last executing test programs: 14m3.673681061s ago: executing program 32 (id=136): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 13m22.208560979s ago: executing program 33 (id=238): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="2418322a3100000000bd7000fbdbdf250204000000000000007c0000ecff1a00"], 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x4880) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12m54.21485701s ago: executing program 34 (id=362): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x30}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x2090) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1e8, 0xfeffffff, 0x290, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) socket(0x400000000010, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETLED(r6, 0x4b32, 0x7) 11m49.866499788s ago: executing program 35 (id=552): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x6e8, 0x1e8, 0x310, 0x0, 0xd0, 0x310, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x5}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x3}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x2, 0x3, 0x0, 0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'pimreg0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@mh={{0x28}, {"eefc"}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x101}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff], [0xffffffff, 0x0, 0xff, 0xff000000], 'wg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x11, 0x7b, 0x1, 0x4}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xc0, 0x7, 0x3ff, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, [0x0, 0x0, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], [0xffffffff, 0x0, 0xff, 0xff0000ff], 0x4, 0x204}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x77}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], 0x3}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) brk(0x1e) 11m45.67983498s ago: executing program 36 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) 11m27.809555541s ago: executing program 37 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16", 0x85}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11m18.911910538s ago: executing program 38 (id=638): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4bd, &(0x7f0000000540)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 8m47.059034462s ago: executing program 39 (id=1071): syz_read_part_table(0x105e, &(0x7f0000000000)="$eJzsz7FxwjAYBeCXxI6dDJFNcgzBMQkFJRV0bhiDlo4h2IAxqMXJxisAxfdVv6Snp1N4rc/8/Oe8qWPXJ+mHJsmtrutwKdspV0op+3WubZLhr+58dI+K77nra7wyniVZJFk2bZ/f+srklMOumcPJ6vi0fwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAG7sHAAD//7RED34=") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2200015, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 8m6.531148147s ago: executing program 7 (id=1237): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x2, 0x3, 0xab4e, 0xfffffffffffffffd}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xeac01, 0x97) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x10000007}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m3.64043672s ago: executing program 40 (id=1249): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='veth'], 0x12) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 8m3.518439807s ago: executing program 2 (id=1251): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 8m3.284291424s ago: executing program 2 (id=1252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0x1a, 0x0, &(0x7f0000000180)="dd801000a92a280cf044e17e723b56f4000000005d8ec6f10000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r5, &(0x7f0000000040), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0xfffffff9, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) writev(r7, &(0x7f0000003800), 0x0) socket$inet6(0x10, 0x2, 0x4) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xd, &(0x7f0000000600)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}], &(0x7f0000000680)='GPL\x00', 0xbc3, 0x1000, &(0x7f00000014c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x1, 0x7fff, 0x3f}, 0x10, 0x2f33b, r6, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x2}, 0x94) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 8m3.064144583s ago: executing program 7 (id=1253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000", 0x9a}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m2.958253673s ago: executing program 7 (id=1254): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000ec0000000800000002"], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f00000012c0)=[{&(0x7f0000000100)="aa0f", 0x2}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000019300), &(0x7f0000000280)=@udp=r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r7, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) 8m2.448881918s ago: executing program 7 (id=1257): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1db, &(0x7f0000000380)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000b0000000200", @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000480)="$eJzs3M1vG0UbAPBnbSdt+vEmbykfLYUGCqJQkTRpgR44UAQSB5CQuJRjSNJSmjYoCYhWFQQO5YgqcUcckfgLOMEFASekXssdVapQLy0gJKO1dx0nsV0ndWJa/36S7ZndiWee7Iy9s2M7gJ41nN4lETsi4mpEDFazywsMVx9u3bg4+eeNi5NJlMtv/ZFUyt28cXEyL5r/3fY8s7h8e7358xfOTMzMTM9l+dGFs++Pzp+/8OzpsxOnpk9Nnxs/duzokbEXnh9/rnnj+1bkG1VU16abez+e3bfntbcvvzF54vI7P3+b5PEvi+PD5k+yNsMNthXzxJOdquU/YmflfqByn5TyrYXuNYi2pB2ylA2lqzEYxagdvBiMVz/rauOADVUul8tbGu5Jtw5lJTJJ9li/DbiLJW2P5j7jHu4p2Zt9ErE4mc6B6+fzveD68eoEKI37Vnar7inVZq99tflt56WzrROLf32V3mLpOkT/BlUHABDfH68+5ud+S+d/hVJ9uZeytaGhiPh/ROyKiPsiYndE3B8RD0TEgxHxUN3ftFiOqVm5SLL6/LNwbV2Bten6oYgXs7Wt5ed/tbWLoWKW21mJvy85eXpm+nBE/C8iDkbfljQ/1qKOH1658kWWXHVeN1x3/pfe0vrzc8GsHddKKy7QTU0sTNxp3Lnrn0bsLTWKP6mtBKTHcU9E7N2/vjpOP/PNvmb7bh9/C6X1tade+euIp6rHfzFWxJ9LWq9Pjm6NmenDo3mvWO2XXy+92az+O4q/A9Ljv61h/6/FP5TUr9fOr72OS7993nRO2Wb/XzZu0v7fnywfSh9NLCzMjUX0J69X8v2VV6x0e6wuN75UPo3/4IHG439XLP0nHo6ItBM/EhGPRsT+rO2PRcTjEXGgRfw/vfzEe+uOv/HF+Y5J45+6/fF/9+na8W+ayNe2V+0qnvnxu8qe/JANtYg/iQbH/2gldTDb0s7rX8uWzt1JbwYAAIC7TyEidkRSGKmlC4WRkern5XfHtsLM7PzCoZOzH5ybqn5HYCj6CvmVrsHa9dBYHMum9fn10fEV+SPZdeMviwOV/Mjk7MxUt4OHHre9yfhP/V7sduuADdeBdTTgLrXe8V8ulz/pcFOATeb9H3pXi/G/oR++BLqvwfgfWJHf4I8hAt1SapCpm9j/s/Q9YeBe0+z8/8omtwPYfK7/Qe8y/qF3Gf/Qk7JvwpeirW/Lb1Aiff1pWqYYEd1qWJNEubx19a8cbEaiv4NPuGPlryQMru15orDGSpP6PrZ1Db/RsCoR7RcudrVjZ4m/sx/b3IS60qE0N9B8NLWf6PYrEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8GwAA//+9UNjR") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff028}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m2.039574613s ago: executing program 7 (id=1259): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1fffd) write$eventfd(r2, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) fcntl$setownex(r0, 0xf, 0x0) close(0xffffffffffffffff) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2, 0x3, 0x0, 0x3, 0x2f, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_key={0x1f, 0x8, 0x780, 0x0, "b1e5c2aeb6b3a515e65fddda00ee3baa8efb059124a9703c734ff35c9150bdcf987ebc5125908ebb57d0778484f7350ad14ed9a0588394fe7147eeee179a5714063b479865d37bae3678e31115bcec31a5dd85adc10067f4ab8cfd7b993d71fce3f7b1b21b5ffe460d7f8f7e5bbdace570c25132eddc3ffdfbe83d8307e381f241feec9b6a6fbbb75645cdda6f498c4a21767494734c0b9d11c201e296d3442738edc12068da976e5a02314bd92b836335ee032e9ab02514773ae64122c2441f404f7c4744cf04df3024906600687a2e6aec7eacd71f366e12fe729d5f8819332cba664c7ab8bd821f47183776c9edfb"}]}, 0x178}, 0x1, 0x7}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 8m0.044289041s ago: executing program 7 (id=1262): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x2, 0x3, 0xab4e, 0xfffffffffffffffd}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xeac01, 0x97) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x10000007}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m59.688029555s ago: executing program 41 (id=1262): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r2, 0x6, &(0x7f00000001c0)={0x2, 0x3, 0xab4e, 0xfffffffffffffffd}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r3, &(0x7f0000001180)=""/4096, 0x1000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$eJzs3U9r034cB/BP/2zrdth2/vE7BLx4GurZg0UmiIXBpAf1YmEKsonQXbpd7FPwIj4GH5IHH4PstFukJq6b6TbEJpn29YKRz/Lekk9CmqTwTfvy/7f7e+8OX6dfPkWnk0Q7OhGnEZvRjFZkGo1oxM86luO8cevCr7GST9sBANxUu7uD7mXZuNpWmIvinddw2F2KiLWVQtL/XFFTAAAAAAAAAAAAzFlx/H+MC+P/82lz1vj/yjsGAP7UVeP/+TcMh93BWn7/dpHx/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB9TtN0I73ip+7+AID5O03XXf8BYMF4/w8Ai+fc9T/imut/q742AYA5evrs+ZNur7e9mySdiJPxqD/qZ9Msf/S4t30n+WEzIprZ3JPRqN86y+9meTJd6iRfirU8vzczX47bt7J8kj3c6f2Sr8ReNbsAAAAAAAAAAAAAAAAAAAAAareVnNmczp0+37+1tfPx65tZeVblnw/QjMLz/e34r13ZZgAAAAAAAAAAAAAAAAAAAMBf7fDoeH9wcPBqWH7x4PDouBERJa2inRet8lYxOChvyZOiE6UsebLT59/zh6yI+Pb+9//9/ouIa/+4sb8ahWi12oO2/CLdyF6JN6Wf9fxoueyMsVzh2QkAAAAAAAAAAAAAAAAAABbL9OnfujsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPpMv/+/vKLubQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWw/cAAAD//zM5g9A=") openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xeac01, 0x97) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x10000007}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m59.644019567s ago: executing program 2 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='1'], 0x31) 7m58.751414421s ago: executing program 2 (id=1268): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1db, &(0x7f0000000380)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000b0000000200", @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff028}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m58.406396597s ago: executing program 2 (id=1270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, 0x0) 7m55.777121398s ago: executing program 2 (id=1277): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x2000000, {0x0, 0x6, 0x6, 0x3}}, 0x30) sendfile(r1, r1, 0x0, 0xe3aa6ea) 7m55.635084572s ago: executing program 42 (id=1277): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x2000000, {0x0, 0x6, 0x6, 0x3}}, 0x30) sendfile(r1, r1, 0x0, 0xe3aa6ea) 5m14.585972859s ago: executing program 4 (id=1696): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m14.251213807s ago: executing program 4 (id=1697): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) 5m13.739171302s ago: executing program 4 (id=1700): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 5m13.354483651s ago: executing program 4 (id=1702): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x234a047, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = syz_io_uring_setup(0x6268, &(0x7f00000008c0)={0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x10278e, &(0x7f0000000b40)={0x0, 0x4c1f, 0x10, 0x0, 0x4200004}, &(0x7f0000000200), &(0x7f00000004c0)) io_uring_enter(r6, 0x3, 0x10a5, 0x3, 0x0, 0x0) 5m12.140664205s ago: executing program 4 (id=1704): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1db, &(0x7f0000000380)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000b0000000200", @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000480)="$eJzs3M1vG0UbAPBnbSdt+vEmbykfLYUGCqJQkTRpgR44UAQSB5CQuJRjSNJSmjYoCYhWFQQO5YgqcUcckfgLOMEFASekXssdVapQLy0gJKO1dx0nsV0ndWJa/36S7ZndiWee7Iy9s2M7gJ41nN4lETsi4mpEDFazywsMVx9u3bg4+eeNi5NJlMtv/ZFUyt28cXEyL5r/3fY8s7h8e7358xfOTMzMTM9l+dGFs++Pzp+/8OzpsxOnpk9Nnxs/duzokbEXnh9/rnnj+1bkG1VU16abez+e3bfntbcvvzF54vI7P3+b5PEvi+PD5k+yNsMNthXzxJOdquU/YmflfqByn5TyrYXuNYi2pB2ylA2lqzEYxagdvBiMVz/rauOADVUul8tbGu5Jtw5lJTJJ9li/DbiLJW2P5j7jHu4p2Zt9ErE4mc6B6+fzveD68eoEKI37Vnar7inVZq99tflt56WzrROLf32V3mLpOkT/BlUHABDfH68+5ud+S+d/hVJ9uZeytaGhiPh/ROyKiPsiYndE3B8RD0TEgxHxUN3ftFiOqVm5SLL6/LNwbV2Bten6oYgXs7Wt5ed/tbWLoWKW21mJvy85eXpm+nBE/C8iDkbfljQ/1qKOH1658kWWXHVeN1x3/pfe0vrzc8GsHddKKy7QTU0sTNxp3Lnrn0bsLTWKP6mtBKTHcU9E7N2/vjpOP/PNvmb7bh9/C6X1tade+euIp6rHfzFWxJ9LWq9Pjm6NmenDo3mvWO2XXy+92az+O4q/A9Ljv61h/6/FP5TUr9fOr72OS7993nRO2Wb/XzZu0v7fnywfSh9NLCzMjUX0J69X8v2VV6x0e6wuN75UPo3/4IHG439XLP0nHo6ItBM/EhGPRsT+rO2PRcTjEXGgRfw/vfzEe+uOv/HF+Y5J45+6/fF/9+na8W+ayNe2V+0qnvnxu8qe/JANtYg/iQbH/2gldTDb0s7rX8uWzt1JbwYAAIC7TyEidkRSGKmlC4WRkern5XfHtsLM7PzCoZOzH5ybqn5HYCj6CvmVrsHa9dBYHMum9fn10fEV+SPZdeMviwOV/Mjk7MxUt4OHHre9yfhP/V7sduuADdeBdTTgLrXe8V8ulz/pcFOATeb9H3pXi/G/oR++BLqvwfgfWJHf4I8hAt1SapCpm9j/s/Q9YeBe0+z8/8omtwPYfK7/Qe8y/qF3Gf/Qk7JvwpeirW/Lb1Aiff1pWqYYEd1qWJNEubx19a8cbEaiv4NPuGPlryQMru15orDGSpP6PrZ1Db/RsCoR7RcudrVjZ4m/sx/b3IS60qE0N9B8NLWf6PYrEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8GwAA//+9UNjR") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff028}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m11.25500437s ago: executing program 4 (id=1709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "dc5425", 0x10, 0x21, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e22, 0x4e22, 0x1a2, 0x1, 0x8, 0x0, 0x0, 0x4, 0x4, "ec0aa3", 0xe, "350edb"}}}}}}}, 0x0) 4m55.325422948s ago: executing program 43 (id=1709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfc}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "dc5425", 0x10, 0x21, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e22, 0x4e22, 0x1a2, 0x1, 0x8, 0x0, 0x0, 0x4, 0x4, "ec0aa3", 0xe, "350edb"}}}}}}}, 0x0) 2m19.022742098s ago: executing program 9 (id=2153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0x1a, 0x0, &(0x7f0000000180)="dd801000a92a280cf044e17e723b56f4000000005d8ec6f10000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000040), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0xfffffff9, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) writev(r5, &(0x7f0000003800), 0x0) socket$inet6(0x10, 0x2, 0x4) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xd, &(0x7f0000000600)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}], &(0x7f0000000680)='GPL\x00', 0xbc3, 0x1000, &(0x7f00000014c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x1, 0x7fff, 0x3f}, 0x10, 0x2f33b, r4, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x2}, 0x94) socket(0x10, 0x803, 0x0) 2m18.371302417s ago: executing program 9 (id=2156): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 2m17.558953926s ago: executing program 9 (id=2159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000", 0x9a}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 2m16.151956124s ago: executing program 9 (id=2161): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400c3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m15.952195127s ago: executing program 9 (id=2164): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000000c0)={[{@resuid}]}, 0x1, 0x50f, &(0x7f0000000180)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x6e) 2m15.326563541s ago: executing program 9 (id=2170): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x420, 0xffffffff, 0xffffffff, 0x420, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x0, 0x73}, 0x0, 0x148, 0x190, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x6, 0x1, 'syz0\x00', {0x81e}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x77}, 0x0, 0x258, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x6}, {0xffffffffffffffff, 0x1, 0x5}, {0x1, 0x4, 0x3}, 0x0, 0x85c0e2c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x550) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m0.244216827s ago: executing program 44 (id=2170): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x420, 0xffffffff, 0xffffffff, 0x420, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x0, 0x73}, 0x0, 0x148, 0x190, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x6, 0x1, 'syz0\x00', {0x81e}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x77}, 0x0, 0x258, 0x290, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x6}, {0xffffffffffffffff, 0x1, 0x5}, {0x1, 0x4, 0x3}, 0x0, 0x85c0e2c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x550) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m22.506550471s ago: executing program 3 (id=2310): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) 1m19.27517933s ago: executing program 3 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1m19.162192469s ago: executing program 3 (id=2317): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4050000001400006110ac000000000063000000000000009500000000000000618b760a3577ee7875027d3a447b14d9d0e9a9f994166e1c2d065201d36b9acd05de596f72a57c3ef58886c38ecc6081f6c1eba6cf9c23440259cc1f5509846b429f0761a5e17cb8e613b75628315557b38e1d0e4717d5729b75f7b2c7418c26be191f6447e3d6242c9fe6f4797188a6a7da201425be8c0093bc9d05d71b70c56a8d19f49e61cd387476b9718c9a0f6d56fe23902f5205eb7ba5630f79511542a00777ee2bc4f42f4c8a46204d4912af9599f9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m18.976397765s ago: executing program 3 (id=2319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0x1a, 0x0, &(0x7f0000000180)="dd801000a92a280cf044e17e723b56f4000000005d8ec6f10000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) readv(r5, &(0x7f0000000040), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0xfffffff9, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) writev(r7, &(0x7f0000003800), 0x0) socket$inet6(0x10, 0x2, 0x4) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xd, &(0x7f0000000600)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}], &(0x7f0000000680)='GPL\x00', 0xbc3, 0x1000, &(0x7f00000014c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x1, 0x7fff, 0x3f}, 0x10, 0x2f33b, r6, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x2}, 0x94) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m17.950058464s ago: executing program 3 (id=2322): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x78}}], 0x1, 0x40) 1m15.858030264s ago: executing program 3 (id=2324): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x80004, 0x4) read(r3, &(0x7f00000003c0)=""/14, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)}}], 0x4000000000001b6, 0x8800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 1m0.72197339s ago: executing program 45 (id=2324): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x80004, 0x4) read(r3, &(0x7f00000003c0)=""/14, 0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000007c0)}}, {{0x0, 0x0, &(0x7f00000009c0)}}], 0x4000000000001b6, 0x8800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 37.927211232s ago: executing program 6 (id=2416): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$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") mkdir(&(0x7f0000002880)='./file0\x00', 0x0) 34.651288883s ago: executing program 6 (id=2423): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x470, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0xf516ec685b69bb28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x200, 0x3ff, 0x1, 0x7fff}) 32.502514114s ago: executing program 6 (id=2427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080)="84e088", &(0x7f0000000200)=@udp6}, 0x20) 32.10383761s ago: executing program 6 (id=2429): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff028}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 31.143307541s ago: executing program 6 (id=2431): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(0x0, 0xffffffff, 0x101100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000"], 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x8000) 28.698866116s ago: executing program 6 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c880) 28.387555929s ago: executing program 46 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c880) 8.348317773s ago: executing program 5 (id=2490): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000880)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ascii,uni_xlate=1,iocharset=cp857,iocharset=maccenteuro,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=737,utf8=0,shortname=lower,utf8=0,check=strict,gid=', @ANYRESHEX=0x0, @ANYBLOB="006d15414a9a911285f1e2373c78b1de484391725db9b37de2041536580147125c2a58110bc6fa47fb640a9dc868b6712d7f9a9456d7b3f12c1b62a67910383c6cf0a0289bdfbfc0d2dacf0a7ecdf6cfee91115453e00166db2a6bdc4e85ce2fbb7a1a544c15204ec065f1ea7c20eb4be063d3b531abbd0f07a20071b507470aa3052d9c1da01974b4e728ef47092c77798d15d9764a31d3a917e768a930ea83a06d"], 0x4, 0x36b, &(0x7f0000000500)="$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") r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f0000000400)=[0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x7ef, r0, &(0x7f0000000340)="37591fe5aeddeb67463b130626dcfdc2aade89327142519703d5034170f3610d656eb1e9632e5c17f6cad33867f51af0448f6090dbae0c00a428cc1b411f4afa04e91ba1b7a8edc77c106c9041b5a2c79f39865d043ff0e3d4536edca03c6a82ee874856a59acc7c346e40232e2252dfa3d726962d764a654293153401450791f51eb9de6ae0e39a22620ef766c92e4f7d87ae", 0x93, 0x3, 0x0, 0x2, r1}]) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000040), 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002680)={'ip6_vti0\x00', &(0x7f0000002600)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xc, 0x31, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7800, 0x40, 0x2, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x23) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x326020, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, 0x0) preadv(r9, 0x0, 0x0, 0x2, 0x0) 8.088627905s ago: executing program 0 (id=2494): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000140), 0x8, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) clock_adjtime(0xc, &(0x7f0000000980)={0x8000200, 0x8a, 0x8000000000000000, 0xb, 0x67, 0x0, 0x100, 0x8000000000000000, 0x8, 0xed, 0xe8, 0x0, 0x1, 0x9, 0x4, 0x4, 0x8, 0x6, 0x0, 0x3, 0x2, 0x6, 0x2, 0x40, 0x82bd, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) read$FUSE(r4, &(0x7f0000002280)={0x2020}, 0x2020) 7.894899889s ago: executing program 1 (id=2495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0x1a, 0x0, &(0x7f0000000180)="dd801000a92a280cf044e17e723b56f4000000005d8ec6f10000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r5, &(0x7f0000000040), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) writev(r7, &(0x7f0000003800), 0x0) socket$inet6(0x10, 0x2, 0x4) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xd, &(0x7f0000000600)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}], &(0x7f0000000680)='GPL\x00', 0xbc3, 0x1000, &(0x7f00000014c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x1, 0x7fff, 0x3f}, 0x10, 0x2f33b, r6, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x2}, 0x94) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 6.325987307s ago: executing program 0 (id=2496): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x220}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000980)={&(0x7f0000485000/0x4000)=nil, 0x4000}) 6.139259612s ago: executing program 0 (id=2497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x40000001, 0x4, 0x2, 0x8, 0x4, 0x7, 0x3}, {0xd, 0x401, 0x4, 0x6, 0x8, 0x0, 0x1}]}) 6.032033612s ago: executing program 1 (id=2498): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.886223445s ago: executing program 1 (id=2500): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2000000, &(0x7f0000000040)={[{@inlinecrypt}, {@sysvgroups}, {@discard}]}, 0x1, 0xbd2, &(0x7f0000000d40)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0xee01, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.563144195s ago: executing program 0 (id=2501): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x560f, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x1a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfefbfff, 0x1000, 0x5, 0x1}, 0x20) 5.092146137s ago: executing program 5 (id=2502): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 4.946653041s ago: executing program 0 (id=2503): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, &(0x7f0000000a00)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10) 4.909069484s ago: executing program 8 (id=2504): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.800216113s ago: executing program 1 (id=2505): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbb"], 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xdffd, 0x7, @remote, 0x4}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 4.743280822s ago: executing program 5 (id=2506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() pipe2(0x0, 0x0) timer_create(0x1, 0x0, 0x0) r4 = io_uring_setup(0x3450, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.738239372s ago: executing program 8 (id=2507): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) 4.73162814s ago: executing program 0 (id=2508): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0x1a, 0x0, &(0x7f0000000180)="dd801000a92a280cf044e17e723b56f4000000005d8ec6f10000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r5, &(0x7f0000000040), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0xfffffff9, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) writev(r7, &(0x7f0000003800), 0x0) socket$inet6(0x10, 0x2, 0x4) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0xd, &(0x7f0000000600)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}], &(0x7f0000000680)='GPL\x00', 0xbc3, 0x1000, &(0x7f00000014c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x1, 0x7fff, 0x3f}, 0x10, 0x2f33b, r6, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x2}, 0x94) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.70609534s ago: executing program 8 (id=2509): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.914726912s ago: executing program 1 (id=2510): socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4648b, 0x20008}}, 0x20}, 0x1, 0x0, 0x0, 0x400c0c5}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000002c0), 0x1000, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r4, &(0x7f0000000880)}, 0x20) 2.914127843s ago: executing program 8 (id=2511): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.773323527s ago: executing program 5 (id=2512): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x560f, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x1a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfefbfff, 0x1000, 0x5, 0x1}, 0x20) 2.244513748s ago: executing program 8 (id=2513): syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x800000, {}, [@IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, 0x0, 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x12) 354.180807ms ago: executing program 1 (id=2514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x3, 0x2, "16e1bc39", "e15ef7a3"}}, 0x0}, 0x0) 311.901799ms ago: executing program 8 (id=2515): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f000003b000/0x4000)=nil, 0x4000, &(0x7f0000002900)=""/196) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="07498bbbe0d7", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0xf9, 0x5, 0x3, 0x1, 0x9, 0x8, 0xfb, 0x7, 0x40, 0xe, 0x5, 0x9, 0x0, 0x6, 0xaa, 0x40}}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000040)={0x3, 0x4, 0x7f, 0x8, 0x1, "5c832a35a0801cf286a77b9a4aa05302dca787"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 191.649096ms ago: executing program 5 (id=2516): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000400)={0x7, {{0xa, 0x4e22, 0x0, @mcast1, 0x4}}}, 0x88) 0s ago: executing program 5 (id=2517): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, &(0x7f0000000a00)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): .491560][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.744243][T12875] ip6t_rpfilter: unknown options [ 702.886692][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.085307][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.217599][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.342643][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.442631][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.536813][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.628913][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.639624][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.659922][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.679415][T12673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.799322][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.883941][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.893893][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.904407][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.914332][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.924844][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.940174][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.952411][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.964892][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.027293][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.215035][T12673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.625059][T12673] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.655770][T12673] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.691847][T12673] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.717289][T12673] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.761658][ T4300] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 705.811792][ T4300] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 705.893367][ T4300] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 706.043336][ T4300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 706.181126][ T4300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 706.204165][ T4300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 706.412368][ T4300] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 706.448085][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 706.529246][ T4300] usb 1-1: Product: syz [ 706.570458][ T4300] usb 1-1: Manufacturer: syz [ 706.741898][ T4300] cdc_wdm 1-1:1.0: skipping garbage [ 706.796195][ T4300] cdc_wdm 1-1:1.0: skipping garbage [ 706.971891][T12887] udc-core: couldn't find an available UDC or it's busy [ 706.992423][ T4300] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 706.998378][ T4300] cdc_wdm 1-1:1.0: Unknown control protocol [ 707.014763][T12887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.038848][T12887] udc-core: couldn't find an available UDC or it's busy [ 707.131534][T12887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.181861][T12887] udc-core: couldn't find an available UDC or it's busy [ 707.188858][T12887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.217529][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 707.240418][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 707.267629][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 707.277713][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 707.430596][T12887] udc-core: couldn't find an available UDC or it's busy [ 707.457719][T12887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.763063][ T4442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.781757][T12887] udc-core: couldn't find an available UDC or it's busy [ 707.788738][T12887] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 707.829936][ T4442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.843753][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 707.921572][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 707.927230][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 707.933855][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 707.941471][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 707.948112][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 707.961476][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 707.968137][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 708.029624][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 708.036298][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 708.042824][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 708.049469][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 708.067496][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 708.074150][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 708.081464][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 708.088103][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 708.096267][T12622] usb 1-1: USB disconnect, device number 6 [ 708.438181][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.587213][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.628661][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 712.857569][T12967] ip6t_rpfilter: unknown options [ 713.069484][ T4313] device hsr_slave_0 left promiscuous mode [ 713.105491][ T4313] device hsr_slave_1 left promiscuous mode [ 713.125795][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.169568][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.204350][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.234733][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.267924][ T4313] device bridge_slave_1 left promiscuous mode [ 713.295534][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.326886][ T4313] device bridge_slave_0 left promiscuous mode [ 713.354389][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.416331][ T4313] device veth1_macvtap left promiscuous mode [ 713.443530][ T4313] device veth0_macvtap left promiscuous mode [ 713.470728][ T4313] device veth1_vlan left promiscuous mode [ 713.489403][ T4313] device veth0_vlan left promiscuous mode [ 714.889766][ T4313] team0 (unregistering): Port device team_slave_1 removed [ 714.939263][ T4313] team0 (unregistering): Port device team_slave_0 removed [ 714.979485][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.012330][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.111592][ T1108] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 715.910556][ T4313] bond0 (unregistering): Released all slaves [ 716.351765][ T1108] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 716.361720][ T1108] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 716.408673][ T1108] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 716.457717][ T1108] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 716.509919][ T1108] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 717.931510][ T1108] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.940692][ T1108] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 717.950018][ T1108] usb 10-1: Product: syz [ 717.954808][ T1108] usb 10-1: Manufacturer: syz [ 718.241045][T13022] loop8: detected capacity change from 0 to 512 [ 718.380387][T13022] EXT4-fs (loop8): Ignoring removed bh option [ 718.527523][T13022] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 718.622013][T13022] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 718.934557][ T1108] usb 10-1: can't set config #1, error -71 [ 718.942218][ T1108] usb 10-1: USB disconnect, device number 11 [ 725.961338][T13105] loop9: detected capacity change from 0 to 1024 [ 726.198149][T13105] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 726.255982][T13113] loop3: detected capacity change from 0 to 512 [ 726.307019][T13113] EXT4-fs (loop3): Ignoring removed orlov option [ 726.388034][T13113] EXT4-fs (loop3): 1 truncate cleaned up [ 726.501334][T13113] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,,errors=continue. Quota mode: none. [ 727.320913][ T26] audit: type=1800 audit(1772227454.768:50): pid=13113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1826" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 731.303035][T13163] loop8: detected capacity change from 0 to 4096 [ 731.483846][T13176] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 731.877183][T13163] EXT4-fs (loop8): Test dummy encryption mode enabled [ 732.225886][T13163] EXT4-fs: error -4 creating inode table initialization thread [ 732.241706][T13163] EXT4-fs (loop8): mount failed [ 734.308702][T13197] loop3: detected capacity change from 0 to 1024 [ 734.409166][T13200] loop8: detected capacity change from 0 to 16 [ 734.460998][T13200] erofs: (device loop8): mounted with root inode @ nid 36. [ 734.499698][T13200] attempt to access beyond end of device [ 734.499698][T13200] loop8: rw=524288, want=1072, limit=16 [ 734.546355][ T4190] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 734.601570][ T26] audit: type=1800 audit(1772227462.028:51): pid=13200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1845" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 734.692768][T13197] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 735.454813][T13215] loop8: detected capacity change from 0 to 256 [ 736.024652][T13215] FAT-fs (loop8): Unrecognized mount option "shortnaeV2dl=win95" or missing value [ 739.093098][T13236] loop8: detected capacity change from 0 to 256 [ 739.401345][T13250] loop3: detected capacity change from 0 to 256 [ 739.513486][T13250] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 740.298084][T13265] loop1: detected capacity change from 0 to 1024 [ 740.384198][T13265] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 744.820704][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 744.865537][T13326] loop1: detected capacity change from 0 to 1024 [ 744.878444][T13326] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 747.190423][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.201139][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 747.270786][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.277438][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.291675][ T7] usb 4-1: string descriptor 0 read error: -71 [ 747.297909][ T7] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 747.321519][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 747.421591][ T7] usb 4-1: can't set config #1, error -71 [ 747.431951][ T7] usb 4-1: USB disconnect, device number 10 [ 748.321737][ T4178] udevd[4178]: setting mode of /dev/bus/usb/004/010 to 020664 failed: No such file or directory [ 748.431919][ T4178] udevd[4178]: setting owner of /dev/bus/usb/004/010 to uid=0, gid=0 failed: No such file or directory [ 749.681714][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 750.801333][T13383] loop0: detected capacity change from 0 to 1024 [ 750.875599][T13383] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 750.890867][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.912447][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.940509][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.997006][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 751.027424][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.064770][ T7] usb 4-1: config 0 descriptor?? [ 751.851909][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 751.868301][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 751.980237][ T7] usb 4-1: USB disconnect, device number 11 [ 754.155293][T13398] loop1: detected capacity change from 0 to 40427 [ 754.209361][T13398] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 754.248065][T13398] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 754.282106][T13398] F2FS-fs (loop1): invalid crc value [ 754.358498][T13398] F2FS-fs (loop1): Found nat_bits in checkpoint [ 754.446401][T13444] loop9: detected capacity change from 0 to 512 [ 754.575458][T13444] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 754.597437][T13398] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 754.606550][T13398] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 754.620913][T13444] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 754.724988][T13444] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 754.820300][T13444] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 754.911679][T13444] EXT4-fs (loop9): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 755.282108][T13458] loop1: detected capacity change from 0 to 1024 [ 755.359866][T13458] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 756.440975][T13475] loop1: detected capacity change from 0 to 512 [ 756.586809][T13475] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,grpquota,errors=remount-ro,. Quota mode: writeback. [ 756.811698][T13475] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.344800][T13503] loop1: detected capacity change from 0 to 128 [ 758.981624][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1913'. [ 761.323092][T13560] netlink: 'syz.0.1925': attribute type 29 has an invalid length. [ 761.331288][T13560] netlink: 'syz.0.1925': attribute type 29 has an invalid length. [ 761.434629][T13528] loop1: detected capacity change from 0 to 40427 [ 761.453885][T13560] netlink: 'syz.0.1925': attribute type 29 has an invalid length. [ 761.521506][T13528] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 761.529464][T13528] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 761.623931][T13528] F2FS-fs (loop1): invalid crc value [ 761.720383][T13528] F2FS-fs (loop1): Found nat_bits in checkpoint [ 763.399435][T13605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 763.407230][T13605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 763.426712][T13605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.759835][T13613] loop0: detected capacity change from 0 to 512 [ 763.990241][T13613] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1937: bg 0: block 255: padding at end of block bitmap is not set [ 764.032305][T13613] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 764.049505][T13613] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1937: invalid indirect mapped block 1 (level 1) [ 764.146029][T13613] EXT4-fs (loop0): 1 truncate cleaned up [ 764.155920][T13613] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 767.983250][T13644] loop0: detected capacity change from 0 to 40427 [ 768.082206][T13644] F2FS-fs (loop0): invalid crc value [ 768.153928][T13644] F2FS-fs (loop0): Found nat_bits in checkpoint [ 768.266408][T13678] loop1: detected capacity change from 0 to 1024 [ 768.363695][T13678] EXT4-fs (loop1): Test dummy encryption mode enabled [ 768.426016][T13678] EXT4-fs (loop1): inline encryption not supported [ 768.558024][T13644] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 768.582363][T13678] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,noauto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 769.046124][T13678] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 769.188309][T13678] overlayfs: conflicting lowerdir path [ 769.753702][T13707] loop0: detected capacity change from 0 to 1024 [ 769.888791][T13707] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 769.931261][T13707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000e11d, mo2=0002] [ 769.962495][T13707] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 769.982235][T13707] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,nodelalloc,,errors=continue. Quota mode: writeback. [ 770.118294][T13715] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1950'. [ 770.152240][T13707] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #16: comm syz.0.1953: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 770.747045][T13714] loop9: detected capacity change from 0 to 40427 [ 770.864351][T13714] F2FS-fs (loop9): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 770.878391][T13734] loop1: detected capacity change from 0 to 256 [ 770.892195][T13714] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 770.925655][T13714] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x35f7 [ 770.992166][T13734] exfat: Deprecated parameter 'utf8' [ 771.013344][T13714] F2FS-fs (loop9): Unrecognized mount option "memory=low" or missing value [ 771.035348][T13734] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 771.140376][T13734] overlayfs: unrecognized mount option "iscard" or missing value [ 776.651466][ T4231] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 777.047495][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.086661][ T4231] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 777.109749][T13781] loop9: detected capacity change from 0 to 256 [ 777.126248][ T4231] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 777.155925][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.178597][ T4231] usb 2-1: config 0 descriptor?? [ 777.225057][ T4231] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 777.373609][T13785] loop9: detected capacity change from 0 to 256 [ 777.463955][T13758] loop1: detected capacity change from 0 to 1024 [ 777.581756][T13758] EXT4-fs (loop1): inline encryption not supported [ 778.897895][T13758] EXT4-fs error (device loop1): ext4_free_blocks:6234: comm syz.1.1962: Freeing blocks not in datazone - block = 0, count = 4096 [ 779.137202][T13758] EXT4-fs (loop1): Remounting filesystem read-only [ 779.208832][T13758] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1962: Invalid inode bitmap blk 0 in block_group 0 [ 779.962570][T13758] EXT4-fs (loop1): Remounting filesystem read-only [ 780.021561][T13758] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 780.113070][T13758] EXT4-fs (loop1): Remounting filesystem read-only [ 780.119819][T13758] EXT4-fs (loop1): 1 orphan inode deleted [ 780.161026][T13758] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 780.281132][ T4229] usb 2-1: USB disconnect, device number 12 [ 781.937779][T13842] loop3: detected capacity change from 0 to 256 [ 781.954484][T13841] loop8: detected capacity change from 0 to 256 [ 782.293565][T13842] exfat: Unknown parameter '0177777777777777777777700000000000000000000' [ 782.853247][T13860] loop3: detected capacity change from 0 to 128 [ 782.936180][T13860] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 782.967097][T13860] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 783.252239][T13857] loop9: detected capacity change from 0 to 256 [ 783.743071][T13857] FAT-fs (loop9): Directory bread(block 64) failed [ 783.751490][T13857] FAT-fs (loop9): Directory bread(block 65) failed [ 783.793641][T13857] FAT-fs (loop9): Directory bread(block 66) failed [ 783.800243][T13857] FAT-fs (loop9): Directory bread(block 67) failed [ 783.854538][T13857] FAT-fs (loop9): Directory bread(block 68) failed [ 783.891672][T13857] FAT-fs (loop9): Directory bread(block 69) failed [ 783.918930][T13857] FAT-fs (loop9): Directory bread(block 70) failed [ 783.951437][T13857] FAT-fs (loop9): Directory bread(block 71) failed [ 783.958153][T13857] FAT-fs (loop9): Directory bread(block 72) failed [ 783.999413][T13857] FAT-fs (loop9): Directory bread(block 73) failed [ 784.308643][T13867] loop9: detected capacity change from 0 to 512 [ 784.449211][T13867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 784.468930][T13867] System zones: 1-20 [ 784.491280][T13867] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,debug,lazytime,,errors=continue. Quota mode: writeback. [ 784.554710][T13856] loop1: detected capacity change from 0 to 40427 [ 785.199547][ T4313] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 785.213092][T13883] loop1: detected capacity change from 0 to 256 [ 785.377709][T13883] FAT-fs (loop1): Directory bread(block 64) failed [ 785.416069][T13889] loop9: detected capacity change from 0 to 16 [ 785.425977][T13887] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1993'. [ 785.433225][T13883] FAT-fs (loop1): Directory bread(block 65) failed [ 785.458124][T13883] FAT-fs (loop1): Directory bread(block 66) failed [ 785.493743][T13889] erofs: (device loop9): mounted with root inode @ nid 36. [ 785.501579][T13883] FAT-fs (loop1): Directory bread(block 67) failed [ 785.508236][T13883] FAT-fs (loop1): Directory bread(block 68) failed [ 785.566199][ T26] audit: type=1800 audit(1772227513.018:52): pid=13889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1995" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 785.604995][T13883] FAT-fs (loop1): Directory bread(block 69) failed [ 785.636605][T13883] FAT-fs (loop1): Directory bread(block 70) failed [ 785.647881][T13883] FAT-fs (loop1): Directory bread(block 71) failed [ 785.655969][T13883] FAT-fs (loop1): Directory bread(block 72) failed [ 785.663962][T13883] FAT-fs (loop1): Directory bread(block 73) failed [ 786.158404][T13900] loop9: detected capacity change from 0 to 2048 [ 786.273079][T13903] loop1: detected capacity change from 0 to 256 [ 786.327241][ T26] audit: type=1800 audit(1772227513.778:53): pid=13903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2000" name="bus" dev="loop1" ino=1048732 res=0 errno=0 [ 786.778344][T13916] loop1: detected capacity change from 0 to 1024 [ 786.896185][T13916] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 786.937762][T13916] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 786.968409][T13891] loop0: detected capacity change from 0 to 40427 [ 786.990179][T13927] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.2007'. [ 787.065877][T13916] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 787.167834][T13891] F2FS-fs (loop0): invalid crc value [ 787.449325][T13891] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 787.472679][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2009'. [ 787.481697][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2009'. [ 787.782883][T13891] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 787.892923][ T26] audit: type=1804 audit(1772227515.338:54): pid=13891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1996" name="/newroot/192/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 789.447411][T13954] attempt to access beyond end of device [ 789.447411][T13954] loop0: rw=0, want=49160, limit=40427 [ 789.519112][ T9631] attempt to access beyond end of device [ 789.519112][ T9631] loop0: rw=2049, want=45104, limit=40427 [ 789.660449][T13947] loop1: detected capacity change from 0 to 40427 [ 790.014393][T13947] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 790.461647][T13947] F2FS-fs (loop1): invalid crc value [ 790.676900][T13947] F2FS-fs (loop1): Found nat_bits in checkpoint [ 790.850257][T13991] ip6t_rpfilter: unknown options [ 791.500037][T13974] loop9: detected capacity change from 0 to 40427 [ 791.547647][T13974] F2FS-fs (loop9): invalid crc value [ 791.624099][T13974] F2FS-fs (loop9): Found nat_bits in checkpoint [ 791.711840][ T7] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 791.775032][T14007] loop3: detected capacity change from 0 to 512 [ 791.992445][T14007] EXT4-fs (loop3): Test dummy encryption mode enabled [ 792.228047][T14007] EXT4-fs (loop3): Test dummy encryption mode enabled [ 792.581796][T14007] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 792.600561][T14007] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none. [ 792.631184][T13974] F2FS-fs (loop9): Start checkpoint disabled! [ 793.001683][ T7] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 793.012778][ T7] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 793.050963][ T7] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 793.082603][ T7] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 793.119041][ T7] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 793.151506][ T4265] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 793.294073][ T7] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 793.334613][ T7] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 793.412294][ T7] usb 9-1: Product: syz [ 793.441917][ T7] usb 9-1: Manufacturer: syz [ 793.562987][ T7] cdc_wdm 9-1:1.0: skipping garbage [ 793.568830][ T7] cdc_wdm 9-1:1.0: skipping garbage [ 793.591715][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.638859][ T7] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 793.656100][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.692518][ T7] cdc_wdm 9-1:1.0: Unknown control protocol [ 793.712533][ T4265] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.742634][ T4265] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.752381][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.782442][T13997] udc-core: couldn't find an available UDC or it's busy [ 793.790430][ T4265] usb 2-1: config 0 descriptor?? [ 793.801579][T13997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 793.824534][T13997] udc-core: couldn't find an available UDC or it's busy [ 793.837719][T13997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 793.852608][T13997] udc-core: couldn't find an available UDC or it's busy [ 793.859728][T13997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 794.077940][T13997] udc-core: couldn't find an available UDC or it's busy [ 794.094224][T13997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 794.102548][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 794.258161][T14056] ip6t_rpfilter: unknown options [ 794.579171][T14058] udc-core: couldn't find an available UDC or it's busy [ 794.605205][T14058] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 794.694671][ T4233] usb 9-1: USB disconnect, device number 5 [ 794.846094][ C0] cdc_wdm 9-1:1.0: Unexpected error -71 [ 794.857105][ T4265] plantronics 0003:047F:FFFF.0012: unbalanced delimiter at end of report description [ 794.872523][ T4265] plantronics 0003:047F:FFFF.0012: parse failed [ 794.878833][ T4265] plantronics: probe of 0003:047F:FFFF.0012 failed with error -22 [ 794.973490][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 794.979803][T14069] bridge0: port 3(syz_tun) entered blocking state [ 795.040076][T14069] bridge0: port 3(syz_tun) entered disabled state [ 795.113934][T14069] device syz_tun entered promiscuous mode [ 795.127300][ T7] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 795.146090][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.169159][ T7] usb 1-1: config 1 has no interface number 0 [ 795.183345][T14069] bridge0: port 3(syz_tun) entered blocking state [ 795.190771][T14069] bridge0: port 3(syz_tun) entered forwarding state [ 795.231635][ T7] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 795.251582][ T7] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.081460][ T7] usb 1-1: config 1 interface 105 has no altsetting 0 [ 796.092153][ T7426] usb 2-1: USB disconnect, device number 13 [ 796.320085][T14081] loop9: detected capacity change from 0 to 512 [ 798.108757][ T7] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 798.144071][ T7] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 798.536460][ T7] usb 1-1: Product: syz [ 798.540783][ T7] usb 1-1: Manufacturer: syz [ 798.706800][ T7] usb 1-1: SerialNumber: syz [ 798.731539][ T7] usb 1-1: can't set config #1, error -71 [ 798.739760][ T7] usb 1-1: USB disconnect, device number 7 [ 798.771022][T14081] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.2037: inode has both inline data and extents flags [ 798.857684][T14081] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2037: couldn't read orphan inode 15 (err -117) [ 799.007066][T14081] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 799.032409][T14102] netlink: 'syz.1.2041': attribute type 29 has an invalid length. [ 799.293860][T14102] netlink: 'syz.1.2041': attribute type 29 has an invalid length. [ 799.594822][T14105] netlink: 'syz.1.2041': attribute type 29 has an invalid length. [ 801.541311][T14135] ip6t_rpfilter: unknown options [ 802.234544][T14140] loop1: detected capacity change from 0 to 16 [ 803.043253][T14140] erofs: (device loop1): mounted with root inode @ nid 36. [ 805.648973][ T4233] Bluetooth: hci5: command 0x0406 tx timeout [ 805.775985][T14166] loop9: detected capacity change from 0 to 128 [ 805.798473][T14165] netlink: 'syz.3.2055': attribute type 29 has an invalid length. [ 805.798864][T14165] netlink: 'syz.3.2055': attribute type 29 has an invalid length. [ 805.824782][T14169] loop0: detected capacity change from 0 to 256 [ 805.832294][T14165] netlink: 'syz.3.2055': attribute type 29 has an invalid length. [ 805.919252][T14166] FAT-fs (loop9): invalid media value (0x00) [ 805.935594][T14166] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 805.978642][T14166] FAT-fs (loop9): Can't find a valid FAT filesystem [ 806.015209][T14169] FAT-fs (loop0): Directory bread(block 64) failed [ 806.077132][T14169] FAT-fs (loop0): Directory bread(block 65) failed [ 806.110445][T14169] FAT-fs (loop0): Directory bread(block 66) failed [ 806.145334][T14169] FAT-fs (loop0): Directory bread(block 67) failed [ 807.141544][T14169] FAT-fs (loop0): Directory bread(block 68) failed [ 807.148138][T14169] FAT-fs (loop0): Directory bread(block 69) failed [ 807.260135][T14169] FAT-fs (loop0): Directory bread(block 70) failed [ 807.310088][T14169] FAT-fs (loop0): Directory bread(block 71) failed [ 807.386910][T14169] FAT-fs (loop0): Directory bread(block 72) failed [ 807.396693][T14169] FAT-fs (loop0): Directory bread(block 73) failed [ 807.471590][ T4265] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 807.730633][T14195] ip6t_rpfilter: unknown options [ 808.284380][ T4265] usb 10-1: device descriptor read/64, error -71 [ 808.694724][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.704972][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.815176][T14220] loop9: detected capacity change from 0 to 256 [ 810.986699][T14226] futex_wake_op: syz.1.2070 tries to shift op by 32; fix this program [ 812.736551][T14254] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 813.067576][T14260] loop9: detected capacity change from 0 to 512 [ 813.204797][T14260] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2081: bg 0: block 255: padding at end of block bitmap is not set [ 813.310894][T14260] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 813.411921][T14260] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2081: invalid indirect mapped block 1 (level 1) [ 813.495457][T14260] EXT4-fs (loop9): 1 truncate cleaned up [ 813.519594][T14260] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 813.561167][T14272] loop1: detected capacity change from 0 to 1024 [ 814.111431][T14272] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 814.554562][T14283] loop0: detected capacity change from 0 to 256 [ 814.984636][T14283] exfat: Deprecated parameter 'utf8' [ 814.990000][T14283] exfat: Deprecated parameter 'utf8' [ 815.065730][T14283] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 815.115423][T14292] loop8: detected capacity change from 0 to 1024 [ 815.248677][T14292] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 815.401228][T14292] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 815.626523][T14305] loop1: detected capacity change from 0 to 512 [ 815.641037][T14304] loop0: detected capacity change from 0 to 512 [ 815.748366][T14305] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 815.822178][T14305] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 815.863494][T14304] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: writeback. [ 815.944455][T14304] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.976724][T14305] EXT4-fs (loop1): 1 truncate cleaned up [ 816.031148][T14305] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,discard,,errors=continue. Quota mode: writeback. [ 816.419366][T14305] EXT4-fs (loop1): re-mounted. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,discard,. Quota mode: writeback. [ 818.034177][T14341] loop0: detected capacity change from 0 to 1024 [ 819.459120][T14341] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.2096: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 819.618104][T14341] EXT4-fs error (device loop0): ext4_quota_enable:6445: comm syz.0.2096: Bad quota inode: 4, type: 1 [ 819.650358][T14359] syz.3.2100 (14359) used greatest stack depth: 19408 bytes left [ 819.681011][T14341] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 819.744526][T14341] EXT4-fs (loop0): mount failed [ 820.756491][T14374] loop9: detected capacity change from 0 to 512 [ 820.871551][T14379] loop0: detected capacity change from 0 to 256 [ 821.281978][T14381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2105'. [ 822.352685][T14374] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2103: bg 0: block 255: padding at end of block bitmap is not set [ 822.381273][T14374] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 822.392035][T14374] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2103: invalid indirect mapped block 1 (level 1) [ 822.444158][T14374] EXT4-fs (loop9): 1 truncate cleaned up [ 822.481688][T14374] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 824.343653][ T4233] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 824.593758][ T4233] usb 9-1: Using ep0 maxpacket: 16 [ 824.711637][ T4233] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.738249][ T4233] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.787622][ T4233] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 824.820870][ T4233] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 824.864896][ T4233] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.908816][ T4233] usb 9-1: config 0 descriptor?? [ 825.435394][T14434] loop3: detected capacity change from 0 to 128 [ 825.565483][ T4233] microsoft 0003:045E:07DA.0013: item 0 4 0 8 parsing failed [ 826.002144][ T4233] microsoft 0003:045E:07DA.0013: parse failed [ 826.014042][ T4233] microsoft: probe of 0003:045E:07DA.0013 failed with error -22 [ 826.059276][ T4233] usb 9-1: USB disconnect, device number 6 [ 826.289711][T14442] netlink: 'syz.1.2115': attribute type 29 has an invalid length. [ 827.308842][T14442] netlink: 'syz.1.2115': attribute type 29 has an invalid length. [ 827.447268][T14450] loop8: detected capacity change from 0 to 256 [ 827.492282][T14450] exfat: Deprecated parameter 'namecase' [ 827.508360][T14450] exfat: Deprecated parameter 'namecase' [ 827.570355][T14450] exFAT-fs (loop8): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 828.085139][T14456] loop9: detected capacity change from 0 to 4096 [ 828.232515][T14463] loop0: detected capacity change from 0 to 512 [ 828.328059][T14467] loop8: detected capacity change from 0 to 512 [ 828.383176][T14456] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 828.399760][T14463] EXT4-fs (loop0): Test dummy encryption mode enabled [ 828.411685][T14463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 828.457711][T14470] loop1: detected capacity change from 0 to 512 [ 828.515993][T14463] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.2120: bad orphan inode 131083 [ 828.533929][T14467] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.8.2121: corrupted xattr block 95 [ 828.552039][T14463] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 828.606806][T14470] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2122: bg 0: block 255: padding at end of block bitmap is not set [ 828.645676][T14467] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 828.659613][T14467] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.2121: bg 0: block 7: invalid block bitmap [ 828.679494][T14470] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 828.728952][T14467] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 828.746864][T14467] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2923: inode #11: comm syz.8.2121: corrupted xattr block 95 [ 828.759853][T14470] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2122: invalid indirect mapped block 1 (level 1) [ 828.851507][T14467] EXT4-fs warning (device loop8): ext4_evict_inode:302: xattr delete (err -117) [ 828.908154][T14470] EXT4-fs (loop1): 1 truncate cleaned up [ 828.921531][T14470] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 828.964868][T14467] EXT4-fs (loop8): 1 orphan inode deleted [ 828.971216][T14467] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 830.047297][T14491] loop8: detected capacity change from 0 to 256 [ 830.106505][T14491] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 830.264634][T14491] exFAT-fs (loop8): error, invalid size(size(0) > aligned(9223372036854777344) [ 830.264634][T14491] [ 830.345976][T14491] exFAT-fs (loop8): Filesystem has been set read-only [ 830.564741][T14505] loop8: detected capacity change from 0 to 1024 [ 830.686056][T14505] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 831.694154][T14519] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 831.702444][T14519] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 831.715940][T14519] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 832.184475][T14532] overlayfs: failed to resolve './file0': -2 [ 832.727064][T14524] overlayfs: failed to resolve './file0': -2 [ 832.898786][T14538] loop8: detected capacity change from 0 to 16 [ 832.967958][T14538] erofs: (device loop8): mounted with root inode @ nid 36. [ 833.552140][ T7055] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 834.041912][ T7055] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 834.250351][ T7055] usb 4-1: config 1 interface 0 has no altsetting 0 [ 835.298313][ T7055] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.307729][ T7055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 835.316929][ T7055] usb 4-1: SerialNumber: syz [ 836.047047][ T7055] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 836.063427][ T26] audit: type=1326 audit(1772227563.438:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 836.611685][ T7055] usb 4-1: USB disconnect, device number 12 [ 836.628662][ T26] audit: type=1326 audit(1772227563.438:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 836.660477][ T26] audit: type=1326 audit(1772227563.448:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 836.781010][ T26] audit: type=1326 audit(1772227563.448:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 836.843702][T14605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2150'. [ 836.949560][ T26] audit: type=1326 audit(1772227563.448:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 837.004907][ T26] audit: type=1326 audit(1772227563.448:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 837.079378][T14612] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 837.156208][ T26] audit: type=1326 audit(1772227563.448:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 837.278148][T14609] loop1: detected capacity change from 0 to 2048 [ 837.354878][ T26] audit: type=1326 audit(1772227563.448:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 837.430066][T14609] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 837.478409][T14609] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.520655][ T26] audit: type=1326 audit(1772227563.448:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 837.666803][ T26] audit: type=1326 audit(1772227563.448:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 838.689507][T14627] loop8: detected capacity change from 0 to 4096 [ 839.937722][T14627] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: writeback. [ 840.235281][T14655] overlayfs: workdir and upperdir must reside under the same mount [ 840.296123][T14627] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.2155: corrupted inode contents [ 840.362818][T14658] loop9: detected capacity change from 0 to 512 [ 840.409829][T14627] EXT4-fs error (device loop8): ext4_dirty_inode:6058: inode #15: comm syz.8.2155: mark_inode_dirty error [ 840.425793][T14627] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.2155: corrupted inode contents [ 840.457472][T14627] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #15: comm syz.8.2155: mark_inode_dirty error [ 840.538167][T14627] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.2155: corrupted inode contents [ 840.551168][T14658] EXT4-fs (loop9): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 840.573230][T14658] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 840.606455][T14627] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #15: comm syz.8.2155: mark_inode_dirty error [ 840.664461][T14671] loop3: detected capacity change from 0 to 16 [ 840.706909][T14658] EXT4-fs error (device loop9): ext4_acquire_dquot:6234: comm syz.9.2164: Failed to acquire dquot type 0 [ 840.719883][T14627] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.2155: corrupted inode contents [ 840.780166][T14627] EXT4-fs error (device loop8): ext4_truncate:4279: inode #15: comm syz.8.2155: mark_inode_dirty error [ 840.982225][T14627] EXT4-fs error (device loop8): ext4_evict_inode:293: comm syz.8.2155: couldn't truncate inode 15 (err -117) [ 841.148062][T14671] erofs: (device loop3): mounted with root inode @ nid 36. [ 841.958097][T14692] loop9: detected capacity change from 0 to 512 [ 842.471604][T14692] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 842.951605][T14706] syz.3.2174 (14706) used greatest stack depth: 16112 bytes left [ 842.960880][T14692] xt_hashlimit: size too large, truncated to 1048576 [ 842.972356][T14703] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 843.540316][T14692] --map-set only usable from mangle table [ 843.570653][T14719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2178'. [ 847.241671][T14751] loop8: detected capacity change from 0 to 1024 [ 847.276250][T14751] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 847.285701][T14759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2189'. [ 847.352981][T14751] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 848.707417][T14764] loop1: detected capacity change from 0 to 40427 [ 850.106356][T14764] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 850.117982][T14764] F2FS-fs (loop1): invalid crc value [ 850.132927][T14770] loop3: detected capacity change from 0 to 512 [ 850.156492][T14770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 850.228885][T14764] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 850.338485][T14770] EXT4-fs (loop3): 1 truncate cleaned up [ 850.358858][T14770] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 850.432007][T14775] loop0: detected capacity change from 0 to 128 [ 851.975345][T14793] netlink: 'syz.0.2195': attribute type 29 has an invalid length. [ 852.122306][T14793] netlink: 'syz.0.2195': attribute type 29 has an invalid length. [ 853.134454][T14793] netlink: 'syz.0.2195': attribute type 29 has an invalid length. [ 853.613924][T14801] loop3: detected capacity change from 0 to 1024 [ 854.101622][ T4300] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 854.391557][ T4300] usb 9-1: Using ep0 maxpacket: 16 [ 854.858611][ T4300] usb 9-1: config 0 interface 0 has no altsetting 0 [ 854.865343][ T4300] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 854.875841][ T4300] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.036938][ T4300] usb 9-1: config 0 descriptor?? [ 855.756100][T14817] loop3: detected capacity change from 0 to 1024 [ 855.792674][T14817] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 855.848259][T14817] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 856.236603][ T7] usb 9-1: USB disconnect, device number 7 [ 856.241582][ T4300] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 857.246194][ T4300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.586238][T14858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2212'. [ 857.853227][ T4300] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 857.862381][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.872553][ T4300] usb 2-1: config 0 descriptor?? [ 859.305419][T14877] loop0: detected capacity change from 0 to 512 [ 859.573296][ T4300] konepure 0003:1E7D:2DB4.0015: item fetching failed at offset 1/3 [ 859.695681][ T4300] konepure 0003:1E7D:2DB4.0015: parse failed [ 859.916884][ T4300] konepure: probe of 0003:1E7D:2DB4.0015 failed with error -22 [ 859.926842][T14877] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 860.011216][T14877] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.036133][ T4300] usb 2-1: USB disconnect, device number 14 [ 860.316796][T14896] loop8: detected capacity change from 0 to 512 [ 860.544067][T14896] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2220: bg 0: block 255: padding at end of block bitmap is not set [ 860.548662][T14862] chnl_net:caif_netlink_parms(): no params data found [ 860.620916][T14896] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 860.754507][T14896] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2220: invalid indirect mapped block 1 (level 1) [ 860.862663][T14896] EXT4-fs (loop8): 1 truncate cleaned up [ 860.868368][T14896] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 862.306960][ T7426] Bluetooth: hci2: command 0x0409 tx timeout [ 863.088905][T14934] loop1: detected capacity change from 0 to 512 [ 863.291553][T14934] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 863.354324][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.435458][T14934] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 863.496417][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.571566][T14934] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.600149][T14862] device bridge_slave_0 entered promiscuous mode [ 863.649426][T14862] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.670298][T14862] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.828474][T14862] device bridge_slave_1 entered promiscuous mode [ 863.984315][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 863.984454][ T26] audit: type=1326 audit(1772227591.368:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 864.678032][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 864.684355][ T26] audit: type=1326 audit(1772227591.368:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 864.761698][ T26] audit: type=1326 audit(1772227591.388:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 864.836394][T14862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.928087][T14862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.029237][ T26] audit: type=1326 audit(1772227591.388:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 865.196920][ T26] audit: type=1326 audit(1772227591.388:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 866.160118][ T26] audit: type=1326 audit(1772227591.388:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 866.268920][T14862] team0: Port device team_slave_0 added [ 866.278348][T14862] team0: Port device team_slave_1 added [ 866.300929][T14862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.308287][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.341620][T14862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.389349][T14862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.401375][ T26] audit: type=1326 audit(1772227591.388:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 866.453447][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.467215][ T26] audit: type=1326 audit(1772227591.388:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 866.874079][ T26] audit: type=1326 audit(1772227591.398:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 866.949868][T14862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.008609][ T7426] Bluetooth: hci2: command 0x040f tx timeout [ 867.014818][ T26] audit: type=1326 audit(1772227591.398:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.8.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 867.143155][T14862] device hsr_slave_0 entered promiscuous mode [ 867.171996][T14862] device hsr_slave_1 entered promiscuous mode [ 867.196249][T14983] loop3: detected capacity change from 0 to 512 [ 867.205625][T14984] loop0: detected capacity change from 0 to 256 [ 867.213686][T14862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 867.221275][T14862] Cannot create hsr debugfs directory [ 867.239527][T12359] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.263103][T14984] exfat: Deprecated parameter 'namecase' [ 867.301843][T14984] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 867.377171][T14983] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2233: bg 0: block 255: padding at end of block bitmap is not set [ 867.500038][T12359] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.516250][T14965] loop8: detected capacity change from 0 to 40427 [ 867.522779][T14983] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 867.561810][T14983] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2233: invalid indirect mapped block 1 (level 1) [ 867.628827][T14983] EXT4-fs (loop3): 1 truncate cleaned up [ 867.673400][T14965] F2FS-fs (loop8): invalid crc value [ 867.679479][T14983] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 867.731651][T14965] F2FS-fs (loop8): Found nat_bits in checkpoint [ 867.765780][T12359] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.842010][T15006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2237'. [ 869.131087][T14965] F2FS-fs (loop8): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 869.634002][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 869.741058][T12359] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.801130][T15020] loop0: detected capacity change from 0 to 256 [ 869.907910][T15020] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 870.124412][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.130742][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.527351][T15034] loop0: detected capacity change from 0 to 128 [ 871.538747][T15043] loop3: detected capacity change from 0 to 256 [ 871.742519][T15048] loop1: detected capacity change from 0 to 1024 [ 872.631716][T15048] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 872.742390][T15048] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 873.188389][T15087] loop3: detected capacity change from 0 to 256 [ 873.256986][T15087] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 873.291796][T15087] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 873.323318][T15087] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 873.428863][T15045] loop0: detected capacity change from 0 to 40427 [ 873.489450][T15045] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 873.537646][T15045] F2FS-fs (loop0): invalid crc value [ 873.605269][T15045] F2FS-fs (loop0): Found nat_bits in checkpoint [ 874.493239][T15045] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 874.625443][T15102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2252'. [ 874.651427][ T13] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 874.746651][T12359] device hsr_slave_0 left promiscuous mode [ 874.934711][T12359] device hsr_slave_1 left promiscuous mode [ 874.953411][T12359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.972433][T12359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.994664][T12359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.015530][T12359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.258697][T12359] device bridge_slave_1 left promiscuous mode [ 875.329574][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.578131][T12359] device bridge_slave_0 left promiscuous mode [ 875.761536][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.832321][T12359] device veth1_macvtap left promiscuous mode [ 875.873576][T12359] device veth0_macvtap left promiscuous mode [ 875.891838][ T13] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 875.900078][ T13] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.900168][T12359] device veth1_vlan left promiscuous mode [ 875.926166][T12359] device veth0_vlan left promiscuous mode [ 875.949966][T15122] binder: BINDER_SET_CONTEXT_MGR already set [ 875.956859][ T13] usb 4-1: config 0 interface 0 has no altsetting 0 [ 875.981595][T15122] binder: 15121:15122 ioctl 4018620d 200000000040 returned -16 [ 876.000938][T15122] binder: 15121:15122 ioctl c0306201 2000000003c0 returned -14 [ 876.481499][ T13] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 876.812841][ T13] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 876.821066][ T13] usb 4-1: Product: syz [ 877.046446][ T13] usb 4-1: Manufacturer: syz [ 877.051126][ T13] usb 4-1: SerialNumber: syz [ 877.112547][ T13] usb 4-1: config 0 descriptor?? [ 877.137938][ T13] usb 4-1: can't set config #0, error -71 [ 877.151177][T15128] loop8: detected capacity change from 0 to 512 [ 877.185004][ T13] usb 4-1: USB disconnect, device number 13 [ 877.263572][T15128] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.2261: bad orphan inode 17 [ 877.284875][T15128] ext4_test_bit(bit=16, block=4) = 1 [ 877.290197][T15128] is_bad_inode(inode)=0 [ 877.295008][T15128] NEXT_ORPHAN(inode)=0 [ 877.299087][T15128] max_ino=32 [ 877.302719][T15128] i_nlink=1 [ 877.305889][T15128] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: none. [ 878.315426][T15141] loop0: detected capacity change from 0 to 128 [ 878.358661][T15148] loop3: detected capacity change from 0 to 512 [ 878.428421][T15141] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 878.448585][T15141] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 878.691800][T12359] team0 (unregistering): Port device team_slave_1 removed [ 878.747300][T15148] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 879.032048][T15148] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 879.990077][T12359] team0 (unregistering): Port device team_slave_0 removed [ 880.179246][T12359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.265703][T12359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.642210][T12359] bond0 (unregistering): Released all slaves [ 881.592123][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2273'. [ 881.861378][T15171] netlink: 'syz.1.2273': attribute type 1 has an invalid length. [ 881.921389][T15171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2273'. [ 882.089178][T15188] loop3: detected capacity change from 0 to 512 [ 882.175139][T14862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 882.269439][T15188] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,grpquota,,errors=continue. Quota mode: writeback. [ 882.288112][T14862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 882.319502][T15188] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.401835][T14862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 882.486472][T14862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 882.570441][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 882.786663][T14862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.851243][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 882.977206][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 883.058312][T14862] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.142068][T15219] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2280'. [ 885.219159][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 885.282335][T15226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.384197][T15226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.484521][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 885.513847][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 885.522978][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.530087][ T5656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.538922][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 885.549513][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 885.558638][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.565762][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.574632][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 885.584006][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 885.692737][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 885.928699][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 885.946612][T15241] loop8: detected capacity change from 0 to 512 [ 886.404448][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 886.510757][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2283'. [ 886.537909][T15241] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2286: bg 0: block 255: padding at end of block bitmap is not set [ 886.553797][T15241] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 886.567269][T15241] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2286: invalid indirect mapped block 1 (level 1) [ 886.582662][T15241] EXT4-fs (loop8): 1 truncate cleaned up [ 886.588375][T15241] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 887.166552][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 887.284615][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 887.297824][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 887.307666][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 887.317279][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 887.359116][T14862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.454582][T15257] loop1: detected capacity change from 0 to 1024 [ 887.482218][T14862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 887.493469][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 887.506448][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 887.780430][T15257] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 888.425856][T15271] syz.3.2292 (15271): /proc/15268/oom_adj is deprecated, please use /proc/15268/oom_score_adj instead. [ 889.061912][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 889.061947][ T26] audit: type=1800 audit(1772227616.468:107): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2288" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 889.448487][ T26] audit: type=1800 audit(1772227616.478:108): pid=15275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2288" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 890.627372][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 890.657852][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 890.760802][T14862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.857262][T15314] loop3: detected capacity change from 0 to 512 [ 890.911188][T15315] input: syz0 as /devices/virtual/input/input20 [ 891.023460][T15309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2301'. [ 891.263475][T15314] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2300: bg 0: block 255: padding at end of block bitmap is not set [ 891.475546][T15314] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 891.579766][T15314] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2300: invalid indirect mapped block 1 (level 1) [ 891.918632][T15314] EXT4-fs (loop3): 1 truncate cleaned up [ 891.953026][T15314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 892.253677][T15329] loop8: detected capacity change from 0 to 4096 [ 892.371531][T15329] EXT4-fs (loop8): Test dummy encryption mode enabled [ 892.408988][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 892.422523][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 892.495798][T15329] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=remount-ro,dioread_nolock,test_dummy_encryption,nobarrier,bsdgroups,minixdf,debug_want_extra_isize=0x0000000000000040,. Quota mode: writeback. [ 892.514765][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 892.548592][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 892.561067][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 892.569369][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 892.581664][T14862] device veth0_vlan entered promiscuous mode [ 892.649077][T14862] device veth1_vlan entered promiscuous mode [ 893.239701][ T26] audit: type=1800 audit(1772227620.688:109): pid=15350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2304" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 893.655955][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 893.694232][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 893.726288][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 893.800999][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 893.912211][T14862] device veth0_macvtap entered promiscuous mode [ 893.924933][T14862] device veth1_macvtap entered promiscuous mode [ 894.239990][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.657095][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.864752][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.891401][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.906316][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.918157][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.970821][T15370] netlink: 'syz.0.2313': attribute type 29 has an invalid length. [ 895.722120][T14862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.733299][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.743959][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.754381][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.765335][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.780242][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.790777][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.800640][T14862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.821409][T14862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.859768][T14862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.045766][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 896.069921][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 896.086312][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 896.170708][T15382] overlayfs: missing 'lowerdir' [ 896.912373][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 896.956768][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 896.998412][T15370] netlink: 'syz.0.2313': attribute type 29 has an invalid length. [ 897.117769][T14862] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.137009][T14862] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.169183][T14862] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.190596][T14862] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.340700][T15399] loop8: detected capacity change from 0 to 512 [ 898.498808][ T4891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.511880][T15399] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2320: bg 0: block 255: padding at end of block bitmap is not set [ 898.536552][ T4891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.222630][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 900.589669][T15399] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 900.610170][T15399] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2320: invalid indirect mapped block 1 (level 1) [ 900.690892][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.753674][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.815038][T15399] EXT4-fs (loop8): 1 truncate cleaned up [ 900.837837][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 900.916482][T15399] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 902.234016][T15439] loop1: detected capacity change from 0 to 1024 [ 902.757132][T15439] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 902.956334][T15439] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 903.164221][T15454] loop8: detected capacity change from 0 to 256 [ 904.242384][T15454] exfat: Unknown parameter 'keep_last_dots' [ 904.421726][T15461] loop0: detected capacity change from 0 to 512 [ 904.489183][T15461] EXT4-fs (loop0): Test dummy encryption mode enabled [ 904.577289][T15461] EXT4-fs (loop0): Unrecognized mount option "=" or missing value [ 906.351379][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 908.456678][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 908.498933][T15500] loop8: detected capacity change from 0 to 1024 [ 908.591696][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 908.635601][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58409, setting to 1024 [ 908.708382][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 908.731335][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.765506][ T23] usb 2-1: config 0 descriptor?? [ 908.821732][T15484] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 908.837215][T15512] loop6: detected capacity change from 0 to 1024 [ 908.848265][T15500] EXT4-fs (loop8): Ignoring removed bh option [ 908.875286][T15500] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 908.888958][ T23] hub 2-1:0.0: USB hub found [ 908.905275][T15512] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 908.961495][ T7055] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 909.035699][T15512] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 909.054271][T15500] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,minixdf,data_err=ignore,nouid32,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 909.111456][ T23] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 909.119479][T15523] loop1: detected capacity change from 0 to 256 [ 909.401556][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 909.407584][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 909.431373][ T7055] usb 1-1: Using ep0 maxpacket: 16 [ 909.475471][ T23] usb 2-1: USB disconnect, device number 15 [ 909.821096][T15526] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3887: comm syz.8.2340: Allocating blocks 497-513 which overlap fs metadata [ 909.971685][ T7055] usb 1-1: config 0 interface 0 has no altsetting 0 [ 909.978374][ T7055] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 910.071451][ T7055] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.183193][ T7055] usb 1-1: config 0 descriptor?? [ 910.501536][ T7055] usb 1-1: string descriptor 0 read error: -71 [ 910.671521][ T7055] usbhid 1-1:0.0: can't add hid device: -71 [ 910.677554][ T7055] usbhid: probe of 1-1:0.0 failed with error -71 [ 910.771465][ T7055] usb 1-1: USB disconnect, device number 8 [ 911.182459][T15529] loop1: detected capacity change from 0 to 128 [ 911.205480][T15543] netlink: 'syz.0.2346': attribute type 29 has an invalid length. [ 911.295491][T15543] netlink: 'syz.0.2346': attribute type 29 has an invalid length. [ 911.314942][T15525] EXT4-fs (loop8): pa ffff88805d70ca80: logic 256, phys. 449, len 4 [ 911.324000][T15525] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 911.362969][T15529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 911.393221][T15545] netlink: 'syz.0.2346': attribute type 29 has an invalid length. [ 911.401927][T15529] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 911.701528][ T7] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 911.802901][T15529] fscrypt (loop1, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 912.333810][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 912.451695][ T7] usb 7-1: config 0 interface 0 has no altsetting 0 [ 912.476427][ T7] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 912.535841][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.428633][ T7] usb 7-1: config 0 descriptor?? [ 914.714282][ T23] usb 7-1: USB disconnect, device number 12 [ 915.558250][T15608] loop1: detected capacity change from 0 to 512 [ 916.962523][T15625] netlink: 'syz.6.2361': attribute type 72 has an invalid length. [ 917.024796][T15608] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 917.071541][T15608] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 918.408056][T15645] loop6: detected capacity change from 0 to 512 [ 918.570853][T15645] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 918.661240][T15645] EXT4-fs (loop6): 1 truncate cleaned up [ 918.715167][T15645] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,nodiscard,,errors=continue. Quota mode: none. [ 918.820891][T15654] loop1: detected capacity change from 0 to 512 [ 918.949264][T15654] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 919.829239][ T7428] Bluetooth: hci3: command 0x0409 tx timeout [ 919.836748][T15654] ext4 filesystem being mounted at /200/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.852876][T15635] chnl_net:caif_netlink_parms(): no params data found [ 919.897232][T15654] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 919.972385][T15654] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 919.987697][T15654] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.2368: Failed to acquire dquot type 0 [ 920.124362][T15659] binder: 15656:15659 ioctl c0c89425 0 returned -22 [ 920.666831][T15635] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.863469][T15635] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.129150][T15635] device bridge_slave_0 entered promiscuous mode [ 921.143466][T15635] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.150556][T15635] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.194486][T15635] device bridge_slave_1 entered promiscuous mode [ 921.290123][T15695] loop6: detected capacity change from 0 to 256 [ 922.780737][T15635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.895790][T15292] Bluetooth: hci3: command 0x041b tx timeout [ 922.905591][T15635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.914907][T15695] FAT-fs (loop6): IO charset is8859-14 not found [ 922.994284][T15711] loop8: detected capacity change from 0 to 256 [ 923.044449][T15635] team0: Port device team_slave_0 added [ 923.062797][T15635] team0: Port device team_slave_1 added [ 923.106903][T15635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.150705][T15711] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 923.226219][T15635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.252713][T15711] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 923.276864][T15635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.392031][T15711] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 923.551343][T15635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.812327][T15635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.268890][T15635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.460266][T15635] device hsr_slave_0 entered promiscuous mode [ 924.544395][T15635] device hsr_slave_1 entered promiscuous mode [ 925.607284][T15292] Bluetooth: hci3: command 0x040f tx timeout [ 925.683674][T15635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 925.701319][T15635] Cannot create hsr debugfs directory [ 925.710897][T15736] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2385'. [ 925.751591][T15424] bridge0: port 3(syz_tun) entered disabled state [ 925.881624][T15424] device syz_tun left promiscuous mode [ 925.896070][T15424] bridge0: port 3(syz_tun) entered disabled state [ 926.381721][ T4229] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 926.416665][ T5650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.305939][ T5650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.325129][T15758] loop8: detected capacity change from 0 to 512 [ 927.401216][T15758] EXT4-fs (loop8): Ignoring removed orlov option [ 927.431419][T15758] EXT4-fs (loop8): Test dummy encryption mode enabled [ 927.438254][T15758] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 927.448234][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 927.462211][ T5650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.570492][ T5650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.572125][ T4229] usb 1-1: config 0 has an invalid interface number: 193 but max is 1 [ 927.601363][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.614190][T15758] EXT4-fs (loop8): 1 truncate cleaned up [ 927.621406][ T4229] usb 1-1: config 0 has no interface number 1 [ 927.627547][ T4229] usb 1-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 927.641066][T15758] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 927.671363][ T4229] usb 1-1: config 0 interface 193 has no altsetting 0 [ 927.680729][ T7428] Bluetooth: hci3: command 0x0419 tx timeout [ 927.851678][ T4229] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 927.865971][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.927568][ T4229] usb 1-1: Product: syz [ 928.859129][ T4229] usb 1-1: Manufacturer: syz [ 928.864077][ T4229] usb 1-1: SerialNumber: syz [ 928.871542][ T4229] usb 1-1: config 0 descriptor?? [ 929.977957][T15795] loop1: detected capacity change from 0 to 40427 [ 930.163216][T15795] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 930.202610][T15795] F2FS-fs (loop1): invalid crc value [ 930.322365][ T4229] usb 1-1: unknown interface protocol 0x4f, assuming v1 [ 930.407604][ T4229] usb 1-1: 193:2 : does not exist [ 930.506477][T15795] F2FS-fs (loop1): Found nat_bits in checkpoint [ 930.783663][ T4229] usb 1-1: cannot find UAC_HEADER [ 931.117809][ T4229] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 931.132786][T15795] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 931.255770][ T4229] usb 1-1: USB disconnect, device number 9 [ 931.685974][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.717028][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.489094][T10372] attempt to access beyond end of device [ 932.489094][T10372] loop1: rw=2049, want=45104, limit=40427 [ 932.561219][T15822] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2398'. [ 932.576828][T15809] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 932.690701][T14184] udevd[14184]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.193/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.840198][T15827] loop0: detected capacity change from 0 to 128 [ 932.942121][T15809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.974322][T15809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.021392][T15809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 933.061348][T15809] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 933.070450][T15809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.122314][T15809] usb 7-1: config 0 descriptor?? [ 933.181491][T15809] usb 7-1: can't set config #0, error -71 [ 933.191773][T15809] usb 7-1: USB disconnect, device number 13 [ 933.365318][T15838] loop6: detected capacity change from 0 to 512 [ 933.738551][T15842] overlayfs: overlapping lowerdir path [ 934.419605][T15838] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2401: bg 0: block 255: padding at end of block bitmap is not set [ 934.504543][T15838] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 935.039114][T15838] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2401: invalid indirect mapped block 1 (level 1) [ 935.145140][T15838] EXT4-fs (loop6): 1 truncate cleaned up [ 935.404009][T15838] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 935.628497][T15864] loop1: detected capacity change from 0 to 512 [ 935.814685][T15864] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 937.099159][T15864] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.2406: dir seems corrupt? Run e2fsck -D. [ 937.113706][T15864] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2406: Directory index failed checksum [ 937.392087][T15883] loop0: detected capacity change from 0 to 128 [ 937.452342][T15883] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 937.517052][T15883] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 937.699299][T15890] loop1: detected capacity change from 0 to 128 [ 938.208027][T15867] loop8: detected capacity change from 0 to 65536 [ 938.340864][T15908] loop6: detected capacity change from 0 to 256 [ 938.588229][T15902] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 938.598362][T15902] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 938.608014][T15902] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 939.080070][T15908] FAT-fs (loop6): Directory bread(block 1285) failed [ 939.301363][T15908] FAT-fs (loop6): Directory bread(block 1286) failed [ 939.423075][T15908] FAT-fs (loop6): Directory bread(block 1287) failed [ 939.429985][T15908] FAT-fs (loop6): Directory bread(block 1288) failed [ 940.316943][T15908] FAT-fs (loop6): Directory bread(block 1285) failed [ 940.365678][T15908] FAT-fs (loop6): Directory bread(block 1286) failed [ 940.579251][T15908] FAT-fs (loop6): Directory bread(block 1287) failed [ 940.964879][T15908] FAT-fs (loop6): Directory bread(block 1288) failed [ 941.104587][T15908] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 941.754912][T15940] loop1: detected capacity change from 0 to 256 [ 941.880365][T15940] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff* }g ܢIN#m/=ׁ'0#\@"{;+G՗?xpa [ 941.880365][T15940] /VZ/v JTˍڝ@N2Ќ$bTCd7ʈ!0 :8" or missing value [ 941.951092][T15929] loop8: detected capacity change from 0 to 128 [ 942.419376][T15943] loop6: detected capacity change from 0 to 512 [ 942.555147][T15943] EXT4-fs (loop6): Test dummy encryption mode enabled [ 942.698518][T15943] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 942.932720][T15943] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.2423: bad orphan inode 131083 [ 942.947960][T15929] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 943.111490][T15929] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 943.123411][T15943] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 943.410468][T15958] loop0: detected capacity change from 0 to 512 [ 943.796144][T15958] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 943.855815][T15958] EXT4-fs (loop0): 1 truncate cleaned up [ 943.948555][T15958] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,nodiscard,,errors=continue. Quota mode: none. [ 944.182852][T15969] loop6: detected capacity change from 0 to 512 [ 944.254347][ T5650] device hsr_slave_0 left promiscuous mode [ 944.281513][T15969] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2429: bg 0: block 255: padding at end of block bitmap is not set [ 944.326719][T15969] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 944.401598][ T5650] device hsr_slave_1 left promiscuous mode [ 944.418950][T15969] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2429: invalid indirect mapped block 1 (level 1) [ 944.505395][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.522205][T15969] EXT4-fs (loop6): 1 truncate cleaned up [ 944.527916][T15969] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 944.528474][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.862126][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.870812][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.888158][ T5650] device bridge_slave_1 left promiscuous mode [ 944.901694][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.916489][ T5650] device bridge_slave_0 left promiscuous mode [ 944.934774][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.979903][ T5650] device veth1_macvtap left promiscuous mode [ 944.999332][ T5650] device veth0_macvtap left promiscuous mode [ 945.072499][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 945.132055][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 945.171409][ T5650] device veth1_vlan left promiscuous mode [ 945.177275][ T5650] device veth0_vlan left promiscuous mode [ 945.211946][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 945.240550][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 945.368461][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 945.556166][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 945.737593][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 946.142148][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 946.198580][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 946.220502][T14862] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 946.738513][T16002] loop8: detected capacity change from 0 to 1024 [ 946.738513][T15987] loop1: detected capacity change from 0 to 40427 [ 946.790409][ T5650] team0 (unregistering): Port device team_slave_1 removed [ 946.809737][ T5650] team0 (unregistering): Port device team_slave_0 removed [ 946.830190][T15987] F2FS-fs (loop1): invalid crc value [ 946.860542][T16002] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 946.873349][T15987] F2FS-fs (loop1): Found nat_bits in checkpoint [ 946.879331][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.945301][ T5650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.979716][T15987] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 947.073773][ T5650] bond0 (unregistering): Released all slaves [ 947.207179][T10372] attempt to access beyond end of device [ 947.207179][T10372] loop1: rw=2049, want=45104, limit=40427 [ 947.249172][T15635] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 947.285680][T15635] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 947.350760][T15635] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 947.394908][T15635] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 947.583758][ T26] audit: type=1800 audit(1772227675.038:110): pid=16002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2434" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 947.704638][T15635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.745481][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 947.776867][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 947.823582][T15635] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.850640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 947.872258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 947.950038][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.957219][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.995770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 948.103206][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 948.122319][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 948.151853][T16029] loop1: detected capacity change from 0 to 256 [ 948.171674][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.178822][ T5665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.204361][T16025] loop8: detected capacity change from 0 to 8192 [ 948.241696][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 948.288577][T16029] FAT-fs (loop1): Directory bread(block 64) failed [ 948.290494][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 948.328717][T16029] FAT-fs (loop1): Directory bread(block 65) failed [ 948.355890][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 948.357010][T16029] FAT-fs (loop1): Directory bread(block 66) failed [ 948.401674][T16029] FAT-fs (loop1): Directory bread(block 67) failed [ 948.408328][T16029] FAT-fs (loop1): Directory bread(block 68) failed [ 948.418362][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 948.450579][T16029] FAT-fs (loop1): Directory bread(block 69) failed [ 948.458276][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 948.480179][T16029] FAT-fs (loop1): Directory bread(block 70) failed [ 948.537232][T16029] FAT-fs (loop1): Directory bread(block 71) failed [ 948.563527][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 948.572391][T16029] FAT-fs (loop1): Directory bread(block 72) failed [ 948.579055][T16029] FAT-fs (loop1): Directory bread(block 73) failed [ 948.596638][T16029] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 948.609466][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 948.649902][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 948.659092][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 948.679464][T15635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 948.725075][T15635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.776504][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 948.800254][T16016] loop0: detected capacity change from 0 to 40427 [ 948.807724][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 948.913675][T16016] F2FS-fs (loop0): invalid crc value [ 948.960990][T16016] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 948.999319][T16044] loop8: detected capacity change from 0 to 512 [ 949.171710][T16016] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 949.206972][T16044] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2441: bg 0: block 255: padding at end of block bitmap is not set [ 949.248469][T16016] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 949.275935][T16044] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 949.310141][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.336316][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.341073][T16044] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2441: invalid indirect mapped block 1 (level 1) [ 949.386972][T15635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.422724][T16044] EXT4-fs (loop8): 1 truncate cleaned up [ 949.428515][T16044] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 949.586624][T16032] chnl_net:caif_netlink_parms(): no params data found [ 950.452345][T16032] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.521615][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 950.545604][T16032] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.580990][T16032] device bridge_slave_0 entered promiscuous mode [ 950.592112][T16072] loop8: detected capacity change from 0 to 512 [ 950.608901][T16032] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.694416][T16032] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.709062][T16032] device bridge_slave_1 entered promiscuous mode [ 950.758053][T16032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.772062][T16032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.788543][T16072] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,quota,quota,stripe=0x0000000000000003,lazytime,,errors=continue. Quota mode: writeback. [ 950.820201][T16032] team0: Port device team_slave_0 added [ 950.830154][T16032] team0: Port device team_slave_1 added [ 950.861547][T16072] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 950.873182][T16032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.880171][T16032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.934253][T16032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.977587][T16042] loop1: detected capacity change from 0 to 40427 [ 950.997488][T16032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.014118][T16032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.081408][T16042] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 951.097626][T16042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 951.133380][T16042] F2FS-fs (loop1): invalid crc value [ 951.189428][T16032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.199401][T16042] F2FS-fs (loop1): Found nat_bits in checkpoint [ 951.489654][T16032] device hsr_slave_0 entered promiscuous mode [ 951.537837][T16032] device hsr_slave_1 entered promiscuous mode [ 951.612186][T16042] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 951.619474][T16032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 951.690331][T16032] Cannot create hsr debugfs directory [ 951.696473][T16042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 951.729915][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 951.802193][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 951.906594][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 951.927558][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 951.927592][T16087] attempt to access beyond end of device [ 951.927592][T16087] loop1: rw=2049, want=45104, limit=40427 [ 951.962910][T15635] device veth0_vlan entered promiscuous mode [ 951.979052][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 952.223713][T16107] ip6t_rpfilter: unknown options [ 952.244227][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 952.379820][ T26] audit: type=1326 audit(1772227679.798:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.056183][ T26] audit: type=1326 audit(1772227679.798:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.078773][ T26] audit: type=1326 audit(1772227679.798:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.111199][ T4300] Bluetooth: hci1: command 0x041b tx timeout [ 953.180485][ T26] audit: type=1326 audit(1772227679.798:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.260949][T15635] device veth1_vlan entered promiscuous mode [ 953.297229][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 953.320782][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 953.348004][ T26] audit: type=1326 audit(1772227679.808:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.383214][T16117] loop0: detected capacity change from 0 to 256 [ 953.419932][T16117] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 953.433697][ T26] audit: type=1326 audit(1772227679.808:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.459340][T15635] device veth0_macvtap entered promiscuous mode [ 953.541975][T16117] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 953.561345][ T26] audit: type=1326 audit(1772227679.808:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.587696][T16117] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 953.645365][ T26] audit: type=1326 audit(1772227679.808:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.693217][T15635] device veth1_macvtap entered promiscuous mode [ 953.795629][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.829019][ T26] audit: type=1326 audit(1772227679.808:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.841529][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.881566][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.896679][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.912961][ T26] audit: type=1326 audit(1772227679.808:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 953.946118][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.967087][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.987566][ T26] audit: type=1326 audit(1772227679.808:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.8.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaba7ee799 code=0x7ffc0000 [ 954.014598][T15635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.206579][T16129] loop0: detected capacity change from 0 to 512 [ 954.285628][T16129] EXT4-fs (loop0): Test dummy encryption mode enabled [ 954.328962][T16129] EXT4-fs (loop0): Ignoring removed oldalloc option [ 954.414336][T16129] EXT4-fs (loop0): 1 truncate cleaned up [ 954.420032][T16129] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 954.546197][T16129] EXT4-fs (loop0): shut down requested (1) [ 954.696991][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 954.708841][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 954.756122][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 954.792337][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 954.938541][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.950668][T16142] ip6t_rpfilter: unknown options [ 955.008487][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.031311][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.042600][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.076769][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.088785][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.106153][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.118948][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.137911][T15635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.147056][T16136] netlink: 'syz.8.2456': attribute type 4 has an invalid length. [ 955.217946][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 955.254285][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 955.306750][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 955.313754][T15635] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.341591][T15635] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.359400][T15635] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.379012][T15635] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.463686][T16154] loop1: detected capacity change from 0 to 1024 [ 956.560861][T16154] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 956.633112][T16154] EXT4-fs (loop1): barriers disabled [ 956.638473][T16154] JBD2: no valid journal superblock found [ 956.669031][T16154] EXT4-fs (loop1): error loading journal [ 957.321427][ T4300] Bluetooth: hci1: command 0x0419 tx timeout [ 957.630709][T12359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.655748][T12359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.634060][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 959.785409][T12359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.805633][T12359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.843569][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 960.699406][T16032] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 960.784273][T16032] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 960.826343][T16185] loop5: detected capacity change from 0 to 1024 [ 960.948723][T16191] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 960.981537][T16185] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 961.029598][T16191] overlayfs: missing 'lowerdir' [ 961.052956][T16032] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 961.201005][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 961.201041][ T26] audit: type=1326 audit(1772227688.618:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 961.309845][ T5650] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.547952][T16185] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 961.871789][ T26] audit: type=1326 audit(1772227688.628:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 961.904344][ T26] audit: type=1326 audit(1772227688.628:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 961.983917][T16032] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 962.022893][ T26] audit: type=1326 audit(1772227688.628:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 962.051313][ T26] audit: type=1326 audit(1772227688.628:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 962.101520][ T26] audit: type=1326 audit(1772227688.628:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 962.186035][ T26] audit: type=1326 audit(1772227688.628:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 962.219932][ T5650] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.964514][ T26] audit: type=1326 audit(1772227688.638:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 964.108983][ T26] audit: type=1326 audit(1772227688.638:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 964.239731][ T26] audit: type=1326 audit(1772227688.638:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.1.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e556cf799 code=0x7ffc0000 [ 964.366972][ T5650] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.574980][T16223] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2480'. [ 964.970882][ T5650] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.302791][T16225] loop8: detected capacity change from 0 to 512 [ 966.166986][T16032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.218428][T16032] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.270433][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 966.803877][T12367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 967.233680][T16225] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 967.254260][T16225] ext4 filesystem being mounted at /137/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.289509][T16244] loop0: detected capacity change from 0 to 1024 [ 967.332515][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 967.349305][T16222] __quota_error: 13 callbacks suppressed [ 967.349319][T16222] Quota error (device loop8): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 967.367318][T16244] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 967.375054][T16222] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 967.385660][T16222] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.2482: Failed to acquire dquot type 0 [ 967.401477][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 967.416563][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.423743][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.448846][T16244] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 967.485649][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 967.497148][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 967.507784][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 967.517249][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.524410][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.874568][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 967.919962][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 967.921947][T16257] loop5: detected capacity change from 0 to 256 [ 967.949733][T16224] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 968.029782][T16224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 968.079889][T16257] FAT-fs (loop5): Directory bread(block 64) failed [ 968.089958][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 968.116900][T16257] FAT-fs (loop5): Directory bread(block 65) failed [ 968.135398][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 968.148404][T16257] FAT-fs (loop5): Directory bread(block 66) failed [ 968.167522][T16257] FAT-fs (loop5): Directory bread(block 67) failed [ 968.180202][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 968.190385][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 968.199369][T16257] FAT-fs (loop5): Directory bread(block 68) failed [ 968.218771][T16032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 968.271705][T16257] FAT-fs (loop5): Directory bread(block 69) failed [ 968.291835][T16032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 968.503470][T16257] FAT-fs (loop5): Directory bread(block 70) failed [ 968.511476][T16257] FAT-fs (loop5): Directory bread(block 71) failed [ 968.533486][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 968.536205][T16257] FAT-fs (loop5): Directory bread(block 72) failed [ 968.549369][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 969.920025][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 969.928487][T16257] FAT-fs (loop5): Directory bread(block 73) failed [ 969.962232][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 970.001054][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 970.118226][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 970.577715][T16292] loop1: detected capacity change from 0 to 4096 [ 970.690305][T16292] EXT4-fs (loop1): inline encryption not supported [ 971.121376][T16292] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,sysvgroups,discard,,errors=continue. Quota mode: writeback. [ 971.201714][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 971.221601][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 971.245022][T16292] overlayfs: failed to resolve './bus': -2 [ 971.352696][T16032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.057565][T16354] loop8: detected capacity change from 0 to 512 [ 976.107139][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 976.119194][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 976.186861][T16354] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 976.220182][ T5650] device hsr_slave_0 left promiscuous mode [ 976.226152][ T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 976.239053][ T5650] device hsr_slave_1 left promiscuous mode [ 976.255136][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.263046][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.272041][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.279845][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.291280][T16354] [ 976.293659][T16354] ====================================================== [ 976.294226][ T5650] device bridge_slave_1 left promiscuous mode [ 976.300694][T16354] WARNING: possible circular locking dependency detected [ 976.310309][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.313849][T16354] syzkaller #0 Not tainted [ 976.313860][T16354] ------------------------------------------------------ [ 976.313868][T16354] syz.8.2515/16354 is trying to acquire lock: [ 976.338464][T16354] ffff8880253c6bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 976.348700][T16354] [ 976.348700][T16354] but task is already holding lock: [ 976.356093][T16354] ffff88805d5ebc98 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 976.365970][T16354] [ 976.365970][T16354] which lock already depends on the new lock. [ 976.365970][T16354] [ 976.376395][T16354] [ 976.376395][T16354] the existing dependency chain (in reverse order) is: [ 976.385439][T16354] [ 976.385439][T16354] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 976.393036][T16354] down_write+0x38/0x60 [ 976.397742][T16354] ext4_destroy_inline_data+0x24/0xe0 [ 976.403663][T16354] ext4_writepages+0x670/0x2df0 [ 976.409072][T16354] do_writepages+0x476/0x6e0 [ 976.414237][T16354] filemap_fdatawrite_wbc+0x1eb/0x240 [ 976.420162][T16354] filemap_flush+0xd4/0x130 [ 976.425284][T16354] ext4_release_file+0x7e/0x310 [ 976.430689][T16354] __fput+0x234/0x930 [ 976.435221][T16354] task_work_run+0x125/0x1a0 [ 976.440366][T16354] exit_to_user_mode_loop+0x10f/0x130 [ 976.446290][T16354] exit_to_user_mode_prepare+0xee/0x180 [ 976.452395][T16354] syscall_exit_to_user_mode+0x16/0x40 [ 976.458498][T16354] do_syscall_64+0x58/0xa0 [ 976.463468][T16354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 976.469917][T16354] [ 976.469917][T16354] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 976.478371][T16354] __lock_acquire+0x2c42/0x7d10 [ 976.483782][T16354] lock_acquire+0x19e/0x400 [ 976.488831][T16354] percpu_down_read+0x46/0x1b0 [ 976.494147][T16354] ext4_writepages+0x20f/0x2df0 [ 976.499575][T16354] do_writepages+0x476/0x6e0 [ 976.504734][T16354] __writeback_single_inode+0x153/0xda0 [ 976.510857][T16354] writeback_single_inode+0x3cb/0x8e0 [ 976.516781][T16354] write_inode_now+0x23b/0x2c0 [ 976.522105][T16354] iput+0x5ab/0x8a0 [ 976.526458][T16354] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 976.532411][T16354] ext4_xattr_block_set+0x4fd/0x2d20 [ 976.538248][T16354] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 976.544619][T16354] __ext4_expand_extra_isize+0x301/0x3e0 [ 976.550820][T16354] __ext4_mark_inode_dirty+0x469/0x700 [ 976.556837][T16354] ext4_evict_inode+0xa8d/0x1090 [ 976.562327][T16354] evict+0x4c9/0x8d0 [ 976.566782][T16354] ext4_orphan_cleanup+0xad2/0x1320 [ 976.572528][T16354] ext4_fill_super+0x8e25/0x95a0 [ 976.578043][T16354] mount_bdev+0x287/0x3c0 [ 976.582924][T16354] legacy_get_tree+0xe6/0x180 [ 976.588156][T16354] vfs_get_tree+0x88/0x270 [ 976.592248][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.593114][T16354] do_new_mount+0x24a/0xa40 [ 976.609004][T16354] __se_sys_mount+0x2e3/0x3d0 [ 976.614232][T16354] do_syscall_64+0x4c/0xa0 [ 976.615248][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.619208][T16354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 976.619234][T16354] [ 976.619234][T16354] other info that might help us debug this: [ 976.619234][T16354] [ 976.645640][T16354] Possible unsafe locking scenario: [ 976.645640][T16354] [ 976.653113][T16354] CPU0 CPU1 [ 976.658511][T16354] ---- ---- [ 976.662087][ T13] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 976.663893][T16354] lock(&ei->xattr_sem); [ 976.677282][T16354] lock(&sbi->s_writepages_rwsem); [ 976.685211][T16354] lock(&ei->xattr_sem); [ 976.687073][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.692086][T16354] lock(&sbi->s_writepages_rwsem); [ 976.692103][T16354] [ 976.692103][T16354] *** DEADLOCK *** [ 976.692103][T16354] [ 976.692109][T16354] 3 locks held by syz.8.2515/16354: [ 976.692122][T16354] #0: ffff8880253c40e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 976.728819][T16354] #1: ffff8880253c4650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 976.735789][ T13] usb 2-1: config 0 descriptor?? [ 976.738373][T16354] #2: ffff88805d5ebc98 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 976.753609][T16354] [ 976.753609][T16354] stack backtrace: [ 976.759537][T16354] CPU: 1 PID: 16354 Comm: syz.8.2515 Not tainted syzkaller #0 [ 976.767024][T16354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.777107][T16354] Call Trace: [ 976.780403][T16354] [ 976.783352][T16354] dump_stack_lvl+0x188/0x250 [ 976.788058][T16354] ? load_image+0x400/0x400 [ 976.792587][T16354] ? show_regs_print_info+0x20/0x20 [ 976.797823][T16354] ? print_circular_bug+0x12b/0x1a0 [ 976.803045][T16354] check_noncircular+0x296/0x330 [ 976.808009][T16354] ? look_up_lock_class+0x71/0x110 [ 976.813157][T16354] ? add_chain_block+0x940/0x940 [ 976.818129][T16354] ? lockdep_lock+0xf1/0x1f0 [ 976.822753][T16354] ? mark_lock+0x94/0x320 [ 976.827096][T16354] ? _find_first_zero_bit+0xce/0xf0 [ 976.832404][T16354] __lock_acquire+0x2c42/0x7d10 [ 976.837282][T16354] ? mark_lock+0x94/0x320 [ 976.841625][T16354] ? verify_lock_unused+0x140/0x140 [ 976.846846][T16354] ? verify_lock_unused+0x140/0x140 [ 976.852066][T16354] ? __lock_acquire+0x13bc/0x7d10 [ 976.857118][T16354] ? 0xffffffffa001a000 [ 976.861293][T16354] lock_acquire+0x19e/0x400 [ 976.865838][T16354] ? ext4_writepages+0x20f/0x2df0 [ 976.870932][T16354] ? check_noncircular+0x189/0x330 [ 976.876075][T16354] ? __might_sleep+0xf0/0xf0 [ 976.880688][T16354] ? read_lock_is_recursive+0x10/0x10 [ 976.886099][T16354] ? mark_lock+0x94/0x320 [ 976.890452][T16354] ? __lock_acquire+0x13bc/0x7d10 [ 976.895506][T16354] percpu_down_read+0x46/0x1b0 [ 976.900293][T16354] ? ext4_writepages+0x20f/0x2df0 [ 976.905343][T16354] ext4_writepages+0x20f/0x2df0 [ 976.910288][T16354] ? mark_lock+0x94/0x320 [ 976.914647][T16354] ? verify_lock_unused+0x140/0x140 [ 976.919875][T16354] ? mark_lock+0x94/0x320 [ 976.924226][T16354] ? ext4_readpage+0x2e0/0x2e0 [ 976.929028][T16354] ? __lock_acquire+0x13bc/0x7d10 [ 976.934082][T16354] ? rcu_lock_release+0x5/0x20 [ 976.938879][T16354] ? __lock_acquire+0x7d10/0x7d10 [ 976.943932][T16354] ? do_raw_spin_lock+0x128/0x2f0 [ 976.949003][T16354] ? do_raw_spin_unlock+0x11d/0x230 [ 976.954236][T16354] ? ext4_readpage+0x2e0/0x2e0 [ 976.959038][T16354] do_writepages+0x476/0x6e0 [ 976.963674][T16354] ? __writepage+0x130/0x130 [ 976.968292][T16354] ? writeback_single_inode+0x3c0/0x8e0 [ 976.973872][T16354] ? __lock_acquire+0x7d10/0x7d10 [ 976.978921][T16354] ? do_raw_spin_lock+0x128/0x2f0 [ 976.983968][T16354] __writeback_single_inode+0x153/0xda0 [ 976.989540][T16354] writeback_single_inode+0x3cb/0x8e0 [ 976.995024][T16354] ? write_inode_now+0x2c0/0x2c0 [ 977.000014][T16354] write_inode_now+0x23b/0x2c0 [ 977.004813][T16354] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 977.010316][T16354] ? do_raw_spin_unlock+0x11d/0x230 [ 977.015555][T16354] iput+0x5ab/0x8a0 [ 977.019402][T16354] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 977.024826][T16354] ? ext4_xattr_ibody_set+0x330/0x330 [ 977.030239][T16354] ? rcu_is_watching+0x11/0xa0 [ 977.035041][T16354] ? kmem_cache_free+0x14c/0x210 [ 977.040068][T16354] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 977.046162][T16354] ext4_xattr_block_set+0x4fd/0x2d20 [ 977.051509][T16354] ? ext4_get_inode_loc+0x120/0x120 [ 977.056744][T16354] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 977.062524][T16354] ? ext4_xattr_block_find+0x500/0x500 [ 977.068019][T16354] ? ext4_xattr_block_find+0x433/0x500 [ 977.073522][T16354] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 977.079373][T16354] __ext4_expand_extra_isize+0x301/0x3e0 [ 977.085057][T16354] __ext4_mark_inode_dirty+0x469/0x700 [ 977.090555][T16354] ext4_evict_inode+0xa8d/0x1090 [ 977.093402][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 977.095518][T16354] ? _raw_spin_unlock+0x24/0x40 [ 977.106275][T16354] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 977.112195][T16354] ? do_raw_spin_unlock+0x11d/0x230 [ 977.113167][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 977.117418][T16354] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 977.117443][T16354] evict+0x4c9/0x8d0 [ 977.133584][T16354] ? proc_nr_inodes+0x320/0x320 [ 977.138466][T16354] ? do_raw_spin_unlock+0x11d/0x230 [ 977.143721][T16354] ? _raw_spin_unlock+0x24/0x40 [ 977.148599][T16354] ? iput+0x706/0x8a0 [ 977.152611][T16354] ext4_orphan_cleanup+0xad2/0x1320 [ 977.157863][T16354] ? ext4_orphan_del+0xbf0/0xbf0 [ 977.162837][T16354] ? errseq_check_and_advance+0x62/0x120 [ 977.165769][ T13] usb 2-1: USB disconnect, device number 16 [ 977.168504][T16354] ext4_fill_super+0x8e25/0x95a0 [ 977.168549][T16354] ? ext4_mount+0x40/0x40 [ 977.183712][T16354] ? set_blocksize+0x1f3/0x370 [ 977.188509][T16354] ? sb_set_blocksize+0xa5/0xe0 [ 977.193398][T16354] mount_bdev+0x287/0x3c0 [ 977.197930][T16354] ? ext4_mount+0x40/0x40 [ 977.202301][T16354] legacy_get_tree+0xe6/0x180 [ 977.207015][T16354] ? ext4_errno_to_code+0x160/0x160 [ 977.212251][T16354] vfs_get_tree+0x88/0x270 [ 977.216711][T16354] do_new_mount+0x24a/0xa40 [ 977.221248][T16354] __se_sys_mount+0x2e3/0x3d0 [ 977.225957][T16354] ? __x64_sys_mount+0xc0/0xc0 [ 977.230757][T16354] ? lockdep_hardirqs_on+0x94/0x140 [ 977.235985][T16354] ? __x64_sys_mount+0x1c/0xc0 [ 977.240784][T16354] do_syscall_64+0x4c/0xa0 [ 977.245236][T16354] ? clear_bhb_loop+0x30/0x80 [ 977.249993][T16354] ? clear_bhb_loop+0x30/0x80 [ 977.254701][T16354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 977.260654][T16354] RIP: 0033:0x7ffaba7efa0a [ 977.265098][T16354] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.283753][T16365] loop5: detected capacity change from 0 to 512 [ 977.284748][T16354] RSP: 002b:00007ffab8a26e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 977.299428][T16354] RAX: ffffffffffffffda RBX: 00007ffab8a26ee0 RCX: 00007ffaba7efa0a [ 977.307445][T16354] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ffab8a26ea0 [ 977.315464][T16354] RBP: 0000200000000180 R08: 00007ffab8a26ee0 R09: 0000000000800700 [ 977.315704][T16365] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 977.323469][T16354] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000000 [ 977.323486][T16354] R13: 00007ffab8a26ea0 R14: 000000000000047a R15: 00002000000000c0 [ 977.323510][T16354] [ 977.356978][T16354] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.2515: iget: bad extra_isize 90 (inode size 256) [ 977.375409][ T5650] device bridge_slave_0 left promiscuous mode [ 977.383052][T16354] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2515: error while reading EA inode 11 err=-117 [ 977.385712][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.416192][T16365] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 977.419979][T16354] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.2515: iget: bad extra_isize 90 (inode size 256) [ 977.431793][T16365] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.455724][ T5650] device veth1_macvtap left promiscuous mode [ 977.461909][ T5650] device veth0_macvtap left promiscuous mode [ 977.468091][ T5650] device veth1_vlan left promiscuous mode [ 977.469096][T16354] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2515: error while reading EA inode 11 err=-117 [ 977.474922][ T5650] device veth0_vlan left promiscuous mode [ 977.500967][T16354] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.2515: iget: bad extra_isize 90 (inode size 256) [ 977.532699][T16354] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2515: error while reading EA inode 18 err=-117 [ 977.549189][T16354] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.2515: iget: bad extra_isize 90 (inode size 256) [ 977.568915][T16354] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2515: error while reading EA inode 18 err=-117 [ 977.582671][T16354] EXT4-fs (loop8): 1 orphan inode deleted [ 977.588564][T16354] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,prjquota,max_dir_size_kb=0x0000000000000005,nodiscard,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 977.623475][T16365] EXT4-fs error (device loop5): ext4_dx_csum_verify:502: inode #2: comm syz.5.2518: dir seems corrupt? Run e2fsck -D. [ 977.648511][T14184] udevd[14184]: incorrect ext4 checksum on /dev/loop5 [ 977.661795][ T13] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 977.878711][T16365] EXT4-fs (loop5): Remounting filesystem read-only [ 977.910813][T16365] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.2518: Directory index failed checksum [ 977.947090][T16365] EXT4-fs (loop5): Remounting filesystem read-only [ 978.115818][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 978.115996][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.117117][ T13] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 978.117265][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.195321][ T13] usb 2-1: config 0 descriptor?? [ 978.241896][ T13] hub 2-1:0.0: USB hub found [ 978.297458][ T5650] team0 (unregistering): Port device team_slave_1 removed [ 978.311051][ T5650] team0 (unregistering): Port device team_slave_0 removed [ 978.322292][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.336332][ T5650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.389570][ T5650] bond0 (unregistering): Released all slaves [ 978.445017][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 978.453820][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 978.462686][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 978.470342][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 978.480203][T16032] device veth0_vlan entered promiscuous mode [ 978.494856][T16032] device veth1_vlan entered promiscuous mode [ 978.519228][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 978.530614][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 978.539359][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 978.549630][ T13] hub 2-1:0.0: 1 port detected [ 978.557640][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 978.570126][T16032] device veth0_macvtap entered promiscuous mode [ 978.580474][T16032] device veth1_macvtap entered promiscuous mode [ 978.595213][T16032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.612545][T16032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.624974][T16032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.635526][T16032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.648114][T16032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.658672][T16032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.672543][T16032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.680602][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 978.692160][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 978.700592][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 978.712315][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 978.727472][T16032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.738523][T16032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.751641][T16032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.766837][T16032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.776972][ T13] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 978.786249][T16032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.797677][ T13] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 978.809799][T16032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.820000][T16032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.841270][T16032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.879522][T16032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.888921][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 978.901362][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 978.908736][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 978.917856][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 978.936811][T16032] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.950643][T16032] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.961809][T16032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.962215][ T13] usb 2-1: USB disconnect, device number 17 [ 978.970687][T16032] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.056573][T16032] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 979.084180][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.096807][T16032] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 979.106683][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.118189][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 979.162981][ T4443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.178802][ T4443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.198335][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready