/loop2 [ 400.571261][ T8689] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 400.666175][ T8689] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 400.809324][ T8679] loop6: detected capacity change from 0 to 8 [ 403.888256][ T8713] fuse: Unknown parameter 'use00000000000000000000' [ 403.909227][ T8713] xt_TPROXY: Can be used only with -p tcp or -p udp [ 404.571878][ T6235] ocfs2: Unmounting device (7,5) on (node local) [ 404.960080][ T8721] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 404.971858][ T8721] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 406.406238][ T5142] Bluetooth: hci2: command 0x0405 tx timeout [ 406.819637][ T8732] random: crng reseeded on system resumption [ 406.955970][ T8732] netlink: 32 bytes leftover after parsing attributes in process `syz.6.579'. [ 406.965166][ T8732] netlink: 32 bytes leftover after parsing attributes in process `syz.6.579'. [ 408.656864][ T8748] loop3: detected capacity change from 0 to 128 [ 408.687673][ T8748] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 408.724063][ T8748] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 408.740464][ T8277] udevd[8277]: incorrect jbd checksum on /dev/loop3 [ 411.019375][ T8754] loop6: detected capacity change from 0 to 256 [ 411.176603][ T51] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 412.055334][ T8760] loop2: detected capacity change from 0 to 262144 [ 412.081278][ T8760] F2FS-fs (loop2): invalid crc value [ 412.149998][ T8760] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 412.164335][ T8760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 414.127339][ T5883] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 414.165390][ T8778] loop6: detected capacity change from 0 to 128 [ 414.192719][ T8778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 414.263673][ T8779] overlayfs: missing 'lowerdir' [ 414.286028][ T5883] usb 6-1: device descriptor read/64, error -71 [ 415.084676][ T5883] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 415.866011][ T5883] usb 6-1: device descriptor read/64, error -71 [ 415.989996][ T5883] usb usb6-port1: attempt power cycle [ 417.873511][ T8805] loop5: detected capacity change from 0 to 128 [ 417.972480][ T8277] udevd[8277]: incorrect jbd checksum on /dev/loop5 [ 418.122999][ T8805] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 418.498841][ T8805] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 418.711144][ T8277] udevd[8277]: incorrect jbd checksum on /dev/loop5 [ 419.121574][ T8812] loop3: detected capacity change from 0 to 512 [ 419.136045][ T1598] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 420.286792][ T1598] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 420.300744][ T1598] usb 7-1: config 0 has no interface number 0 [ 420.308486][ T1598] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 420.363475][ T1598] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 420.419208][ T1598] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 420.452996][ T8814] syz.5.602 (8814) used greatest stack depth: 17288 bytes left [ 420.484415][ T1598] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.540450][ T1598] usb 7-1: config 0 descriptor?? [ 420.557173][ T8809] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 420.584261][ T1598] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 420.744008][ T8823] loop5: detected capacity change from 0 to 512 [ 420.791084][ T8823] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 420.988914][ T8823] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 421.506187][ T8823] EXT4-fs (loop5): 1 truncate cleaned up [ 421.509473][ T795] usb 7-1: USB disconnect, device number 2 [ 421.511902][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 421.567268][ T8823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.263617][ T6235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.341403][ T8832] loop6: detected capacity change from 0 to 512 [ 422.397134][ T8832] EXT4-fs: Ignoring removed i_version option [ 422.433865][ T8832] EXT4-fs: Ignoring removed bh option [ 422.471481][ T8832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.114873][ T8832] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.059868][ T7199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.407595][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 425.407615][ T29] audit: type=1800 audit(1772505100.865:91): pid=8854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.609" name="/" dev="fuse" ino=4 res=0 errno=0 [ 427.225685][ T8868] loop6: detected capacity change from 0 to 8 [ 428.123036][ T8876] loop6: detected capacity change from 0 to 128 [ 428.168727][ T8876] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.220800][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.243605][ T8876] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 428.254325][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.274338][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.288658][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.301758][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.435695][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.668103][ T8885] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 428.694439][ T8885] CIFS: Unable to determine destination address [ 428.705433][ T8885] xt_nat: multiple ranges no longer supported [ 429.146873][ T8886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.156735][ T8886] IPv6: NLM_F_CREATE should be set when creating new route [ 429.164135][ T8886] IPv6: NLM_F_CREATE should be set when creating new route [ 429.171502][ T8886] IPv6: NLM_F_CREATE should be set when creating new route [ 429.454741][ T7199] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.459370][ T8877] lo speed is unknown, defaulting to 1000 [ 430.845751][ T51] Bluetooth: hci0: command tx timeout [ 430.877936][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.887199][ T51] Bluetooth: hci0: command tx timeout [ 432.968175][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.209955][ T8931] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 434.683729][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.459432][ T5142] Bluetooth: hci0: command tx timeout [ 437.909563][ T5142] Bluetooth: hci0: command tx timeout [ 438.230957][ T8963] netlink: 'syz.3.634': attribute type 10 has an invalid length. [ 438.362535][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 438.437190][ T8959] bridge_slave_0: left allmulticast mode [ 438.454903][ T8959] bridge_slave_0: left promiscuous mode [ 438.464336][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.626006][ T5142] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 438.645219][ T8959] bridge_slave_1: left allmulticast mode [ 438.834258][ T8975] loop2: detected capacity change from 0 to 128 [ 438.868419][ T8975] omfs: sysblock number (f784317bf884317b) is out of range [ 439.131463][ T8959] bridge_slave_1: left promiscuous mode [ 439.165721][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.210633][ T8959] bond0: (slave bond_slave_0): Releasing backup interface [ 439.261593][ T8959] bond0: (slave bond_slave_1): Releasing backup interface [ 439.387021][ T8959] team0: Port device team_slave_0 removed [ 439.652587][ T8959] team0: Port device team_slave_1 removed [ 439.666354][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.864918][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.885166][ T8959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.900667][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.930416][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.937153][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.062505][ T8959] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.668412][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.705317][ T8963] team0: Port device bond0 added [ 440.723860][ T58] bridge_slave_1: left allmulticast mode [ 440.731886][ T58] bridge_slave_1: left promiscuous mode [ 440.766165][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.874405][ T58] bridge_slave_0: left allmulticast mode [ 440.880148][ T58] bridge_slave_0: left promiscuous mode [ 440.885974][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.074192][ T9001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 442.905843][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.035285][ T9013] loop6: detected capacity change from 0 to 1024 [ 443.068446][ T29] audit: type=1800 audit(1772505118.485:92): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.642" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 443.429511][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 443.456435][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.484449][ T58] bond0 (unregistering): Released all slaves [ 443.593556][ T7653] hfsplus: b-tree write err: -5, ino 25 [ 443.611513][ T8964] team0 (unregistering): Port device bond0 removed [ 443.626416][ T7653] hfsplus: b-tree write err: -5, ino 4 [ 443.645289][ T7653] hfsplus: b-tree write err: -5, ino 2 [ 443.656891][ T5966] syz1: Port: 1 Link DOWN [ 443.688331][ T5932] lo speed is unknown, defaulting to 1000 [ 443.975711][ T58] : left promiscuous mode [ 448.753955][ T9041] kvm: kvm [9040]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x592ec0000000 [ 448.763563][ T9041] kvm: kvm [9040]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8428c0000000 [ 448.811745][ T9041] kvm: kvm [9040]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa340c0000000 [ 448.853974][ T9041] kvm: kvm [9040]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x5835c0000000 [ 449.154392][ T9041] kvm: kvm [9040]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3c4fc0000000 [ 449.442410][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 450.597616][ T58] hsr_slave_0: left promiscuous mode [ 450.642078][ T58] hsr_slave_1: left promiscuous mode [ 450.680420][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.713160][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.985883][ T9081] loop3: detected capacity change from 0 to 65536 [ 451.009760][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.018059][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.072811][ T9081] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 451.103160][ T58] veth1_macvtap: left promiscuous mode [ 451.119218][ T58] veth0_macvtap: left promiscuous mode [ 451.132772][ T58] veth1_vlan: left promiscuous mode [ 451.149600][ T58] veth0_vlan: left promiscuous mode [ 451.181208][ T9081] XFS (loop3): Ending clean mount [ 451.314543][ T9081] XFS (loop3): Quotacheck needed: Please wait. [ 451.988869][ T5966] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 452.151578][ T9081] XFS (loop3): Quotacheck: Done. [ 452.390353][ T5966] usb 7-1: device descriptor read/64, error -71 [ 453.985375][ T5821] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 454.006003][ T5966] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 454.425376][ T9114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.662'. [ 456.039423][ T9120] loop6: detected capacity change from 0 to 32768 [ 456.049746][ T9120] (syz.6.664,9120,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 456.063411][ T9120] (syz.6.664,9120,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 456.092875][ T9120] JBD2: Ignoring recovery information on journal [ 456.151423][ T9120] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 456.208802][ T58] team0 (unregistering): Port device team_slave_1 removed [ 456.265761][ T58] team0 (unregistering): Port device team_slave_0 removed [ 456.276098][ T5966] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 456.293241][ T7653] smc: removing ib device syz2 [ 456.469583][ T5966] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 456.497651][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.686729][ T5966] usb 6-1: config 0 descriptor?? [ 456.813623][ T9130] loop3: detected capacity change from 0 to 512 [ 456.885183][ T9130] EXT4-fs (loop3): orphan cleanup on readonly fs [ 456.900846][ T9130] Quota error (device loop3): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 456.913649][ T9130] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 457.217637][ T9130] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 457.232904][ T9130] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.665: bg 0: block 248: padding at end of block bitmap is not set [ 457.234551][ T5966] cp210x 6-1:0.0: cp210x converter detected [ 457.250162][ T9130] loop3: lost filesystem error report for type 5 error -117 [ 457.256528][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 457.270315][ C0] EXT4-fs (loop3): last error at time 1772505132: ext4_validate_block_bitmap:441 [ 457.282713][ T9130] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 457.291501][ T9130] loop3: lost filesystem error report for type 5 error -117 [ 457.296267][ T9130] EXT4-fs (loop3): 1 orphan inode deleted [ 457.306705][ T5966] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 457.326354][ T9130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 457.341522][ T9130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.377155][ T5966] cp210x 6-1:0.0: querying part number failed [ 457.390301][ T7199] ocfs2: Unmounting device (7,6) on (node local) [ 457.396988][ T29] audit: type=1800 audit(1772505132.915:93): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.659" name="file1" dev="tmpfs" ino=838 res=0 errno=0 [ 457.587098][ T5966] usb 6-1: cp210x converter now attached to ttyUSB0 [ 458.360296][ T8978] usb 6-1: USB disconnect, device number 7 [ 458.375225][ T8978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 458.384265][ T8978] cp210x 6-1:0.0: device disconnected [ 458.480934][ T5883] syz2: Port: 1 Link DOWN [ 459.727077][ T29] audit: type=1800 audit(1772505134.625:94): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.666" name="bus" dev="overlay" ino=437 res=0 errno=0 [ 460.958531][ T1598] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 460.974827][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.000471][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.009894][ T9167] kAFS: unable to lookup cell '(' [ 461.021703][ T1598] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 461.185508][ T8877] bridge_slave_0: entered allmulticast mode [ 461.197655][ T8877] bridge_slave_0: entered promiscuous mode [ 461.218552][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.235625][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.243821][ T8877] bridge_slave_1: entered allmulticast mode [ 461.633590][ T8877] bridge_slave_1: entered promiscuous mode [ 462.070484][ T9170] fido_id[9170]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 462.601947][ T9171] geneve2: entered promiscuous mode [ 462.607299][ T9171] geneve2: entered allmulticast mode [ 463.666064][ T5142] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 463.703400][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.900152][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.912969][ T8877] team0: Port device team_slave_0 added [ 464.979418][ T8877] team0: Port device team_slave_1 added [ 465.199690][ T9208] loop2: detected capacity change from 0 to 128 [ 465.228415][ T9208] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 465.279316][ T9208] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 465.302468][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.319574][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.480205][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.090020][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.138920][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.205972][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.273481][ T9210] loop5: detected capacity change from 0 to 4096 [ 467.489485][ T9198] loop3: detected capacity change from 0 to 32768 [ 467.772109][ T9232] IPv6: NLM_F_CREATE should be specified when creating new route [ 467.780477][ T9232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 467.787814][ T9232] IPv6: NLM_F_CREATE should be set when creating new route [ 467.796890][ T9232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 467.821993][ T9233] capability: warning: `syz.6.687' uses deprecated v2 capabilities in a way that may be insecure [ 468.494410][ T8877] hsr_slave_0: entered promiscuous mode [ 468.512293][ T9198] (syz.3.680,9198,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 468.551928][ T8877] hsr_slave_1: entered promiscuous mode [ 468.636973][ T9198] (syz.3.680,9198,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 468.813360][ T9198] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 468.827061][ T9198] (syz.3.680,9198,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 468.878716][ T9240] Bluetooth: MGMT ver 1.23 [ 468.894671][ T9198] (syz.3.680,9198,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 468.912908][ T9240] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 469.519942][ T5966] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 470.328375][ T9255] kAFS: unable to lookup cell '(' [ 470.623523][ T9259] Bluetooth: MGMT ver 1.23 [ 470.728390][ T9259] loop5: detected capacity change from 0 to 1024 [ 470.752470][ T9259] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 470.763666][ T9259] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.809182][ T9259] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 470.819007][ T9259] EXT4-fs (loop5): orphan cleanup on readonly fs [ 470.830749][ T9259] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.693: Inode bitmap for bg 0 marked uninitialized [ 470.843774][ T9259] loop5: lost filesystem error report for type 5 error -117 [ 470.845538][ T9259] EXT4-fs (loop5): Remounting filesystem read-only [ 470.853164][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 470.853220][ C1] EXT4-fs (loop5): initial error at time 1772505146: ext4_read_inode_bitmap:167 [ 470.853249][ C1] EXT4-fs (loop5): last error at time 1772505146: ext4_read_inode_bitmap:167 [ 470.912983][ T9259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 471.395085][ T5966] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 471.417204][ T6235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.009996][ T9277] loop6: detected capacity change from 0 to 8 [ 474.889651][ T9293] fido_id[9293]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 476.631085][ T9302] loop2: detected capacity change from 0 to 512 [ 476.638114][ T9302] EXT4-fs: Ignoring removed nobh option [ 476.682112][ T9302] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.704: iget: bad extra_isize 90 (inode size 256) [ 476.697219][ T9302] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 476.706015][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 476.721899][ C0] EXT4-fs (loop2): initial error at time 1772505152: ext4_xattr_inode_iget:441: inode 11 [ 476.732247][ C0] EXT4-fs (loop2): last error at time 1772505152: ext4_xattr_inode_iget:441: inode 11 [ 476.742102][ T9302] EXT4-fs (loop2): Remounting filesystem read-only [ 476.749264][ T9302] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 476.760060][ T9302] EXT4-fs (loop2): 1 orphan inode deleted [ 476.767309][ T9302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.043465][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.336006][ T9314] kAFS: unable to lookup cell '(' [ 477.410346][ T1598] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 477.588473][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 478.160903][ T1598] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.666751][ T9328] loop2: detected capacity change from 0 to 32768 [ 480.013252][ T9326] fido_id[9326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 483.435211][ T5966] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 483.509698][ T8877] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 483.606816][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 483.620681][ T5966] usb 6-1: config 64 has an invalid interface number: 110 but max is 0 [ 483.622008][ T8877] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 483.652719][ T5966] usb 6-1: config 64 has no interface number 0 [ 483.676262][ T5966] usb 6-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 483.702447][ T5966] usb 6-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 483.725407][ T5966] usb 6-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 483.750226][ T5966] usb 6-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 483.865188][ T8877] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 483.875253][ T5966] usb 6-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 483.904392][ T5966] usb 6-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 483.918455][ T8877] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 484.459407][ T5966] usb 6-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 484.480875][ T5966] usb 6-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 484.512291][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.547909][ T5966] usb 6-1: Product: syz [ 484.570230][ T5966] usb 6-1: Manufacturer: syz [ 484.580415][ T5966] usb 6-1: SerialNumber: syz [ 484.609367][ T9344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 484.713871][ T5966] spcp8x5 6-1:64.110: SPCP8x5 converter detected [ 484.794090][ T5966] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 484.860900][ T5966] usb 6-1: USB disconnect, device number 8 [ 486.582668][ T5966] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 486.600021][ T5966] spcp8x5 6-1:64.110: device disconnected [ 486.947846][ T5875] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 486.949561][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.181144][ T9379] kAFS: unable to lookup cell '(' [ 487.188210][ T5875] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 487.282304][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.426920][ T9391] loop2: detected capacity change from 0 to 512 [ 489.066177][ T9391] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 489.127828][ T9391] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.722: iget: bad i_size value: 360287970189639680 [ 489.146613][ T9391] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 489.156510][ T9391] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.722: couldn't read orphan inode 15 (err -117) [ 489.170468][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 489.170497][ C1] EXT4-fs (loop2): initial error at time 1772505164: ext4_orphan_get:1391: inode 15 [ 489.170528][ C1] EXT4-fs (loop2): last error at time 1772505164: ext4_orphan_get:1391: inode 15 [ 489.226363][ T9391] loop2: lost filesystem error report for type 5 error -117 [ 489.232628][ T9382] fido_id[9382]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 489.234209][ T9391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.591255][ T9391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.756750][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.776429][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.795665][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.834531][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.873857][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.166188][ T5142] Bluetooth: hci1: command tx timeout [ 493.397416][ T9397] lo speed is unknown, defaulting to 1000 [ 494.286634][ T5142] Bluetooth: hci1: command tx timeout [ 495.771589][ T9438] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 496.496146][ T5142] Bluetooth: hci1: command tx timeout [ 496.672874][ T5987] IPVS: starting estimator thread 0... [ 496.822516][ T9440] IPVS: using max 34 ests per chain, 81600 per kthread [ 498.463726][ T9004] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 498.478295][ T9449] kAFS: unable to lookup cell '(' [ 498.567276][ T5142] Bluetooth: hci1: command tx timeout [ 498.616315][ T9004] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 499.734778][ T9464] fido_id[9464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 501.534757][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.542881][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.392880][ T9477] loop3: detected capacity change from 0 to 64 [ 503.307934][ T9478] loop6: detected capacity change from 0 to 128 [ 503.477300][ T9480] netlink: 64 bytes leftover after parsing attributes in process `syz.5.739'. [ 503.511507][ T9478] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 503.877933][ T7397] udevd[7397]: incorrect jbd checksum on /dev/loop6 [ 504.056259][ T9478] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 508.521247][ T9524] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 509.132297][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 514.513629][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.566521][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.625876][ T9397] bridge_slave_0: entered allmulticast mode [ 514.691244][ T9397] bridge_slave_0: entered promiscuous mode [ 514.732305][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.742194][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.756738][ T9397] bridge_slave_1: entered allmulticast mode [ 515.661686][ T9397] bridge_slave_1: entered promiscuous mode [ 517.362405][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.587179][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.008433][ T9607] syz.6.762 uses old SIOCAX25GETINFO [ 521.094818][ T9397] team0: Port device team_slave_0 added [ 521.559882][ T9397] team0: Port device team_slave_1 added [ 521.785677][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.823988][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.940262][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.012283][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.035231][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.072670][ T29] audit: type=1326 audit(1772505197.595:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 522.144495][ T9618] loop6: detected capacity change from 0 to 128 [ 522.158768][ T9618] adfs: Bad value for 'gid' [ 522.164725][ T9618] adfs: Bad value for 'gid' [ 522.442280][ T9618] loop6: detected capacity change from 0 to 128 [ 522.500848][ T9618] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 522.543125][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.544376][ T9618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.022715][ T29] audit: type=1326 audit(1772505197.595:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 523.055213][ T29] audit: type=1326 audit(1772505197.595:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 523.154953][ T29] audit: type=1326 audit(1772505197.595:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 523.250876][ T29] audit: type=1326 audit(1772505197.595:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 524.601049][ T29] audit: type=1326 audit(1772505197.595:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 524.636228][ T29] audit: type=1326 audit(1772505198.495:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 524.984703][ T29] audit: type=1326 audit(1772505198.495:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.6.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2519c799 code=0x7ffc0000 [ 525.206270][ T6052] bridge_slave_1: left allmulticast mode [ 525.270756][ T6052] bridge_slave_1: left promiscuous mode [ 525.317882][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.405249][ T9640] loop6: detected capacity change from 0 to 1024 [ 525.485649][ T6052] bridge_slave_0: left allmulticast mode [ 525.493215][ T9640] EXT4-fs: Ignoring removed bh option [ 525.533020][ T6052] bridge_slave_0: left promiscuous mode [ 525.555092][ T9640] EXT4-fs: inline encryption not supported [ 525.591698][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.618723][ T9640] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 527.401484][ T9640] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.766: lblock 2 mapped to illegal pblock 2 (length 1) [ 527.486340][ T9640] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 527.496024][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 527.513419][ C0] EXT4-fs (loop6): initial error at time 1772505203: ext4_map_blocks:776: inode 3: block 2 [ 527.524722][ C0] EXT4-fs (loop6): last error at time 1772505203: ext4_map_blocks:776: inode 3: block 2 [ 527.574974][ T9640] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 527.631962][ T9640] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.766: lblock 0 mapped to illegal pblock 48 (length 1) [ 527.706494][ T9640] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 528.264275][ T9640] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 528.595803][ T29] audit: type=1326 audit(1772505204.015:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1919c799 code=0x7ffc0000 [ 528.821136][ T9640] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.766: Failed to acquire dquot type 0 [ 528.888175][ T29] audit: type=1326 audit(1772505204.015:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1919c799 code=0x7ffc0000 [ 528.918721][ T9640] loop6: lost filesystem error report for type 5 error -117 [ 528.921140][ T9640] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 528.942324][ T29] audit: type=1326 audit(1772505204.025:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2a1919c799 code=0x7ffc0000 [ 529.005786][ T9640] loop6: lost filesystem error report for type 5 error -117 [ 529.010322][ T29] audit: type=1326 audit(1772505204.025:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1919c799 code=0x7ffc0000 [ 529.066626][ T9640] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.766: mark_inode_dirty error [ 529.080130][ T9640] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 529.081657][ T9640] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 529.137253][ T29] audit: type=1326 audit(1772505204.025:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1919c799 code=0x7ffc0000 [ 529.137355][ T9640] EXT4-fs (loop6): 1 orphan inode deleted [ 529.171064][ T7859] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 529.208760][ T7859] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 529.282728][ T9640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.465384][ T7859] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 529.571200][ T7859] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 0 [ 530.213431][ T29] audit: type=1326 audit(1772505204.025:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f2a1919c799 code=0x7ffc0000 [ 530.244426][ T29] audit: type=1326 audit(1772505204.025:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.5.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1919c799 code=0x7ffc0000 [ 530.317644][ T7199] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.338175][ T7199] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 530.371985][ T6052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.410513][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.447200][ T6052] bond0 (unregistering): Released all slaves [ 530.500615][ T7199] loop6: lost filesystem error report for type 5 error -117 [ 530.507103][ T9397] hsr_slave_0: entered promiscuous mode [ 530.552217][ T7199] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 530.570109][ T9397] hsr_slave_1: entered promiscuous mode [ 530.593468][ T7199] loop6: lost filesystem error report for type 5 error -117 [ 530.601250][ T9397] debugfs: 'hsr0' already exists in 'hsr' [ 530.622832][ T7199] EXT4-fs error (device loop6): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 530.642477][ T9397] Cannot create hsr debugfs directory [ 530.646196][ T7199] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 532.123138][ T9681] kAFS: unable to lookup cell '(' [ 532.144329][ T5876] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 532.185156][ T5876] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 532.519474][ T6052] hsr_slave_0: left promiscuous mode [ 532.774522][ T6052] hsr_slave_1: left promiscuous mode [ 532.882584][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.131874][ T9690] fido_id[9690]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 533.192202][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.343562][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 540.627907][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 548.672622][ T9798] sd 0:0:1:0: device reset [ 549.512506][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.531601][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.547146][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 550.525628][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 550.543454][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 551.170471][ T9814] loop5: detected capacity change from 0 to 1024 [ 551.256696][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 551.256738][ T29] audit: type=1800 audit(1772505226.585:130): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.792" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 551.895341][ T29] audit: type=1326 audit(1772505227.415:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.3.784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdc199c799 code=0x0 [ 552.139530][ T1095] hfsplus: b-tree write err: -5, ino 25 [ 552.206277][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 552.272482][ T9801] lo speed is unknown, defaulting to 1000 [ 552.297246][ T1095] hfsplus: b-tree write err: -5, ino 2 [ 553.745089][ T5142] Bluetooth: hci0: command tx timeout [ 555.892168][ T5142] Bluetooth: hci0: command tx timeout [ 557.508948][ T9850] 9p: Bad value for 'rfdno' [ 557.925725][ T9847] loop5: detected capacity change from 0 to 2048 [ 557.973641][ T51] Bluetooth: hci0: command tx timeout [ 558.271237][ T1598] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 558.281817][ T1598] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.379099][ T9847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.580239][ T9866] kAFS: unable to lookup cell '(' [ 558.694506][ T9864] loop3: detected capacity change from 0 to 64 [ 560.332806][ T5142] Bluetooth: hci0: command tx timeout [ 560.403618][ T6235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.474406][ T9801] chnl_net:caif_netlink_parms(): no params data found [ 560.564576][ T9860] fido_id[9860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 561.211165][ T9875] loop3: detected capacity change from 0 to 32768 [ 561.514098][ T9875] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 561.833319][ T9875] XFS (loop3): Ending clean mount [ 561.881844][ T9875] XFS (loop3): Quotacheck needed: Please wait. [ 562.394279][ T9801] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.444122][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.495513][ T9801] bridge_slave_0: entered allmulticast mode [ 562.615420][ T9801] bridge_slave_0: entered promiscuous mode [ 562.621847][ T9875] XFS (loop3): Quotacheck: Done. [ 562.783042][ T9801] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.813862][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.825549][ T9801] bridge_slave_1: entered allmulticast mode [ 562.826112][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.849517][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.350444][ T9801] bridge_slave_1: entered promiscuous mode [ 563.371657][ T5821] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 563.811964][ T9905] loop2: detected capacity change from 0 to 512 [ 563.888005][ T9801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.946504][ T9801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.115415][ T58] bridge_slave_1: left allmulticast mode [ 565.142027][ T58] bridge_slave_1: left promiscuous mode [ 565.182726][ T9905] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.800: inode has both inline data and extents flags [ 565.219414][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.262186][ T58] bridge_slave_0: left allmulticast mode [ 565.326709][ T9905] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.327701][ T58] bridge_slave_0: left promiscuous mode [ 565.339175][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 565.339205][ C1] EXT4-fs (loop2): initial error at time 1772505240: ext4_orphan_get:1391: inode 15 [ 565.339241][ C1] EXT4-fs (loop2): last error at time 1772505240: ext4_orphan_get:1391: inode 15 [ 565.385244][ T9905] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.800: couldn't read orphan inode 15 (err -117) [ 565.434882][ T9905] loop2: lost filesystem error report for type 5 error -117 [ 565.442492][ T9905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.298215][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.377980][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.075353][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.121727][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.150496][ T58] bond0 (unregistering): Released all slaves [ 571.278457][ T9801] team0: Port device team_slave_0 added [ 571.289368][ T9801] team0: Port device team_slave_1 added [ 572.345071][ T9948] loop2: detected capacity change from 0 to 32768 [ 572.465872][ T9951] loop6: detected capacity change from 0 to 1024 [ 572.614267][ T58] hsr_slave_0: left promiscuous mode [ 572.637481][ T9948] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 572.737080][ T58] hsr_slave_1: left promiscuous mode [ 572.842650][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.013992][ T9948] XFS (loop2): Ending clean mount [ 573.026614][ T9948] XFS (loop2): Quotacheck needed: Please wait. [ 573.088050][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.487585][ T9948] XFS (loop2): Quotacheck: Done. [ 574.501086][ T1598] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 574.709741][ T9976] kAFS: unable to lookup cell '(' [ 575.024013][ T1598] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 575.162240][ T58] team0 (unregistering): Port device team_slave_1 removed [ 575.184713][ T5818] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.334661][ T58] team0 (unregistering): Port device team_slave_0 removed [ 575.446716][ T9979] fido_id[9979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 576.174618][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.185796][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.223898][ T9801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.099474][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.115074][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.152749][ T9801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.497613][ T9801] hsr_slave_0: entered promiscuous mode [ 578.485608][ T9801] hsr_slave_1: entered promiscuous mode [ 578.919757][T10009] loop2: detected capacity change from 0 to 8 [ 582.227283][T10020] loop2: detected capacity change from 0 to 2048 [ 582.423651][T10020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.614959][T10029] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 584.227244][T10033] trusted_key: encrypted_key: insufficient parameters specified [ 584.927482][ T5987] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 585.128148][ T5987] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 585.272604][T10041] kAFS: unable to lookup cell '(' [ 586.109424][ T9801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 586.241153][ T9801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 586.286115][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.839'. [ 586.289148][ T9801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 586.326365][T10050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.839'. [ 586.406604][ T9801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 586.718289][ T9801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.802879][ T9801] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.822047][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.831015][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.367812][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.375850][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.784675][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 588.884632][ T5142] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 590.166534][T10075] loop3: detected capacity change from 0 to 131072 [ 590.177166][T10075] F2FS-fs (loop3): Test dummy encryption mode enabled [ 590.548125][T10083] netlink: 'syz.6.844': attribute type 4 has an invalid length. [ 590.650152][T10085] netlink: 'syz.6.844': attribute type 4 has an invalid length. [ 591.822618][T10075] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 591.835777][T10075] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 592.104330][T10097] raw_sendmsg: syz.3.843 forgot to set AF_INET. Fix it! [ 592.145563][T10097] o2cb: This node has not been configured. [ 592.155207][T10097] o2cb: Cluster check failed. Fix errors before retrying. [ 592.164208][T10097] (syz.3.843,10097,1):user_dlm_register:674 ERROR: status = -22 [ 592.174177][T10097] (syz.3.843,10097,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 592.878405][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.846'. [ 593.054164][T10098] syz.3.843 (pid 10098) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 593.625114][ T9801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.594785][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 597.640854][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 597.665018][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 599.219882][ T9801] veth0_vlan: entered promiscuous mode [ 599.286056][ T9801] veth1_vlan: entered promiscuous mode [ 599.475832][ T9801] veth0_macvtap: entered promiscuous mode [ 599.535956][ T9801] veth1_macvtap: entered promiscuous mode [ 599.580242][ T5876] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 599.652480][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.692755][ T9801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.723392][ T7653] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.758511][ T7653] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.779759][ T5876] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 599.794692][ T7653] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.810163][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.829214][ T7653] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.836926][ T5876] usb 3-1: Product: syz [ 599.843980][ T5876] usb 3-1: Manufacturer: syz [ 599.870496][ T5876] usb 3-1: SerialNumber: syz [ 600.469130][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.511951][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.568179][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 600.636261][ T6330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.277937][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 601.290038][ T5876] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 601.346240][ T6330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.428301][ T5876] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 603.213322][ T8978] usb 3-1: USB disconnect, device number 4 [ 603.970968][T10159] loop2: detected capacity change from 0 to 512 [ 603.987781][T10159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 604.117674][ T5142] Bluetooth: hci4: unexpected event for opcode 0x200a [ 604.231200][T10159] EXT4-fs (loop2): 1 truncate cleaned up [ 604.460583][T10164] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 604.487767][T10168] 9pnet_virtio: no channels available for device 127.0.0.1 [ 604.561539][T10162] [U]  [ 604.574717][T10159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.764486][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.860'. [ 604.809144][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.860'. [ 604.847309][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.860'. [ 605.196068][ T5987] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 605.403766][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.434516][ T5987] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.495947][ T5987] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 605.531833][ T5987] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.544582][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.587813][T10172] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 605.749807][ T29] audit: type=1326 audit(1772505279.232:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 605.781309][T10183] loop7: detected capacity change from 0 to 128 [ 605.798253][T10183] adfs: Bad value for 'gid' [ 605.804072][T10183] adfs: Bad value for 'gid' [ 606.799631][ T29] audit: type=1326 audit(1772505279.232:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 606.858095][ T5987] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.735773][ T29] audit: type=1326 audit(1772505279.232:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 608.189497][T10189] loop7: detected capacity change from 0 to 128 [ 608.234623][T10189] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 608.262446][T10189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.513963][ T29] audit: type=1326 audit(1772505279.232:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 609.278106][ T29] audit: type=1326 audit(1772505279.232:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 609.468323][ T29] audit: type=1326 audit(1772505279.232:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 609.629577][ T29] audit: type=1326 audit(1772505281.608:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 610.000299][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.867'. [ 610.425447][ T29] audit: type=1326 audit(1772505281.608:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 610.644610][ T5987] usb 6-1: USB disconnect, device number 9 [ 611.603219][T10213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 611.804136][ T29] audit: type=1326 audit(1772505281.889:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 612.028577][T10218] loop3: detected capacity change from 0 to 40427 [ 612.123225][T10218] F2FS-fs (loop3): invalid crc value [ 612.227884][T10218] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 612.267365][T10218] F2FS-fs (loop3): Start checkpoint disabled! [ 612.280849][T10218] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 612.291960][T10218] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 612.313358][ T29] audit: type=1326 audit(1772505281.889:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 612.669170][T10222] loop5: detected capacity change from 0 to 32768 [ 613.947288][ T29] audit: type=1326 audit(1772505281.889:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 613.954600][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 613.972894][ T29] audit: type=1326 audit(1772505281.889:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 614.091432][ T29] audit: type=1326 audit(1772505281.889:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 614.160491][ T29] audit: type=1326 audit(1772505281.889:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 614.381939][T10222] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 614.393769][ T29] audit: type=1326 audit(1772505281.889:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 614.426499][ T29] audit: type=1326 audit(1772505281.889:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 614.600887][ T29] audit: type=1326 audit(1772505281.889:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 614.634875][ T29] audit: type=1326 audit(1772505281.889:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.7.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f144779c799 code=0x7ffc0000 [ 614.786835][T10222] XFS (loop5): Ending clean mount [ 614.849000][T10222] XFS (loop5): Quotacheck needed: Please wait. [ 614.972102][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.7.873'. [ 615.042630][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.7.873'. [ 616.333619][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.7.873'. [ 616.632891][T10222] XFS (loop5): Quotacheck: Done. [ 616.633537][ T6052] kworker/u8:11: attempt to access beyond end of device [ 616.633537][ T6052] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 616.728212][ T6235] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 616.749795][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.749827][ T6052] Tainted: [L]=SOFTLOCKUP [ 616.749833][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 616.749845][ T6052] Workqueue: writeback wb_workfn (flush-7:3) [ 616.749886][ T6052] Call Trace: [ 616.749902][ T6052] [ 616.749909][ T6052] dump_stack_lvl+0xe8/0x150 [ 616.749938][ T6052] f2fs_handle_critical_error+0x37c/0x540 [ 616.749963][ T6052] f2fs_write_end_io+0xcdb/0xff0 [ 616.750000][ T6052] __submit_merged_bio+0x256/0x700 [ 616.750026][ T6052] f2fs_submit_merged_write+0x284/0x390 [ 616.750052][ T6052] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 616.750086][ T6052] f2fs_sync_node_pages+0x14bf/0x1680 [ 616.750124][ T6052] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 616.750145][ T6052] ? __percpu_counter_sum+0x1c2/0x1e0 [ 616.750205][ T6052] ? blk_start_plug+0x51/0x1b0 [ 616.750236][ T6052] f2fs_write_node_pages+0x312/0x700 [ 616.750263][ T6052] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 616.750298][ T6052] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 616.750325][ T6052] do_writepages+0x32e/0x550 [ 616.750351][ T6052] ? reacquire_held_locks+0x104/0x190 [ 616.750368][ T6052] ? writeback_sb_inodes+0x477/0x1a20 [ 616.750393][ T6052] __writeback_single_inode+0x133/0x11a0 [ 616.750412][ T6052] ? do_raw_spin_unlock+0xf5/0x210 [ 616.750437][ T6052] writeback_sb_inodes+0x992/0x1a20 [ 616.750475][ T6052] ? do_raw_spin_unlock+0xf5/0x210 [ 616.750501][ T6052] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 616.750517][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 616.750576][ T6052] ? rcu_is_watching+0x15/0xb0 [ 616.750611][ T6052] wb_writeback+0x456/0xb70 [ 616.750632][ T6052] ? queue_io+0x1f1/0x4a0 [ 616.750657][ T6052] ? __pfx_wb_writeback+0x10/0x10 [ 616.750673][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 616.750708][ T6052] wb_workfn+0x414/0xf50 [ 616.750733][ T6052] ? look_up_lock_class+0x57/0x110 [ 616.750767][ T6052] ? __pfx_wb_workfn+0x10/0x10 [ 616.750794][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 616.750818][ T6052] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 616.750860][ T6052] ? process_one_work+0x87c/0x1650 [ 616.750884][ T6052] process_one_work+0x949/0x1650 [ 616.750930][ T6052] ? __pfx_process_one_work+0x10/0x10 [ 616.750952][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 616.750986][ T6052] worker_thread+0xb46/0x1140 [ 616.751034][ T6052] kthread+0x388/0x470 [ 616.751054][ T6052] ? __pfx_worker_thread+0x10/0x10 [ 616.751076][ T6052] ? __pfx_kthread+0x10/0x10 [ 616.751096][ T6052] ret_from_fork+0x51e/0xb90 [ 616.751122][ T6052] ? __pfx_ret_from_fork+0x10/0x10 [ 616.751142][ T6052] ? __switch_to+0xc7d/0x1450 [ 616.751167][ T6052] ? __pfx_kthread+0x10/0x10 [ 616.751188][ T6052] ret_from_fork_asm+0x1a/0x30 [ 616.751229][ T6052] [ 616.752288][ T6052] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 617.079159][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.079204][ T6052] Tainted: [L]=SOFTLOCKUP [ 617.079211][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.079224][ T6052] Workqueue: writeback wb_workfn (flush-7:3) [ 617.079265][ T6052] Call Trace: [ 617.079272][ T6052] [ 617.079282][ T6052] dump_stack_lvl+0xe8/0x150 [ 617.079314][ T6052] f2fs_handle_critical_error+0x37c/0x540 [ 617.079345][ T6052] f2fs_write_end_io+0xcdb/0xff0 [ 617.079388][ T6052] __submit_merged_bio+0x256/0x700 [ 617.079417][ T6052] f2fs_submit_merged_write+0x284/0x390 [ 617.079444][ T6052] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 617.079483][ T6052] f2fs_sync_node_pages+0x14bf/0x1680 [ 617.079526][ T6052] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 617.079546][ T6052] ? __percpu_counter_sum+0x1c2/0x1e0 [ 617.079641][ T6052] ? blk_start_plug+0x51/0x1b0 [ 617.079666][ T6052] f2fs_write_node_pages+0x312/0x700 [ 617.079693][ T6052] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 617.079729][ T6052] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 617.079750][ T6052] do_writepages+0x32e/0x550 [ 617.079778][ T6052] ? reacquire_held_locks+0x104/0x190 [ 617.079796][ T6052] ? writeback_sb_inodes+0x477/0x1a20 [ 617.079822][ T6052] __writeback_single_inode+0x133/0x11a0 [ 617.079842][ T6052] ? do_raw_spin_unlock+0xf5/0x210 [ 617.079868][ T6052] writeback_sb_inodes+0x992/0x1a20 [ 617.079989][ T6052] ? do_raw_spin_unlock+0xf5/0x210 [ 617.080028][ T6052] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 617.080045][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.080105][ T6052] ? rcu_is_watching+0x15/0xb0 [ 617.080140][ T6052] wb_writeback+0x456/0xb70 [ 617.080160][ T6052] ? queue_io+0x1f1/0x4a0 [ 617.080184][ T6052] ? __pfx_wb_writeback+0x10/0x10 [ 617.080199][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.080238][ T6052] wb_workfn+0x414/0xf50 [ 617.080268][ T6052] ? look_up_lock_class+0x57/0x110 [ 617.080300][ T6052] ? __pfx_wb_workfn+0x10/0x10 [ 617.080328][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.080354][ T6052] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 617.080421][ T6052] ? process_one_work+0x87c/0x1650 [ 617.080449][ T6052] process_one_work+0x949/0x1650 [ 617.080492][ T6052] ? __pfx_process_one_work+0x10/0x10 [ 617.080511][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.080545][ T6052] worker_thread+0xb46/0x1140 [ 617.080592][ T6052] kthread+0x388/0x470 [ 617.080613][ T6052] ? __pfx_worker_thread+0x10/0x10 [ 617.080635][ T6052] ? __pfx_kthread+0x10/0x10 [ 617.080656][ T6052] ret_from_fork+0x51e/0xb90 [ 617.080684][ T6052] ? __pfx_ret_from_fork+0x10/0x10 [ 617.080800][ T6052] ? __switch_to+0xc7d/0x1450 [ 617.080829][ T6052] ? __pfx_kthread+0x10/0x10 [ 617.080851][ T6052] ret_from_fork_asm+0x1a/0x30 [ 617.080893][ T6052] [ 617.432652][ T6052] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 617.871983][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.872017][ T6052] Tainted: [L]=SOFTLOCKUP [ 617.872023][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.872036][ T6052] Workqueue: writeback wb_workfn (flush-7:3) [ 617.872072][ T6052] Call Trace: [ 617.872080][ T6052] [ 617.872088][ T6052] dump_stack_lvl+0xe8/0x150 [ 617.872118][ T6052] f2fs_handle_critical_error+0x37c/0x540 [ 617.872147][ T6052] f2fs_write_end_io+0xcdb/0xff0 [ 617.872192][ T6052] __submit_merged_bio+0x256/0x700 [ 617.872222][ T6052] f2fs_submit_merged_write+0x284/0x390 [ 617.872248][ T6052] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 617.872288][ T6052] f2fs_sync_node_pages+0x14bf/0x1680 [ 617.872332][ T6052] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 617.872353][ T6052] ? __percpu_counter_sum+0x1c2/0x1e0 [ 617.872418][ T6052] ? blk_start_plug+0x51/0x1b0 [ 617.872443][ T6052] f2fs_write_node_pages+0x312/0x700 [ 617.872471][ T6052] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 617.872512][ T6052] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 617.872533][ T6052] do_writepages+0x32e/0x550 [ 617.872562][ T6052] ? reacquire_held_locks+0x104/0x190 [ 617.872580][ T6052] ? writeback_sb_inodes+0x477/0x1a20 [ 617.872606][ T6052] __writeback_single_inode+0x133/0x11a0 [ 617.872627][ T6052] ? do_raw_spin_unlock+0xf5/0x210 [ 617.872653][ T6052] writeback_sb_inodes+0x992/0x1a20 [ 617.872694][ T6052] ? do_raw_spin_unlock+0xf5/0x210 [ 617.872722][ T6052] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 617.872738][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.872804][ T6052] ? rcu_is_watching+0x15/0xb0 [ 617.872840][ T6052] wb_writeback+0x456/0xb70 [ 617.872862][ T6052] ? queue_io+0x1f1/0x4a0 [ 617.872897][ T6052] ? __pfx_wb_writeback+0x10/0x10 [ 617.872913][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.872951][ T6052] wb_workfn+0x414/0xf50 [ 617.872976][ T6052] ? look_up_lock_class+0x57/0x110 [ 617.873010][ T6052] ? __pfx_wb_workfn+0x10/0x10 [ 617.873037][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.873061][ T6052] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 617.873106][ T6052] ? process_one_work+0x87c/0x1650 [ 617.873129][ T6052] process_one_work+0x949/0x1650 [ 617.873177][ T6052] ? __pfx_process_one_work+0x10/0x10 [ 617.873198][ T6052] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.873235][ T6052] worker_thread+0xb46/0x1140 [ 617.873285][ T6052] kthread+0x388/0x470 [ 617.873306][ T6052] ? __pfx_worker_thread+0x10/0x10 [ 617.873328][ T6052] ? __pfx_kthread+0x10/0x10 [ 617.873350][ T6052] ret_from_fork+0x51e/0xb90 [ 617.873379][ T6052] ? __pfx_ret_from_fork+0x10/0x10 [ 617.873401][ T6052] ? __switch_to+0xc7d/0x1450 [ 617.873430][ T6052] ? __pfx_kthread+0x10/0x10 [ 617.873451][ T6052] ret_from_fork_asm+0x1a/0x30 [ 617.873489][ T6052] [ 617.881814][ T6052] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 619.401821][T10256] random: crng reseeded on system resumption [ 619.689903][T10250] Bluetooth: MGMT ver 1.23 [ 620.501649][T10259] loop2: detected capacity change from 0 to 40427 [ 620.581781][T10259] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 620.589532][T10259] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 620.921136][T10259] F2FS-fs (loop2): invalid crc value [ 621.067420][T10259] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 621.090609][T10259] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 621.098399][T10259] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 626.783484][ T51] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 628.011045][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.022038][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.267483][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.7.895'. [ 628.284645][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.7.895'. [ 629.682012][T10291] syz.6.888 (10291): drop_caches: 2 [ 630.985759][T10346] loop5: detected capacity change from 0 to 512 [ 631.767929][T10346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.791761][T10346] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.161519][ T6235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.023221][T10370] loop3: detected capacity change from 0 to 32768 [ 635.397784][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.907'. [ 635.441158][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.907'. [ 636.684404][T10370] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 636.685477][T10370] (syz.3.904,10370,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 636.707759][T10370] (syz.3.904,10370,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 636.842874][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.907'. [ 640.587840][T10400] loop2: detected capacity change from 0 to 32768 [ 644.095797][ T1598] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 644.233151][T10417] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 644.781363][ T1598] usb 4-1: Using ep0 maxpacket: 16 [ 644.915412][ T1598] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 644.966641][ T1598] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 645.002116][ T1598] usb 4-1: Product: syz [ 645.021998][ T1598] usb 4-1: Manufacturer: syz [ 645.039304][ T1598] usb 4-1: SerialNumber: syz [ 645.069388][ T1598] usb 4-1: config 0 descriptor?? [ 645.092869][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 645.130402][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 645.186522][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 648.757272][ T1598] usb 4-1: USB disconnect, device number 5 [ 651.116807][T10469] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 652.956288][T10489] loop6: detected capacity change from 0 to 8 [ 654.236984][ T5932] IPVS: starting estimator thread 0... [ 654.349320][T10498] IPVS: using max 41 ests per chain, 98400 per kthread [ 654.474214][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 654.513171][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 654.547398][T10502] loop3: detected capacity change from 0 to 512 [ 654.597909][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 654.969759][T10509] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 654.969880][T10509] FAT-fs (loop3): Filesystem has been set read-only [ 654.983876][T10509] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 656.577577][T10514] xt_cgroup: invalid path, errno=-2 [ 658.205068][T10536] loop7: detected capacity change from 0 to 2048 [ 658.648058][T10536] NILFS (loop7): invalid segment: Magic number mismatch [ 658.658343][T10536] NILFS (loop7): trying rollback from an earlier position [ 658.710141][T10536] NILFS (loop7): recovery complete [ 658.740421][T10539] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 659.800658][ T9004] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 660.264203][T10554] loop5: detected capacity change from 0 to 512 [ 660.641160][T10554] EXT4-fs: test_dummy_encryption requires encrypt feature [ 660.701600][ T9004] usb 4-1: Using ep0 maxpacket: 32 [ 661.275954][ T9004] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.301216][ T9004] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.857126][ T9004] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.866576][ T9004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.765854][ T9004] usb 4-1: Product: syz [ 662.770477][ T9004] usb 4-1: Manufacturer: syz [ 662.783102][ T9004] usb 4-1: SerialNumber: syz [ 663.274513][ T9004] usb 4-1: can't set config #1, error -71 [ 663.301607][T10570] netlink: 80 bytes leftover after parsing attributes in process `syz.6.953'. [ 663.312387][T10570] netlink: 80 bytes leftover after parsing attributes in process `syz.6.953'. [ 663.473155][ T5932] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 663.772668][ T5932] usb 3-1: device descriptor read/64, error -71 [ 664.078445][ T9004] usb 4-1: USB disconnect, device number 6 [ 664.146850][ T5932] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 665.275118][ T5932] usb 3-1: device descriptor read/64, error -71 [ 665.501696][ T5932] usb usb3-port1: attempt power cycle [ 665.884690][T10584] loop2: detected capacity change from 0 to 256 [ 665.900836][T10584] exfat: Deprecated parameter 'utf8' [ 665.908302][T10584] exfat: Deprecated parameter 'namecase' [ 666.128099][T10584] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 669.500852][T10602] loop3: detected capacity change from 0 to 512 [ 670.124727][T10606] loop7: detected capacity change from 0 to 512 [ 670.133898][T10602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.372831][T10602] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.515549][T10611] loop2: detected capacity change from 0 to 512 [ 671.417887][T10611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 671.498909][T10611] EXT4-fs (loop2): 1 truncate cleaned up [ 671.509371][T10611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.567751][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.821945][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.201964][T10621] netlink: 'syz.6.966': attribute type 21 has an invalid length. [ 672.212650][T10621] IPv6: NLM_F_CREATE should be specified when creating new route [ 676.114365][T10648] vivid-002: disconnect [ 676.290112][T10641] vivid-002: reconnect [ 677.070361][ T51] Bluetooth: Wrong link type (-22) [ 679.740777][T10676] binder: 10675:10676 ioctl 4018620d 0 returned -22 [ 679.895359][T10685] netlink: 'syz.7.981': attribute type 24 has an invalid length. [ 679.906672][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.981'. [ 679.915997][T10685] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 682.348534][T10697] ptrace attach of "./syz-executor exec"[10698] was attempted by "./syz-executor exec"[10697] [ 683.322376][T10700] loop5: detected capacity change from 0 to 2048 [ 683.362624][T10704] loop7: detected capacity change from 0 to 1024 [ 683.370768][T10704] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 683.381082][T10704] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 683.393153][T10704] EXT4-fs error (device loop7): ext4_get_journal_inode:5863: inode #8: comm syz.7.989: inode has both inline data and extents flags [ 683.407049][T10704] loop7: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 683.409437][T10704] EXT4-fs (loop7): no journal found [ 683.418737][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 683.418755][ C0] EXT4-fs (loop7): initial error at time 1772505352: ext4_get_journal_inode:5863: inode 8 [ 683.418780][ C0] EXT4-fs (loop7): last error at time 1772505352: ext4_get_journal_inode:5863: inode 8 [ 683.630549][T10700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.045670][T10716] loop2: detected capacity change from 0 to 1024 [ 685.454469][T10716] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 685.470876][T10716] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.990: lblock 2 mapped to illegal pblock 2 (length 1) [ 685.484863][T10716] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 685.489755][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 685.505397][ C0] EXT4-fs (loop2): initial error at time 1772505353: ext4_map_blocks:776: inode 3: block 2 [ 685.515594][ C0] EXT4-fs (loop2): last error at time 1772505353: ext4_map_blocks:776: inode 3: block 2 [ 685.543606][T10716] __quota_error: 6 callbacks suppressed [ 685.543628][T10716] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 685.559958][T10716] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.990: lblock 0 mapped to illegal pblock 48 (length 1) [ 685.574991][T10716] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 685.576673][T10716] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 685.595545][T10716] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.990: Failed to acquire dquot type 0 [ 685.606975][T10716] loop2: lost filesystem error report for type 5 error -117 [ 685.607359][T10716] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 685.626083][T10716] loop2: lost filesystem error report for type 5 error -117 [ 685.627848][T10716] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.990: mark_inode_dirty error [ 685.646648][T10716] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 685.649188][T10716] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 685.668651][T10716] EXT4-fs (loop2): 1 orphan inode deleted [ 685.675935][T10716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.689380][ T6052] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 685.777414][ T6052] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 685.791865][ T6052] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 685.845127][ T6235] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.058159][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.073192][ T6052] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 686.130486][ T6052] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 686.132491][ T6052] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 686.175162][T10721] loop5: detected capacity change from 0 to 128 [ 686.177304][ T6052] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 686.225887][T10721] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 686.227436][ T6052] loop2: lost filesystem error report for type 5 error -117 [ 686.277826][ T5818] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 686.325450][T10721] ext4 filesystem being mounted at /174/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 686.368347][ T5818] loop2: lost filesystem error report for type 5 error -117 [ 686.370820][ T5818] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 686.420950][ T5818] loop2: lost filesystem error report for type 5 error -117 [ 686.421657][ T5818] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 686.468386][ T5818] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 688.694560][ T6235] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 690.235915][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.997'. [ 690.274244][T10752] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 690.283191][T10752] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 690.292147][T10752] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 693.265878][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 693.272305][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.578024][T10768] input: syz1 as /devices/virtual/input/input6 [ 697.586579][T10791] batadv_slave_0: entered promiscuous mode [ 698.499037][T10779] batadv_slave_0: left promiscuous mode [ 701.128021][T10808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.159490][T10808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.756619][T10131] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 701.870937][T10131] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 703.031083][T10816] kAFS: unable to lookup cell '(' [ 703.479970][T10824] loop7: detected capacity change from 0 to 8 [ 703.850672][T10824] SQUASHFS error: zlib decompression failed, data probably corrupt [ 703.858328][T10814] fido_id[10814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 703.858784][T10824] SQUASHFS error: Failed to read block 0x9b: -5 [ 703.879218][T10824] SQUASHFS error: Unable to read metadata cache entry [99] [ 703.879933][T10819] kAFS: unable to lookup cell '(,cL' [ 703.886431][T10824] SQUASHFS error: Unable to read inode 0x127 [ 704.310065][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1015'. [ 706.833314][T10848] loop5: detected capacity change from 0 to 40427 [ 706.843720][T10848] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 706.851527][T10848] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 706.899601][T10848] F2FS-fs (loop5): invalid crc value [ 706.978215][T10848] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 706.992149][T10848] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 706.999258][T10848] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 709.762916][T10835] bond1: Removing last ns target with arp_interval on [ 709.865904][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 709.915534][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 709.927394][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 709.943804][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 709.953747][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 710.293348][T10863] lo speed is unknown, defaulting to 1000 [ 711.948615][ T5932] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 712.162064][ T5142] Bluetooth: hci1: command tx timeout [ 712.541123][T10876] kAFS: unable to lookup cell '(' [ 712.547135][T10877] kAFS: unable to lookup cell '(,cL' [ 712.569838][ T5932] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 713.458720][T10880] fido_id[10880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 713.665863][T10888] loop7: detected capacity change from 0 to 8 [ 713.695845][T10888] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 713.714506][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop7 [ 714.009870][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.365377][ T5142] Bluetooth: hci1: command tx timeout [ 714.571866][T10883] batadv_slave_0: entered promiscuous mode [ 714.578406][T10883] batadv_slave_0: left promiscuous mode [ 714.919000][T10897] loop3: detected capacity change from 0 to 256 [ 715.421386][T10897] FAT-fs (loop3): Directory bread(block 64) failed [ 715.428242][T10897] FAT-fs (loop3): Directory bread(block 65) failed [ 715.438887][T10897] FAT-fs (loop3): Directory bread(block 66) failed [ 715.445562][T10897] FAT-fs (loop3): Directory bread(block 67) failed [ 715.453639][T10897] FAT-fs (loop3): Directory bread(block 68) failed [ 715.460691][T10897] FAT-fs (loop3): Directory bread(block 69) failed [ 715.468070][T10897] FAT-fs (loop3): Directory bread(block 70) failed [ 715.474883][T10897] FAT-fs (loop3): Directory bread(block 71) failed [ 715.482584][T10897] FAT-fs (loop3): Directory bread(block 72) failed [ 715.489485][T10897] FAT-fs (loop3): Directory bread(block 73) failed [ 716.730215][ T5142] Bluetooth: hci1: command tx timeout [ 717.158612][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.241699][T10912] loop5: detected capacity change from 0 to 64 [ 718.501283][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1033'. [ 719.902970][ T5142] Bluetooth: hci1: command tx timeout [ 719.920049][T10921] bond0: entered promiscuous mode [ 719.925267][T10921] bond_slave_0: entered promiscuous mode [ 719.931111][T10921] bond_slave_1: entered promiscuous mode [ 719.939635][T10921] batadv0: entered promiscuous mode [ 719.947106][T10921] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 720.009250][T10921] bond0: left promiscuous mode [ 720.015610][T10921] bond_slave_0: left promiscuous mode [ 720.021375][T10921] bond_slave_1: left promiscuous mode [ 720.041307][T10921] batadv0: left promiscuous mode [ 720.928217][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.118920][T10863] chnl_net:caif_netlink_parms(): no params data found [ 722.028524][T10937] kAFS: unable to lookup cell '(' [ 722.034310][T10938] kAFS: unable to lookup cell '(,cL' [ 722.254631][T10941] loop3: detected capacity change from 0 to 16 [ 723.922147][T10948] batadv_slave_0: entered promiscuous mode [ 723.928263][T10948] batadv_slave_0: left promiscuous mode [ 723.937550][T10863] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.975459][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.002077][T10863] bridge_slave_0: entered allmulticast mode [ 724.023291][T10863] bridge_slave_0: entered promiscuous mode [ 724.030350][T10941] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 724.064050][T10863] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.081219][T10941] erofs (device loop3): mounted with root inode @ nid 36. [ 724.095862][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.126910][T10863] bridge_slave_1: entered allmulticast mode [ 724.138346][T10863] bridge_slave_1: entered promiscuous mode [ 724.326560][T10957] syz.3.1038: attempt to access beyond end of device [ 724.326560][T10957] loop3: rw=0, sector=301994239, nr_sectors = 1 limit=16 [ 724.347274][T10957] erofs (device loop3): read error -5 @ 0 of nid 36 [ 724.501670][T10958] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 725.519749][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.594968][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.579642][T10863] team0: Port device team_slave_0 added [ 726.625202][T10863] team0: Port device team_slave_1 added [ 727.608519][ T9004] IPVS: starting estimator thread 0... [ 727.824763][T10982] IPVS: using max 35 ests per chain, 84000 per kthread [ 729.442105][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.452995][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.855343][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.920185][T10987] loop3: detected capacity change from 0 to 512 [ 731.047966][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.112526][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.224703][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.714123][T10863] hsr_slave_0: entered promiscuous mode [ 731.735437][T10863] hsr_slave_1: entered promiscuous mode [ 731.772085][T10863] debugfs: 'hsr0' already exists in 'hsr' [ 731.915748][T10863] Cannot create hsr debugfs directory [ 732.270678][ T13] bridge_slave_1: left allmulticast mode [ 732.290749][ T13] bridge_slave_1: left promiscuous mode [ 732.313114][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.330154][ T13] bridge_slave_0: left allmulticast mode [ 732.336118][ T13] bridge_slave_0: left promiscuous mode [ 732.352294][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.522457][T11013] kvm: kvm [11012]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x94c600000080 [ 733.550661][T11013] kvm: kvm [11012]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xbac000000000 [ 733.562750][T11013] kvm: kvm [11012]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 733.628858][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.673006][T11019] loop3: detected capacity change from 0 to 1024 [ 733.689866][T11019] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 733.689886][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.749317][T11019] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 733.760755][ T13] bond0 (unregistering): Released all slaves [ 733.772299][T11019] EXT4-fs (loop3): orphan cleanup on readonly fs [ 733.801344][T11019] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.1055: Freeing blocks not in datazone - block = 0, count = 4096 [ 733.940220][T11019] loop3: lost filesystem error report for type 5 error -117 [ 733.942392][T11019] EXT4-fs (loop3): 1 orphan inode deleted [ 733.956116][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 733.956133][ C0] EXT4-fs (loop3): initial error at time 1772505399: ext4_free_blocks:6724 [ 733.956148][ C0] EXT4-fs (loop3): last error at time 1772505399: ext4_free_blocks:6724 [ 734.529223][T11019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 735.779639][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.207668][T11049] batadv_slave_0: entered promiscuous mode [ 739.213895][T11049] batadv_slave_0: left promiscuous mode [ 740.050862][T11067] loop5: detected capacity change from 0 to 64 [ 742.479254][T11083] loop3: detected capacity change from 0 to 512 [ 742.486567][T11083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 742.493707][T11083] EXT4-fs: Conflicting test_dummy_encryption options [ 743.238283][ T13] hsr_slave_0: left promiscuous mode [ 744.277204][ T13] hsr_slave_1: left promiscuous mode [ 744.486642][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.522002][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.562914][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.596053][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.834153][ T13] veth1_macvtap: left promiscuous mode [ 744.845866][ T13] veth0_macvtap: left promiscuous mode [ 744.856846][ T13] veth1_vlan: left promiscuous mode [ 744.870362][ T13] veth0_vlan: left promiscuous mode [ 745.472666][T11112] loop5: detected capacity change from 0 to 512 [ 745.491178][T11112] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 747.496108][T11132] loop7: detected capacity change from 0 to 1024 [ 747.547288][T11132] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 747.559531][T11132] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 747.577472][T11132] EXT4-fs error (device loop7): ext4_get_journal_inode:5863: inode #8: comm syz.7.1079: inode has both inline data and extents flags [ 747.591246][T11132] loop7: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 747.602204][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 747.617821][ C0] EXT4-fs (loop7): initial error at time 1772505412: ext4_get_journal_inode:5863: inode 8 [ 747.629058][ C0] EXT4-fs (loop7): last error at time 1772505412: ext4_get_journal_inode:5863: inode 8 [ 747.639375][T11132] EXT4-fs (loop7): no journal found [ 748.952492][ T13] team0 (unregistering): Port device team_slave_1 removed [ 748.994477][ T13] team0 (unregistering): Port device team_slave_0 removed [ 749.555958][T11157] loop3: detected capacity change from 0 to 256 [ 749.805567][T11162] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 751.548179][T10863] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 751.644790][T10863] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 751.732020][T10863] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 751.785575][T10863] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 752.600071][T11191] loop3: detected capacity change from 0 to 512 [ 753.126422][T11191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 753.133178][T11191] EXT4-fs: Conflicting test_dummy_encryption options [ 754.066863][ T13] IPVS: stop unused estimator thread 0... [ 754.300627][T10863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.373167][T10863] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.440977][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.448234][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.463237][T11209] loop5: detected capacity change from 0 to 1024 [ 754.480645][T11209] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 754.490344][T11209] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 754.503556][T11209] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #8: comm syz.5.1092: inode has both inline data and extents flags [ 754.519361][T11209] loop5: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 754.521312][T11209] EXT4-fs (loop5): no journal found [ 754.530428][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 754.530452][ C0] EXT4-fs (loop5): initial error at time 1772505418: ext4_get_journal_inode:5863: inode 8 [ 754.530481][ C0] EXT4-fs (loop5): last error at time 1772505418: ext4_get_journal_inode:5863: inode 8 [ 754.589283][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.596669][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.937443][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.945780][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.319415][T10863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.462920][T11252] kvm: kvm [11250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x94c600000080 [ 760.536044][T11252] kvm: kvm [11250]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xbac000000000 [ 760.545555][T11252] kvm: kvm [11250]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 761.499081][T10863] veth0_vlan: entered promiscuous mode [ 761.560005][T10863] veth1_vlan: entered promiscuous mode [ 761.749351][T10863] veth0_macvtap: entered promiscuous mode [ 761.803208][T10863] veth1_macvtap: entered promiscuous mode [ 762.600761][T11283] loop6: detected capacity change from 0 to 16 [ 762.622746][T11283] erofs (device loop6): mounted with root inode @ nid 36. [ 762.634149][T10863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.719417][T10863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.789132][ T1144] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.830848][ T1144] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.862263][ T1144] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.926588][ T1144] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.171246][T11296] No such timeout policy "syz1" [ 764.116990][ T7653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.891709][ T7653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.269995][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.290351][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.859505][T11328] loop5: detected capacity change from 0 to 8 [ 765.866632][T11328] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 767.147652][T11328] cramfs: Error -3 while decompressing! [ 767.155680][T11328] cramfs: ffffffff9a3c4e68(26)->ffff888049f0d000(4096) [ 767.162587][T11328] cramfs: Error -3 while decompressing! [ 767.168254][T11328] cramfs: ffffffff9a3c4e82(26)->ffff888049f0c000(4096) [ 767.175197][T11328] cramfs: Error -3 while decompressing! [ 767.180806][T11328] cramfs: ffffffff9a3c4e9c(16)->ffff888075a2f000(4096) [ 767.187846][T11328] cramfs: Error -3 while decompressing! [ 767.193465][T11328] cramfs: ffffffff9a3c4e68(26)->ffff888049f0d000(4096) [ 767.201380][T11331] siw: device registration error -23 [ 768.657963][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop5 [ 768.749471][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop5 [ 769.173339][T11347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 770.097908][T11335] kvm: kvm [11333]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x94c600000080 [ 770.206569][T11335] kvm: kvm [11333]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xbac000000000 [ 770.216089][T11335] kvm: kvm [11333]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 771.265773][T11379] loop7: detected capacity change from 0 to 128 [ 771.309144][T11379] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 771.369646][T11379] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 771.975307][ T8277] udevd[8277]: incorrect jbd checksum on /dev/loop7 [ 772.368787][T11390] hfs: can't find a HFS filesystem on dev nullb0 [ 773.300018][T11401] loop5: detected capacity change from 0 to 8 [ 773.307255][T11401] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 773.491214][T11402] Illegal XDP return value 4294967274 on prog (id 69) dev N/A, expect packet loss! [ 773.931130][T11401] cramfs: Error -3 while decompressing! [ 773.937503][T11401] cramfs: ffffffff9a3c0e68(26)->ffff88804db0d000(4096) [ 773.944726][T11401] cramfs: Error -3 while decompressing! [ 773.950328][T11401] cramfs: ffffffff9a3c0e82(26)->ffff88804a7e6000(4096) [ 773.957354][T11401] cramfs: Error -3 while decompressing! [ 773.963035][T11401] cramfs: ffffffff9a3c0e9c(16)->ffff88804a7e7000(4096) [ 773.970191][T11401] cramfs: Error -3 while decompressing! [ 773.975800][T11401] cramfs: ffffffff9a3c0e68(26)->ffff88804db0d000(4096) [ 774.324880][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop5 [ 774.663993][T11409] kvm: kvm [11407]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x94c600000080 [ 774.691749][T11409] kvm: kvm [11407]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xbac000000000 [ 774.703786][T11409] kvm: kvm [11407]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 778.059190][T11439] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 778.098547][T11439] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1139'. [ 779.681745][T11454] loop8: detected capacity change from 0 to 8 [ 779.689011][T11454] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 780.738576][T11448] cramfs: Error -3 while decompressing! [ 780.744251][T11448] cramfs: ffffffff9a3c4e68(26)->ffff88804972b000(4096) [ 780.751185][T11448] cramfs: Error -3 while decompressing! [ 780.756834][T11448] cramfs: ffffffff9a3c4e82(26)->ffff888049563000(4096) [ 780.763715][T11448] cramfs: Error -3 while decompressing! [ 780.769330][T11448] cramfs: ffffffff9a3c4e9c(16)->ffff8880496cc000(4096) [ 780.776263][T11448] cramfs: Error -3 while decompressing! [ 780.781853][T11448] cramfs: ffffffff9a3c4e68(26)->ffff88804972b000(4096) [ 780.835703][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop8 [ 780.865148][T11459] loop7: detected capacity change from 0 to 128 [ 780.877344][T11459] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 780.886571][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop8 [ 780.902439][T11459] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 780.976723][ T7397] udevd[7397]: incorrect jbd checksum on /dev/loop7 [ 781.408312][T11472] loop6: detected capacity change from 0 to 8 [ 781.420841][T11472] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 781.885077][ T7347] udevd[7347]: incorrect cramfs checksum on /dev/loop6 [ 781.934959][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop6 [ 781.963901][T11470] kvm: kvm [11469]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x94c600000080 [ 782.014006][T11470] kvm: kvm [11469]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xbac000000000 [ 782.058645][T11470] kvm: kvm [11469]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 782.512255][T11480] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1148'. [ 782.522290][T11480] openvswitch: netlink: Flow actions attr not present in new flow. [ 782.561685][T11480] kernel profiling enabled (shift: 0) [ 784.566483][T11497] SET target dimension over the limit! [ 785.151856][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 786.448302][T11513] loop8: detected capacity change from 0 to 8 [ 786.459833][T11513] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 786.893859][T11512] cramfs: Error -3 while decompressing! [ 786.899460][T11512] cramfs: ffffffff9a3c4e68(26)->ffff8880491d9000(4096) [ 786.906400][T11512] cramfs: Error -3 while decompressing! [ 786.911983][T11512] cramfs: ffffffff9a3c4e82(26)->ffff888046315000(4096) [ 786.918831][T11512] cramfs: Error -3 while decompressing! [ 786.924437][T11512] cramfs: ffffffff9a3c4e9c(16)->ffff888075731000(4096) [ 786.931381][T11512] cramfs: Error -3 while decompressing! [ 786.937601][T11512] cramfs: ffffffff9a3c4e68(26)->ffff8880491d9000(4096) [ 787.002364][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop8 [ 787.205979][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop8 [ 788.540977][T11536] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.554817][T11536] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.031792][T11540] kvm: kvm [11533]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x94c600000080 [ 790.048752][T11540] kvm: kvm [11533]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xbac000000000 [ 790.121456][ T5876] IPVS: starting estimator thread 0... [ 790.192834][T11540] kvm: kvm [11533]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 790.826908][T11552] IPVS: using max 56 ests per chain, 134400 per kthread [ 792.307031][T11572] loop7: detected capacity change from 0 to 512 [ 793.057726][T11578] loop3: detected capacity change from 0 to 8 [ 793.270835][ T7397] udevd[7397]: incorrect cramfs checksum on /dev/loop3 [ 793.279576][T11578] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 794.200089][T11590] loop6: detected capacity change from 0 to 164 [ 794.633882][T11598] Unsupported NM flag settings (8) [ 794.642648][T11598] 9p: Bad value for 'rfdno' [ 795.595982][T11599] loop8: detected capacity change from 0 to 32768 [ 795.697418][T11599] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 796.066146][T11599] XFS (loop8): Ending clean mount [ 796.336427][T10863] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 798.491995][T11635] openvswitch: netlink: Flow key attr not present in new flow. [ 799.022727][T11639] batadv_slave_0: entered promiscuous mode [ 799.680794][T11636] batadv_slave_0: left promiscuous mode [ 799.777883][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 799.814822][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 799.831462][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.863401][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.884212][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 800.126268][T11644] lo speed is unknown, defaulting to 1000 [ 800.619620][T11658] loop8: detected capacity change from 0 to 16 [ 800.655682][T11658] erofs (device loop8): algorithm 1 isn't enabled on this kernel [ 802.171057][ T51] Bluetooth: hci3: command tx timeout [ 803.391948][T11684] loop8: detected capacity change from 0 to 164 [ 803.587461][T11688] batadv_slave_0: entered promiscuous mode [ 803.593755][T11688] batadv_slave_0: left promiscuous mode [ 803.705576][T11693] Unsupported NM flag settings (8) [ 803.757441][T11693] Unsupported NM flag settings (8) [ 804.338511][ T51] Bluetooth: hci3: command tx timeout [ 804.706156][T11699] loop7: detected capacity change from 0 to 1024 [ 804.744819][T11699] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 804.754524][T11699] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 804.766096][T11699] EXT4-fs error (device loop7): ext4_get_journal_inode:5863: inode #8: comm syz.7.1189: inode has both inline data and extents flags [ 804.780643][T11699] loop7: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 804.786298][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 804.801886][ C0] EXT4-fs (loop7): initial error at time 1772505721: ext4_get_journal_inode:5863: inode 8 [ 804.811878][ C0] EXT4-fs (loop7): last error at time 1772505721: ext4_get_journal_inode:5863: inode 8 [ 804.835104][T11699] EXT4-fs (loop7): no journal found [ 805.684449][T11718] loop6: detected capacity change from 0 to 512 [ 805.701321][T11718] ext4: Bad value for 'inode_readahead_blks' [ 806.561926][ T51] Bluetooth: hci3: command tx timeout [ 807.178079][T11739] loop6: detected capacity change from 0 to 512 [ 807.194312][T11739] FAT-fs (loop6): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 807.232730][T11644] chnl_net:caif_netlink_parms(): no params data found [ 807.735252][T11644] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.772217][T11644] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.782496][T11644] bridge_slave_0: entered allmulticast mode [ 807.790950][T11644] bridge_slave_0: entered promiscuous mode [ 808.037290][ T6052] bond0: (slave netdevsim0): Releasing backup interface [ 808.199867][ T6052] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 808.786567][ T51] Bluetooth: hci3: command tx timeout [ 808.823981][T11644] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.832968][T11644] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.841995][T11644] bridge_slave_1: entered allmulticast mode [ 808.859875][T11644] bridge_slave_1: entered promiscuous mode [ 808.890450][T11753] batadv_slave_0: entered promiscuous mode [ 808.919247][T11748] batadv_slave_0: left promiscuous mode [ 809.100953][T11644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.123168][T11758] loop8: detected capacity change from 0 to 128 [ 809.172117][T11644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.201922][T11758] futex_wake_op: syz.8.1199 tries to shift op by -1; fix this program [ 809.401570][T11763] loop6: detected capacity change from 0 to 8 [ 809.738164][T11763] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 809.770405][T11762] syz.8.1199: attempt to access beyond end of device [ 809.770405][T11762] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 809.872927][ T7397] udevd[7397]: incorrect cramfs checksum on /dev/loop6 [ 809.997908][ T8277] udevd[8277]: incorrect cramfs checksum on /dev/loop6 [ 810.194276][T11644] team0: Port device team_slave_0 added [ 810.295749][T11766] loop8: detected capacity change from 0 to 1024 [ 810.304229][T11766] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 810.315403][T11766] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 810.331356][T11766] EXT4-fs error (device loop8): ext4_get_journal_inode:5863: inode #8: comm syz.8.1201: inode has both inline data and extents flags [ 810.345125][T11766] loop8: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 810.345416][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 810.360910][ C0] EXT4-fs (loop8): initial error at time 1772505726: ext4_get_journal_inode:5863: inode 8 [ 810.370953][ C0] EXT4-fs (loop8): last error at time 1772505726: ext4_get_journal_inode:5863: inode 8 [ 810.380868][T11766] EXT4-fs (loop8): no journal found [ 810.630759][T11644] team0: Port device team_slave_1 added [ 811.961285][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1203'. [ 812.376114][T11776] batadv_slave_1: entered promiscuous mode [ 812.382298][T11776] batadv_slave_1: left promiscuous mode [ 812.388481][T11777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.511110][T11777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.110188][T11644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.132001][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.268543][T11644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.303580][T11644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.346511][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.373160][T11644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.396422][T11785] batadv_slave_0: entered promiscuous mode [ 813.402593][T11785] batadv_slave_0: left promiscuous mode [ 814.249294][T11644] hsr_slave_0: entered promiscuous mode [ 814.269268][T11644] hsr_slave_1: entered promiscuous mode [ 814.489403][T11644] debugfs: 'hsr0' already exists in 'hsr' [ 814.496565][T11644] Cannot create hsr debugfs directory [ 815.538598][T11805] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 819.933477][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1210'. [ 821.557048][T11824] loop7: detected capacity change from 0 to 8 [ 821.751248][T11824] SQUASHFS error: xz decompression failed, data probably corrupt [ 821.759667][T11824] SQUASHFS error: Failed to read block 0x108: -5 [ 821.766184][T11824] SQUASHFS error: Unable to read metadata cache entry [106] [ 821.773494][T11824] SQUASHFS error: Unable to read inode 0x101f [ 822.515239][ T6052] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 822.544304][ T6052] bond0 (unregistering): Released all slaves [ 822.626824][T11803] batadv_slave_0: entered promiscuous mode [ 822.633454][T11803] batadv_slave_0: left promiscuous mode [ 823.204161][ T29] audit: type=1326 audit(1772505738.764:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.3.1216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdc199c799 code=0x0 [ 824.678949][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 824.685882][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.369425][T11866] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 825.981816][ T6052] hsr_slave_0: left promiscuous mode [ 826.120486][ T6052] hsr_slave_1: left promiscuous mode [ 828.940353][T11895] overlayfs: missing 'lowerdir' [ 829.346553][ T5142] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 829.357364][ T5142] CPU: 1 UID: 0 PID: 5142 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.357402][ T5142] Tainted: [L]=SOFTLOCKUP [ 829.357409][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.357423][ T5142] Workqueue: hci4 hci_rx_work [ 829.357462][ T5142] Call Trace: [ 829.357471][ T5142] [ 829.357479][ T5142] dump_stack_lvl+0xe8/0x150 [ 829.357517][ T5142] sysfs_create_dir_ns+0x271/0x2a0 [ 829.357544][ T5142] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 829.357574][ T5142] kobject_add_internal+0x62b/0xd00 [ 829.357608][ T5142] kobject_add+0x163/0x240 [ 829.357637][ T5142] ? __pfx_kobject_add+0x10/0x10 [ 829.357661][ T5142] ? _raw_spin_unlock+0x3f/0x50 [ 829.357693][ T5142] ? get_device_parent+0x366/0x3a0 [ 829.357729][ T5142] device_add+0x408/0xb70 [ 829.357764][ T5142] hci_conn_add_sysfs+0xd5/0x210 [ 829.357802][ T5142] le_conn_complete_evt+0xf1d/0x1430 [ 829.357837][ T5142] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 829.357860][ T5142] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 829.357883][ T5142] ? __pfx___mutex_lock+0x10/0x10 [ 829.357905][ T5142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 829.357924][ T5142] ? skb_pull_data+0xfb/0x200 [ 829.357951][ T5142] hci_le_conn_complete_evt+0x187/0x470 [ 829.357982][ T5142] hci_event_packet+0x7af/0x12c0 [ 829.358034][ T5142] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 829.358059][ T5142] ? __pfx_hci_event_packet+0x10/0x10 [ 829.358097][ T5142] ? kcov_remote_start+0x49a/0x7a0 [ 829.358124][ T5142] ? hci_send_to_monitor+0xe2/0x590 [ 829.358153][ T5142] hci_rx_work+0x3ee/0x1040 [ 829.358189][ T5142] ? preempt_schedule_thunk+0x16/0x30 [ 829.358219][ T5142] ? process_one_work+0x87c/0x1650 [ 829.358245][ T5142] process_one_work+0x949/0x1650 [ 829.358294][ T5142] ? __pfx_process_one_work+0x10/0x10 [ 829.358319][ T5142] ? do_raw_spin_lock+0x12b/0x2f0 [ 829.358358][ T5142] worker_thread+0xb46/0x1140 [ 829.358397][ T5142] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 829.358441][ T5142] kthread+0x388/0x470 [ 829.358463][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 829.358489][ T5142] ? __pfx_kthread+0x10/0x10 [ 829.358511][ T5142] ret_from_fork+0x51e/0xb90 [ 829.358543][ T5142] ? __pfx_ret_from_fork+0x10/0x10 [ 829.358568][ T5142] ? __switch_to+0xc7d/0x1450 [ 829.358596][ T5142] ? __pfx_kthread+0x10/0x10 [ 829.358619][ T5142] ret_from_fork_asm+0x1a/0x30 [ 829.358655][ T5142] [ 829.359060][ T5142] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 829.667626][ T5142] Bluetooth: hci4: failed to register connection device [ 829.766725][ T5142] ================================================================== [ 829.774851][ T5142] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x86a/0x1390 [ 829.782863][ T5142] Read of size 8 at addr ffff888057926480 by task kworker/u9:1/5142 [ 829.790857][ T5142] [ 829.793196][ T5142] CPU: 1 UID: 0 PID: 5142 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.793232][ T5142] Tainted: [L]=SOFTLOCKUP [ 829.793240][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.793256][ T5142] Workqueue: hci4 hci_rx_work [ 829.793300][ T5142] Call Trace: [ 829.793315][ T5142] [ 829.793324][ T5142] dump_stack_lvl+0xe8/0x150 [ 829.793358][ T5142] print_report+0xba/0x230 [ 829.793386][ T5142] ? l2cap_connect_cfm+0x86a/0x1390 [ 829.793412][ T5142] kasan_report+0x117/0x150 [ 829.793444][ T5142] ? l2cap_connect_cfm+0x86a/0x1390 [ 829.793479][ T5142] l2cap_connect_cfm+0x86a/0x1390 [ 829.793512][ T5142] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 829.793537][ T5142] ? __pfx_bt_err+0x10/0x10 [ 829.793562][ T5142] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 829.793588][ T5142] hci_connect_cfm+0x95/0x140 [ 829.793612][ T5142] le_conn_complete_evt+0xf65/0x1430 [ 829.793644][ T5142] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 829.793665][ T5142] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 829.793687][ T5142] ? __pfx___mutex_lock+0x10/0x10 [ 829.793711][ T5142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 829.793731][ T5142] ? skb_pull_data+0xfb/0x200 [ 829.793758][ T5142] hci_le_conn_complete_evt+0x187/0x470 [ 829.793787][ T5142] hci_event_packet+0x7af/0x12c0 [ 829.793818][ T5142] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 829.793843][ T5142] ? __pfx_hci_event_packet+0x10/0x10 [ 829.793883][ T5142] ? kcov_remote_start+0x49a/0x7a0 [ 829.793909][ T5142] ? hci_send_to_monitor+0xe2/0x590 [ 829.793934][ T5142] hci_rx_work+0x3ee/0x1040 [ 829.793975][ T5142] ? preempt_schedule_thunk+0x16/0x30 [ 829.794004][ T5142] ? process_one_work+0x87c/0x1650 [ 829.794036][ T5142] process_one_work+0x949/0x1650 [ 829.794073][ T5142] ? __pfx_process_one_work+0x10/0x10 [ 829.794098][ T5142] ? do_raw_spin_lock+0x12b/0x2f0 [ 829.794128][ T5142] worker_thread+0xb46/0x1140 [ 829.794163][ T5142] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 829.794207][ T5142] kthread+0x388/0x470 [ 829.794231][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 829.794261][ T5142] ? __pfx_kthread+0x10/0x10 [ 829.794280][ T5142] ret_from_fork+0x51e/0xb90 [ 829.794313][ T5142] ? __pfx_ret_from_fork+0x10/0x10 [ 829.794338][ T5142] ? __switch_to+0xc7d/0x1450 [ 829.794366][ T5142] ? __pfx_kthread+0x10/0x10 [ 829.794394][ T5142] ret_from_fork_asm+0x1a/0x30 [ 829.794422][ T5142] [ 829.794430][ T5142] [ 830.027176][ T5142] Allocated by task 5142: [ 830.031534][ T5142] kasan_save_track+0x3e/0x80 [ 830.036268][ T5142] __kasan_kmalloc+0x93/0xb0 [ 830.040915][ T5142] __kmalloc_cache_noprof+0x31c/0x660 [ 830.046367][ T5142] l2cap_chan_create+0x51/0x790 [ 830.051288][ T5142] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 830.057260][ T5142] l2cap_connect_cfm+0x368/0x1390 [ 830.062341][ T5142] hci_connect_cfm+0x95/0x140 [ 830.067058][ T5142] le_conn_complete_evt+0xf65/0x1430 [ 830.072404][ T5142] hci_le_conn_complete_evt+0x187/0x470 [ 830.078006][ T5142] hci_event_packet+0x7af/0x12c0 [ 830.083005][ T5142] hci_rx_work+0x3ee/0x1040 [ 830.087585][ T5142] process_one_work+0x949/0x1650 [ 830.092587][ T5142] worker_thread+0xb46/0x1140 [ 830.097329][ T5142] kthread+0x388/0x470 [ 830.101476][ T5142] ret_from_fork+0x51e/0xb90 [ 830.106125][ T5142] ret_from_fork_asm+0x1a/0x30 [ 830.110930][ T5142] [ 830.113277][ T5142] Freed by task 11897: [ 830.117378][ T5142] kasan_save_track+0x3e/0x80 [ 830.122130][ T5142] kasan_save_free_info+0x46/0x50 [ 830.127215][ T5142] __kasan_slab_free+0x5c/0x80 [ 830.132022][ T5142] kfree+0x1c1/0x630 [ 830.135992][ T5142] l2cap_sock_cleanup_listen+0xf0/0x440 [ 830.141607][ T5142] l2cap_sock_release+0x6a/0x230 [ 830.146602][ T5142] __sock_release+0xb9/0x250 [ 830.151246][ T5142] sock_close+0x1c/0x30 [ 830.155436][ T5142] __fput+0x44f/0xa70 [ 830.159455][ T5142] task_work_run+0x1d9/0x270 [ 830.164081][ T5142] get_signal+0x11eb/0x1330 [ 830.168645][ T5142] arch_do_signal_or_restart+0xbc/0x830 [ 830.174242][ T5142] exit_to_user_mode_loop+0x86/0x480 [ 830.179575][ T5142] do_syscall_64+0x32d/0xf80 [ 830.184222][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.190152][ T5142] [ 830.192495][ T5142] The buggy address belongs to the object at ffff888057926000 [ 830.192495][ T5142] which belongs to the cache kmalloc-2k of size 2048 [ 830.206576][ T5142] The buggy address is located 1152 bytes inside of [ 830.206576][ T5142] freed 2048-byte region [ffff888057926000, ffff888057926800) [ 830.220603][ T5142] [ 830.222986][ T5142] The buggy address belongs to the physical page: [ 830.229418][ T5142] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57920 [ 830.238234][ T5142] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 830.246769][ T5142] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 830.254330][ T5142] page_type: f5(slab) [ 830.258314][ T5142] raw: 00fff00000000040 ffff88801b034000 dead000000000100 dead000000000122 [ 830.266900][ T5142] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 830.275576][ T5142] head: 00fff00000000040 ffff88801b034000 dead000000000100 dead000000000122 [ 830.284248][ T5142] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 830.292923][ T5142] head: 00fff00000000003 ffffea00015e4801 00000000ffffffff 00000000ffffffff [ 830.301598][ T5142] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 830.310277][ T5142] page dumped because: kasan: bad access detected [ 830.316712][ T5142] page_owner tracks the page as allocated [ 830.322426][ T5142] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5817, tgid 5817 (syz-executor), ts 70664857387, free_ts 20668502148 [ 830.343889][ T5142] post_alloc_hook+0x231/0x280 [ 830.348686][ T5142] get_page_from_freelist+0x23a1/0x2440 [ 830.354262][ T5142] __alloc_frozen_pages_noprof+0x18d/0x380 [ 830.360089][ T5142] allocate_slab+0x77/0x660 [ 830.364619][ T5142] refill_objects+0x331/0x3c0 [ 830.369328][ T5142] __pcs_replace_empty_main+0x2cd/0x650 [ 830.374912][ T5142] __kmalloc_cache_noprof+0x392/0x660 [ 830.380308][ T5142] rtnl_newlink+0x136/0x1be0 [ 830.384919][ T5142] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 830.389951][ T5142] netlink_rcv_skb+0x232/0x4b0 [ 830.394723][ T5142] netlink_unicast+0x80f/0x9b0 [ 830.399490][ T5142] netlink_sendmsg+0x813/0xb40 [ 830.404263][ T5142] sock_sendmsg_nosec+0x18f/0x1d0 [ 830.409295][ T5142] __sys_sendto+0x3ff/0x590 [ 830.413803][ T5142] __x64_sys_sendto+0xde/0x100 [ 830.419092][ T5142] do_syscall_64+0x14d/0xf80 [ 830.423693][ T5142] page last free pid 1 tgid 1 stack trace: [ 830.429498][ T5142] __free_frozen_pages+0xbe2/0xd60 [ 830.434629][ T5142] free_contig_range+0xbb/0x170 [ 830.439482][ T5142] destroy_args+0x4e5/0x570 [ 830.444001][ T5142] debug_vm_pgtable+0x3f8/0x410 [ 830.448861][ T5142] do_one_initcall+0x250/0x8d0 [ 830.453634][ T5142] do_initcall_level+0x104/0x190 [ 830.458576][ T5142] do_initcalls+0x59/0xa0 [ 830.462909][ T5142] kernel_init_freeable+0x2a6/0x3e0 [ 830.468111][ T5142] kernel_init+0x1d/0x1d0 [ 830.472451][ T5142] ret_from_fork+0x51e/0xb90 [ 830.477046][ T5142] ret_from_fork_asm+0x1a/0x30 [ 830.481810][ T5142] [ 830.484129][ T5142] Memory state around the buggy address: [ 830.489754][ T5142] ffff888057926380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 830.497813][ T5142] ffff888057926400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 830.505874][ T5142] >ffff888057926480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 830.508001][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 830.513928][ T5142] ^ [ 830.513941][ T5142] ffff888057926500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 830.513954][ T5142] ffff888057926580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 830.513964][ T5142] ================================================================== [ 830.593809][ T5142] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 830.601244][ T5142] CPU: 1 UID: 0 PID: 5142 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.612278][ T5142] Tainted: [L]=SOFTLOCKUP [ 830.616620][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.626703][ T5142] Workqueue: hci4 hci_rx_work [ 830.631417][ T5142] Call Trace: [ 830.634703][ T5142] [ 830.637636][ T5142] vpanic+0x56c/0xa60 [ 830.641617][ T5142] ? __pfx_vpanic+0x10/0x10 [ 830.646121][ T5142] panic+0xc5/0xd0 [ 830.649835][ T5142] ? __pfx_panic+0x10/0x10 [ 830.654246][ T5142] ? preempt_schedule_thunk+0x16/0x30 [ 830.659613][ T5142] ? l2cap_connect_cfm+0x86a/0x1390 [ 830.664819][ T5142] ? preempt_schedule_thunk+0x16/0x30 [ 830.670213][ T5142] ? l2cap_connect_cfm+0x86a/0x1390 [ 830.675435][ T5142] check_panic_on_warn+0x89/0xb0 [ 830.680387][ T5142] ? l2cap_connect_cfm+0x86a/0x1390 [ 830.685603][ T5142] end_report+0x73/0x180 [ 830.689869][ T5142] ? l2cap_connect_cfm+0x86a/0x1390 [ 830.695091][ T5142] kasan_report+0x128/0x150 [ 830.699626][ T5142] ? l2cap_connect_cfm+0x86a/0x1390 [ 830.704905][ T5142] l2cap_connect_cfm+0x86a/0x1390 [ 830.709949][ T5142] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 830.715431][ T5142] ? __pfx_bt_err+0x10/0x10 [ 830.719956][ T5142] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 830.725435][ T5142] hci_connect_cfm+0x95/0x140 [ 830.730129][ T5142] le_conn_complete_evt+0xf65/0x1430 [ 830.735416][ T5142] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 830.741133][ T5142] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 830.746759][ T5142] ? __pfx___mutex_lock+0x10/0x10 [ 830.751777][ T5142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 830.757746][ T5142] ? skb_pull_data+0xfb/0x200 [ 830.762421][ T5142] hci_le_conn_complete_evt+0x187/0x470 [ 830.767959][ T5142] hci_event_packet+0x7af/0x12c0 [ 830.772983][ T5142] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 830.778254][ T5142] ? __pfx_hci_event_packet+0x10/0x10 [ 830.783625][ T5142] ? kcov_remote_start+0x49a/0x7a0 [ 830.788726][ T5142] ? hci_send_to_monitor+0xe2/0x590 [ 830.793919][ T5142] hci_rx_work+0x3ee/0x1040 [ 830.798420][ T5142] ? preempt_schedule_thunk+0x16/0x30 [ 830.803805][ T5142] ? process_one_work+0x87c/0x1650 [ 830.808996][ T5142] process_one_work+0x949/0x1650 [ 830.813939][ T5142] ? __pfx_process_one_work+0x10/0x10 [ 830.819303][ T5142] ? do_raw_spin_lock+0x12b/0x2f0 [ 830.824326][ T5142] worker_thread+0xb46/0x1140 [ 830.828999][ T5142] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 830.834807][ T5142] kthread+0x388/0x470 [ 830.838876][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 830.843989][ T5142] ? __pfx_kthread+0x10/0x10 [ 830.848575][ T5142] ret_from_fork+0x51e/0xb90 [ 830.853162][ T5142] ? __pfx_ret_from_fork+0x10/0x10 [ 830.858265][ T5142] ? __switch_to+0xc7d/0x1450 [ 830.862935][ T5142] ? __pfx_kthread+0x10/0x10 [ 830.867519][ T5142] ret_from_fork_asm+0x1a/0x30 [ 830.872290][ T5142] [ 830.875687][ T5142] Kernel Offset: disabled [ 830.880001][ T5142] Rebooting in 86400 seconds..