last executing test programs: 11.701327173s ago: executing program 0 (id=195): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x5) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x10, 0x1, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0x5}) (rerun: 64) fcntl$dupfd(0xffffffffffffffff, 0x406, r7) (async) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000400)={r8}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) (async, rerun: 32) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) 10.84802105s ago: executing program 0 (id=199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) sendmsg$sock(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000000)='uid', 0x58000, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x1]}, {0x7f, 0x9, 0x6, 0x6}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x1e, 0x59, &(0x7f0000000340)="efa91b7443d61381a8ba834d786b9d199a4f5b0d9004fc1ab6fd230a985c", &(0x7f00000003c0)=""/89, 0xffffffff, 0x0, 0x29, 0xf5, &(0x7f0000000440)="aaa0e28ecd36a34ef76a3518c132d9133e0bc930655bed7c58be89da46359ea6477b1b9c75f777e76b", &(0x7f0000000900)="24a7f1944491694026ccbf7a5ee35d2c2c69e73a8576a19010e81c49d309c49afffc9630527772f4c2b63c47d6f7aaf675b49b506693fd45ed2f97369f3cdc959df02014df270fb454345aa565560711b85fe21cdb5482e443751f8894c14d017420283fdf754d2fa655c44295edf7725bf570c4d988e2d1302e848af67cdb073973cdab288abc16f3817eddefa36d7cca797bf60a64ccf6e6bdde803b3ea07925a80a136b159f8a1fcb992b3dead643bf1b258e3796f416b578e99e5954a2ff29092f990cf454ec9c54fd63ed6fc319c9b7e8199aa081540a136e8727c38d43e714d3c33ed35a40b12c9a89346d67a28fac84ab54", 0x1, 0x0, 0x5}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001", @ANYRESHEX=r4], 0x68}}, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000300)='./file1\x00', 0x0, 0x8, r5}, 0x18) syz_usb_connect$uac1(0x1, 0xc8, &(0x7f0000000ac0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x3d, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0x1d}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x2, "8e5152f187"}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x2, 0x9, "08bb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x7, 0x1, 0xb9}, @as_header={0x7, 0x24, 0x1, 0x2, 0x2f, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0xe4, 0xb1, 0x6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0xe, 0x2, "74d8ef", 'S'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xe4, 0x8, 0x8, {0x7, 0x25, 0x1, 0x0, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x9, 0x7, 0xae, 0x10}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc5, 0xc7, 0x8, 0xff, 0x8}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x1, 0x2, 0xf, "", "dfd07d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xb, 0x21, {0x7, 0x25, 0x1, 0x4, 0x9, 0x1}}}}}}}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x0, 0x0, 0xa8, 0x2, 0x20}, 0x72, &(0x7f0000000c00)={0x5, 0xf, 0x72, 0x3, [@generic={0x60, 0x10, 0xb, "b7abb91ad6502603c7f42cafcd37891e09524cd9eb831f671086bdb765b84598ab20f276848aa7021a3edb2e615fb68f27ab956d0c15f290efaf52050c665f1403112cec2d697117847318c2d824adc5b5eef330ec69040bf54695b858"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x6, 0x5, 0x3}]}, 0x5, [{0x57, &(0x7f0000000c80)=@string={0x57, 0x3, "3bf4649f5a05ea83f30938f7b5490ffc0a7bd6446056b26176e2e02a79c42a4aa0635803f425f7ac64a1eb34f58ce1065806a18499348f08b492038eba8b86c67615e96d9dd9ecc1c4734950eb980b7d4bf1dce55b"}}, {0xd4, &(0x7f0000000d00)=@string={0xd4, 0x3, "7c7dba10dae45c47cda09996d5a189a66090a62bc4844b0271e8541e22d18397d29013632adc30dddd7ec3b7ffc1b656b573e62fe562b474fe46684f6b73e982ecf854c1ab6be6d59c54948dd4bcfb9dc06362c3a7e72ca519899246a3b124985b4946d724ca01233064640880d60d7ae1bdec7d07174ca00a8d6ec3b39bcab84945e62a361954af583b11b2006621a397e2e8511cfddf1306fe90f8b8187c143d8bb3ef40fc5fe2a08d237e624df5e6f9cc78424fcad22abfe0a1ae7193e4cdc8c204faaaf3dccce01884de0811e25a789e"}}, {0xb5, &(0x7f0000000e00)=@string={0xb5, 0x3, "daa7042f488ed1637349c6100c62c40be7c6990ad18123ca0fd671e84976c94a6478903fc5ef5227ac073d1464eef46b049aed6d8496b51271bf2d394ead9ddf2b53bed6501fa8c62091e0bf0e4ff8aba222e2bee2ac0f0e003e8f70cbe3540638bcadfb433bd0ac865a62d59c90eda7708bf6370ccf99782f1f009f4e38049023c16ff1107d27cdb0533ae8836ec52f156453b59c012e173b863c91e730ba0ea2a3402ad7dff2f3fed2bf4f5dabbec306bbe1"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x458}}, {0x50, &(0x7f0000000f00)=@string={0x50, 0x3, "406ba08943be301910eddf5afd9b2deac71dd1898a8838fad35658429eea6a7e68a7f550ada3160e52fc48eb0632d85752dbff16ec4913c5f606fc8fa1e6b2bf60e1cffdcc8189eafe577713d099"}}]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000a80)) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) recvmmsg(r5, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001000)={0x0, 0x5, 0xfffa}, &(0x7f0000001040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001080)={0x100, 0x0, 0xe, 0x9, r7}, 0x10) (async) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1a18001, &(0x7f0000000080)={[{@creator={'creator', 0x3d, "a6a24dc8"}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@dir_umask={'dir_umask', 0x3d, 0x8000}}, {@type={'type', 0x3d, "e4903e7c"}}, {@uid}]}, 0x2, 0x363, &(0x7f0000000580)="$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") 10.846266228s ago: executing program 2 (id=200): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000700000000000100005b7f302c93d412df2193895079fd79d86aff65d297c72b0d0eec644d0d9b3540038f17bf24d54d712c7b2a2e91281e5522a66c5064d0b3924fcefdee24edce72a0974c3595e47fd521f87ff3ad58663f6fb2a8d4fb19616053497a5cf1e2d3af7382b72181aae98d276729311c2714034d46365f343b4f27be18dc78f784857054987e25e1d05f30b215aacf07916ec1001d6713ee587086abb4f469755edf9a2c25a3a2fffcbcd16c83e217da07138c7132689d42c0d9", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, r4, 0x100}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') unshare(0x2c020400) r6 = msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgsnd(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="03"], 0x8, 0x800) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0c59eb3100000000300012800b0001006272696467650000200002800800150088a8ffff05000700070000000a0014000180c2"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000b17873e70a000000000000020000080c00044000000000000000040900010073797a30000000000c000440000000000000000310000440000000000000000508000240000000020c000440f3ffffff000000040900010073797a30000000000900010073797a3000000000140000001100010000000000000000000500000a000000000000000000006515e0000000f566f8880882b13152a1cb0e485110e60ddbce2763d22fd62f16ee9e0acbefcf573a739ab52bc698fdbab677e6f867a38d85f586c1ebd67d72d8ef1d68c30fd1b96eb5"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 10.541088529s ago: executing program 0 (id=204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (rerun: 64) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x283}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) (async, rerun: 32) io_uring_enter(r2, 0x75fc, 0x69f, 0x2, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x35a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 9.749381044s ago: executing program 0 (id=206): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xd99, &(0x7f0000001c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0xbd) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x5, 0x2, 0x1000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r4, 0x0, 0xfffe82) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x470c, &(0x7f0000008f40)="$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") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 9.223007558s ago: executing program 3 (id=209): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) fcntl$getflags(r1, 0x3) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0x81, 0x0, 0x7, 0x0, 0x0, 0xbc, 0xc, 0x5, 0x10001, 0xfffff001, 0xd2f, 0x4ff, 0xe, 0x9, 0x4, 0x7, 0x1, 0x4, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xffffffff, 0x5, 0x7, 0x3, 0x10, 0x7, 0x9, 0x9, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x4, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x8001, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x0, 0x10, 0x4, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8000, 0x2, 0xc, 0x9cf, 0x8, 0x972, 0x4, 0x1, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x8, 0xe3a, 0xd93, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x4, 0x9, 0x4, 0x2, 0x7, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0xff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x9, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x7, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x172, 0xf8000002, 0x3ff, 0x3a8, 0x1, 0x2, 0x81, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0xfffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x3, 0x0, 0x2, 0x2, 0x7, 0x0, 0x9, 0x10003, 0x3, 0x2, 0x8, 0xd5, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x7a1, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x0, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x2, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x2, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x4, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x6, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x7efb, 0x0, 0xd, 0x401, 0xfffffc00, 0x7fff, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x8, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x219c92b0, 0x10000, 0x3ff, 0x6, 0x1ff, 0x7ff, 0x0, 0x2, 0x1, 0x1, 0x8, 0x4, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x3, 0xfffffff9, 0x7fff, 0xd733, 0x59, 0x7f, 0x80000000, 0xffff7a56, 0x128, 0x9, 0x3, 0x6, 0x4, 0xf, 0x1000, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x1, 0x9, 0x4, 0x5, 0x2, 0xfffffff6, 0x9, 0x1ff, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0xfffffff9, 0xa, 0x6, 0x6, 0x9, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x0, 0x0, 0xffff, 0x9, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x2, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x80000001, 0x6, 0x7, 0x1, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x3, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0xab5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0xfffffff7, 0x9, 0x10000, 0xff, 0x6, 0x0, 0x101, 0x7, 0x1000, 0x5, 0x8, 0x3, 0x9, 0xff, 0x1, 0x1002, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c5, 0xa, 0xffffffff, 0x10001, 0xffff0001, 0xb, 0xf, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x29b, 0x3, 0xcf2, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x9, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b1000, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x6, 0x200, 0xcecd, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0xea, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x4, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0xe, 0x10000, 0x7, 0x84a4e3c, 0x6, 0x81, 0x8, 0x1000, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x5, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0xc, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0x5, 0x8, 0x0, 0x7f, 0xad, 0x40, 0x6, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x100, 0x7ff, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x0, 0x3, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0xc, 0x8, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x23a1, 0xa, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x1, 0x8, 0x81, 0x200, 0x4, 0x5, 0x6, 0x8, 0x4, 0x9, 0x6, 0x9, 0x9, 0x5, 0xc3, 0x2b6ff772, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x3, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0x0, 0xf7f6, 0x10, 0x8, 0xd33, 0x3ff, 0x81, 0x1, 0x240000, 0x5, 0x9, 0x9, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x5, 0xfff, 0x4, 0x9, 0x2, 0x0, 0x8000, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x2, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000020, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0x8, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x1, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x200, 0x4, 0x2, 0xf7a6, 0x1, 0x2000009, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x6, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0xc321, 0x1, 0x48, 0x10001, 0x5, 0x8, 0x2, 0x7ac0, 0xfff, 0x3, 0x2, 0x2, 0x901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x1, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0x7, 0x7, 0x1163, 0x2, 0x9, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x3ff, 0x0, 0xffffffff, 0xe, 0x894, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x1, 0x80000000, 0x1, 0x8c, 0x3, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x6, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x8000, 0x3, 0x1, 0x8, 0x9, 0x2, 0x400, 0x2, 0x3, 0xffffffff, 0xa1dc, 0x2, 0x6, 0xb25, 0x2, 0x6, 0x4, 0x6, 0x5, 0x3d91, 0xffffffff, 0x2dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x0, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x7, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0xfb65, 0x9, 0x2, 0xfff, 0x1, 0x6, 0x3, 0xfffffff7, 0xf, 0x1, 0xffffff7c, 0x9, 0x7f, 0xe, 0x858, 0x7ff, 0x1, 0x6, 0x800000, 0x21f2, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x10000, 0x8e, 0xcd, 0x85, 0x6, 0x5732, 0x93e]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f00000001c0)={0x0, r0, r2, 0x8, 0x100000001, '\x00', {0x2, 0x81, 0xc, 0x4, 0x2, 0x7d1, 0x8, 0x8, {0x6, 0xee12}, {0x0, 0xf3}, {0x7f, 0x7}, 0x9, 0x44af, 0xffff7fff, 0x2, 0x200, 0x1, 0x8, 0x9, 0x6, 0x6, '\x00', 0x9, 0x7, 0x4, 0x4}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4yvo9r/3W1tib9dpef5/0/PbNG897Mzsej2fmvReAiVVZfl1amitCuPrmq8f/+cA/Zu9MebQ5R235dbolVQ0hFDE9nS3vvalGfOv9l850iouwuPya0uHJm833bg8hXAoHwrVQC3uvXn/l7cUnTl4+ceXgO68dvTGYtQcAgMnyrWtHl/b87c/7dn3w+n3Hwpbm9HR+XovpHfG8/1g88U/n/5XQni5aQquZbL7pGCrZfFMd5mstp5rNN92l/JlsudVm/r62+baUlD/VMq3TesM4S/txLRSV+bZ0pTI/3/hNHpZ/188U8xfOnX/m4pAqCqy7f98fQjgwwBAGvPwhhXq9/uPNum6rw4368OsgDCLUdw718APQlN8vXOVSfmXh7jSXNt1b+Tcfq3R+P6yDjd7/lT9e5f/6ciz/1F8HWg8mw2b9/krrlT5HO2I6v4+QP7/U7+c/LW8qvkxnyy/T7T7CuNxf6FbPqQ2ux1p1q3++X2xWX49x2g7fyPJbPz/5/3Rc/sdAZ/8Z9PX/EQsHRqAOmzpUR6AOQs+hPuwDEDCyVp6ba6hHKT9/ri/P31KSv7Ukf7Ykf1tJ/vaSfJhkv3/+p+HlYuV3fv6bvt/rYek620di/NE+65Nfj+y3/Py5337dbfn588Qwyt44/dTZrzx96nrj+f+iuf/fjvv7gZiuxc/WtThDul6YX1dvPvtfay+n0mW+e7L6pONGZUuav94ocXf7fMXuleWEluPMqnrMtb9vZ7f59rfPV8vmm41ha1bf/PxkW/a+dP6Rjqtpe01n61vN1mMmq0c6ruyKcV4PWIu0P3Z7/j/tn3OhWjxz7vzZR2I67ad/mqpuuTP9UOtCf7MxdQfuTq/tf+ZCe/ufHc3p1UrrcWHnyvSi9bhQy6YvNpLN2+Rp+uGYTt9z35maXZ4+f+Z7559e75WHCXfxhRe/e/r8+bM/8Ef6Y9Zm8Yc/hn1kAgZt4fnnvr9w8YUXHz733Olnzz579sLhI0cOLy4e+erhpYXl8/qF1rN7YDNZ+dIfdk0AAAAAAAAAAACAXv3wxPHrf3nry+822v+vtP9L7f/Tk7+p/f9Psvb/eTv51A4+tQPc1SF/edy9N9rrMZPNV43hY1l9d2fl7Mne9/EYN8fxi+3/U3v7vF/XVJ97s+l5/71pvqw7gVX9pcxkfZDk4wV+KsZXYvyrAENUzHaeHOO2/q3D6v6t076e+qfQL8V4Sv+3tDekfkxS++9u/Tql4/+uDagj628jmhMOex2Bzv418v1/t5yJD70uExBs54kK9bpRPIDRMOzxP9N1zxRf+OM3t94Jababj7UfL/P+S+FujPr4k8ofhfE/i3WrRHP8u56Ofx16V2/r57n30RX++/Mb77YUG/b2evy9nK166gd6d3mZrT6I5af1fzD0Vn79l1n5+Q2hHv0vK39bj+WvWv/9ayv//7H8tNke+nSv5TdqnO+B+XXjdP8vv26c3MrWP/Xt2ff6r3GgxtuxfJhk3ceZ7XUE29E0lPF/O9wfXav8OYwvxXQ6EKbnHPJv5H7rn56vSN8De7LlFyXfb+MyTnE3kz7+79diXPZ5SOP/pv2x1iFdaUlXO2zbcd9XYLN5b+Tv/41ZuDQCdRBGNMz2M3/jkboB16lerw/2glaJoRbO0Lf/sO8+D7v8YW//Mvn4v/k5fD7+byX7AZGP/5u/Px//N8/Px9fL8/Pxf/PtmY//m+ffmy03v4I9V5L/iZL8vSX5+1byZzvl7y95/ydL8g+GeE7SJf++kvffX5J/T0n+VEn+Z0ryP1uS/0BJ/kMl+Z8ryd/sUnuUSV1/mGR5+zyff5gc6f5Pt8//7pJ8YHz97PVDj5/63bdrjfb/M83fa+k+3rGYrsbfzj+K6fy+d2hJ38l7K6b/nuWP+vUOmCR5/xn59/uDJfnA+ErPefl8wwQqOvfY02u/Vd3O8xkvn4/xF2L8xRg/HOP5GC/E+FCMFzeofgzG47/9w9GXi5Xf+zuz/F6fJy8q7b/s836iDvdYn/z6QL/Ps+f9+PXrbstfY3MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoaksvy4tzRUhXH3z1eNPnTy3cGfKo805asuv0y2pavN9ITwS46kY/yL+cev9l860xrdjXITFUISiOT08ebNZ0vYQwqVwIFwLtbD36vVX3l584uTlE1cOvvPa0RuD2wIAAACw+X0YAAD//7e9G+Y=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) r5 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0x2f00, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x1, 0xfffc, 0x6, 0x8, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) 8.069073891s ago: executing program 4 (id=211): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfff}, 0x10) write(r0, &(0x7f0000000200)="240000001a005f0000a3d973b4e233a60c8049ff65000000000000ff81000002000a0000", 0x24) 6.548071231s ago: executing program 2 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) syz_usb_connect(0xcc11e0c674678c13, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) 6.504097178s ago: executing program 0 (id=213): syz_emit_ethernet(0x32, &(0x7f0000004ec0)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x1200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xff, 0x12649, &(0x7f0000024b80)="$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") 6.457252304s ago: executing program 3 (id=215): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x503, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xfff3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000140)={0x10, &(0x7f0000000000)=[{0x27, '\x00', @st={0x4, [{0x2, @svalue=0x6d78}, {0x2, @uvalue=0x5}, {0x1, @svalue}, {0x2, @uvalue=0x75b}]}, 0x1}, {0x6, '\x00', @st={0x4, [{0xa562fa66861d4279, @svalue=0x7}, {0x3}, {0x3, @svalue=0xffffffffffff343a}, {0x3, @svalue=0x9}]}, 0xfffffc77}, {0x1e, '\x00', @st={0x4, [{0x0, @svalue=0x65c}, {0x1, @uvalue=0x3}, {0x2, @svalue=0x7fffffff}, {0x3, @uvalue=0x6}]}, 0x400}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="440f21bbc4e11f2ac8410f01c4b8010000000f01c1c4e2f9210966420f388059fbc74424003c010000c7442402e6dd0000ff2c240f01cf6566470f388150f066b83d018ed0", 0x45}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0, 0x64}], 0x1, 0x1d, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.408858738s ago: executing program 4 (id=216): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000100)={[{@debug}, {@dioread_nolock}, {@block_validity}, {@debug}, {@quota}, {@test_dummy_encryption_v1}, {@quota}, {@errors_remount}]}, 0x9, 0x627, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') r2 = gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x3, 0x5002) ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000000)='bond_slave_0\x00') 5.863999221s ago: executing program 3 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44004) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r8, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r9 = syz_open_dev$rtc(&(0x7f00000002c0), 0x100, 0x200001) ioctl$RTC_WKALM_RD(r9, 0x80287010, &(0x7f00000003c0)) r10 = semget$private(0x0, 0x6, 0x0) semtimedop(r10, &(0x7f0000000380)=[{0x2, 0xf, 0x1000}, {0x2, 0x3, 0x3000}], 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r4, 0x25, 0x0, @val=@tracing={r6, 0x6}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.721237652s ago: executing program 4 (id=219): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, 0x0) unshare(0x4000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x1040020, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x10050200, &(0x7f0000000300)="0a55d3325c0ae05967e2dcf83975748292a882a06cc66fe353fd02dbac95e6fa3f1321f47c68484609ae7d1db5bac9a724b80aeb44e505a1ac0959c5b1c07053cce42d8458e9d82159a4e308bbf32cda949df74ce37154685b8391", 0x5b, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000440)="ee5b94183dabf5ada5e4ec1a18c233097924f64d48dfc937ac4151f7d7fce4774c588c820daca5d40c96371adffcdc983c7124782c4e5799486802da2326e448bcbb0596570c33688ed2222fc37c39f4a6ffab107b1f9896a180ad980fd95cd4e30c02c19d132eb0854e83a3937a714787478ae0df1c1df78337f5fa9532a7e0") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x4c, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) 5.71842821s ago: executing program 2 (id=220): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r0, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r8, @ANYBLOB="000000006f0018000500100002000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r10 = userfaultfd(0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000022d80)=ANY=[@ANYBLOB="9feb41db18"], 0x0, 0x26, 0x0, 0xa}, 0x28) ioctl$UFFDIO_ZEROPAGE(r10, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0xb90, 0x0, &(0x7f0000000680)="b9ff030060be250d698cbe512490", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 5.544368755s ago: executing program 1 (id=221): mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@favordynmods}]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x5, 0x600, 0x1}}, 0x20) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000240)={0x8, 0xd, 0x4, 0x0, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb018018"], &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x9}, 0x28) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x808808, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2f0, &(0x7f0000000c00)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r8, 0xc17a) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60000000001c2c00fe800000000f000000000ce2000000bb67"], 0x0) unshare(0x8040600) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, 0x0, 0x0) 5.363139994s ago: executing program 2 (id=222): syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYBLOB="d068c74cf8bb9fbb58", @ANYRES16=r0, @ANYRES8, @ANYRES16=r0, @ANYRES64=r0]) 5.217325736s ago: executing program 3 (id=223): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000001640)="e097566f92d782dd07cc963c3c8a", 0x0, 0x8c5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000140)={0x100000001, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) (async, rerun: 32) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (rerun: 32) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) (async, rerun: 32) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0xfdef) (async, rerun: 32) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) r5 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000201811d00000020f1ffffff0300000aa28a1fcff095ca"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4008804) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") (async, rerun: 64) close(0x3) 4.734670931s ago: executing program 4 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0xfffffffc, 0x8000}}], 0x18}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') exit(0x0) read$FUSE(r4, &(0x7f0000008200)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0xb, 0x1, 0x5, 0x99f, 0x7e, 0x5, 0xfffffffc}, {0x0, 0xffff0002, 0x4, 0xb, 0x4, 0x1, 0x80}]}) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8894}, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.603653281s ago: executing program 1 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x880) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x81}}, 0x10) 2.665844606s ago: executing program 1 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000040)=""/222, 0xde}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000b80)=""/184, 0xb8}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/171, 0xab}], 0x6}, 0x22120) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r1, 0x0, 0x5, 0x0, &(0x7f0000003680)) (async) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) 2.336622601s ago: executing program 2 (id=227): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@llc={0x1a, 0x103, 0x2, 0xd, 0x8, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)=':', 0x50, 0x24044013, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1832c1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e21, 0x1, @private2, 0x817e}, {0xa, 0x4e24, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1, {[0x27, 0x80, 0x7, 0x9, 0x9, 0x4, 0x44d, 0xf]}}, 0x5c) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='decodes m'], 0xc) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25DELUID(r4, 0x891e, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)="1121e5", 0x3}, 0x1, 0x0, 0x0, 0x24008801}, 0xc0a4) recvmmsg(r5, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x40500f0) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, 0x0, 0x0) 1.105265285s ago: executing program 1 (id=228): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n'], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x40, 0x24008051}}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"/1004], 0x3ec}}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0x3], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n'], 0x50) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r3, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x40, 0x24008051}}], 0x1, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac0020000020a030000000000000000000a000004f0000600c311a54e72fb28108aa29df66ddaf45b2f64d94cb2010f092e9583ac2ae21121814602171d5df6b4e39fa693a6f94c525560917b9b963556352a30293c6c8a7290b475734b47ad8699ca1f9769e0f0ff63c5b6f2391f6d57ba0b34a2371fe59a4eefd7787fdf2c7cc4e89f20d494ebc1c9912ccb0c306fae1f9f295034219b11b43082bf4f8fcd9a1faf6bf24c519bec684c9b6c4a55d0597aeb8c040fc6a2a02fe7e994b653b8899fa57d56ea20fe049545d084db498a1cfefaa6f69f9744ef0426649fd955038129d09061e5f1ca5e218ac8d9909b2eddf13a9b9616386b7c94707c68e6669a0b72fede1f0900010073797a3100000000de0006009d556cd91982e35012ddd2f2b3e9e0e9f82fd308f5b6fd737650e0d86cc08b199fc73cd6060e86332c3422fb02dba38294d9fb45e5cf0937ef1b89c5efba3b342b1be21541a3f311cf049367bcbc7c7022065727f76f3c1c43549198d29dd66114ac80b2949a2b89d039493fa40c0d5bffcf1472449ff87fda6497cd0e6398617e701b12c6f1d7fc577fec1da498583832e737d7e657df4355e64fafba979493e5d65ef35489053a4168708b841c46af3eb73c50b19fb921223420cd47c85740df03d9a26fb5e1ade3b4637a00000900010073797a30000000000900010073797a30000000000900010073797a30000000000c00044000000000000000050900010073797a3000000000910006005cae5bbeff58ac6a93afc71a5ba8e98b0e5cf2e44204abe34427cd3f0bd9fb853a39dfc3ecbf999139e71443865f1a750de4d14ec51f2f0cb9520d95653a48ffd1da1f368a0201d7d426bd2856046e870222da1c0ca74e8a329c860872931538b62eb8a481ada9f51e6449307873b96ae5859ee56b4342045ebf7d3dab517f4b57c269040fe26fba05eb9845d10000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000000000d8000000000a0104000000000000000002000001c2000600b702eb9fe193968ba8ead49058470403fb722b02a0db718633a4e3ecc64c9854f9c7eefea303f2a3d77dbf98e5e63ae58c2dae15c1f5583c0b5ccef40c2711c6f31e8af89757989326391f137d77eef16823018b4ff306672893cde09f3f2338f7e6dafd53536032470c095fce4e2ae7b2f5656bd53b452918989d2d64c45ecad50da0defa3528501f7fc01ad096ddf34b6b59371e0e2c094f19a52fca20f964eab86b27586eb1eda9a17968e24179b50bba0504d722932853847be9e30c0000140000001100010000000000000000000000000a00"/1004], 0x3ec}}, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000000)=[0x1, 0x3], 0x2) (async) 509.563508ms ago: executing program 2 (id=229): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x4e, 0x0, 0x4}]}}}}}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa75, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0xa021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004001c}, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xdc, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="240000000000000011ddbf78667bfa997ceaf7b563b5954a2f03ef842c73642c2a579cc5d17b73b1172e713e7da9a72e48f40bec9ac4b0a147e4fb98611aeccf00000015"], 0x28, 0x7ffffff7}}], 0x1, 0x48880) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) 508.918592ms ago: executing program 3 (id=230): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x28, 0x0, &(0x7f0000000500)="f8ad48cc02cb29dc88007f5b86dd27c000007e01dd8aa1e00aaf650c8b06a981f2d2b0e0821e255a", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400000000000000000000004e1e64098786ebaed50c775e6ab396705cadd49c94d79774cb87acdcb42810dd6a0d", @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x80) pwrite64(r3, 0x0, 0x0, 0xf00) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000019c0)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r8 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x2e25, 0x0, 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r9, 0x3, 0xf00, 0x10000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000900)={0x10, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630e, 0x0, 0x100000000000000}], 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x1) close_range(r0, r5, 0x0) 508.645466ms ago: executing program 0 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @loopback}, {0xa, 0x20, 0x7, @empty, 0x3}, r6, 0x8}}, 0x48) (async, rerun: 64) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x2, @void}, 0x10) (async, rerun: 64) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f"], 0xfdef) (rerun: 64) 437.049601ms ago: executing program 4 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="362e0fc77de80f01f6f3660f0017c4c35d46deb98246fb0cc744240004000000c744240214b9cc13c7442406000000000f011c240fb0dab961020000b800000100ba000000000f303e0f08c4e17853f6", 0x50}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 258.676597ms ago: executing program 1 (id=233): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x16c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') statx(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x200, &(0x7f0000006600)) 1.259519ms ago: executing program 1 (id=234): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=00000000000000000001252,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646d6f64653d30303030303030303030303030303030303030303030342c726f6f746469723d30303030303030303030303030303030303030342c7569643d23d4aa672f4da4cd5097226959864a1c21634bb2675e344739517efd48ef1b0cf0ea2d3ff540541a92c66c37ccca31dbde5c4cc508c98b6fdcb33f91eb81ec88fceab9e3c48cc77ce35be161586ec20950eb579aa7893cecf692542e42855e109d9dcebe39e25f0a01338e13eac6a6392e4d648c0ca84a850fcb0bfa8898227f38165296a1d23579ff543b6ec73759d9bde6ab102e06ef6eacb2c5ae6709b7bd275a6d6b3f8c32c46862b614f442146a306043aa9f8b7a0091e172db7d7ac786d2f2f32bdf58918125a5c50ea18567a9da4450fb4c7fc0e77d", @ANYRESDEC=0x0, @ANYBLOB=',unhide,gid=ignore,lastblock=00000000000000000006,longad,iocharset=macromanian,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x49, {"0f01ca2e646740c159368266bad004b0bdee66baa100ed640f017c9993660f38816da4470f019d0d000000f3430fc776100f01c3460f013a"}}], 0x49}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="240000004001feffff05000000001d0f0000042042800c00018006ffffdf5600ff0cdcec721a4fa900800a0000ee1a8ef7780547ecb5a3da730958bed4022385b49833d4835cf25a212838d2ed28891b1ff633395f4d5406e3251e393c9dc72dbca8da48bee5ae6910bf7240c5dab3ae28aeaf98968ccf617aa87c6000eaac0cd8aa4cffb8bb7d7e71abf0ecf285733dba8684ce9710d14decd84c044a2d9507ab0a29f3c6ee0c71bc4f1a31f9021c315df3280fff4ab352000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x7, 0xd9, 0x40, 0x1, 0xb, 0x8, 0xc, 0x0, 0x80, 0x40, 0x1, 0x5}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x0, 0x80000004000080, 0x0, 0x8, 0x1, 0x4, 0x0, 0x8001], 0x1, 0x3c4a10}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r8 = open(&(0x7f0000000140)='./file1\x00', 0x1, 0x2) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000540)=[@wrmsr={0x65, 0x20, {0x975}}, @rdmsr={0x66, 0x18, {0xbbc}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0xca8e}}, @set_irq_handler={0xc8, 0x20, {0x29}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16=0x4, 0x54, 0x70d, 0x77}}], 0xb0}) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r7, 0x1000009, 0x110, r9, 0x0) r10 = open(&(0x7f00000000c0)='./file0\x00', 0xc0941, 0x1d2) fcntl$setlease(r0, 0x400, 0x0) fcntl$getownex(r10, 0x10, &(0x7f0000000080)) open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) 0s ago: executing program 4 (id=235): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000005, @thr={&(0x7f00000003c0)="9f961d34437546d898ab6c121fc4938756bd7c32de116a749816934bf63d807191", &(0x7f0000000600)="9e617001bdb371b1dc7209743ac009b7e1ff7327b603741c8d6b0446216125dce8aa06e022c1b89916ef5f6310c62231fd16d66451e408a15b31bab36a9c77ccf479a109191833ae59239cc5ee7d915ccc6b0696aeb5663fb89e27626d4ef515090936a72b7b49c12e0922bd5d991b186e222bce71ac5700f3b82d3be00c2ecc2fc5356f91dedb40fdabe48d1f59322b1ba83e4c74ed7c96a7b264aaaa8fecd6ea32897aa5c3dbeb2f011456b0d591c9699671dab94f9881e9f8d2c32e27c06945430ba763f648ddb07dfa56972da2d42d5e9ac129a8312c886504f4"}}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0/file0/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, 0x0) unshare(0x4000400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000580)='./file0/file0/../file0\x00', &(0x7f0000000540)='mqueue\x00', 0xb80000, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40010000, &(0x7f0000000800)="0a55d3325c0ae05967e2dcf83975748292a882a06cc66fe353fd02dbac95e6fa3f1321f47c68484609ae7d1db5bac9a724b80aeb44e505a1ac0959c5b1c07053cce42d8458e9d82159a4e308bbf32cda949df74ce37154685b8391", 0x5b, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000780)="ee5b94183dabf5ada5e4ec1a18c233097924f64d48dfc937ac4151f7d7fce4774c588c820daca5d40c96371adffcdc983c7124782c4e5799486802da2326e448bcbb0596570c33688ed2222fc37c39f4a6ffab107b1f9896a180ad980fd95cd4e30c02c19d132eb0854e83a3937a714787478ae0df1c1df78337f5fa9532a7e0") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 63.769384][ T5824] cgroup: Unknown subsys name 'net' [ 63.883290][ T5824] cgroup: Unknown subsys name 'cpuset' [ 63.892817][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.262869][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.312721][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.313383][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.325873][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.337800][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.337826][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.345665][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.359319][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.360527][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.367623][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.374800][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.384996][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.389902][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.396880][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.409850][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.410071][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.419239][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.432005][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.440847][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.443156][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.450836][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.457301][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.472227][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.479598][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.494401][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.502381][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.114839][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.214742][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 70.297439][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.393514][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 70.417288][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.484490][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.492592][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.500040][ T5838] bridge_slave_0: entered allmulticast mode [ 70.507366][ T5838] bridge_slave_0: entered promiscuous mode [ 70.547456][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.555012][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.562557][ T5838] bridge_slave_1: entered allmulticast mode [ 70.570211][ T5838] bridge_slave_1: entered promiscuous mode [ 70.658471][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.665892][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.673508][ T5844] bridge_slave_0: entered allmulticast mode [ 70.681072][ T5844] bridge_slave_0: entered promiscuous mode [ 70.711837][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.719123][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.726820][ T5839] bridge_slave_0: entered allmulticast mode [ 70.734504][ T5839] bridge_slave_0: entered promiscuous mode [ 70.742642][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.749954][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.757148][ T5844] bridge_slave_1: entered allmulticast mode [ 70.764728][ T5844] bridge_slave_1: entered promiscuous mode [ 70.785332][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.800229][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.807555][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.814907][ T5839] bridge_slave_1: entered allmulticast mode [ 70.822401][ T5839] bridge_slave_1: entered promiscuous mode [ 70.869630][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.910073][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.917391][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.924758][ T5840] bridge_slave_0: entered allmulticast mode [ 70.932443][ T5840] bridge_slave_0: entered promiscuous mode [ 70.965117][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.978804][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.988506][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.996180][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.003423][ T5840] bridge_slave_1: entered allmulticast mode [ 71.011334][ T5840] bridge_slave_1: entered promiscuous mode [ 71.027866][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.035301][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.042679][ T5837] bridge_slave_0: entered allmulticast mode [ 71.050278][ T5837] bridge_slave_0: entered promiscuous mode [ 71.061180][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.073890][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.113621][ T5838] team0: Port device team_slave_0 added [ 71.120107][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.127359][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.134656][ T5837] bridge_slave_1: entered allmulticast mode [ 71.142275][ T5837] bridge_slave_1: entered promiscuous mode [ 71.186461][ T5838] team0: Port device team_slave_1 added [ 71.216871][ T5844] team0: Port device team_slave_0 added [ 71.226654][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.259717][ T5839] team0: Port device team_slave_0 added [ 71.268117][ T5844] team0: Port device team_slave_1 added [ 71.277264][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.316163][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.328242][ T5839] team0: Port device team_slave_1 added [ 71.345538][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.352458][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.374986][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.381994][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.408379][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.423655][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.457519][ T5840] team0: Port device team_slave_0 added [ 71.465280][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.472287][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.498536][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.498662][ T5851] Bluetooth: hci0: command tx timeout [ 71.539849][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.546821][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.569905][ T5851] Bluetooth: hci2: command tx timeout [ 71.573255][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.578719][ T51] Bluetooth: hci1: command tx timeout [ 71.594227][ T5840] team0: Port device team_slave_1 added [ 71.594866][ T5845] Bluetooth: hci3: command tx timeout [ 71.605809][ T5845] Bluetooth: hci4: command tx timeout [ 71.627973][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.634972][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.661316][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.684849][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.691860][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.717801][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.730499][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.737458][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.763429][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.786247][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.793255][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.819672][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.833737][ T5837] team0: Port device team_slave_0 added [ 71.841629][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.848586][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.874567][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.915659][ T5838] hsr_slave_0: entered promiscuous mode [ 71.923422][ T5838] hsr_slave_1: entered promiscuous mode [ 71.941713][ T5837] team0: Port device team_slave_1 added [ 72.018949][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.026166][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.052475][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.108130][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.115173][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.141411][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.157352][ T5844] hsr_slave_0: entered promiscuous mode [ 72.164355][ T5844] hsr_slave_1: entered promiscuous mode [ 72.171018][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 72.176811][ T5844] Cannot create hsr debugfs directory [ 72.238138][ T5840] hsr_slave_0: entered promiscuous mode [ 72.245041][ T5840] hsr_slave_1: entered promiscuous mode [ 72.251734][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 72.257502][ T5840] Cannot create hsr debugfs directory [ 72.268716][ T5839] hsr_slave_0: entered promiscuous mode [ 72.275615][ T5839] hsr_slave_1: entered promiscuous mode [ 72.282277][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 72.288017][ T5839] Cannot create hsr debugfs directory [ 72.425771][ T5837] hsr_slave_0: entered promiscuous mode [ 72.432440][ T5837] hsr_slave_1: entered promiscuous mode [ 72.439134][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 72.445068][ T5837] Cannot create hsr debugfs directory [ 72.954039][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.972083][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.982919][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.004209][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.081012][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.093463][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.103984][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.121413][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.207788][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.231322][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.243007][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.270677][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.364345][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.376229][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.402011][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.415605][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.489016][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.550227][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.569587][ T5851] Bluetooth: hci0: command tx timeout [ 73.575934][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.589135][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.610835][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.622816][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.649771][ T5845] Bluetooth: hci4: command tx timeout [ 73.655658][ T51] Bluetooth: hci1: command tx timeout [ 73.655709][ T5853] Bluetooth: hci3: command tx timeout [ 73.661286][ T5851] Bluetooth: hci2: command tx timeout [ 73.680971][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.688445][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.738155][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.745304][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.785256][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.867915][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.919847][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.926992][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.973748][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.980968][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.004741][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.031569][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.121197][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.144889][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.180623][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.187763][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.217951][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.225110][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.247550][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.254686][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.283549][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.290808][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.328555][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.379131][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.481959][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.565699][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.572848][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.600302][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.607446][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.735535][ T5838] veth0_vlan: entered promiscuous mode [ 74.757985][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.804715][ T5838] veth1_vlan: entered promiscuous mode [ 75.046994][ T5838] veth0_macvtap: entered promiscuous mode [ 75.090486][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.107643][ T5838] veth1_macvtap: entered promiscuous mode [ 75.230275][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.247070][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.269765][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.324628][ T1043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.335526][ T1043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.355831][ T1043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.364972][ T1043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.408354][ T5839] veth0_vlan: entered promiscuous mode [ 75.420370][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.515509][ T5839] veth1_vlan: entered promiscuous mode [ 75.525151][ T5837] veth0_vlan: entered promiscuous mode [ 75.606786][ T5840] veth0_vlan: entered promiscuous mode [ 75.631667][ T5837] veth1_vlan: entered promiscuous mode [ 75.631931][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.650437][ T5851] Bluetooth: hci0: command tx timeout [ 75.673438][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.711163][ T5840] veth1_vlan: entered promiscuous mode [ 75.729409][ T5851] Bluetooth: hci3: command tx timeout [ 75.729477][ T5853] Bluetooth: hci4: command tx timeout [ 75.736497][ T5851] Bluetooth: hci2: command tx timeout [ 75.740678][ T5853] Bluetooth: hci1: command tx timeout [ 75.767702][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.781545][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.796500][ T5839] veth0_macvtap: entered promiscuous mode [ 75.817465][ T5844] veth0_vlan: entered promiscuous mode [ 75.846980][ T5839] veth1_macvtap: entered promiscuous mode [ 75.881595][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.903179][ T5844] veth1_vlan: entered promiscuous mode [ 75.931822][ T5840] veth0_macvtap: entered promiscuous mode [ 75.978085][ T5840] veth1_macvtap: entered promiscuous mode [ 76.022473][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.092348][ T5837] veth0_macvtap: entered promiscuous mode [ 76.105110][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.135467][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.144577][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.157630][ T5837] veth1_macvtap: entered promiscuous mode [ 76.175295][ T1043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.184242][ T1043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.218835][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.240349][ T5844] veth0_macvtap: entered promiscuous mode [ 76.258796][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.284861][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.296167][ T5844] veth1_macvtap: entered promiscuous mode [ 76.313433][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.345817][ T1043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.366571][ T1043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.376435][ T1043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.417241][ T1043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.426184][ T1043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.458092][ T1043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.468280][ T1043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.495207][ T1043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.552029][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.554332][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.564789][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.597033][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.606409][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.614617][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.681931][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.691558][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.710585][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.720161][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.742473][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.758016][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.769058][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.783989][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.844363][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.869139][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.912851][ T5966] loop3: detected capacity change from 0 to 512 [ 76.973117][ T5966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.999068][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.001630][ T5966] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.055603][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.326966][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.354000][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.455521][ T5977] loop1: detected capacity change from 0 to 512 [ 77.730767][ T5853] Bluetooth: hci0: command tx timeout [ 77.809400][ T5853] Bluetooth: hci2: command tx timeout [ 77.815547][ T5853] Bluetooth: hci4: command tx timeout [ 77.826540][ T5853] Bluetooth: hci3: command tx timeout [ 77.859411][ T51] Bluetooth: hci1: command tx timeout [ 77.913747][ T5976] loop4: detected capacity change from 0 to 256 [ 77.921780][ T5976] exfat: Deprecated parameter 'utf8' [ 77.927206][ T5976] exfat: Deprecated parameter 'utf8' [ 78.030423][ T5976] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 78.063917][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.125960][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.174581][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.373795][ T29] audit: type=1800 audit(1774249501.049:2): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="bus" dev="tmpfs" ino=24 res=0 errno=0 [ 78.544919][ T5982] loop0: detected capacity change from 0 to 4096 [ 78.687398][ T5994] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.028456][ T5982] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 79.156873][ T6005] loop2: detected capacity change from 0 to 128 [ 79.188295][ T6005] adfs: Bad value for 'gid' [ 79.208255][ T6005] adfs: Bad value for 'gid' [ 79.523198][ T6009] loop0: detected capacity change from 0 to 512 [ 79.539031][ T6005] loop2: detected capacity change from 0 to 2048 [ 79.594830][ T6009] EXT4-fs (loop0): DAX unsupported by block device. [ 79.759722][ T6011] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.988648][ T5926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.464376][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 80.474663][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 86, changing to 7 [ 80.486077][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9231, setting to 1024 [ 80.501071][ T5926] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 80.510556][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.519019][ T5926] usb 1-1: Product: syz [ 80.523870][ T5926] usb 1-1: Manufacturer: syz [ 80.528565][ T5926] usb 1-1: SerialNumber: syz [ 80.594129][ T5926] usb 1-1: config 0 descriptor?? [ 80.677288][ T5926] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 41, bLength 9, bSynchAddress c3 [ 80.708441][ T6011] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 80.753166][ T6011] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 80.792943][ T6011] Remounting filesystem read-only [ 80.808586][ T5844] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 81.520547][ T6028] loop4: detected capacity change from 0 to 128 [ 82.589797][ T5926] usb 1-1: USB disconnect, device number 2 [ 82.941584][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.951461][ T6043] loop0: detected capacity change from 0 to 512 [ 82.998468][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.025985][ T6043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.057938][ T6043] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.099556][ T5842] kernel write not supported for file bpf-map (pid: 5842 comm: kworker/0:3) [ 83.112335][ T6043] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58606!=15501) [ 83.154199][ T6043] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 83.260300][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 83.277900][ T6022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14'. [ 83.353775][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.389568][ T5899] usb 5-1: Product: syz [ 83.393930][ T5899] usb 5-1: Manufacturer: syz [ 83.399039][ T5899] usb 5-1: SerialNumber: syz [ 83.484778][ T6022] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 83.847868][ T6022] loop2: detected capacity change from 0 to 128 [ 83.943065][ T6022] ======================================================= [ 83.943065][ T6022] WARNING: The mand mount option has been deprecated and [ 83.943065][ T6022] and is ignored by this kernel. Remove the mand [ 83.943065][ T6022] option from the mount to silence this warning. [ 83.943065][ T6022] ======================================================= [ 84.040412][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 84.093818][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 84.115216][ T6022] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 84.189522][ T6022] hpfs: filesystem error: improperly stopped [ 84.203416][ T6022] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 84.243787][ T6022] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 84.340725][ T6059] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.480091][ T6060] Process accounting resumed [ 84.530000][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 84.571250][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 84.637562][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 84.672783][ T5899] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 84.736305][ T5899] usb 5-1: USB disconnect, device number 2 [ 84.787848][ T6056] loop1: detected capacity change from 0 to 32768 [ 84.866446][ T6056] (syz.1.23,6056,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.932923][ T6056] (syz.1.23,6056,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 85.081652][ T6056] JBD2: Ignoring recovery information on journal [ 85.389769][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.417471][ T6056] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 86.082674][ T6073] loop4: detected capacity change from 0 to 65536 [ 86.366614][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 86.388282][ T5926] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 86.401096][ T5926] usb 4-1: config 0 has no interface number 0 [ 86.407249][ T5926] usb 4-1: config 0 interface 12 has no altsetting 0 [ 86.416604][ T5926] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 86.439250][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.447373][ T5926] usb 4-1: Product: syz [ 86.458996][ T5926] usb 4-1: Manufacturer: syz [ 86.475409][ T5926] usb 4-1: SerialNumber: syz [ 86.503609][ T5926] usb 4-1: config 0 descriptor?? [ 86.520736][ T6064] loop2: detected capacity change from 0 to 40427 [ 86.541399][ T6064] F2FS-fs: heap/no_heap options were deprecated [ 86.586716][ T6056] (syz.1.23,6056,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 86.608684][ T6064] F2FS-fs (loop2): build fault injection rate: 19 [ 86.628624][ T6064] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 86.661253][ T6064] F2FS-fs (loop2): invalid crc value [ 86.701511][ T10] cfg80211: failed to load regulatory.db [ 86.751282][ T6064] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 86.964348][ T6056] syz.1.23 (6056) used greatest stack depth: 19064 bytes left [ 86.982103][ T6064] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 87.016957][ T6064] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 87.054521][ T6064] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.119867][ T5838] ocfs2: Unmounting device (7,1) on (node local) [ 87.126416][ T6064] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060 [ 87.267583][ T5844] syz-executor: attempt to access beyond end of device [ 87.267583][ T5844] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 87.316828][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 87.316856][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.316874][ T5844] Call Trace: [ 87.316887][ T5844] [ 87.316896][ T5844] dump_stack_lvl+0xe8/0x150 [ 87.316930][ T5844] f2fs_handle_critical_error+0x37c/0x540 [ 87.316963][ T5844] f2fs_write_end_io+0x1274/0x1740 [ 87.317015][ T5844] __submit_merged_bio+0x256/0x6a0 [ 87.317048][ T5844] f2fs_submit_merged_write+0x284/0x390 [ 87.317080][ T5844] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 87.317121][ T5844] f2fs_sync_node_pages+0x14bf/0x1680 [ 87.317165][ T5844] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 87.317223][ T5844] f2fs_write_checkpoint+0xeb8/0x26a0 [ 87.317237][ T5844] ? __lock_acquire+0x6b5/0x2cf0 [ 87.317283][ T5844] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 87.317341][ T5844] kill_f2fs_super+0x314/0x720 [ 87.317362][ T5844] ? __pfx_kill_f2fs_super+0x10/0x10 [ 87.317387][ T5844] ? lockdep_hardirqs_on+0x7a/0x110 [ 87.317418][ T5844] deactivate_locked_super+0xbc/0x130 [ 87.317444][ T5844] cleanup_mnt+0x437/0x4d0 [ 87.317460][ T5844] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.317483][ T5844] task_work_run+0x1d9/0x270 [ 87.317505][ T5844] ? __pfx_task_work_run+0x10/0x10 [ 87.317533][ T5844] exit_to_user_mode_loop+0xed/0x480 [ 87.317556][ T5844] ? rcu_is_watching+0x15/0xb0 [ 87.317579][ T5844] do_syscall_64+0x32d/0xf80 [ 87.317602][ T5844] ? trace_irq_disable+0x3b/0x140 [ 87.317623][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.317642][ T5844] ? clear_bhb_loop+0x40/0x90 [ 87.317664][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.317682][ T5844] RIP: 0033:0x7fc55039d9d7 [ 87.317709][ T5844] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 87.317724][ T5844] RSP: 002b:00007ffef79c83f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.317744][ T5844] RAX: 0000000000000000 RBX: 00007fc550432050 RCX: 00007fc55039d9d7 [ 87.317757][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef79c84b0 [ 87.317769][ T5844] RBP: 00007ffef79c84b0 R08: 00007ffef79c94b0 R09: 00000000ffffffff [ 87.317782][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef79c9540 [ 87.317794][ T5844] R13: 00007fc550432050 R14: 000000000001545b R15: 00007ffef79c9580 [ 87.317825][ T5844] [ 87.317845][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 87.552801][ T6108] capability: warning: `syz.0.39' uses deprecated v2 capabilities in a way that may be insecure [ 87.580006][ T6094] loop4: detected capacity change from 0 to 32768 [ 87.595719][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 87.595744][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.595755][ T5844] Call Trace: [ 87.595762][ T5844] [ 87.595770][ T5844] dump_stack_lvl+0xe8/0x150 [ 87.595803][ T5844] f2fs_handle_critical_error+0x37c/0x540 [ 87.595838][ T5844] f2fs_write_end_io+0x1274/0x1740 [ 87.595879][ T5844] __submit_merged_bio+0x256/0x6a0 [ 87.595910][ T5844] f2fs_submit_merged_write+0x284/0x390 [ 87.595942][ T5844] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 87.595992][ T5844] f2fs_sync_node_pages+0x14bf/0x1680 [ 87.596035][ T5844] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 87.596105][ T5844] f2fs_write_checkpoint+0xeb8/0x26a0 [ 87.596125][ T5844] ? __lock_acquire+0x6b5/0x2cf0 [ 87.596181][ T5844] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 87.596257][ T5844] kill_f2fs_super+0x314/0x720 [ 87.596282][ T5844] ? __pfx_kill_f2fs_super+0x10/0x10 [ 87.596318][ T5844] ? lockdep_hardirqs_on+0x7a/0x110 [ 87.596357][ T5844] deactivate_locked_super+0xbc/0x130 [ 87.596387][ T5844] cleanup_mnt+0x437/0x4d0 [ 87.596406][ T5844] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.596433][ T5844] task_work_run+0x1d9/0x270 [ 87.596460][ T5844] ? __pfx_task_work_run+0x10/0x10 [ 87.596494][ T5844] exit_to_user_mode_loop+0xed/0x480 [ 87.596518][ T5844] ? rcu_is_watching+0x15/0xb0 [ 87.596542][ T5844] do_syscall_64+0x32d/0xf80 [ 87.596566][ T5844] ? trace_irq_disable+0x3b/0x140 [ 87.596587][ T5844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.596606][ T5844] ? clear_bhb_loop+0x40/0x90 [ 87.596629][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.596647][ T5844] RIP: 0033:0x7fc55039d9d7 [ 87.596665][ T5844] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 87.596680][ T5844] RSP: 002b:00007ffef79c83f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.596701][ T5844] RAX: 0000000000000000 RBX: 00007fc550432050 RCX: 00007fc55039d9d7 [ 87.596714][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef79c84b0 [ 87.596726][ T5844] RBP: 00007ffef79c84b0 R08: 00007ffef79c94b0 R09: 00000000ffffffff [ 87.596739][ T5844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef79c9540 [ 87.596751][ T5844] R13: 00007fc550432050 R14: 000000000001545b R15: 00007ffef79c9580 [ 87.596785][ T5844] [ 87.597058][ T5844] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 87.901960][ T6094] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 88.044783][ T6094] XFS (loop4): Ending clean mount [ 88.114298][ T5926] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 88.148367][ T5926] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 88.162645][ T5926] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 88.171451][ T6094] XFS (loop4): Quotacheck needed: Please wait. [ 88.179356][ T5926] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 88.216580][ T5926] usb 4-1: USB disconnect, device number 2 [ 88.343377][ T6094] XFS (loop4): Quotacheck: Done. [ 88.525618][ T6129] loop1: detected capacity change from 0 to 4096 [ 88.606483][ T6132] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.619523][ T5926] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 88.716223][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 88.738457][ T6136] overlayfs: missing 'lowerdir' [ 88.779145][ T6130] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 88.789516][ T6130] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 88.792508][ T5926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.823484][ T6130] kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 88.841359][ T5926] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 88.885840][ T5926] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 88.918769][ T5926] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 88.956105][ T5926] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.970730][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 88.999067][ T5926] usb 4-1: Product: syz [ 89.007711][ T5926] usb 4-1: SerialNumber: syz [ 89.076136][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.46'. [ 89.087623][ T6127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.090937][ T6148] Zero length message leads to an empty skb [ 89.107350][ T5837] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 89.171714][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 89.211392][ T6148] loop2: detected capacity change from 0 to 2048 [ 89.238296][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.48'. [ 89.261952][ T6148] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 89.292637][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.342846][ T6152] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.360057][ T6127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.367567][ T6127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.388726][ T29] audit: type=1800 audit(1774249512.059:3): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.46" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 89.605830][ T6155] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 89.618654][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 89.628104][ T6155] netlink: 658 bytes leftover after parsing attributes in process `syz.1.50'. [ 89.637112][ T6155] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 89.735725][ T6166] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 89.753501][ T6166] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.851177][ T5926] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 89.872099][ T6167] loop1: detected capacity change from 0 to 4096 [ 89.882036][ T5926] cdc_ncm 4-1:1.0: bind() failure [ 89.883139][ T6172] loop2: detected capacity change from 0 to 512 [ 89.925103][ T6172] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.53: Invalid inode bitmap blk 4 in block_group 0 [ 89.943229][ T6172] loop2: lost filesystem error report for type 5 error -117 [ 89.953750][ T5926] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 89.958781][ T6172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.026061][ T5926] cdc_ncm 4-1:1.1: bind() failure [ 90.107037][ T6167] ntfs3(loop1): Failed to load $Extend (-22). [ 90.107131][ T6167] ntfs3(loop1): Failed to initialize $Extend. [ 90.379273][ T10] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 90.675226][ T5954] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.219373][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 91.232663][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 91.246648][ T5954] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.257824][ T10] usb 2-1: can't read configurations, error -22 [ 91.269471][ T5954] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 91.284940][ T10] usb usb2-port1: attempt power cycle [ 91.299232][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.312153][ T5954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.324582][ T5954] usb 3-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 91.334351][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.342487][ T5954] usb 3-1: Product: syz [ 91.346957][ T5954] usb 3-1: Manufacturer: syz [ 91.351732][ T5954] usb 3-1: SerialNumber: syz [ 91.473336][ T6182] loop4: detected capacity change from 0 to 32768 [ 91.533172][ T6184] loop0: detected capacity change from 0 to 1024 [ 91.537263][ T6182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.55 (6182) [ 91.542865][ T6184] hfsplus: Unknown parameter 'nïdecomp{se' [ 91.564560][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'. [ 91.649138][ T807] usb 4-1: USB disconnect, device number 3 [ 91.655241][ T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 91.751059][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 91.793842][ T10] usb 2-1: can't read configurations, error -22 [ 91.972884][ T6172] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.53: inode has both inline data and extents flags [ 91.991112][ T10] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 92.032689][ T6172] netlink: 104 bytes leftover after parsing attributes in process `syz.2.53'. [ 92.047110][ T10] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 92.094429][ T10] usb 2-1: can't read configurations, error -22 [ 92.107798][ T29] audit: type=1800 audit(1774249514.789:4): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 92.114950][ T6182] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.154324][ T10] usb usb2-port1: unable to enumerate USB device [ 92.212379][ T6182] BTRFS info (device loop4): using crc32c checksum algorithm [ 92.317678][ T13] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 92.335578][ T6182] BTRFS warning (device loop4): couldn't read tree root [ 92.376931][ T6182] BTRFS warning (device loop4): try to load backup roots slot 1 [ 92.424660][ T1006] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 92.524969][ T6207] process 'syz.3.58' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 92.559056][ T6182] BTRFS warning (device loop4): couldn't read tree root [ 92.577547][ T5954] usb 3-1: USB disconnect, device number 2 [ 92.598840][ T6182] BTRFS warning (device loop4): try to load backup roots slot 2 [ 92.651587][ T78] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 92.715640][ T6182] BTRFS warning (device loop4): couldn't read tree root [ 92.746383][ T6182] BTRFS warning (device loop4): try to load backup roots slot 3 [ 92.902382][ T6182] BTRFS info (device loop4): checking UUID tree [ 92.915699][ T6182] BTRFS info (device loop4): setting nodatasum [ 92.931363][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.950732][ T6182] BTRFS info (device loop4): enabling ssd optimizations [ 93.016681][ T6182] BTRFS info (device loop4): turning on flush-on-commit [ 93.082359][ T6182] BTRFS info (device loop4): turning on async discard [ 93.153225][ T6182] BTRFS info (device loop4): enabling free space tree [ 93.182065][ T6182] BTRFS info (device loop4): trying to use backup root at mount time [ 93.223415][ T6182] BTRFS info (device loop4): max_inline set to 0 [ 93.658858][ T6232] loop3: detected capacity change from 0 to 1024 [ 93.678073][ T6232] EXT4-fs: Invalid want_extra_isize 131 [ 93.741954][ T5837] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.952068][ T5899] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.120489][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 94.139078][ T5899] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 94.157103][ T5899] usb 2-1: config 0 has no interface number 0 [ 94.178188][ T5899] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.215579][ T5899] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.265565][ T5899] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 94.318266][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.373645][ T6232] loop3: detected capacity change from 0 to 32768 [ 94.382200][ T5899] usb 2-1: config 0 descriptor?? [ 94.431256][ T6246] loop0: detected capacity change from 0 to 128 [ 94.442631][ T6232] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 94.541409][ T6246] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000ff0) [ 94.562629][ T6232] XFS (loop3): Ending clean mount [ 94.573657][ T6246] FAT-fs (loop0): Filesystem has been set read-only [ 94.581015][ T6232] XFS (loop3): Quotacheck needed: Please wait. [ 94.599498][ T24] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 94.638487][ T6246] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000ff0) [ 94.693848][ T6232] XFS (loop3): Quotacheck: Done. [ 94.699115][ T6246] Bluetooth: MGMT ver 1.23 [ 94.793993][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 94.794027][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.818419][ T24] usb 3-1: config 0 descriptor?? [ 94.828848][ T5839] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 95.058169][ T24] usb 3-1: USB disconnect, device number 3 [ 95.110378][ T6267] loop0: detected capacity change from 0 to 2048 [ 95.248483][ T6267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.312640][ T6269] netlink: zone id is out of range [ 95.323033][ T6269] netlink: zone id is out of range [ 95.333908][ T6269] netlink: zone id is out of range [ 95.348759][ T6269] netlink: zone id is out of range [ 95.356676][ T6269] netlink: zone id is out of range [ 95.384415][ T6269] netlink: zone id is out of range [ 95.399754][ T6269] netlink: zone id is out of range [ 95.411539][ T6269] netlink: zone id is out of range [ 95.422677][ T6269] netlink: zone id is out of range [ 95.436164][ T6269] netlink: zone id is out of range [ 95.596909][ T5899] usbhid 2-1:0.4: can't add hid device: -71 [ 95.633062][ T6277] netlink: 'syz.4.77': attribute type 21 has an invalid length. [ 95.651313][ T5899] usbhid 2-1:0.4: probe with driver usbhid failed with error -71 [ 95.671373][ T6277] netlink: 128 bytes leftover after parsing attributes in process `syz.4.77'. [ 95.697035][ T5899] usb 2-1: USB disconnect, device number 6 [ 95.713670][ T6277] netlink: 3 bytes leftover after parsing attributes in process `syz.4.77'. [ 95.796092][ T6281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 95.922008][ T6290] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 95.932554][ T6295] loop4: detected capacity change from 0 to 512 [ 96.037520][ T6295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.042388][ T6301] loop0: detected capacity change from 0 to 512 [ 96.057186][ T6295] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.069999][ T6301] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.760055][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 96.761677][ T6301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.800787][ T6282] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 96.814612][ T6301] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.946915][ T6314] netlink: 164 bytes leftover after parsing attributes in process `syz.2.84'. [ 97.054349][ T6315] netlink: 164 bytes leftover after parsing attributes in process `syz.2.84'. [ 97.169422][ T6299] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 97.226199][ T6322] loop1: detected capacity change from 0 to 512 [ 97.271878][ T6322] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.306759][ T6322] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.87: bad orphan inode 131083 [ 97.324201][ T6322] loop1: lost filesystem error report for type 5 error -117 [ 97.341235][ T6322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.546159][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.605631][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.692450][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.719275][ T5954] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.880378][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 97.907121][ T5954] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 97.946767][ T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 97.965112][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 97.981138][ T5954] usb 3-1: Product: syz [ 97.985462][ T5954] usb 3-1: Manufacturer: syz [ 98.003867][ T5954] usb 3-1: SerialNumber: syz [ 98.021783][ T5954] usb 3-1: config 0 descriptor?? [ 98.044774][ T5954] gspca_main: sq905-2.14.0 probing 2770:9120 [ 98.135392][ T6344] loop3: detected capacity change from 0 to 1024 [ 98.144662][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 98.146262][ T6344] EXT4-fs (loop3): inodes count not valid: 49 vs 32 [ 98.174553][ T10] usb 1-1: config 0 has no interface number 0 [ 98.196702][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.227818][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 98.260432][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 98.295330][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 98.306705][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 98.320160][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 98.337857][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 98.349937][ T42] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.376765][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.400763][ T10] usb 1-1: config 0 descriptor?? [ 98.432182][ T6331] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 98.440532][ T6331] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 98.473223][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 98.542274][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.559335][ T42] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.580654][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.605803][ T42] usb 2-1: config 0 descriptor?? [ 98.625307][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 98.655718][ T10] usb 1-1: USB disconnect, device number 3 [ 98.674753][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 98.794412][ T6349] loop3: detected capacity change from 0 to 256 [ 98.820905][ T6349] exfat: Deprecated parameter 'namecase' [ 98.827540][ T6349] exfat: Deprecated parameter 'namecase' [ 98.853552][ T5851] Bluetooth: hci0: command 0x0000 tx timeout [ 98.942478][ T6349] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 99.042751][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.085102][ T5954] gspca_sq905: bulk read fail (-22) len 0/4 [ 99.091300][ T5954] sq905 3-1:0.0: probe with driver sq905 failed with error -5 [ 99.209302][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.256709][ T6340] netlink: 80 bytes leftover after parsing attributes in process `syz.1.91'. [ 99.269192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.306856][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.332717][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.340661][ T42] pwc: recv_control_msg error -71 req 02 val 2c00 [ 99.363401][ T42] pwc: recv_control_msg error -71 req 04 val 1000 [ 99.387028][ T5954] usb 3-1: USB disconnect, device number 4 [ 99.389980][ T42] pwc: recv_control_msg error -71 req 04 val 1300 [ 99.395169][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 99.438533][ T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 99.452543][ T42] pwc: recv_control_msg error -71 req 04 val 1400 [ 99.464923][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.497501][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 99.509106][ T42] pwc: recv_control_msg error -71 req 02 val 2000 [ 99.511078][ T10] usb 5-1: config 0 has no interface number 0 [ 99.526831][ T42] pwc: recv_control_msg error -71 req 02 val 2100 [ 99.549779][ T42] pwc: recv_control_msg error -71 req 04 val 1500 [ 99.555491][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 99.580869][ T42] pwc: recv_control_msg error -71 req 02 val 2500 [ 99.589824][ T42] pwc: recv_control_msg error -71 req 02 val 2400 [ 99.589950][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.596697][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.618055][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.625345][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.631924][ T10] usb 5-1: Product: syz [ 99.644030][ T10] usb 5-1: Manufacturer: syz [ 99.644581][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 99.661523][ T10] usb 5-1: SerialNumber: syz [ 99.667949][ T10] usb 5-1: config 0 descriptor?? [ 99.694621][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.716279][ T10] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 99.742558][ T10] uvcvideo 5-1:0.105: No valid video chain found. [ 99.761411][ T42] pwc: Registered as video103. [ 99.809945][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 99.945984][ T10] usb 5-1: USB disconnect, device number 3 [ 99.955807][ T42] usb 2-1: USB disconnect, device number 7 [ 100.389889][ T6375] loop0: detected capacity change from 0 to 128 [ 100.415779][ T6375] EXT4-fs: Ignoring removed i_version option [ 100.431824][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 100.454899][ T6375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003] [ 100.499842][ T6375] System zones: 1-3, 19-19, 35-36 [ 100.536459][ T6375] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.585029][ T6375] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.601689][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.611222][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 100.621541][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.653309][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.688173][ T24] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x42, changing to 0x2 [ 100.719030][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 100.756327][ T24] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 100.773288][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.783346][ T24] usb 3-1: Product: ࿟៲攳å®ä™°á¶Œæª«çµŒÓˆä½¹â¹™ïšŽä€ëš á¼«å“™ážªì«„áŒæ¥‡ê¬°á°–혓↌肳粜ìªè»‚ሉ賫ì‡é•ºà¢šæ‡¤æ¿¬á½®èž„ஜ쌭꫙൫ቧ㛜뇩淾苶橗褺ﯥﰈ짧Ⴃ竖ȭ럲管ॡ죵ä›äŸŒ [ 100.824998][ T24] usb 3-1: Manufacturer: ј [ 100.835414][ T24] usb 3-1: SerialNumber: 檭᭿ൟ퓱篧哶媾뗽킶å™å¨â“¾í†§â Žæ½°è¹žê¤ˆç¥„ë˜å’¾æ»Ÿã½·ä˜€å–‚뤃涳嗇蒅劮䜬汊Ȯʀ츃箞୯꣭ê¹áŠ í‹¬áˆ˜à££á¬ºâ†Œì¶‚寧置횶弓蚨샰濻磸屸탔᳷讂簾퇈毚ê¼êŸ–ì‰â–¶æ…žèŒêŒ«í’Žé»®î“µçª±á”·è–›ê¤·é¶”힞ᾷ뮫 [ 101.438686][ T5840] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.687957][ T24] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 102.740589][ T24] usb 3-1: USB disconnect, device number 5 [ 102.832506][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.160077][ T6399] evm: overlay not supported [ 103.755912][ T6386] loop0: detected capacity change from 0 to 32768 [ 105.343255][ T6406] loop2: detected capacity change from 0 to 32768 [ 105.463458][ T6406] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.525804][ T6406] XFS (loop2): Ending clean mount [ 105.543429][ T6406] XFS (loop2): Quotacheck needed: Please wait. [ 105.625523][ T6406] XFS (loop2): Quotacheck: Done. [ 105.747138][ T5844] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.071106][ T6428] loop2: detected capacity change from 0 to 2048 [ 106.140561][ T6428] loop2: p1 < > p3 [ 106.148356][ T6428] loop2: p3 size 134217728 extends beyond EOD, truncated [ 106.336320][ T6021] udevd[6021]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 106.347771][ T5898] udevd[5898]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 106.385613][ T6430] loop2: detected capacity change from 0 to 2048 [ 106.401370][ T6430] nilfs2: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 106.534619][ T6432] raw_sendmsg: syz.2.116 forgot to set AF_INET. Fix it! [ 106.707858][ T6434] loop2: detected capacity change from 0 to 4096 [ 108.021763][ T5899] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 108.232476][ T6456] loop1: detected capacity change from 0 to 256 [ 108.246340][ T6456] exfat: Unknown parameter '000000000000000000010' [ 108.636712][ T6464] loop0: detected capacity change from 0 to 128 [ 108.919276][ T6464] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.933836][ T6464] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.981986][ T6451] loop4: detected capacity change from 0 to 1764 [ 109.044195][ T6462] netlink: 'syz.3.124': attribute type 6 has an invalid length. [ 109.249279][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.318860][ T5840] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.345369][ T6462] QAT: failed to copy from user cfg_data. [ 109.368497][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.415956][ T5899] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 109.437618][ T5899] usb 3-1: can't read configurations, error -71 [ 109.452131][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 109.471725][ T10] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 109.511662][ T10] usb 2-1: config 0 has no interface number 0 [ 109.540944][ T10] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 109.587281][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 109.620838][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.759687][ T10] usb 2-1: Product: syz [ 109.782816][ T10] usb 2-1: Manufacturer: syz [ 109.799098][ T10] usb 2-1: SerialNumber: syz [ 109.894432][ T6485] ALSA: mixer_oss: invalid OSS volume 'MO' [ 110.330062][ T10] usb 2-1: config 0 descriptor?? [ 110.346775][ T6466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.395949][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 110.691803][ T6494] loop0: detected capacity change from 0 to 128 [ 110.964410][ T6494] Illegal XDP return value 32768 on prog (id 9) dev N/A, expect packet loss! [ 111.199123][ T6490] loop2: detected capacity change from 0 to 32768 [ 111.233952][ T6490] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.262923][ T6476] loop4: detected capacity change from 0 to 32768 [ 111.314228][ T6476] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.450281][ T13] usb 2-1: Failed to submit usb control message: -110 [ 111.498948][ T13] usb 2-1: unable to send the bmi data to the device: -110 [ 111.568668][ T13] usb 2-1: unable to get target info from device [ 111.590653][ T13] usb 2-1: could not get target info (-110) [ 111.703012][ T13] usb 2-1: could not probe fw (-110) [ 111.985321][ T6476] XFS (loop4): Ending clean mount [ 112.028738][ T6490] XFS (loop2): Ending clean mount [ 112.030094][ T5934] usb 2-1: USB disconnect, device number 8 [ 112.389226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 112.799534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 113.155657][ T6490] XFS (nbd2): SB validate failed with error -5. [ 113.184223][ T10] hid-generic 0005:4C4A:0000.0001: item fetching failed at offset 0/1 [ 113.184847][ T5837] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.185215][ T10] hid-generic 0005:4C4A:0000.0001: probe with driver hid-generic failed with error -22 [ 113.247189][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 113.939271][ T807] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 113.952109][ T6528] loop1: detected capacity change from 0 to 32768 [ 114.000596][ T6528] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.132 (6528) [ 114.061017][ T6528] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.071777][ T6528] BTRFS info (device loop1): using blake2b checksum algorithm [ 114.089752][ T807] usb 5-1: device descriptor read/64, error -71 [ 114.110549][ T5934] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 114.280030][ T6528] BTRFS info (device loop1): enabling ssd optimizations [ 114.308180][ T6528] BTRFS info (device loop1): turning on async discard [ 114.317153][ T5934] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 114.325139][ T5934] usb 1-1: can't read configurations, error -71 [ 114.343203][ T807] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 114.357168][ T6528] BTRFS info (device loop1): enabling free space tree [ 114.378313][ T6528] BTRFS info (device loop1): use zstd compression, level 3 [ 114.455392][ T6528] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.500251][ T807] usb 5-1: device descriptor read/64, error -71 [ 114.556980][ T6539] loop3: detected capacity change from 0 to 40427 [ 114.634209][ T807] usb usb5-port1: attempt power cycle [ 114.979514][ T807] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 115.031299][ T807] usb 5-1: device descriptor read/8, error -71 [ 115.056723][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 115.291108][ T807] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 115.329309][ T5954] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.337769][ T807] usb 5-1: device descriptor read/8, error -71 [ 115.463172][ T807] usb usb5-port1: unable to enumerate USB device [ 115.490102][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 115.505840][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.550184][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.581196][ T5954] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 115.606584][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.633414][ T5954] usb 4-1: config 0 descriptor?? [ 115.977296][ T6572] loop1: detected capacity change from 0 to 40427 [ 115.995342][ T6572] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 116.022076][ T6572] F2FS-fs (loop1): invalid crc value [ 116.100621][ T6576] loop0: detected capacity change from 0 to 32768 [ 116.118731][ T6576] ocfs2: Unknown parameter 'grpr_resv_level' [ 116.187241][ T5954] nintendo 0003:057E:200E.0002: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 116.281017][ T5954] nintendo 0003:057E:200E.0002: Failed charging grip handshake [ 116.312527][ T5954] nintendo 0003:057E:200E.0002: Failed to initialize controller; ret=-110 [ 116.354006][ T6572] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 116.408987][ T6572] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.434128][ T5954] nintendo 0003:057E:200E.0002: probe - fail = -110 [ 116.455205][ T5954] nintendo 0003:057E:200E.0002: probe with driver nintendo failed with error -110 [ 116.499979][ T6572] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 116.504878][ T5954] usb 4-1: USB disconnect, device number 4 [ 116.624784][ T6584] netlink: 156 bytes leftover after parsing attributes in process `syz.0.144'. [ 116.624866][ T6584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.144'. [ 116.785830][ T6589] loop0: detected capacity change from 0 to 1024 [ 116.825022][ T5844] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.841624][ T6589] ext4: Unknown parameter 'noacl' [ 117.229707][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.410007][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 117.422967][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 117.423151][ T6597] loop2: detected capacity change from 0 to 1024 [ 117.435148][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 117.466726][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.486065][ T6597] netlink: 332 bytes leftover after parsing attributes in process `syz.2.143'. [ 117.490665][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 117.519384][ T6597] netlink: 'syz.2.143': attribute type 9 has an invalid length. [ 117.527905][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 117.527934][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.527976][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.527995][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.602541][ T6597] netlink: 108 bytes leftover after parsing attributes in process `syz.2.143'. [ 117.625128][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.143'. [ 117.736428][ T9] usb 4-1: usb_control_msg returned -32 [ 117.752723][ T9] usbtmc 4-1:16.0: can't read capabilities [ 118.292096][ T6625] capability: warning: `syz.2.155' uses 32-bit capabilities (legacy support in use) [ 118.335559][ T6620] loop3: detected capacity change from 0 to 2048 [ 118.369671][ T6626] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 118.370125][ T6620] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 118.621684][ T6637] loop4: detected capacity change from 0 to 256 [ 118.822532][ T6619] loop1: detected capacity change from 0 to 40427 [ 118.848427][ T6619] F2FS-fs: inline encryption not supported [ 118.881290][ T6619] F2FS-fs (loop1): Image doesn't support compression [ 118.910895][ T6619] F2FS-fs (loop1): invalid crc value [ 119.413189][ T6619] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 119.423153][ T6619] F2FS-fs (loop1): Start checkpoint disabled! [ 119.448651][ T6619] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 119.460890][ T6619] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 119.617517][ T6656] bond0: option arp_validate: invalid value (18446744073491447809) [ 119.626278][ T13] bond0: (slave bond_slave_0): interface is now down [ 119.626349][ T13] bond0: (slave bond_slave_1): interface is now down [ 119.643338][ T13] bond0: (slave bond_slave_0): interface is now down [ 119.665484][ T13] bond0: (slave bond_slave_1): interface is now down [ 119.753161][ T5926] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 119.782443][ T13] bond0: now running without any active interface! [ 119.825796][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 119.853816][ T6647] loop0: detected capacity change from 0 to 32768 [ 119.876619][ T6647] xfs: Unknown parameter 'subj_user' [ 119.892714][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 119.925172][ T5926] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 119.963989][ T5926] usb 3-1: config 0 has no interface number 0 [ 119.992016][ T5926] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 120.022803][ T5926] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.054243][ T24] usb 4-1: USB disconnect, device number 5 [ 120.054837][ T5926] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 120.111883][ T5926] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 120.154934][ T5926] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 120.177217][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.204433][ T5926] usb 3-1: Product: syz [ 120.218079][ T5926] usb 3-1: Manufacturer: syz [ 120.237072][ T5926] usb 3-1: SerialNumber: syz [ 120.266118][ T5926] usb 3-1: config 0 descriptor?? [ 120.288730][ T6666] loop3: detected capacity change from 0 to 64 [ 120.314719][ T5926] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 120.348866][ T6666] bfs: Unknown parameter '€ÛÐÿftÑ™²*cÿ°~R›™(ý' [ 120.723545][ T5926] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input7 [ 121.103739][ T5926] usb 3-1: USB disconnect, device number 8 [ 121.409576][ T5851] Bluetooth: hci1: adv larger than maximum supported [ 121.872073][ T6687] loop4: detected capacity change from 0 to 512 [ 121.919011][ T6687] msdos: Unknown parameter ']zask' [ 121.969772][ T6685] loop1: detected capacity change from 0 to 16 [ 122.049376][ T5926] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.134949][ T6647] loop0: detected capacity change from 0 to 40427 [ 122.153983][ T6647] f2fs: Unknown parameter 'nodiscar{' [ 122.193344][ T6695] tmpfs: Unknown parameter '#¶úb0x0000000000000000' [ 122.232833][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.256045][ T5926] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 122.378899][ T5926] usb 3-1: config 63 contains an unexpected descriptor of type 0x1, skipping [ 122.403517][ T6685] erofs (device loop1): mounted with root inode @ nid 36. [ 122.421534][ T5926] usb 3-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 122.461142][ T5926] usb 3-1: config 63 has no interface number 0 [ 122.489440][ T5926] usb 3-1: config 63 interface 66 has no altsetting 0 [ 122.514990][ T5926] usb 3-1: string descriptor 0 read error: -71 [ 122.661514][ T5926] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 122.712015][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.912834][ T5926] usb 3-1: can't set config #63, error -71 [ 122.922805][ T5926] usb 3-1: USB disconnect, device number 9 [ 123.234198][ T6693] netlink: 76 bytes leftover after parsing attributes in process `syz.3.171'. [ 123.443539][ T6702] can0: slcan on ptm0. [ 123.525801][ T6712] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.613779][ T6711] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 123.624039][ T6712] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 124.102953][ T6700] can0 (unregistered): slcan off ptm0. [ 124.804655][ T6731] loop3: detected capacity change from 0 to 8 [ 125.379514][ T6731] xt_l2tp: unknown flags: 1f [ 125.413444][ T6738] net_ratelimit: 31 callbacks suppressed [ 125.413481][ T6738] openvswitch: netlink: IP tunnel dst address not specified [ 125.446060][ T6731] SQUASHFS error: Unable to read inode 0xa7 [ 125.884045][ T6729] loop4: detected capacity change from 0 to 32768 [ 125.907236][ T6729] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.179 (6729) [ 126.026601][ T6729] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.042111][ T6729] BTRFS info (device loop4): using crc32c checksum algorithm [ 126.101368][ T5954] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 126.252401][ T5954] usb 4-1: device descriptor read/64, error -71 [ 126.537850][ T5954] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 126.720703][ T5954] usb 4-1: device descriptor read/64, error -71 [ 126.739101][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 126.767207][ T6729] BTRFS info (device loop4): enabling ssd optimizations [ 126.790267][ T6729] BTRFS info (device loop4): turning on flush-on-commit [ 126.806511][ T6729] BTRFS info (device loop4): enabling free space tree [ 126.835223][ T6729] BTRFS info (device loop4): enabling auto defrag [ 126.852352][ T5954] usb usb4-port1: attempt power cycle [ 126.853424][ T6729] BTRFS info (device loop4): use lzo compression, level 1 [ 126.865090][ T29] audit: type=1326 audit(1774249549.539:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc55039c799 code=0x0 [ 126.890165][ T6729] BTRFS info (device loop4): max_inline set to 4096 [ 126.923121][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.933892][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.948448][ T24] usb 2-1: config 0 descriptor?? [ 126.976278][ T24] cp210x 2-1:0.0: cp210x converter detected [ 126.996288][ T5934] kernel read not supported for file / (pid: 5934 comm: kworker/1:6) [ 127.076176][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.179'. [ 127.523239][ T6784] loop0: detected capacity change from 0 to 512 [ 127.538317][ T6784] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 127.560538][ T5954] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 127.591153][ T5954] usb 4-1: device descriptor read/8, error -71 [ 127.630386][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 127.834962][ T5837] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.856572][ T24] usb 2-1: USB disconnect, device number 9 [ 127.868937][ T5954] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 127.874530][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.374165][ T6787] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 128.390382][ T5954] usb 4-1: device descriptor read/8, error -71 [ 128.458070][ T6795] netlink: 'syz.2.192': attribute type 10 has an invalid length. [ 128.470352][ T24] cp210x 2-1:0.0: device disconnected [ 128.493962][ T1032] IPVS: starting estimator thread 0... [ 128.541269][ T6795] ipvlan1: entered promiscuous mode [ 128.550998][ T5954] usb usb4-port1: unable to enumerate USB device [ 128.594754][ T6802] loop2: detected capacity change from 0 to 8 [ 128.595264][ T6796] IPVS: using max 38 ests per chain, 91200 per kthread [ 128.621357][ T6795] team0: Device ipvlan1 failed to register rx_handler [ 128.716255][ T6802] SQUASHFS error: xz decompression failed, data probably corrupt [ 128.775336][ T6802] SQUASHFS error: Failed to read block 0x108: -5 [ 129.204828][ T6802] SQUASHFS error: Unable to read metadata cache entry [106] [ 129.246697][ T6802] SQUASHFS error: Unable to read inode 0x11f [ 129.491689][ T6818] loop3: detected capacity change from 0 to 8 [ 129.537524][ T6818] squashfs image failed sanity check [ 129.927735][ T6840] loop3: detected capacity change from 0 to 16 [ 129.972083][ T6840] erofs (device loop3): mounted with root inode @ nid 36. [ 130.030340][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 130.400449][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 130.410408][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.448167][ T6846] bridge1: entered promiscuous mode [ 130.487510][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 130.542783][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.583546][ T24] usb 3-1: config 0 descriptor?? [ 130.651926][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 130.808267][ T6854] loop0: detected capacity change from 0 to 4096 [ 130.965501][ T6848] loop1: detected capacity change from 0 to 32768 [ 130.973880][ T6848] jfs: Unknown parameter 'UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU' [ 131.032425][ T6861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.112248][ T29] audit: type=1800 audit(1774249553.789:6): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.206" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 131.970080][ T6873] __vm_enough_memory: pid: 6873, comm: syz.4.210, bytes: 21200421154816 not enough memory for the allocation [ 132.006633][ T24] gspca_vc032x: reg_r err -110 [ 132.144467][ T6874] loop3: detected capacity change from 0 to 2048 [ 132.578648][ T6877] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.834151][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.842358][ T24] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 132.846185][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.939817][ T807] usb 3-1: USB disconnect, device number 10 [ 134.234942][ T6891] loop4: detected capacity change from 0 to 1024 [ 134.278692][ T6891] EXT4-fs (loop4): Test dummy encryption mode enabled [ 134.317080][ T6891] EXT4-fs (loop4): unsupported descriptor size 2368 [ 134.388276][ T6891] bridge0: port 3(erspan0) entered blocking state [ 134.432079][ T6891] bridge0: port 3(erspan0) entered disabled state [ 134.445250][ T6891] erspan0: entered allmulticast mode [ 134.534468][ T6891] erspan0: entered promiscuous mode [ 134.547215][ T6891] bridge0: port 3(erspan0) entered blocking state [ 134.554777][ T6891] bridge0: port 3(erspan0) entered forwarding state [ 134.572549][ T6906] netlink: 'syz.1.217': attribute type 11 has an invalid length. [ 135.039120][ T6920] loop4: detected capacity change from 0 to 128 [ 135.063601][ T6920] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.077642][ T6920] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.157354][ T6924] loop1: detected capacity change from 0 to 64 [ 135.166807][ T6929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.277893][ T6929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.379633][ T807] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.403065][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 135.561845][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 135.578772][ T6894] loop0: detected capacity change from 0 to 32768 [ 135.589466][ T807] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.677921][ T807] usb 3-1: config 179 has no interface number 0 [ 135.695003][ T807] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.714982][ T807] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.747846][ T5837] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.769427][ T807] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.817931][ T807] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.846040][ T807] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.868249][ T807] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.882288][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.947257][ T6928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.991036][ T6894] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 136.065283][ T6894] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 136.239253][ T5934] usb 3-1: USB disconnect, device number 11 [ 136.239318][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.253780][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 136.321798][ T6894] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 136.532437][ T6894] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 6 2078, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 449 [ 136.785977][ T6894] gfs2: fsid=syz:syz.0: G: s:EX n:2/81e f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 136.892463][ T6894] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 137.023344][ T6894] gfs2: fsid=syz:syz.0: I: n:6/2078 t:8 f:0x00 d:0x00000201 s:24 p:0 [ 137.138592][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.0.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.138626][ T6894] Tainted: [L]=SOFTLOCKUP [ 137.138634][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.138646][ T6894] Call Trace: [ 137.138654][ T6894] [ 137.138663][ T6894] dump_stack_lvl+0xe8/0x150 [ 137.138700][ T6894] gfs2_withdraw+0xc3/0x1b0 [ 137.138726][ T6894] inode_go_instantiate+0xab4/0x1220 [ 137.138748][ T6894] ? __pfx_bit_wait+0x10/0x10 [ 137.138782][ T6894] ? __pfx_bit_wait+0x10/0x10 [ 137.138807][ T6894] ? __pfx_inode_go_instantiate+0x10/0x10 [ 137.138831][ T6894] ? __pfx_wake_bit_function+0x10/0x10 [ 137.138862][ T6894] gfs2_instantiate+0x168/0x220 [ 137.138896][ T6894] gfs2_glock_wait+0x1d4/0x2a0 [ 137.138924][ T6894] init_journal+0x1585/0x2280 [ 137.138959][ T6894] ? init_inodes+0xdb/0x320 [ 137.138986][ T6894] ? __pfx_init_journal+0x10/0x10 [ 137.139024][ T6894] ? snprintf+0xe8/0x140 [ 137.139047][ T6894] ? init_inodes+0xdb/0x320 [ 137.139070][ T6894] ? __pfx_snprintf+0x10/0x10 [ 137.139091][ T6894] ? gfs2_glock_nq_num+0x13d/0x170 [ 137.139120][ T6894] init_inodes+0xdb/0x320 [ 137.139145][ T6894] gfs2_fill_super+0x1a38/0x21d0 [ 137.139181][ T6894] ? __pfx_gfs2_fill_super+0x10/0x10 [ 137.139205][ T6894] ? init_locking+0xb8/0x210 [ 137.139223][ T6894] ? sb_set_blocksize+0x155/0x240 [ 137.139253][ T6894] ? setup_bdev_super+0x4c1/0x5b0 [ 137.139278][ T6894] get_tree_bdev_flags+0x431/0x4f0 [ 137.139298][ T6894] ? __pfx_gfs2_fill_super+0x10/0x10 [ 137.139319][ T6894] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 137.139338][ T6894] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 137.139369][ T6894] gfs2_get_tree+0x51/0x1e0 [ 137.139394][ T6894] vfs_get_tree+0x92/0x2a0 [ 137.139418][ T6894] do_new_mount+0x341/0xd30 [ 137.139443][ T6894] ? apparmor_capable+0x126/0x170 [ 137.139471][ T6894] ? __pfx_do_new_mount+0x10/0x10 [ 137.139497][ T6894] ? ns_capable+0x89/0xe0 [ 137.139526][ T6894] ? user_path_at+0xd4/0x160 [ 137.139557][ T6894] __se_sys_mount+0x31d/0x420 [ 137.139590][ T6894] ? __pfx___se_sys_mount+0x10/0x10 [ 137.139623][ T6894] ? __x64_sys_mount+0x20/0xc0 [ 137.139652][ T6894] do_syscall_64+0x14d/0xf80 [ 137.139677][ T6894] ? trace_irq_disable+0x3b/0x140 [ 137.139700][ T6894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.139720][ T6894] ? clear_bhb_loop+0x40/0x90 [ 137.139743][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.139763][ T6894] RIP: 0033:0x7f9dc399da0a [ 137.139792][ T6894] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.139808][ T6894] RSP: 002b:00007f9dc48f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.139831][ T6894] RAX: ffffffffffffffda RBX: 00007f9dc48f5ee0 RCX: 00007f9dc399da0a [ 137.139845][ T6894] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f9dc48f5ea0 [ 137.139859][ T6894] RBP: 00002000000124c0 R08: 00007f9dc48f5ee0 R09: 0000000000000000 [ 137.139878][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 137.139891][ T6894] R13: 00007f9dc48f5ea0 R14: 0000000000012649 R15: 0000200000000180 [ 137.139922][ T6894] [ 137.718909][ T6894] gfs2: fsid=syz:syz.0: can't lock local "sc" file: -5 [ 137.989236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 138.407478][ T6953] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 140.366363][ T6978] loop3: detected capacity change from 0 to 2048 [ 140.413162][ T6978] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 140.462528][ T6978] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 140.488777][ T6978] UDF-fs: Scanning with blocksize 512 failed [ 140.529072][ T6985] loop1: detected capacity change from 0 to 2048 [ 140.570957][ T6978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.613630][ T6989] syzkaller1: entered promiscuous mode [ 140.644813][ T6989] syzkaller1: entered allmulticast mode [ 140.857494][ T6978] ------------[ cut here ]------------ [ 140.865670][ T6978] byte_offset [ 140.865703][ T6978] WARNING: fs/udf/truncate.c:224 at udf_truncate_extents+0xd8d/0xf00, CPU#1: syz.3.230/6978 [ 140.880816][ T6978] Modules linked in: [ 140.885520][ T6978] CPU: 1 UID: 0 PID: 6978 Comm: syz.3.230 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.896707][ T6978] Tainted: [L]=SOFTLOCKUP [ 140.901559][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.912195][ T6978] RIP: 0010:udf_truncate_extents+0xd8d/0xf00 [ 140.918608][ T6978] Code: e3 c6 0f 48 3b 84 24 80 01 00 00 75 7a 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1a 13 5d 08 cc e8 b4 b4 6f fe 90 <0f> 0b 90 e9 64 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e0 f3 ff ff [ 140.938775][ T6978] RSP: 0018:ffffc9001b69f7c0 EFLAGS: 00010283 [ 140.946103][ T6978] RAX: ffffffff83569ccc RBX: 1ffff1100b014eba RCX: 0000000000080000 [ 140.954742][ T6978] RDX: ffffc900069d4000 RSI: 00000000000005f1 RDI: 00000000000005f2 [ 140.963849][ T6978] RBP: ffffc9001b69f988 R08: ffff888034e2db80 R09: 0000000000000002 [ 140.972745][ T6978] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 140.976764][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 140.981277][ T6978] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 140.998216][ T6978] FS: 00007f4664d6f6c0(0000) GS:ffff888125548000(0000) knlGS:0000000000000000 [ 141.007805][ T6978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.014854][ T6978] CR2: 00007fc55114da08 CR3: 00000000755b2000 CR4: 00000000003526f0 [ 141.023474][ T6978] Call Trace: [ 141.026775][ T6978] [ 141.030309][ T6978] ? __pfx_udf_truncate_extents+0x10/0x10 [ 141.036640][ T6978] ? do_raw_spin_unlock+0xf5/0x210 [ 141.042356][ T6978] udf_write_failed+0x185/0x1c0 [ 141.047251][ T6978] udf_direct_IO+0x1c6/0x200 [ 141.052414][ T6978] generic_file_direct_write+0x1db/0x3e0 [ 141.058094][ T6978] __generic_file_write_iter+0x11d/0x230 [ 141.064214][ T6978] ? udf_file_write_iter+0x2af/0x6b0 [ 141.071487][ T6978] udf_file_write_iter+0x2ca/0x6b0 [ 141.076661][ T6978] do_iter_readv_writev+0x619/0x8c0 [ 141.082463][ T6978] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 141.088236][ T6978] vfs_writev+0x33c/0x990 [ 141.096952][ T6978] ? __pfx_vfs_writev+0x10/0x10 [ 141.102588][ T6978] ? __fget_files+0x2a/0x420 [ 141.105860][ T6997] netlink: 'syz.2.229': attribute type 2 has an invalid length. [ 141.107215][ T6978] ? __fget_files+0x3a0/0x420 [ 141.120566][ T6978] ? __fget_files+0x2a/0x420 [ 141.125207][ T6978] __se_sys_pwritev2+0x184/0x2a0 [ 141.130841][ T6978] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 141.136354][ T6978] ? __x64_sys_pwritev2+0x20/0xc0 [ 141.141949][ T6978] do_syscall_64+0x14d/0xf80 [ 141.146195][ T6997] netlink: 'syz.2.229': attribute type 1 has an invalid length. [ 141.146571][ T6978] ? trace_irq_disable+0x3b/0x140 [ 141.146603][ T6978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.166334][ T6978] ? clear_bhb_loop+0x40/0x90 [ 141.173044][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.173078][ T6978] RIP: 0033:0x7f4663f9c799 [ 141.173100][ T6978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.173235][ T6978] RSP: 002b:00007f4664d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 141.173261][ T6978] RAX: ffffffffffffffda RBX: 00007f4664215fa0 RCX: 00007f4663f9c799 [ 141.173276][ T6978] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 000000000000000a [ 141.173290][ T6978] RBP: 00007f4664032c99 R08: 0000000000000000 R09: 0000000000000003 [ 141.173304][ T6978] R10: 0000000000002e25 R11: 0000000000000246 R12: 0000000000000000 [ 141.173317][ T6978] R13: 00007f4664216038 R14: 00007f4664215fa0 R15: 00007ffea2aa9e18 [ 141.173350][ T6978] [ 141.173362][ T6978] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.173380][ T6978] CPU: 1 UID: 0 PID: 6978 Comm: syz.3.230 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.173406][ T6978] Tainted: [L]=SOFTLOCKUP [ 141.173414][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.173426][ T6978] Call Trace: [ 141.173434][ T6978] [ 141.173443][ T6978] vpanic+0x56c/0xa60 [ 141.173474][ T6978] ? __pfx__printk+0x10/0x10 [ 141.173497][ T6978] ? __pfx_vpanic+0x10/0x10 [ 141.173523][ T6978] ? is_bpf_text_address+0x292/0x2b0 [ 141.173551][ T6978] ? is_bpf_text_address+0x26/0x2b0 [ 141.173588][ T6978] panic+0xc5/0xd0 [ 141.173616][ T6978] ? __pfx_panic+0x10/0x10 [ 141.173663][ T6978] __warn+0x315/0x4c0 [ 141.173690][ T6978] ? udf_truncate_extents+0xd8d/0xf00 [ 141.173719][ T6978] ? udf_truncate_extents+0xd8d/0xf00 [ 141.173747][ T6978] __report_bug+0x29a/0x540 [ 141.173781][ T6978] ? udf_truncate_extents+0xd8d/0xf00 [ 141.173808][ T6978] ? __pfx___report_bug+0x10/0x10 [ 141.173842][ T6978] ? udf_current_aext+0x698/0xb30 [ 141.173880][ T6978] ? udf_truncate_extents+0xd8d/0xf00 [ 141.173906][ T6978] report_bug+0x16a/0x220 [ 141.173933][ T6978] ? udf_truncate_extents+0xd8d/0xf00 [ 141.173958][ T6978] ? udf_truncate_extents+0xd8f/0xf00 [ 141.173983][ T6978] handle_bug+0x9c/0x200 [ 141.174014][ T6978] exc_invalid_op+0x1a/0x50 [ 141.174044][ T6978] asm_exc_invalid_op+0x1a/0x20 [ 141.174064][ T6978] RIP: 0010:udf_truncate_extents+0xd8d/0xf00 [ 141.174091][ T6978] Code: e3 c6 0f 48 3b 84 24 80 01 00 00 75 7a 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1a 13 5d 08 cc e8 b4 b4 6f fe 90 <0f> 0b 90 e9 64 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e0 f3 ff ff [ 141.174108][ T6978] RSP: 0018:ffffc9001b69f7c0 EFLAGS: 00010283 [ 141.174127][ T6978] RAX: ffffffff83569ccc RBX: 1ffff1100b014eba RCX: 0000000000080000 [ 141.174142][ T6978] RDX: ffffc900069d4000 RSI: 00000000000005f1 RDI: 00000000000005f2 [ 141.174157][ T6978] RBP: ffffc9001b69f988 R08: ffff888034e2db80 R09: 0000000000000002 [ 141.174171][ T6978] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 141.174184][ T6978] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 141.174205][ T6978] ? udf_truncate_extents+0xd8c/0xf00 [ 141.174256][ T6978] ? __pfx_udf_truncate_extents+0x10/0x10 [ 141.174302][ T6978] ? do_raw_spin_unlock+0xf5/0x210 [ 141.174333][ T6978] udf_write_failed+0x185/0x1c0 [ 141.174357][ T6978] udf_direct_IO+0x1c6/0x200 [ 141.174381][ T6978] generic_file_direct_write+0x1db/0x3e0 [ 141.174413][ T6978] __generic_file_write_iter+0x11d/0x230 [ 141.174434][ T6978] ? udf_file_write_iter+0x2af/0x6b0 [ 141.174466][ T6978] udf_file_write_iter+0x2ca/0x6b0 [ 141.174503][ T6978] do_iter_readv_writev+0x619/0x8c0 [ 141.174529][ T6978] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 141.174570][ T6978] vfs_writev+0x33c/0x990 [ 141.174605][ T6978] ? __pfx_vfs_writev+0x10/0x10 [ 141.174647][ T6978] ? __fget_files+0x2a/0x420 [ 141.174680][ T6978] ? __fget_files+0x3a0/0x420 [ 141.174706][ T6978] ? __fget_files+0x2a/0x420 [ 141.174743][ T6978] __se_sys_pwritev2+0x184/0x2a0 [ 141.174770][ T6978] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 141.174801][ T6978] ? __x64_sys_pwritev2+0x20/0xc0 [ 141.174834][ T6978] do_syscall_64+0x14d/0xf80 [ 141.174860][ T6978] ? trace_irq_disable+0x3b/0x140 [ 141.174884][ T6978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.174905][ T6978] ? clear_bhb_loop+0x40/0x90 [ 141.174930][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.174950][ T6978] RIP: 0033:0x7f4663f9c799 [ 141.174968][ T6978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.174984][ T6978] RSP: 002b:00007f4664d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 141.175002][ T6978] RAX: ffffffffffffffda RBX: 00007f4664215fa0 RCX: 00007f4663f9c799 [ 141.175015][ T6978] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 000000000000000a [ 141.175026][ T6978] RBP: 00007f4664032c99 R08: 0000000000000000 R09: 0000000000000003 [ 141.175037][ T6978] R10: 0000000000002e25 R11: 0000000000000246 R12: 0000000000000000 [ 141.175049][ T6978] R13: 00007f4664216038 R14: 00007f4664215fa0 R15: 00007ffea2aa9e18 [ 141.175079][ T6978] [ 141.175521][ T6978] Kernel Offset: disabled