last executing test programs: 8m46.542735856s ago: executing program 32 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='9', 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 8m39.96780367s ago: executing program 33 (id=77): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0xffcc) 7m29.482661816s ago: executing program 34 (id=249): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x24, &(0x7f0000000140)={[{@data_err_abort}, {@noblock_validity}, {@data_err_ignore}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x80000000}}, {@noload}, {@journal_checksum}, {@stripe={'stripe', 0x3d, 0x1b}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@journal_dev={'journal_dev', 0x3d, 0x769}}, {@norecovery}, {@grpid}, {@dax_never}, {@dax_inode}], [{@fowner_lt}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '\xc6\x92\f\f\xc2\x8d\xafa\bj\xecR]O\xe7\x80\xad\fs*n|\xcf\x97|\'\x06r\x81\xdd\x80*\xd9K\xad\x9b\xe6\x95\xa6\a\xb8Di\xc9\xdc\xd6\xcf\x9f\'L\xc8\x84E$\xce\x84\bp\a\x00N\xacN7\v\x03p\x96\xb2\xcd\x18\x87.\xd2\x81$\x85\xac\xd3\x8fj\xc8\x16\xcf\x16\xaf\xb2\xa5\x8c]\xd9N\x92\x06\xe9\xbd\xd1\x04\xee\xe5U\x91Y\xfa&$z\xb4\xb2J\xcbP\x88\xa5,\xfb\xafS\xef,\xa5\xd7\x12\xbc\x00'/151}}, {@context={'context', 0x3d, 'root'}}, {@measure}], 0x2c}, 0xa, 0x526, &(0x7f00000007c0)="$eJzs3M9vFNcdAPDvrNcY13bt0p+UtrilVa1WBWwocOgBUCtxaVWpVUUvlVzbIIqhFXYlQJYwVQVSDolQ/gCS3CJxyjGn5BIlUQ6JuAblmCgSinzB4RBNNLszy3rX65+7tow/H8neNzNvZt535j3vvPd2HcCuNZz9SiL6I+Lj/ojB6uLSDMPVl8WFuYkvF+YmkkjTv3yRVPI9WZibKLIW+/XlCyOliNL/kzjQfNqemRs3L49PT09dy1ccmS3lqSvjF6cuTl0dO3Xq+LHekyfGftuWOPuKwu0/9/d7f5w4f++f7z3IVqX56vo4qoYqv/es+Qxdz5JvlCsvwzEcpRa5f7GOsu8EA3XppBy921gU1iGrtVlt7c7afwxGV5Rr2wbjD//b1sIBHZWmadrTtLb2Xjaf1kuS6g5pejsFngNJrJaj4a8A8Jwo3uifLGS94bmJ5n7w8+3xmaj0gLK4F/Of6pZype8+PFTtG3V36PzfiYjz80/vF89gu+36AwBb760zEXfPVp87ip/qllJ8ry7fN6M6NzQUEd+KiH0R8e38+eW7EZW834+IH9TtM1A5ykq6q/NPdZqffz4q5hLqH1fbJnv++10+t7X0+a9W8qGufGmgEn93cuHS9NTR/JqMRHdPtjzafOjasNrbv3/4UqvzD+fPf8VPdv7s9VmO0uflhgG6yfHZ8c3GXXh8u3JhbzXHn0Q5KVIR+yPihxs4fnbNLv3q9R+12r4k/izOpvhfbH3w8gYK1CB9NeKX1fs/Hw3xRz7/l1TmJ6/858jMjZu/uVQ/Pzl68sTYg5cjpqeOHilqRbP3P7zz5zzZ1I1Y4f4XTWPlJrRJ2f3/xrL1vzYLPJSlavO1M+s/x51Hd1v2aTZa//ckf62ki/nZ6+Ozs9dGI/Yk883rx57te328d0n+LP6RQ8u3/30RX72S73cgIrJK/OOI+ElEHMzL/tOI+FlEHFoh/nfP/vxfrbqQq8ffWVn8k+u6/60Spz+IWH5T1+V33mw68QvDTfF3x9P7i0ljxuz+H6+kRvI1k+Oze1eLa6WS1ic2cekAAABgxzgYEf2RlA7nA039USodPhzRVxtBmZn99YV///fqZPU7AkPRXSpGugbrxkNH87HhbDnba6xuOdt+rDJunKZp2pstZ/336YHtDR12vb4W7T/zWdd2lw7ouHXNozUN0AM7WWP7f7TmPdv/gQxga7XhczTADqX9w+615vbfqW/BAdtmufZ/K2JxG4oCbLHl2v/fmtac3pKyAFtL/x92r423fx8GgJ3O+z/sSmv6kvwGEvvOrZAnKXfmpK0TpagmPv1HNezG/wIwFFGsKZ5pVj7gJ6WI9pSwa/MBZiXO1/QuuaelZffaG+24qlFaNU95Hf+IoWWit03XeUmitPbMvXH5Tw87WkV7mitkY+2tVbZbReJmp5tMpRG8to1/mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANri6wAAAP//qXDF/w==") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000d40)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xc, 0x3a, '(.^', 0x3a, 'init_itable', 0x3a, './file0', 0x3a, [0x46]}, 0x36) fcntl$setstatus(r0, 0x4, 0x400) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000700)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@bsdgroups}, {@i_version}, {@nobarrier}]}, 0x1, 0x500, &(0x7f0000000200)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x16, 0x8, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x1000, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r4, &(0x7f0000000880)}, 0x20) 6m22.944058863s ago: executing program 1 (id=569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m21.971969427s ago: executing program 1 (id=574): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6m21.011144881s ago: executing program 1 (id=577): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000004100090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x408c0}, 0x4011) r4 = socket(0x2, 0xa, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000002c0)={r6}, &(0x7f0000000400)=0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, 0x0, 0xc, 0xfb, 0x4, 0xfeff, 0x4, 0x1, 0xa49a, 'syz0\x00'}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4a24, 0x1, @local, 0xfd}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x35, 0x0, 0x0) 6m19.632928565s ago: executing program 1 (id=582): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6m18.206089501s ago: executing program 1 (id=587): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f0000001880)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000ec0)="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", 0x630}], 0x2) 6m15.368610582s ago: executing program 1 (id=597): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 6m13.781160421s ago: executing program 35 (id=597): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 4m42.420787336s ago: executing program 0 (id=977): r0 = socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5500000020007fafb70000000000000080000000030b43026c26236925000400fe7f0003bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d831", 0x4b}], 0x1}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) 4m41.363323053s ago: executing program 0 (id=979): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@oldalloc}, {@norecovery}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) unlinkat(r0, 0x0, 0x200) 4m40.790816717s ago: executing program 0 (id=997): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 4m40.428585266s ago: executing program 0 (id=991): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 4m40.032270896s ago: executing program 0 (id=993): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m34.616100481s ago: executing program 0 (id=1012): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) close(r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4m34.343836278s ago: executing program 36 (id=1012): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) close(r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4m34.332341498s ago: executing program 7 (id=1014): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x9a0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000eb2000/0x3000)=nil, 0x3000}}) 4m34.221485091s ago: executing program 7 (id=1017): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') pread64(r3, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) 4m31.576598757s ago: executing program 7 (id=1024): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m29.722755073s ago: executing program 7 (id=1030): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4m28.706560768s ago: executing program 7 (id=1037): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x9a0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000eb2000/0x3000)=nil, 0x3000}}) 4m28.61469938s ago: executing program 4 (id=1038): socket$kcm(0x10, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 4m28.073026974s ago: executing program 4 (id=1040): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m27.054844449s ago: executing program 4 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000900)="bad330fbc93f0700000000ea0756a85d0806", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xdb, 0x6, @multicast}, 0x14) 4m25.661857194s ago: executing program 4 (id=1047): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4m24.516185652s ago: executing program 4 (id=1050): r0 = io_uring_setup(0x5501, &(0x7f0000000080)={0x0, 0x4178, 0x400, 0x0, 0x110}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 4m22.512572473s ago: executing program 7 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2102, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 4m22.148880571s ago: executing program 37 (id=1053): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2102, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 4m22.135099562s ago: executing program 4 (id=1057): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) close(r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4m21.978196226s ago: executing program 38 (id=1057): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) close(r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1m59.491995624s ago: executing program 5 (id=1570): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x8920a0, 0x0, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1m58.520495119s ago: executing program 5 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2000}, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) 1m58.003383232s ago: executing program 5 (id=1577): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) 1m54.02081322s ago: executing program 5 (id=1594): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m53.492608244s ago: executing program 5 (id=1598): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x4db, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x0, 0x80}}}, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000100), 0x12) listen(0xffffffffffffffff, 0x1) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 1m49.005004666s ago: executing program 5 (id=1608): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m48.280361563s ago: executing program 39 (id=1608): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1395439, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 17.811694727s ago: executing program 3 (id=1957): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfe, 0x28b, &(0x7f00000008c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000500)={[{@nodioread_nolock}, {@jqfmt_vfsv0}, {@nolazytime}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$key(0xf, 0x3, 0x2) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 14.098942809s ago: executing program 3 (id=1975): write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='5'], 0x35) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r0 = timerfd_create(0x0, 0x800) read(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 12.815932261s ago: executing program 3 (id=1984): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 10.888270039s ago: executing program 8 (id=1990): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.786284992s ago: executing program 8 (id=1995): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000106a050052000000000001090224000100009006090400fe020300000009210500060122280009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000e28000000280182631b71cc79a74bb698d9eace918d0fb74237cc06006c4e88e78881ce2a521398aa92b2a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.4619907s ago: executing program 3 (id=1999): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x15, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 7.506018984s ago: executing program 3 (id=2002): socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000002000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x8be}]}) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.526396848s ago: executing program 9 (id=2005): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8307500710001000202"], 0x7a) prctl$PR_SET_PTRACER(0x59616d61, r0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000100001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 5.525605443s ago: executing program 2 (id=2008): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) syz_open_dev$video(0x0, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 5.524322083s ago: executing program 6 (id=2009): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x8000, 0x2, 0x0, 0x20}, {0xfffffffffffffffc, 0x9, 0x0, 0x5, 0x5, 0xfffffffffffffffa, 0x0, 0x8}, {0x200, 0x6, 0x0, 0x2}, 0x28, 0x0, 0xfffffffffffffffc, 0x1, 0x3, 0x2}, {{@in6=@mcast2, 0x0, 0x33}, 0xa, @in=@empty, 0x3505, 0x0, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000"], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000600)="5ce5f722afde7c1d564116cfdc3876cba258ffe95384551a7d54788d7e4f7a6d17f45eb393996e49971a183420ce2be1a6a6385e7ff9b00e9aa2c12e883d3dd3e64e9f305e3fbabd3da08364d14ae3da53009fb2a744d95edfb309e4eb979d5239bbae94ab63d70d00f49df4c763920ab0503466605e1fca2f5a753d1e024a0102cdf645249abeedaf00ee4f4b8accdcb57c1faaea57b28407db60593d5033e8303bb193b6630f5bd972e7c452b1154f7fc20079eeb1831417459c961b329b9e2ec1dc16285e1a5ddddcb919ed5ffbf9cb114610c1444c7702eaba6312a6bc852185980ca26d4003cac3f68741df5558d7a617442a0bbc02f36bd6236394b062699d0f7b74b8ef55f15a8c182138546b92cd4e7e06b46f0578f8a21c3d2aa4c521751bc211f852d9df55ea1edabbf95d90b9894ea685cfb7879b68ee5ff3690c5b49a6c987d50599b7cbca7a26a0be2bad008f1d5219c406c32af4c53bf600c4fdee16bf60c0a31238d9ccf549f1997b4fd501d4ab8c9cb0f9082312abfc64ea8a516fffed538c4f61c5f73bc12ebdf60e47f95264ae74dcafc4bca9b41e79272ca821558919051bf4265e23072557ed13f5b58aabd8e5704c010e8b4341f611db9a9d192bb0c4ed07853a2dd8380d0a18b795e9967ce67e71142045edfa787e8a5dd9471516b7badfe684e1bf334df849a0c548c46d847a2164ee4e8f41e186560750cd3f4250be48595a9e5cd05e28f1b6c87d03cf03022378a51fcaf450dcc6432b69ad389ac4fc57bb7325d1e5594a4adf393d93f8d538a12212e2c0188aebbe1eb52a84b2b5b3d823868736cddc3245b9d4861f87d10769f5c942f4a31b11a5233ffbcf371b48d9f9d1fdb1c2a31dfdd86a43b6db2067b0674a45c45eb070ad89946e19d633ca123c43e1d7dd0a90c3afeef99e6127f222f48079fe01a444ae7757911e6cb27c33288ef498f8cd28cc5bc99a6378e5cefd0a49bba57891a9c28960ed82e5e665e9f6d5efd54ca6620f01fd784a7bf4487dc35930233a0fd80efdb9835469967e60636bd0b9d62efba907c39ec79abf95403fc231f31c7d34fa347cabd3c85eec08284000a491604856813f7fc3576803e5f076d0f76f8ce9cecdf1db1d2ce0dfdd91937fc6ee1bed0d54ecaef9b09caeb7bace1ae15707dfe25782a67d97c2992f2964f13718ef31020348c0e786a52089fc871a3799377942c02d8c7574792b93821602975f35e8602429f36ad5af13eaf637fba276e31839bfe963958fbb7651cf41063f21ef6afafc301a3ed05dce33019b364ae43953378d36c3fe3719f3bc9d1b20372aaea4d4cbca71552530dd71f86384f55df6bb3f8cbb893d76b0be9af3533a5420c867ab9734ed8932dfef88fca2d253c0d7f8d10fef500599dcb940b98487ee194857d1606268f831195a3b0a188949e103d61cff91dda3e28fe5f46347e788e13072e984df559144145ffb946c82f6b66cfbe670acef44b15fed3e13c9afdd0187447eb7646dc29b9ef400227e8df8447879c654690366b38f8332987a0167d9a0a7a52a1cef2bf7b827877db8a5d3be6ff782d0438b11a5cfff7a28585779608aee42bfc3fd907898f2d1b34d0b5273267913c9d1628e2ed107cf5e1b08e1fbc12ef872fd7d5b6bc85d9964b2021fc90cad88af27b5ccf38435f2b988d20426167e0d0b13554bcf3f83e885e00fc3523b54c714c799a8706d09d643f61547987bf493a9cf72655edd6125e5391899059176f040064ec4bdfdf12bccdd79b05d519ba8bf088db22c8bfeaec0328288925ef7cf29f281d5aaae4c82c9feb1821609cf32e699f55589b18def3e1eec60198bf2fb4a72623a78a9fe56d08342ce9d187cfce3e9f76b38f9dcb09743ece9edd99641383bb9d7581aff586cf23863264022818af2309d2549cfc3f5c96d1ee50d9bdb22d6f0b889e4c150c77d5d373307c579c14f06e279a9b4eff1f850c7054958bb349be02970587583643313f96e6033cd0078cb122bdc88c29d78fc60e8dba3867b197a151e04f786fd56e91a0ffa0fb1d1700f3b72140e3179d4c06c3ba0583e3a9889cac4fad206ff87776ff93b9c78f108316e588458000e3e988c2ab1b4b47d0c650120d52f3067ec783a886f8b72205a441f218b30f2c702285de9b18828de8306c5cc20489cc9e169ad373732c3999a47a605871f45e64ef30e79d2485bed70d76c05474c814379730d2880368a3038fb95196731faf8a2d602a695e98bec34ee9147f23a95351f31063244abf7a3a033ebf1b2560971f63c1966fd5d21126795132d0a3e330bdc524f4e57f720bb776834cce9df55bc497413a32fed3626b194b84266e7c7b9a0d6524e49c81020a25e7cc865589802f12b5872e727873603de7fa2af0f203c9fe0d6019080cea26a4472cd468b753fa329a789067ce0f45c81b40b718f3689d14d20f72ae3180237280163b7cc85530adaeb96724e664a53965f405f53b61b1720944d59aa27b1fb68d0c97d6f94e2690b414636f73a9ad52738a4567ee97a9a074f7467bf943c34ced6044f08cd7cd9a5bce98cff478a3343b7140f5e623bfc958c896d66f22b60d53649666d32ba5c12789e9f7176907ffcb8920b93fdd771523453413da99379e61b1c46a0fac8b8a8c4642913d4e92475de993d35200822795322362f43bb08bd1fc5bbfa7c52f83d6cda415342921db1e0ddca3fafd8fe18122b202bd01f1d1cccb21f177f0aa589c42ce58b014bd979b696c7bec58b3a5552989468b27a67a104c9727204eaaabdc6e49c6ba2a59222ce568f9653f39cdb5dae4f7f3e30fb3ffb5ebf61802fda98526a50e517b4e3619959d93a30b96704484cc93f4ede1565c23cc821f12f1877086ff1df25402c1087d5c0046deacc841b3c56e7c8aba911994cb388f8bd3a0643efcca6f92cc5ff93d1d6560855f4489ef78505f04fbba29b3c6c0f6ca1d388c03d3e21e3ff9061f60c7997d41e32969ae72a1292d1d59f1d44c2fd5a0000ce3ce6db6a1c2c993eb33b65e26adc3265dffb97edad6e30cb7a66b8821c6efc31f2256b921db39374c266123c3ef6c50566ed10cb847a8eb2cb480fc53752af00bfa715ab17040dae63beecb44d9e3cacbb08d7dc2ea17fc46a69ecd130bbc754bc4ff5b67b1a107bce0f07a67ee13df90c1edbbd26190dc7efb736e4529c67af7e8c9c86a6efc4b3826246871a20062ce79c336006b9125f2affb2723d22e4bf762f73517551bd9508714ce95e9110ee7898efbf818f859edecd6036431114740e21b936db252d5e1c0bdbe912c90b5afe6dd3e5a83155c6634a9d5ca9132fdfde1146eb4f43e51be2fa90232a83c267d619e765d2df67612b747b0d7a3d2a73ddd0df65ac67f80d4474c3ac77f5084f43a3a570a651fa6f420243335f4481ee4e6cfade77e1b1e8df89c51bbd180488bb5f8b5dbd7d89c9be29d344f69a083ea4055e875c04774745d6db0d9da9a5e45300e5be3e91eb28cbaa5fe77d05470011e51cabc553165e5ea89f0dd953341a77f27f397184d72f40890984f8761fa9d44d711e4f44cbeea4baf6e6bd50b579db9eb86ca5c30b9066a179c691c0aaca58cc2734ace033c8f6f1bd77fd787736580b9825cbddf3c15e7be451d4084fd6d21504926514b253f56d63b329e0ec71235da1f767d76528bddc6c5b19ec625dc44e53ea998b92ef203c85cd161017782ba85194ca65a9a758ab1c825243fbcad6c7f90ca6feefee36ec78e8f847c245b033b8a81056799259f7fcbb6ab2fc4b3e0f4a9f9d6b518d4019594c89538d20e6d471eb2e33834d244b9832bd91a1c4c6f9806f5c4edf7fd538c1a8622831a325ce17f05831a4958b07d4360e9d78e2ca2f6a02ead8cf9e64308ccac3af6a26fba9d2ca1af61e91c5172abb7bd6842640e2849cec05f89a9552c6487abe7c8697e418f699def69737b37f2e386c517421f04ad071b3726f4f5256c665ce6c65d330a956d52ba59e32e3c3ee33c4cc33864dc11340db58c2d06621623311025bf4aed22bab73dba20a2c51b550918f6afebfe347e62b8be78a0363867c1f1849faf8af59a4abebbceed3afc2effad08ea79ffac6e687fab119a5957a1363317363c6877a9c2c9dcdbc9722bcf90cbbd067696a94ce3db5969d35e10e84750dfab911f5f2d0f232b4d8de76025fb8326c322cbfc02e134f6647b56ec3b67ff877deae5f534fc4af0af351453be68d9c0e740533c458503fe8094eb44b2c16ecbb856fa01053e44812a1a763ec0e459eb993f6884aabccdffd1a8a33e8d3805f4086cc40421a75ceb7c36996bce383fc208bf56b75fa10253b6e13c11dd7de50a57507ae89615cdc3d19ae3ad3ccacce7e4af0db6fa9eb890346d1f09d4167df432505863397170b984bdaeb19d853bad6a866cd216f77627f5c01120f06060b6b09b62b890bf2bcf18904c9f54726ea7116222c5b39d774e1aeac4aac3b6731289a40c5c6a4da49582cfdf76982633a04886858ed8f4f7f933b1f4b4b9ce67ede2d0960d26b336572720a91fafbe6d3d2490cfc8e7e63e153f15dab8c1377315e1483c18926d8bba7126437c106b14acf3fd7bb06523eb3e6f66b393e82a8d24c422cad441bd2e399df06091ffe28622bcbd00f3d7ca572892cfaf3ec3f9b66858d04e1b67d2f190448b3bdf07974442539073b9d90f9f4a4ef8412f9e4142622efa3e6c3a69fa5b043424acfba50c01bd5df09986131fb406ea678fe8336d3ca271dbaf665c77c4f1a718c6c73c68e1f26aaa1733890b1a0eb112365d754d951bbc15c66ff650e9933dc304b7c577b2c5b53869c3c7d610b44dfcb2fc3b48cbda1c0780186de75a6c4719a7d7107", 0xd7b}], 0x1}, 0x4040000) 5.503699623s ago: executing program 8 (id=2010): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.26017842s ago: executing program 6 (id=2011): socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x200000002, 0x400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') socket$inet(0x2, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0xfd}], 0x1}}], 0x1, 0x0) 4.988528296s ago: executing program 9 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 4.965995997s ago: executing program 6 (id=2013): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x15, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 3.901068434s ago: executing program 9 (id=2014): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8307500710001000202"], 0x7a) prctl$PR_SET_PTRACER(0x59616d61, r0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8180000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000100001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 3.820541296s ago: executing program 2 (id=2015): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {0x1, 0x1}, [{0x2, 0x5}], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x1) 3.804123116s ago: executing program 6 (id=2016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000900)="bad330fbc93f0700000000ea0756", 0x36, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xdb, 0x6, @multicast}, 0x14) 3.126114852s ago: executing program 6 (id=2017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0e800000ffffffffffffaaaaaaaaaa4188a81f0081000d0008"], 0x42) 2.83261813s ago: executing program 2 (id=2018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0xc1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 2.693877713s ago: executing program 6 (id=2019): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.488192848s ago: executing program 9 (id=2020): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x4eb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.258237424s ago: executing program 2 (id=2021): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000000c0), 0x12) listen(r2, 0x5) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000805001001"], 0xa) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805001001"], 0xa) 2.229012495s ago: executing program 3 (id=2022): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8307500710001000202"], 0x7a) prctl$PR_SET_PTRACER(0x59616d61, r0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 2.103381078s ago: executing program 8 (id=2023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 2.011005661s ago: executing program 9 (id=2024): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r1, r1, 0x0, 0x8000000f3aa6ea) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) 1.750882237s ago: executing program 2 (id=2025): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.420466845s ago: executing program 8 (id=2026): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x58, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x4}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x58}}, 0x10) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) 754.193041ms ago: executing program 8 (id=2027): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0x2, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 722.95µs ago: executing program 9 (id=2028): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000500)={[{@nodioread_nolock}, {@jqfmt_vfsv0}, {@nolazytime}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$key(0xf, 0x3, 0x2) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, 0x0, 0x0) 0s ago: executing program 2 (id=2029): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400e0001"], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ith ext2 [ 386.957440][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 388.270627][ T9571] loop8: detected capacity change from 0 to 512 [ 388.277928][ T9571] FAT-fs (loop8): Unrecognized mount option "task" or missing value [ 388.537905][ T9144] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.393520][ T9595] device syzkaller0 entered promiscuous mode [ 391.593079][ T9630] loop9: detected capacity change from 0 to 1024 [ 391.735722][ T9630] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 391.756904][ T9636] loop5: detected capacity change from 0 to 512 [ 392.065102][ T9636] EXT4-fs (loop5): Test dummy encryption mode enabled [ 392.118513][ T9636] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1190: inode has both inline data and extents flags [ 392.215016][ T9651] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.378135][ T9636] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1190: couldn't read orphan inode 15 (err -117) [ 392.800880][ T9636] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 393.066911][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 395.097691][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 395.190023][ T9679] device syzkaller0 entered promiscuous mode [ 395.798023][ T9693] binder: 9685:9693 ioctl c00c620f 200000000000 returned -22 [ 396.549046][ T9700] loop2: detected capacity change from 0 to 128 [ 396.580995][ T9705] loop3: detected capacity change from 0 to 512 [ 396.599183][ T9700] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 396.631265][ T9700] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 396.869269][ T9705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 397.080079][ T9705] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.603430][ T4565] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 397.615273][ T9721] loop5: detected capacity change from 0 to 512 [ 397.641139][ T9721] EXT4-fs (loop5): Test dummy encryption mode enabled [ 397.721320][ T9721] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1214: inode has both inline data and extents flags [ 397.736958][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 397.770067][ T9721] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1214: couldn't read orphan inode 15 (err -117) [ 397.858080][ T9721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 397.981370][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1217'. [ 398.003193][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1217'. [ 398.945710][ T9747] device syzkaller0 entered promiscuous mode [ 399.399837][ T9728] loop3: detected capacity change from 0 to 2048 [ 399.497257][ T9756] loop2: detected capacity change from 0 to 1024 [ 399.594190][ T9756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 399.755252][ T9764] FAULT_INJECTION: forcing a failure. [ 399.755252][ T9764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 399.768625][ T9764] CPU: 0 PID: 9764 Comm: syz.9.1224 Not tainted syzkaller #0 [ 399.776018][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 399.786093][ T9764] Call Trace: [ 399.789384][ T9764] [ 399.792329][ T9764] dump_stack_lvl+0x188/0x24e [ 399.797044][ T9764] ? show_regs_print_info+0x12/0x12 [ 399.802259][ T9764] ? load_image+0x410/0x410 [ 399.806792][ T9764] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.811850][ T9764] should_fail_ex+0x390/0x4c0 [ 399.816558][ T9764] prepare_alloc_pages+0x1e1/0x5b0 [ 399.821781][ T9764] __alloc_pages+0x130/0x4f0 [ 399.826373][ T9764] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 399.832130][ T9764] ? zone_statistics+0x170/0x170 [ 399.837069][ T9764] ? __rwlock_init+0x140/0x140 [ 399.841836][ T9764] ? do_raw_spin_unlock+0x11d/0x230 [ 399.847051][ T9764] __get_free_pages+0x8/0x30 [ 399.851656][ T9764] kasan_populate_vmalloc_pte+0x31/0xf0 [ 399.857205][ T9764] ? __apply_to_page_range+0x97b/0xd10 [ 399.862682][ T9764] __apply_to_page_range+0x98d/0xd10 [ 399.867982][ T9764] ? kasan_populate_vmalloc+0x70/0x70 [ 399.873387][ T9764] alloc_vmap_area+0x179f/0x18d0 [ 399.878345][ T9764] ? vm_map_ram+0xab0/0xab0 [ 399.882854][ T9764] ? rcu_is_watching+0x11/0xa0 [ 399.887627][ T9764] __get_vm_area_node+0x158/0x330 [ 399.892671][ T9764] __vmalloc_node_range+0x357/0x1380 [ 399.897979][ T9764] ? translate_table+0x19f/0x1ff0 [ 399.903119][ T9764] ? zone_statistics+0x170/0x170 [ 399.908071][ T9764] ? __kasan_kmalloc_large+0x16/0xd0 [ 399.913358][ T9764] ? free_vm_area+0x50/0x50 [ 399.917860][ T9764] ? kvmalloc_node+0x6c/0x180 [ 399.922606][ T9764] ? rcu_is_watching+0x11/0xa0 [ 399.927368][ T9764] ? kvmalloc_node+0x6c/0x180 [ 399.932042][ T9764] ? trace_kmalloc+0x22/0xa0 [ 399.936626][ T9764] kvmalloc_node+0x13b/0x180 [ 399.941213][ T9764] ? translate_table+0x19f/0x1ff0 [ 399.946240][ T9764] translate_table+0x19f/0x1ff0 [ 399.951103][ T9764] ? __might_fault+0xa6/0x120 [ 399.955777][ T9764] ? arpt_register_table+0x690/0x690 [ 399.961062][ T9764] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.966086][ T9764] ? __virt_addr_valid+0x188/0x540 [ 399.971272][ T9764] ? __might_fault+0xc2/0x120 [ 399.975968][ T9764] ? __might_fault+0xa6/0x120 [ 399.980639][ T9764] ? _copy_from_user+0x10b/0x170 [ 399.985635][ T9764] do_arpt_set_ctl+0x9f4/0x1020 [ 399.990513][ T9764] ? arpt_unregister_table+0x50/0x50 [ 399.995803][ T9764] ? nf_setsockopt+0x218/0x280 [ 400.000656][ T9764] ? __lock_acquire+0x7ea0/0x7ea0 [ 400.005678][ T9764] ? trace_contention_end+0x5f/0x170 [ 400.010969][ T9764] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 400.017122][ T9764] ? mutex_unlock+0x10/0x10 [ 400.021623][ T9764] ? aa_af_perm+0x340/0x340 [ 400.026215][ T9764] nf_setsockopt+0x25f/0x280 [ 400.030807][ T9764] ? sock_common_recvmsg+0x190/0x190 [ 400.036097][ T9764] __sys_setsockopt+0x2bf/0x3d0 [ 400.040993][ T9764] __x64_sys_setsockopt+0xb1/0xc0 [ 400.046033][ T9764] do_syscall_64+0x4c/0xa0 [ 400.050446][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 400.055124][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 400.059798][ T9764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.065685][ T9764] RIP: 0033:0x7f7053d9e199 [ 400.070101][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.089705][ T9764] RSP: 002b:00007f7054c00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 400.098133][ T9764] RAX: ffffffffffffffda RBX: 00007f7054025fa0 RCX: 00007f7053d9e199 [ 400.106115][ T9764] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 400.114081][ T9764] RBP: 00007f7053e358e0 R08: 0000000000000a50 R09: 0000000000000000 [ 400.122072][ T9764] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 400.130034][ T9764] R13: 00007f7054026038 R14: 00007f7054025fa0 R15: 00007fff81e2f848 [ 400.138010][ T9764] [ 400.154247][ T9764] syz.9.1224: vmalloc error: size 41943072, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0-1 [ 400.172456][ T9764] CPU: 1 PID: 9764 Comm: syz.9.1224 Not tainted syzkaller #0 [ 400.179961][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 400.190043][ T9764] Call Trace: [ 400.193334][ T9764] [ 400.196282][ T9764] dump_stack_lvl+0x188/0x24e [ 400.200999][ T9764] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 400.207533][ T9764] ? show_regs_print_info+0x12/0x12 [ 400.212767][ T9764] ? load_image+0x410/0x410 [ 400.217306][ T9764] ? __rcu_read_unlock+0x78/0xd0 [ 400.222275][ T9764] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 400.228715][ T9764] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 400.235239][ T9764] warn_alloc+0x242/0x330 [ 400.239597][ T9764] ? slab_free_freelist_hook+0x133/0x1b0 [ 400.245255][ T9764] ? zone_watermark_ok_safe+0x270/0x270 [ 400.250820][ T9764] ? __get_vm_area_node+0x16d/0x330 [ 400.256044][ T9764] ? __get_vm_area_node+0x16d/0x330 [ 400.261278][ T9764] __vmalloc_node_range+0x37c/0x1380 [ 400.266610][ T9764] ? zone_statistics+0x170/0x170 [ 400.271588][ T9764] ? __kasan_kmalloc_large+0x16/0xd0 [ 400.276898][ T9764] ? free_vm_area+0x50/0x50 [ 400.281418][ T9764] ? kvmalloc_node+0x6c/0x180 [ 400.286114][ T9764] ? rcu_is_watching+0x11/0xa0 [ 400.290895][ T9764] ? kvmalloc_node+0x6c/0x180 [ 400.295590][ T9764] ? trace_kmalloc+0x22/0xa0 [ 400.300190][ T9764] kvmalloc_node+0x13b/0x180 [ 400.304831][ T9764] ? translate_table+0x19f/0x1ff0 [ 400.309909][ T9764] translate_table+0x19f/0x1ff0 [ 400.314800][ T9764] ? __might_fault+0xa6/0x120 [ 400.319490][ T9764] ? arpt_register_table+0x690/0x690 [ 400.324793][ T9764] ? __lock_acquire+0x7ea0/0x7ea0 [ 400.329846][ T9764] ? __virt_addr_valid+0x188/0x540 [ 400.334989][ T9764] ? __might_fault+0xc2/0x120 [ 400.339680][ T9764] ? __might_fault+0xa6/0x120 [ 400.344375][ T9764] ? _copy_from_user+0x10b/0x170 [ 400.349338][ T9764] do_arpt_set_ctl+0x9f4/0x1020 [ 400.354224][ T9764] ? arpt_unregister_table+0x50/0x50 [ 400.359528][ T9764] ? nf_setsockopt+0x218/0x280 [ 400.364316][ T9764] ? __lock_acquire+0x7ea0/0x7ea0 [ 400.369377][ T9764] ? trace_contention_end+0x5f/0x170 [ 400.374687][ T9764] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 400.380336][ T9764] ? mutex_unlock+0x10/0x10 [ 400.384864][ T9764] ? aa_af_perm+0x340/0x340 [ 400.389389][ T9764] nf_setsockopt+0x25f/0x280 [ 400.394174][ T9764] ? sock_common_recvmsg+0x190/0x190 [ 400.399475][ T9764] __sys_setsockopt+0x2bf/0x3d0 [ 400.404345][ T9764] __x64_sys_setsockopt+0xb1/0xc0 [ 400.409388][ T9764] do_syscall_64+0x4c/0xa0 [ 400.413823][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 400.418510][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 400.423199][ T9764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.429114][ T9764] RIP: 0033:0x7f7053d9e199 [ 400.433537][ T9764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.453169][ T9764] RSP: 002b:00007f7054c00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 400.461603][ T9764] RAX: ffffffffffffffda RBX: 00007f7054025fa0 RCX: 00007f7053d9e199 [ 400.469596][ T9764] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 400.477670][ T9764] RBP: 00007f7053e358e0 R08: 0000000000000a50 R09: 0000000000000000 [ 400.485674][ T9764] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 400.493655][ T9764] R13: 00007f7054026038 R14: 00007f7054025fa0 R15: 00007fff81e2f848 [ 400.501655][ T9764] [ 400.575876][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 400.594681][ T3640] loop3: p1 < > p4 [ 400.594681][ T3640] p4: [ 400.604176][ T3640] loop3: p4 size 722688 extends beyond EOD, truncated [ 400.606423][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 400.613298][ T9764] Mem-Info: [ 400.802886][ T9773] capability: warning: `syz.2.1226' uses 32-bit capabilities (legacy support in use) [ 400.819417][ T9764] active_anon:12196 inactive_anon:0 isolated_anon:0 [ 400.819417][ T9764] active_file:1415 inactive_file:40119 isolated_file:0 [ 400.819417][ T9764] unevictable:768 dirty:206 writeback:0 [ 400.819417][ T9764] slab_reclaimable:21988 slab_unreclaimable:98190 [ 400.819417][ T9764] mapped:32483 shmem:5615 pagetables:905 [ 400.819417][ T9764] sec_pagetables:0 bounce:0 [ 400.819417][ T9764] kernel_misc_reclaimable:0 [ 400.819417][ T9764] free:1075791 free_pcp:1974 free_cma:0 [ 401.081011][ T9764] Node 0 active_anon:43084kB inactive_anon:0kB active_file:5660kB inactive_file:160276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129932kB dirty:824kB writeback:0kB shmem:15724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11576kB pagetables:3620kB sec_pagetables:0kB all_unreclaimable? no [ 401.184533][ T9764] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 401.221302][ T9764] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.239588][ T9785] loop3: detected capacity change from 0 to 256 [ 401.262417][ T9764] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 401.271286][ T9764] Node 0 DMA32 free:1423372kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:43584kB inactive_anon:0kB active_file:5660kB inactive_file:160276kB unevictable:1536kB writepending:824kB present:3129332kB managed:2592880kB mlocked:0kB bounce:0kB free_pcp:13732kB local_pcp:2272kB free_cma:0kB [ 401.388541][ T9764] lowmem_reserve[]: 0 0 1 1 1 [ 401.393456][ T9764] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 401.451040][ T9764] lowmem_reserve[]: 0 0 0 0 0 [ 401.473913][ T9764] Node 1 Normal free:2863760kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 402.040743][ T9764] lowmem_reserve[]: 0 0 0 0 0 [ 402.045615][ T9764] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 402.058991][ T9764] Node 0 DMA32: 276*4kB (UME) 365*8kB (UE) 69*16kB (UME) 454*32kB (UME) 237*64kB (UME) 117*128kB (UME) 65*256kB (UM) 27*512kB (UME) 9*1024kB (UM) 2*2048kB (UM) 321*4096kB (UM) = 1408392kB [ 402.088117][ T9764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.114492][ T9764] Node 1 Normal: 220*4kB (U) 52*8kB (UME) 26*16kB (UME) 207*32kB (UE) 106*64kB (UME) 23*128kB (UM) 16*256kB (UME) 4*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 692*4096kB (M) = 2863760kB [ 402.164656][ T9764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.191787][ T9764] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 402.234325][ T9764] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 402.272534][ T9764] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.300782][ T9798] team0 (unregistering): Port device team_slave_0 removed [ 402.313132][ T9764] 51571 total pagecache pages [ 402.323257][ T9764] 0 pages in swap cache [ 402.331778][ T9764] Free swap = 124728kB [ 402.355032][ T9798] team0 (unregistering): Failed to send options change via netlink (err -105) [ 402.364035][ T9764] Total swap = 124996kB [ 402.372786][ T9764] 2097051 pages RAM [ 402.381657][ T9764] 0 pages HighMem/MovableOnly [ 402.389908][ T9798] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 402.409526][ T9764] 415230 pages reserved [ 402.413745][ T9764] 0 pages cma reserved [ 402.429171][ T9798] team0 (unregistering): Port device team_slave_1 removed [ 402.980028][ T9812] loop9: detected capacity change from 0 to 4096 [ 403.593257][ T9820] loop2: detected capacity change from 0 to 8192 [ 403.611162][ T9820] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 403.696193][ T9812] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 405.418149][ T9830] loop3: detected capacity change from 0 to 2048 [ 405.493746][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 405.517086][ T9830] loop3: p1 < > p4 [ 405.517086][ T9830] p4: [ 405.546007][ T9830] loop3: p4 size 722688 extends beyond EOD, truncated [ 405.753300][ T9839] loop9: detected capacity change from 0 to 512 [ 405.844707][ T9839] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 405.997856][ T9839] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3861: comm syz.9.1240: Allocating blocks 41-42 which overlap fs metadata [ 406.155407][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 406.182819][ T9839] Quota error (device loop9): write_blk: dquota write failed [ 406.205190][ T9839] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 406.277729][ T9839] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 406.304511][ T9839] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.1240: Failed to acquire dquot type 1 [ 406.358508][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 406.394936][ T9839] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 406.445076][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 406.451807][ T9839] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.1240: corrupted inode contents [ 406.597529][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 406.620210][ T9839] EXT4-fs error (device loop9): ext4_dirty_inode:6166: inode #12: comm syz.9.1240: mark_inode_dirty error [ 406.647436][ T9863] loop2: detected capacity change from 0 to 256 [ 406.690394][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 406.972030][ T9839] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.1240: corrupted inode contents [ 407.184702][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 407.201627][ T9839] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #12: comm syz.9.1240: mark_inode_dirty error [ 407.838206][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 407.867020][ T9839] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.1240: corrupted inode contents [ 407.912187][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 407.918880][ T9839] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 407.961290][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 407.997623][ T9875] loop5: detected capacity change from 0 to 256 [ 408.012728][ T9839] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.1240: corrupted inode contents [ 408.061924][ T9878] loop8: detected capacity change from 0 to 512 [ 408.119727][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 408.134561][ T9839] EXT4-fs error (device loop9): ext4_truncate:4325: inode #12: comm syz.9.1240: mark_inode_dirty error [ 408.149721][ T9878] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.1249: inode has both inline data and extents flags [ 408.190728][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 408.206446][ T9839] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 408.218528][ T9878] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.1249: couldn't read orphan inode 15 (err -117) [ 408.240531][ T9839] EXT4-fs (loop9): Remounting filesystem read-only [ 408.264768][ T9839] EXT4-fs (loop9): 1 truncate cleaned up [ 408.289856][ T9878] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 408.315638][ T9839] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 408.372012][ T9889] netlink: 'syz.2.1251': attribute type 4 has an invalid length. [ 408.395086][ T9889] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1251'. [ 408.450250][ T9889] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 408.533186][ T9878] EXT4-fs (loop8): shut down requested (0) [ 408.611962][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 408.816433][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 409.783177][ T9918] loop9: detected capacity change from 0 to 256 [ 410.705120][ T9923] device syzkaller0 entered promiscuous mode [ 411.629958][ T9934] loop9: detected capacity change from 0 to 256 [ 412.523172][ T9946] loop3: detected capacity change from 0 to 256 [ 414.095570][ T9960] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1266'. [ 414.163378][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1266'. [ 414.522039][ T9969] input: syz0 as /devices/virtual/input/input15 [ 415.698542][ T9991] loop5: detected capacity change from 0 to 1024 [ 415.795610][ T9995] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.493453][T10000] loop2: detected capacity change from 0 to 256 [ 416.765351][ T9991] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 417.530655][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 417.671428][T10023] loop5: detected capacity change from 0 to 1024 [ 417.713017][T10023] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 417.762833][T10023] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.782820][T10031] binder: 10030:10031 unknown command 1074553619 [ 417.810131][T10031] binder: 10030:10031 ioctl c0306201 2000000001c0 returned -22 [ 417.841810][T10023] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.1282: lblock 3 mapped to illegal pblock 3 (length 3) [ 417.878157][T10023] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 417.908250][T10023] EXT4-fs (loop5): This should not happen!! Data will be lost [ 417.908250][T10023] [ 417.919153][T10036] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1282: bg 0: block 112: padding at end of block bitmap is not set [ 417.966397][T10036] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 418.005325][T10036] EXT4-fs (loop5): This should not happen!! Data will be lost [ 418.005325][T10036] [ 418.054464][T10036] EXT4-fs (loop5): Total free blocks count 0 [ 418.064502][T10036] EXT4-fs (loop5): Free/Dirty block details [ 418.094000][T10036] EXT4-fs (loop5): free_blocks=0 [ 418.118206][T10036] EXT4-fs (loop5): dirty_blocks=64 [ 418.129536][T10041] loop3: detected capacity change from 0 to 4096 [ 418.214094][T10036] EXT4-fs (loop5): Block reservation details [ 418.319491][T10044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.333850][T10044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.343337][T10044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.622536][T10041] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 419.025619][ T4545] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 419.324380][T10054] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.125044][T10055] FAULT_INJECTION: forcing a failure. [ 420.125044][T10055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.138788][T10055] CPU: 0 PID: 10055 Comm: syz.2.1289 Not tainted syzkaller #0 [ 420.146278][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 420.156353][T10055] Call Trace: [ 420.159633][T10055] [ 420.162562][T10055] dump_stack_lvl+0x188/0x24e [ 420.167246][T10055] ? show_regs_print_info+0x12/0x12 [ 420.172442][T10055] ? load_image+0x410/0x410 [ 420.176951][T10055] ? __lock_acquire+0x7ea0/0x7ea0 [ 420.181978][T10055] ? verify_lock_unused+0x140/0x140 [ 420.187181][T10055] should_fail_ex+0x390/0x4c0 [ 420.191866][T10055] strncpy_from_user+0x32/0x340 [ 420.196794][T10055] setxattr+0x116/0x330 [ 420.201015][T10055] ? path_setxattr+0x290/0x290 [ 420.205801][T10055] ? __mnt_want_write+0x21f/0x2a0 [ 420.210829][T10055] ? mnt_want_write_file+0x16e/0x200 [ 420.216108][T10055] __se_sys_fsetxattr+0x15e/0x1d0 [ 420.221140][T10055] do_syscall_64+0x4c/0xa0 [ 420.225554][T10055] ? clear_bhb_loop+0x60/0xb0 [ 420.230227][T10055] ? clear_bhb_loop+0x60/0xb0 [ 420.234905][T10055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.240796][T10055] RIP: 0033:0x7fe5d159e199 [ 420.245209][T10055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.264816][T10055] RSP: 002b:00007fe5d24f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 420.273228][T10055] RAX: ffffffffffffffda RBX: 00007fe5d1825fa0 RCX: 00007fe5d159e199 [ 420.281198][T10055] RDX: 00002000000003c0 RSI: 00002000000001c0 RDI: 0000000000000005 [ 420.289172][T10055] RBP: 00007fe5d16358e0 R08: 0000000000000003 R09: 0000000000000000 [ 420.297160][T10055] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 420.305126][T10055] R13: 00007fe5d1826038 R14: 00007fe5d1825fa0 R15: 00007ffe0dd5d0c8 [ 420.313105][T10055] [ 420.316131][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.429763][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 420.508853][T10049] loop8: detected capacity change from 0 to 4096 [ 420.616837][T10049] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 420.704053][T10061] loop2: detected capacity change from 0 to 1024 [ 421.783108][T10061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 422.532280][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 422.600062][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 424.043159][T10108] loop5: detected capacity change from 0 to 4096 [ 424.183613][T10106] loop3: detected capacity change from 0 to 8192 [ 424.288336][T10108] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 424.372650][T10124] binder: 10114:10124 ioctl c00c620f 200000000000 returned -22 [ 426.082565][T10133] loop9: detected capacity change from 0 to 4096 [ 426.158568][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 426.194102][T10133] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 427.093046][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 427.420368][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1319'. [ 427.497754][T10171] fuse: Bad value for 'fd' [ 427.875545][T10169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.890873][T10169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.899394][T10169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.281480][T10179] loop2: detected capacity change from 0 to 1024 [ 428.330493][T10179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 428.428535][T10176] loop5: detected capacity change from 0 to 4096 [ 428.487692][T10176] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 429.417232][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 429.707813][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 429.815773][T10199] loop9: detected capacity change from 0 to 4096 [ 429.867049][T10199] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 430.393264][T10217] loop5: detected capacity change from 0 to 1024 [ 430.735207][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 430.742771][T10217] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 430.788035][T10217] ip_tables: iptables: counters copy to user failed while replacing table [ 431.079122][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 431.380678][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1335'. [ 431.728786][ T49] Bluetooth: unknown link type 128 [ 431.829331][T10254] loop9: detected capacity change from 0 to 256 [ 431.985581][T10256] loop5: detected capacity change from 0 to 512 [ 431.992756][T10256] EXT4-fs: Ignoring removed nobh option [ 432.065210][T10256] EXT4-fs: Ignoring removed i_version option [ 432.147465][T10256] EXT4-fs: Mount option(s) incompatible with ext2 [ 432.956234][T10271] loop3: detected capacity change from 0 to 256 [ 433.587600][T10284] loop9: detected capacity change from 0 to 512 [ 433.755042][ T49] Bluetooth: hci2: command 0x0429 tx timeout [ 433.883774][T10284] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 433.914587][T10284] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.049007][ T4399] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 434.124534][ T4399] EXT4-fs (loop9): Remounting filesystem read-only [ 434.145121][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 434.567206][ T4286] Bluetooth: unknown link type 128 [ 435.138250][T10320] loop8: detected capacity change from 0 to 256 [ 436.055550][T10331] loop3: detected capacity change from 0 to 512 [ 436.165523][T10331] EXT4-fs (loop3): Test dummy encryption mode enabled [ 436.173053][T10335] loop5: detected capacity change from 0 to 256 [ 436.201602][T10312] input: syz0 as /devices/virtual/input/input19 [ 436.233521][T10331] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1358: inode has both inline data and extents flags [ 436.312448][T10331] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1358: couldn't read orphan inode 15 (err -117) [ 436.492012][T10344] loop8: detected capacity change from 0 to 512 [ 436.597931][T10331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 436.654470][ T4286] Bluetooth: hci4: command 0x0429 tx timeout [ 436.695707][T10344] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 436.751550][T10344] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.263535][ T47] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 437.377570][ T47] EXT4-fs (loop8): Remounting filesystem read-only [ 437.436581][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 438.446030][T10367] fuse: Bad value for 'fd' [ 438.990113][ T49] Bluetooth: unknown link type 128 [ 438.997118][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 439.097421][T10377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.110954][T10377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.119217][T10377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.518932][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.525711][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.649511][T10378] loop8: detected capacity change from 0 to 1024 [ 439.738016][T10381] loop9: detected capacity change from 0 to 1024 [ 439.798184][T10378] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 439.809837][T10378] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.811953][T10381] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 439.951144][T10378] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 3: comm syz.8.1370: lblock 3 mapped to illegal pblock 3 (length 3) [ 439.991257][T10381] ip_tables: iptables: counters copy to user failed while replacing table [ 439.999900][T10392] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1370: bg 0: block 112: padding at end of block bitmap is not set [ 440.042050][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 440.091242][T10392] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 440.188061][T10378] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 440.241728][T10392] EXT4-fs (loop8): This should not happen!! Data will be lost [ 440.241728][T10392] [ 440.277237][T10378] EXT4-fs (loop8): This should not happen!! Data will be lost [ 440.277237][T10378] [ 440.368918][T10392] EXT4-fs (loop8): Total free blocks count 0 [ 440.553238][T10392] EXT4-fs (loop8): Free/Dirty block details [ 440.787046][T10408] input: syz0 as /devices/virtual/input/input21 [ 440.884770][T10396] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #15: block 3: comm syz.8.1370: lblock 3 mapped to illegal pblock 3 (length 1) [ 441.344260][T10392] EXT4-fs (loop8): free_blocks=0 [ 441.349268][T10392] EXT4-fs (loop8): dirty_blocks=64 [ 441.379031][ T49] Bluetooth: hci1: command 0x0429 tx timeout [ 441.381145][T10392] EXT4-fs (loop8): Block reservation details [ 441.494318][ T26] audit: type=1800 audit(1791402698.707:32): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1370" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 441.606236][ T4504] EXT4-fs error (device loop8): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 442.082060][T10425] binder: 10416:10425 ioctl c00c620f 200000000000 returned -22 [ 442.835317][ T49] Bluetooth: unknown link type 128 [ 443.825435][T10444] loop9: detected capacity change from 0 to 1024 [ 444.023352][T10444] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 444.551338][T10461] loop3: detected capacity change from 0 to 4096 [ 444.593873][T10461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 444.776566][T10468] ip_tables: iptables: counters copy to user failed while replacing table [ 444.944521][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 446.465395][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 446.587674][T10492] netlink: 'syz.5.1397': attribute type 4 has an invalid length. [ 446.612182][T10492] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1397'. [ 446.684843][T10492] .`: renamed from bond0 [ 447.764419][ T49] Bluetooth: unknown link type 128 [ 448.086916][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 448.540045][T10539] fuse: Bad value for 'fd' [ 448.747684][T10546] binder: 10535:10546 ioctl c00c620f 200000000000 returned -22 [ 449.387725][T10545] loop5: detected capacity change from 0 to 4096 [ 449.517637][T10545] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 449.985528][T10559] input: syz0 as /devices/virtual/input/input23 [ 449.996670][ T49] Bluetooth: hci2: command 0x0429 tx timeout [ 451.585635][T10561] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.261772][T10577] loop8: detected capacity change from 0 to 1024 [ 453.555283][T10577] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 453.882038][T10586] team0 (unregistering): Port device team_slave_0 removed [ 453.943998][T10593] ip_tables: iptables: counters copy to user failed while replacing table [ 453.968522][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 453.989060][T10586] team0 (unregistering): Port device team_slave_1 removed [ 454.578087][T10604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 454.587175][T10604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.594702][T10604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 456.273488][T10625] binder: 10621:10625 ioctl c00c620f 200000000000 returned -22 [ 456.560623][T10628] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.653592][T10641] loop5: detected capacity change from 0 to 4096 [ 457.743651][T10616] loop9: detected capacity change from 0 to 2048 [ 457.847345][T10616] loop9: p1 < > p4 [ 457.847345][T10616] p4: [ 457.863937][T10641] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 457.896127][T10616] loop9: p4 size 722688 extends beyond EOD, truncated [ 458.113738][ T3640] loop9: p1 < > p4 [ 458.113738][ T3640] p4: [ 458.143347][ T3640] loop9: p4 size 722688 extends beyond EOD, truncated [ 459.042908][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 459.260081][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 459.318149][T10660] loop8: detected capacity change from 0 to 1024 [ 459.502406][T10660] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 459.505697][T10662] loop2: detected capacity change from 0 to 4096 [ 459.589106][T10660] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.730670][T10662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 460.517390][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 461.236205][T10683] binder: 10677:10683 ioctl c00c620f 200000000000 returned -22 [ 462.143181][T10697] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.976976][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 463.083195][T10710] loop5: detected capacity change from 0 to 1024 [ 463.246285][T10710] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 463.589454][T10721] loop8: detected capacity change from 0 to 4096 [ 463.689206][T10727] ip_tables: iptables: counters copy to user failed while replacing table [ 463.768009][T10721] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 465.752849][ T49] Bluetooth: unknown link type 128 [ 466.000066][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 466.138083][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 466.799548][T10760] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.484553][T10764] netlink: 'syz.5.1457': attribute type 4 has an invalid length. [ 467.502634][T10764] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1457'. [ 467.869758][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 468.819470][T10789] loop5: detected capacity change from 0 to 1024 [ 468.946296][T10789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 469.494907][T10766] loop9: detected capacity change from 0 to 2048 [ 469.650112][T10804] ip_tables: iptables: counters copy to user failed while replacing table [ 469.827808][T10766] loop9: p1 < > p4 [ 469.827808][T10766] p4: [ 469.925395][T10766] loop9: p4 size 722688 extends beyond EOD, truncated [ 470.051889][T10815] loop2: detected capacity change from 0 to 256 [ 471.224362][T10824] loop2: detected capacity change from 0 to 4096 [ 471.353150][T10831] fuse: Bad value for 'fd' [ 471.628559][T10824] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 472.441377][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 472.599530][ T4286] Bluetooth: hci4: link tx timeout [ 472.606751][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 473.441370][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 474.592482][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 474.634301][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 475.070901][T10881] loop9: detected capacity change from 0 to 1024 [ 475.176548][T10881] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 475.231980][T10869] loop3: detected capacity change from 0 to 2048 [ 475.328637][T10869] loop3: p1 < > p4 [ 475.328637][T10869] p4: [ 475.371345][T10869] loop3: p4 size 722688 extends beyond EOD, truncated [ 475.444390][T10896] netlink: 'syz.8.1487': attribute type 4 has an invalid length. [ 475.452323][T10896] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1487'. [ 476.082841][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 477.429782][T10916] loop9: detected capacity change from 0 to 1024 [ 477.494106][T10916] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 477.713452][ T9147] udevd[9147]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 477.733504][ T9144] udevd[9144]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 477.735602][T10926] loop3: detected capacity change from 0 to 1024 [ 477.845313][T10926] EXT4-fs: Ignoring removed bh option [ 477.860078][T10929] ip_tables: iptables: counters copy to user failed while replacing table [ 477.955893][T10926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 478.015925][T10926] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 478.058729][T10926] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 478.916994][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 478.947291][T10944] loop5: detected capacity change from 0 to 1024 [ 478.992601][T10944] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 479.958462][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 480.298779][T10973] loop3: detected capacity change from 0 to 512 [ 480.321422][T10973] EXT4-fs (loop3): Test dummy encryption mode enabled [ 480.699808][T10973] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1504: inode has both inline data and extents flags [ 481.008770][T10973] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1504: couldn't read orphan inode 15 (err -117) [ 481.097328][T10973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 481.399279][T10968] loop2: detected capacity change from 0 to 2048 [ 482.459194][T10985] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 482.604355][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 482.610442][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 482.759781][T10993] loop5: detected capacity change from 0 to 512 [ 482.810331][T10993] EXT4-fs: Ignoring removed nobh option [ 482.889223][T10993] EXT4-fs: Ignoring removed i_version option [ 483.008752][T10993] EXT4-fs: Mount option(s) incompatible with ext2 [ 483.258902][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 483.715458][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 483.738810][T11003] fuse: Bad value for 'fd' [ 483.952210][T11012] loop9: detected capacity change from 0 to 1024 [ 483.988439][T11012] EXT4-fs: Ignoring removed bh option [ 483.998015][T11014] loop5: detected capacity change from 0 to 256 [ 484.175842][T11012] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 484.549705][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 485.569061][T11040] loop8: detected capacity change from 0 to 512 [ 485.617717][T11043] loop2: detected capacity change from 0 to 1024 [ 485.714528][T11046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 485.727370][T11046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.735859][T11046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.051146][T11043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 486.076550][T11040] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 486.218654][T11040] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.341794][T11053] loop5: detected capacity change from 0 to 512 [ 486.431265][T11055] loop9: detected capacity change from 0 to 512 [ 486.442994][T11053] EXT4-fs (loop5): Test dummy encryption mode enabled [ 486.485379][T11055] EXT4-fs: Ignoring removed nobh option [ 486.491143][T11055] EXT4-fs: Ignoring removed i_version option [ 486.528939][T11053] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1520: inode has both inline data and extents flags [ 486.548087][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 486.556695][T11055] EXT4-fs: Mount option(s) incompatible with ext2 [ 486.579615][T11060] fuse: Bad value for 'fd' [ 486.614731][T11061] ip_tables: iptables: counters copy to user failed while replacing table [ 486.653295][T11053] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1520: couldn't read orphan inode 15 (err -117) [ 486.701021][T11053] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 486.728774][ T4286] Bluetooth: unknown link type 128 [ 486.949482][T11069] loop9: detected capacity change from 0 to 1024 [ 487.303642][T11074] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 487.390806][T11069] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 488.178173][T11091] loop3: detected capacity change from 0 to 1024 [ 488.217628][T11091] EXT4-fs: Ignoring removed bh option [ 488.370210][T11091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 488.507225][T11091] overlayfs: missing 'lowerdir' [ 488.574438][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 488.695580][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 488.794535][ T4286] Bluetooth: hci2: command 0x0429 tx timeout [ 488.823684][T11099] loop5: detected capacity change from 0 to 1024 [ 489.080998][T11099] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 489.104588][T11099] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.340436][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 489.393969][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 489.515057][T11115] loop5: detected capacity change from 0 to 256 [ 490.369799][T11119] input: syz0 as /devices/virtual/input/input30 [ 490.555709][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 490.775348][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.784690][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.792218][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 491.374770][T11131] fuse: Bad value for 'fd' [ 491.389876][T11132] loop9: detected capacity change from 0 to 512 [ 491.513397][ T4286] Bluetooth: unknown link type 128 [ 491.557507][T11132] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 491.613619][T11132] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.789197][T11140] loop2: detected capacity change from 0 to 4096 [ 491.813428][ T4552] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 491.860792][ T4552] EXT4-fs (loop9): Remounting filesystem read-only [ 491.886974][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 491.908149][T11140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 492.037361][T11149] loop8: detected capacity change from 0 to 1024 [ 492.160998][T11155] loop9: detected capacity change from 0 to 1024 [ 492.207432][T11155] EXT4-fs: Ignoring removed bh option [ 492.241039][T11149] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 492.328487][T11149] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.652817][T11155] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 493.079626][T11167] overlayfs: missing 'lowerdir' [ 493.311703][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 493.332711][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 493.513283][T11177] loop5: detected capacity change from 0 to 512 [ 493.584781][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 493.594501][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 493.743155][T11177] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 493.820375][T11177] FAT-fs (loop5): Filesystem has been set read-only [ 493.865036][T11177] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 493.885451][T11187] fuse: Bad value for 'fd' [ 493.980988][T11190] input: syz0 as /devices/virtual/input/input31 [ 494.539972][T11192] loop2: detected capacity change from 0 to 512 [ 494.691843][T11192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 494.764396][T11192] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.800265][T11201] loop9: detected capacity change from 0 to 256 [ 494.884400][ T4286] Bluetooth: unknown link type 128 [ 495.009056][ T4558] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 495.061251][ T4558] EXT4-fs (loop2): Remounting filesystem read-only [ 495.088554][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 495.276868][T11214] loop2: detected capacity change from 0 to 1024 [ 495.301736][T11216] loop8: detected capacity change from 0 to 1024 [ 495.301763][T11214] EXT4-fs: Ignoring removed bh option [ 495.360437][T11214] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 495.409915][T11214] overlayfs: missing 'workdir' [ 495.461074][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 495.487445][T11216] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 495.554256][T11216] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.814008][T11229] loop2: detected capacity change from 0 to 4096 [ 495.911892][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 495.987953][T11229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 496.902923][T11248] loop8: detected capacity change from 0 to 512 [ 496.932986][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 496.939834][T11248] EXT4-fs: Ignoring removed mblk_io_submit option [ 496.961260][ T4286] Bluetooth: hci1: command 0x0429 tx timeout [ 497.016665][T11248] EXT4-fs (loop8): orphan cleanup on readonly fs [ 497.023186][T11248] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 497.139760][T11248] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.1562: attempt to clear invalid blocks 2 len 1 [ 497.337993][T11248] EXT4-fs (loop8): Remounting filesystem read-only [ 497.364752][T11248] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 497.445448][T11259] loop5: detected capacity change from 0 to 512 [ 497.479471][T11248] EXT4-fs (loop8): Remounting filesystem read-only [ 497.499857][T11248] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1562: invalid indirect mapped block 1819239214 (level 0) [ 497.539935][T11248] EXT4-fs (loop8): Remounting filesystem read-only [ 497.552484][T11248] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1562: invalid indirect mapped block 1819239214 (level 1) [ 497.685196][T11267] input: syz0 as /devices/virtual/input/input32 [ 497.775578][T11248] EXT4-fs (loop8): Remounting filesystem read-only [ 497.899025][T11248] EXT4-fs (loop8): 1 truncate cleaned up [ 497.935245][T11259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 498.072638][T11248] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 498.110927][T11259] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.326488][ T4286] Bluetooth: unknown link type 128 [ 498.393866][T11273] loop2: detected capacity change from 0 to 1024 [ 498.425947][T11273] EXT4-fs: Ignoring removed bh option [ 498.503221][T11273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 498.543804][T11273] overlayfs: missing 'workdir' [ 498.561244][ T4558] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 498.632268][T11282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.641780][T11282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.649399][T11282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.771270][ T4558] EXT4-fs (loop5): Remounting filesystem read-only [ 499.004783][ T4691] EXT4-fs (loop5): unmounting filesystem. [ 499.142811][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 499.250834][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 499.427310][T11296] loop9: detected capacity change from 0 to 256 [ 499.636484][T11298] loop2: detected capacity change from 0 to 2048 [ 499.777431][T11298] loop2: p1 < > p4 [ 499.777431][T11298] p4: [ 499.845526][T11298] loop2: p4 size 722688 extends beyond EOD, truncated [ 500.419179][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 500.482153][T11327] loop3: detected capacity change from 0 to 512 [ 500.541171][T11327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 500.576905][T11327] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.781548][ T4565] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 500.821823][ T4565] EXT4-fs (loop3): Remounting filesystem read-only [ 500.843313][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 500.953653][T11335] loop8: detected capacity change from 0 to 1024 [ 500.963261][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.963336][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.071648][T11335] EXT4-fs: Ignoring removed bh option [ 501.296253][T11335] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 501.386963][T11335] overlayfs: missing 'workdir' [ 501.452913][ T49] Bluetooth: unknown link type 128 [ 501.616393][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 502.386662][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 502.395386][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.402883][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.139631][T11374] loop2: detected capacity change from 0 to 512 [ 503.514947][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 503.825002][T11374] EXT4-fs: Ignoring removed nobh option [ 503.832188][T11374] EXT4-fs: Ignoring removed i_version option [ 503.904313][T11374] EXT4-fs: Mount option(s) incompatible with ext2 [ 504.153431][T11390] loop5: detected capacity change from 0 to 1024 [ 504.187473][T11390] EXT4-fs: Ignoring removed bh option [ 504.196320][T11394] loop2: detected capacity change from 0 to 1024 [ 504.298370][T11390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 504.307992][T11394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 504.507603][ T4691] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /309/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 504.586112][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 504.614044][ T4691] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /309/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 504.754608][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 504.784494][ T4691] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 504.866977][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 504.873638][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 504.928463][T11417] ip_tables: iptables: counters copy to user failed while replacing table [ 505.213609][ T4691] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /309/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 505.357536][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 505.391681][ T4691] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /309/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 505.651662][T11422] loop8: detected capacity change from 0 to 256 [ 505.664635][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 505.699740][ T4691] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 505.905889][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 505.971337][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 506.036178][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 506.059437][ T4691] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /309/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 506.200428][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 506.240894][ T4691] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /309/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 506.344472][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 506.351622][ T4691] EXT4-fs error (device loop5): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 506.406830][ T4691] EXT4-fs (loop5): Remounting filesystem read-only [ 506.413395][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 506.444825][ T4691] EXT4-fs error (device loop5): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /309/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 506.571099][T11429] loop2: detected capacity change from 0 to 4096 [ 506.675521][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 506.726095][T11429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 506.773274][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 507.451242][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 508.223350][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 508.312015][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 508.365747][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 508.366142][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 508.398004][ T4691] EXT4-fs warning (device loop5): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 508.654050][T11456] loop2: detected capacity change from 0 to 512 [ 508.701368][T11456] EXT4-fs: Ignoring removed nobh option [ 508.724355][T11456] EXT4-fs: Ignoring removed i_version option [ 508.769329][T11456] EXT4-fs: Mount option(s) incompatible with ext2 [ 511.219243][T11495] FAULT_INJECTION: forcing a failure. [ 511.219243][T11495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.232428][T11495] CPU: 0 PID: 11495 Comm: syz.8.1617 Not tainted syzkaller #0 [ 511.239909][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 511.249990][T11495] Call Trace: [ 511.253290][T11495] [ 511.256239][T11495] dump_stack_lvl+0x188/0x24e [ 511.260968][T11495] ? show_regs_print_info+0x12/0x12 [ 511.266204][T11495] ? load_image+0x410/0x410 [ 511.270731][T11495] ? __lock_acquire+0x7ea0/0x7ea0 [ 511.275780][T11495] ? verify_lock_unused+0x140/0x140 [ 511.280998][T11495] should_fail_ex+0x390/0x4c0 [ 511.285685][T11495] strncpy_from_user+0x32/0x340 [ 511.290536][T11495] setxattr+0x116/0x330 [ 511.294700][T11495] ? path_setxattr+0x290/0x290 [ 511.299477][T11495] ? __mnt_want_write+0x21f/0x2a0 [ 511.304496][T11495] ? mnt_want_write_file+0x16e/0x200 [ 511.309775][T11495] __se_sys_fsetxattr+0x15e/0x1d0 [ 511.314803][T11495] do_syscall_64+0x4c/0xa0 [ 511.319212][T11495] ? clear_bhb_loop+0x60/0xb0 [ 511.323882][T11495] ? clear_bhb_loop+0x60/0xb0 [ 511.328556][T11495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.334445][T11495] RIP: 0033:0x7fe7ef59e199 [ 511.338870][T11495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.358473][T11495] RSP: 002b:00007fe7f0555028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 511.366888][T11495] RAX: ffffffffffffffda RBX: 00007fe7ef825fa0 RCX: 00007fe7ef59e199 [ 511.374874][T11495] RDX: 00002000000003c0 RSI: 00002000000001c0 RDI: 0000000000000005 [ 511.382840][T11495] RBP: 00007fe7ef6358e0 R08: 0000000000000003 R09: 0000000000000000 [ 511.390802][T11495] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 511.398768][T11495] R13: 00007fe7ef826038 R14: 00007fe7ef825fa0 R15: 00007fff4322fac8 [ 511.406774][T11495] [ 511.433352][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.455333][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.463691][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.472660][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.481487][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 511.491183][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.578326][T11507] loop8: detected capacity change from 0 to 256 [ 511.673527][T11505] loop2: detected capacity change from 0 to 2048 [ 511.768265][T11505] loop2: p1 < > p4 [ 511.768265][T11505] p4: [ 511.788003][T11505] loop2: p4 size 722688 extends beyond EOD, truncated [ 512.287798][ T9144] udevd[9144]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 512.326954][ T9770] udevd[9770]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 512.947675][T11499] chnl_net:caif_netlink_parms(): no params data found [ 513.514345][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 513.696101][T11499] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.709769][T11499] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.743609][T11499] device bridge_slave_0 entered promiscuous mode [ 513.970517][T11499] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.991454][T11499] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.000385][T11499] device bridge_slave_1 entered promiscuous mode [ 514.036614][T11551] loop2: detected capacity change from 0 to 1024 [ 514.126850][T11551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 514.414084][ T47] device hsr_slave_0 left promiscuous mode [ 514.423273][ T47] device hsr_slave_1 left promiscuous mode [ 514.430127][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.439323][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.448884][ T47] device bridge_slave_1 left promiscuous mode [ 514.464413][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.488611][ T47] device bridge_slave_0 left promiscuous mode [ 514.515864][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.593178][ T47] bond2 (unregistering): Released all slaves [ 515.050392][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 515.362703][T11568] FAULT_INJECTION: forcing a failure. [ 515.362703][T11568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.376114][T11568] CPU: 0 PID: 11568 Comm: syz.2.1633 Not tainted syzkaller #0 [ 515.383595][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 515.393656][T11568] Call Trace: [ 515.396932][T11568] [ 515.399859][T11568] dump_stack_lvl+0x188/0x24e [ 515.404540][T11568] ? show_regs_print_info+0x12/0x12 [ 515.409734][T11568] ? load_image+0x410/0x410 [ 515.414238][T11568] ? __lock_acquire+0x7ea0/0x7ea0 [ 515.419268][T11568] ? verify_lock_unused+0x140/0x140 [ 515.424491][T11568] should_fail_ex+0x390/0x4c0 [ 515.429183][T11568] strncpy_from_user+0x32/0x340 [ 515.434036][T11568] setxattr+0x116/0x330 [ 515.438220][T11568] ? path_setxattr+0x290/0x290 [ 515.443016][T11568] ? __mnt_want_write+0x21f/0x2a0 [ 515.448047][T11568] ? mnt_want_write_file+0x16e/0x200 [ 515.453334][T11568] __se_sys_fsetxattr+0x15e/0x1d0 [ 515.458374][T11568] do_syscall_64+0x4c/0xa0 [ 515.462794][T11568] ? clear_bhb_loop+0x60/0xb0 [ 515.467472][T11568] ? clear_bhb_loop+0x60/0xb0 [ 515.472151][T11568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.478055][T11568] RIP: 0033:0x7fe5d159e199 [ 515.482501][T11568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.502279][T11568] RSP: 002b:00007fe5d24f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 515.510691][T11568] RAX: ffffffffffffffda RBX: 00007fe5d1825fa0 RCX: 00007fe5d159e199 [ 515.518663][T11568] RDX: 00002000000003c0 RSI: 00002000000001c0 RDI: 0000000000000005 [ 515.526630][T11568] RBP: 00007fe5d16358e0 R08: 0000000000000003 R09: 0000000000000000 [ 515.534596][T11568] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 515.542560][T11568] R13: 00007fe5d1826038 R14: 00007fe5d1825fa0 R15: 00007ffe0dd5d0c8 [ 515.550545][T11568] [ 515.604309][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 515.776424][ T47] bond1 (unregistering): (slave dummy0): Releasing active interface [ 515.784083][T11576] binder: 11575:11576 unknown command 1074553619 [ 515.795987][ T47] bond1 (unregistering): Released all slaves [ 515.804308][T11576] binder: 11575:11576 ioctl c0306201 2000000001c0 returned -22 [ 517.232289][T11593] loop3: detected capacity change from 0 to 1024 [ 517.272927][ T47] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.296412][T11593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 517.331634][ T47] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.689235][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 518.182544][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 518.336860][ T47] .` (unregistering): Released all slaves [ 518.395318][T11499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.411699][T11499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.433692][T11588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 518.441285][T11588] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 518.450145][T11588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 518.457908][T11588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.768725][T11499] team0: Port device team_slave_0 added [ 518.813885][T11499] team0: Port device team_slave_1 added [ 518.829584][T11610] binder: 11607:11610 unknown command 1074553619 [ 518.854517][T11610] binder: 11607:11610 ioctl c0306201 2000000001c0 returned -22 [ 518.916585][T11499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.943936][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.053150][T11611] loop9: detected capacity change from 0 to 8192 [ 519.063114][T11499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.142693][T11499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.190863][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.339097][T11499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.691477][T11499] device hsr_slave_0 entered promiscuous mode [ 519.732399][T11635] loop3: detected capacity change from 0 to 256 [ 519.754951][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 519.773715][T11499] device hsr_slave_1 entered promiscuous mode [ 520.330762][T11646] netlink: 'syz.3.1654': attribute type 4 has an invalid length. [ 520.383010][T11646] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1654'. [ 520.651932][T11650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 520.659643][T11650] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 520.668375][T11650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.675975][T11650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.263173][T11671] loop3: detected capacity change from 0 to 1024 [ 521.450427][T11671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 521.460050][T11671] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.560132][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 521.899386][T11690] loop8: detected capacity change from 0 to 256 [ 522.018224][T11499] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.087658][T11499] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 522.098370][T11696] loop8: detected capacity change from 0 to 256 [ 522.136617][T11499] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 522.212006][T11499] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 522.507075][T11499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.563198][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.580037][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.617035][T11499] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.633531][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 522.663479][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.685814][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.692981][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.721835][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.758123][T11704] device syzkaller0 entered promiscuous mode [ 522.780422][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.791859][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.811509][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.818714][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.850624][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.938221][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.968363][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.997622][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.025142][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.057292][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.090380][T11499] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.121457][T11499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.151506][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.169742][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.199350][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.226580][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.246407][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.296658][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.478325][T11722] netlink: 'syz.2.1668': attribute type 4 has an invalid length. [ 523.498408][T11722] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1668'. [ 524.012490][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.024351][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.036108][T11735] loop3: detected capacity change from 0 to 1024 [ 524.065427][T11499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.179541][T11735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 524.188217][T11735] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.388247][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 524.477008][T11744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 524.484517][T11744] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 524.492961][T11744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.500610][T11744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.670596][T11750] loop3: detected capacity change from 0 to 2048 [ 524.762603][T11750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 524.805050][T11750] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.841505][T11750] EXT4-fs (loop3): resizing filesystem from 256 to 0 blocks [ 524.894575][T11750] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 524.943886][T11759] overlayfs: failed to resolve './bus': -2 [ 525.000515][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 525.067028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.081108][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.156072][T11763] loop3: detected capacity change from 0 to 256 [ 525.336180][T11499] device veth0_vlan entered promiscuous mode [ 525.354016][T11772] device syzkaller0 entered promiscuous mode [ 525.373333][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.389544][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.474799][T11499] device veth1_vlan entered promiscuous mode [ 525.483851][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.498561][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.518621][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 525.564632][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 525.593441][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 525.635014][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.655661][T11499] device veth0_macvtap entered promiscuous mode [ 525.683147][T11499] device veth1_macvtap entered promiscuous mode [ 525.716128][T11499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.739279][T11499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.789890][T11499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.827219][T11499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.884745][T11499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.921751][T11499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.942913][T11499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.982264][T11499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.996352][T11499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.013951][T11047] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.025213][T11047] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.033670][T11047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.064077][T11047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.127537][T11499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.150053][T11499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.166009][T11499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.180148][T11499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.200155][T11499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.213907][T11499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.228489][T11499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.262563][T11499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.293271][T11499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.329451][T11789] netlink: 'syz.9.1680': attribute type 4 has an invalid length. [ 526.342173][T11789] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1680'. [ 526.394988][T11047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.419239][T11047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.452367][T11499] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.469737][T11800] loop3: detected capacity change from 0 to 256 [ 526.471852][T11499] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.493587][T11499] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.502898][T11499] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.689604][T11047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.707165][T11047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.745261][T11047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 526.798367][ T4504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.826771][ T4504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.851042][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 527.104100][T11812] overlayfs: failed to resolve './bus': -2 [ 527.546016][T11822] device syzkaller0 entered promiscuous mode [ 527.645883][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.654893][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 527.662354][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 527.904257][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 527.979616][T11831] loop8: detected capacity change from 0 to 512 [ 528.055850][T11831] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 528.109148][T11831] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.246928][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.279891][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 528.295920][T11831] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 528.333875][T11831] EXT4-fs (loop8): Remounting filesystem read-only [ 528.362551][ T7] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 528.406320][ T7] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.449987][ T7] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 528.474843][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.511510][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 528.670664][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1691'. [ 528.756066][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1691'. [ 528.915392][ T7] gud: probe of 7-1:1.0 failed with error -71 [ 528.945936][ T7] usb 7-1: USB disconnect, device number 4 [ 530.111421][T11893] device syzkaller0 entered promiscuous mode [ 530.504767][T11902] loop9: detected capacity change from 0 to 512 [ 530.953754][T11902] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 531.105833][T11902] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.507069][T11902] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 531.556561][T11902] EXT4-fs (loop9): Remounting filesystem read-only [ 531.707819][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 532.615419][T11924] loop9: detected capacity change from 0 to 256 [ 533.154523][ T4317] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 533.335522][T11950] device syzkaller0 entered promiscuous mode [ 533.346508][ T4317] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.374214][ T4317] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 533.434174][ T4317] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 533.474337][ T4317] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.514762][ T4317] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 533.548305][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.032425][T11967] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.566605][T11968] loop3: detected capacity change from 0 to 512 [ 534.772062][T11968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 534.795173][T11968] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.862901][T11968] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 534.893464][ T4317] gud 7-1:1.0: USB-1: Failed to add properties (ret=-5) [ 534.910794][ T4317] gud 7-1:1.0: Failed to get connectors (error=-5) [ 534.917422][T11968] EXT4-fs (loop3): Remounting filesystem read-only [ 534.944951][ T4317] gud: probe of 7-1:1.0 failed with error -5 [ 535.036181][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 535.104031][ T4341] usb 7-1: USB disconnect, device number 5 [ 535.309179][T11986] loop3: detected capacity change from 0 to 4096 [ 535.456463][T11986] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 536.451825][T12004] loop6: detected capacity change from 0 to 512 [ 536.462858][T12004] EXT4-fs: Ignoring removed nobh option [ 536.469107][T12004] EXT4-fs: Ignoring removed i_version option [ 536.477988][T12004] EXT4-fs: Mount option(s) incompatible with ext2 [ 537.081550][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 537.259730][T12027] device syzkaller0 entered promiscuous mode [ 537.463073][T12031] loop3: detected capacity change from 0 to 256 [ 537.846921][T12000] loop8: detected capacity change from 0 to 40427 [ 537.941794][T12038] ieee802154 phy0 wpan0: encryption failed: -22 [ 538.141498][T12000] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 538.258917][T12000] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 538.450684][T12000] F2FS-fs (loop8): invalid crc value [ 538.566697][T12041] loop6: detected capacity change from 0 to 1024 [ 538.618397][T12000] F2FS-fs (loop8): Found nat_bits in checkpoint [ 538.650744][T12041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 538.677445][T12046] loop2: detected capacity change from 0 to 512 [ 538.696091][T12041] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.837275][T12046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 538.890149][T12046] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.939952][T12000] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 538.974588][T12000] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 538.996681][T12046] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 539.016559][T11499] EXT4-fs (loop6): unmounting filesystem. [ 539.060588][T12046] EXT4-fs (loop2): Remounting filesystem read-only [ 539.247479][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 539.729768][T12072] ip_tables: iptables: counters copy to user failed while replacing table [ 541.220707][T12098] loop2: detected capacity change from 0 to 1024 [ 541.415639][T12098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 542.151451][T12110] loop3: detected capacity change from 0 to 1024 [ 542.506925][T12110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 542.614589][T12110] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.676732][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 542.809598][T12122] loop8: detected capacity change from 0 to 512 [ 542.881782][T12122] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 542.942162][T12122] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.112586][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 543.117535][T12122] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 543.455909][T12122] EXT4-fs (loop8): Remounting filesystem read-only [ 543.960532][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 543.970199][T12142] binder: 12141:12142 ioctl c0306201 0 returned -14 [ 544.201214][T12153] fuse: Unknown parameter 'grou00000000000000000000' [ 544.557742][T12164] loop9: detected capacity change from 0 to 1024 [ 544.584889][T12168] loop6: detected capacity change from 0 to 1024 [ 544.627069][T12164] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 544.662171][T12168] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 544.678992][T12168] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.879717][T11499] EXT4-fs (loop6): unmounting filesystem. [ 545.523472][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 546.355136][T12192] loop9: detected capacity change from 0 to 512 [ 546.426611][T12196] binder: 12195:12196 ioctl c0306201 0 returned -14 [ 546.440991][T12192] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 546.521890][T12192] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.589523][T12192] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 546.643702][T12208] fuse: Unknown parameter 'grou00000000000000000000' [ 546.666301][T12192] EXT4-fs (loop9): Remounting filesystem read-only [ 546.924623][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 547.040393][T12217] loop3: detected capacity change from 0 to 1024 [ 547.286277][T12217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 547.296170][T12217] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.365018][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 547.643763][T12236] loop3: detected capacity change from 0 to 1024 [ 547.740350][T12236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 548.571386][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 548.792552][T12263] overlayfs: missing 'lowerdir' [ 548.968750][T12270] binder: 12267:12270 ioctl c0306201 0 returned -14 [ 549.268931][T12276] fuse: Unknown parameter 'grou00000000000000000000' [ 549.344749][T12280] loop9: detected capacity change from 0 to 512 [ 549.425917][T12280] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 549.492885][T12280] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.546238][T12280] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 549.638205][T12280] EXT4-fs (loop9): Remounting filesystem read-only [ 549.871787][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 549.936355][T12292] ip_tables: iptables: counters copy to user failed while replacing table [ 550.651162][T12298] loop9: detected capacity change from 0 to 256 [ 551.100163][T12303] input: syz0 as /devices/virtual/input/input37 [ 551.700870][T12318] loop3: detected capacity change from 0 to 1024 [ 551.840198][T12318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 552.689466][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 552.861646][T12341] overlayfs: missing 'lowerdir' [ 553.150935][T12352] input: syz1 as /devices/virtual/input/input38 [ 553.304851][T12351] loop6: detected capacity change from 0 to 4096 [ 553.411672][T12351] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 555.177591][T12378] ip_tables: iptables: counters copy to user failed while replacing table [ 555.767967][T11499] EXT4-fs (loop6): unmounting filesystem. [ 555.931091][T12388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 556.730783][T12401] overlayfs: missing 'lowerdir' [ 557.565916][T12382] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.573284][T12382] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.574187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 557.594181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 558.211354][T12413] loop8: detected capacity change from 0 to 512 [ 558.263772][T12413] EXT4-fs (loop8): orphan cleanup on readonly fs [ 558.309497][T12413] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.1804: ea_inode with extended attributes [ 558.422475][T12413] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1804: error while reading EA inode 11 err=-117 [ 558.504046][T12413] EXT4-fs (loop8): 1 orphan inode deleted [ 558.551514][T12421] ip_tables: iptables: counters copy to user failed while replacing table [ 558.677124][T12413] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 559.278283][T12382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.337434][T12382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.418875][T12425] loop2: detected capacity change from 0 to 4096 [ 559.482913][T12425] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 560.671407][T12382] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.680764][T12382] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.689776][T12382] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.698722][T12382] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.143944][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 561.194259][ T4341] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 561.331212][T12440] md: could not open device unknown-block(0,896). [ 561.359057][T12440] md: md_import_device returned -6 [ 561.368469][T12442] md: invalid raid superblock magic on ram1 [ 561.385960][ T4341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.391742][T12442] md: ram1 does not have a valid v0.0 superblock, not importing! [ 561.405177][ T4341] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 561.412953][T12442] md: md_import_device returned -22 [ 561.556335][ T4341] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 561.566597][ T4341] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 561.580489][ T4341] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 561.602373][ T4341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.398885][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.405269][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.984788][ T4341] gud 4-1:1.0: USB-1: Failed to add properties (ret=-5) [ 563.009481][ T4341] gud 4-1:1.0: Failed to get connectors (error=-5) [ 563.112695][ T4341] gud: probe of 4-1:1.0 failed with error -5 [ 563.378635][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 563.406592][ T4341] usb 4-1: USB disconnect, device number 2 [ 563.713073][T12475] loop2: detected capacity change from 0 to 512 [ 563.756478][T12475] EXT4-fs: Ignoring removed mblk_io_submit option [ 563.829204][T12475] EXT4-fs (loop2): orphan cleanup on readonly fs [ 563.874402][T12475] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 563.922444][T12475] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1821: attempt to clear invalid blocks 2 len 1 [ 563.990252][T12475] EXT4-fs (loop2): Remounting filesystem read-only [ 564.009991][T12482] loop9: detected capacity change from 0 to 4096 [ 564.094327][T12475] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 564.158219][T12482] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 564.178384][T12475] EXT4-fs (loop2): Remounting filesystem read-only [ 564.851153][T12475] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1821: invalid indirect mapped block 1819239214 (level 0) [ 564.884708][T12475] EXT4-fs (loop2): Remounting filesystem read-only [ 564.986136][T12475] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1821: invalid indirect mapped block 1819239214 (level 1) [ 565.228719][T12475] EXT4-fs (loop2): Remounting filesystem read-only [ 565.399176][T12475] EXT4-fs (loop2): 1 truncate cleaned up [ 565.536837][T12475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 565.874100][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 565.994352][ T4286] Bluetooth: hci3: command 0x0429 tx timeout [ 566.030248][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 10 > 9 [ 566.279785][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 567.396766][T12530] netlink: 260 bytes leftover after parsing attributes in process `syz.9.1835'. [ 567.406301][T12530] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1835'. [ 567.485187][T12534] overlayfs: missing 'lowerdir' [ 567.617203][T12540] loop3: detected capacity change from 0 to 512 [ 567.688215][T12540] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.689065][T12543] loop2: detected capacity change from 0 to 1024 [ 567.780246][T12540] EXT4-fs (loop3): orphan cleanup on readonly fs [ 567.796611][T12540] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 567.820216][T12540] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1837: attempt to clear invalid blocks 2 len 1 [ 567.844059][T12543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 567.875006][T12540] EXT4-fs (loop3): Remounting filesystem read-only [ 567.944630][T12540] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 568.490576][T12540] EXT4-fs (loop3): Remounting filesystem read-only [ 568.506732][T12540] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1837: invalid indirect mapped block 1819239214 (level 0) [ 568.711877][T12540] EXT4-fs (loop3): Remounting filesystem read-only [ 568.718354][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 568.718591][T12540] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1837: invalid indirect mapped block 1819239214 (level 1) [ 568.745508][T12540] EXT4-fs (loop3): Remounting filesystem read-only [ 568.790308][T12540] EXT4-fs (loop3): 1 truncate cleaned up [ 568.814244][T12540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 568.977066][T12563] loop9: detected capacity change from 0 to 4096 [ 569.051289][T12563] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 569.409259][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 569.481310][T12579] ip_tables: iptables: counters copy to user failed while replacing table [ 570.001784][ T49] Bluetooth: hci0: command 0x0429 tx timeout [ 571.341888][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 573.041567][T12614] loop2: detected capacity change from 0 to 512 [ 573.063933][T12614] EXT4-fs: Ignoring removed nobh option [ 573.098679][T12614] EXT4-fs: Ignoring removed i_version option [ 573.122765][T12614] EXT4-fs: Mount option(s) incompatible with ext2 [ 573.234240][ T14] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 573.454267][ T14] usb 10-1: Using ep0 maxpacket: 32 [ 573.461407][ T14] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 573.487662][T12623] loop2: detected capacity change from 0 to 512 [ 573.524309][ T14] usb 10-1: config 0 has no interface number 0 [ 573.555074][T12623] EXT4-fs: Ignoring removed mblk_io_submit option [ 573.572920][ T14] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 573.654013][ T14] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.664083][T12623] EXT4-fs (loop2): orphan cleanup on readonly fs [ 573.670628][T12623] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 573.689535][T12623] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1855: attempt to clear invalid blocks 2 len 1 [ 573.703720][ T14] usb 10-1: Product: syz [ 573.708717][T12623] EXT4-fs (loop2): Remounting filesystem read-only [ 573.720980][T12628] loop8: detected capacity change from 0 to 512 [ 573.734699][ T14] usb 10-1: Manufacturer: syz [ 573.739938][T12623] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 573.746861][T12629] loop3: detected capacity change from 0 to 512 [ 573.764995][ T14] usb 10-1: SerialNumber: syz [ 573.791728][ T14] usb 10-1: config 0 descriptor?? [ 573.798762][T12629] EXT4-fs (loop3): Test dummy encryption mode enabled [ 573.810020][T12623] EXT4-fs (loop2): Remounting filesystem read-only [ 573.819927][T12623] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1855: invalid indirect mapped block 1819239214 (level 0) [ 573.835588][T12623] EXT4-fs (loop2): Remounting filesystem read-only [ 573.842229][T12623] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1855: invalid indirect mapped block 1819239214 (level 1) [ 573.858126][T12623] EXT4-fs (loop2): Remounting filesystem read-only [ 573.861163][ T14] smsc95xx v2.0.0 [ 573.870967][T12623] EXT4-fs (loop2): 1 truncate cleaned up [ 573.885415][T12629] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1857: inode has both inline data and extents flags [ 573.898948][T12623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 573.901359][T12628] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 573.917322][T12629] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1857: couldn't read orphan inode 15 (err -117) [ 573.947179][T12629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 573.964571][T12628] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.065372][T12628] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 574.124625][T12628] EXT4-fs (loop8): Remounting filesystem read-only [ 574.290483][ T14] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 574.317078][ T14] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 574.337681][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 574.355080][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 574.368511][T12646] loop6: detected capacity change from 0 to 4096 [ 574.452053][T12646] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 574.474519][ T4286] Bluetooth: hci1: command 0x0429 tx timeout [ 574.525091][T12629] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 574.665312][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 574.686985][ T14] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 574.699455][ T14] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 574.709228][ T14] usb 10-1: USB disconnect, device number 2 [ 575.424555][T12658] loop8: detected capacity change from 0 to 1024 [ 575.456739][ T4286] Bluetooth: hci1: link tx timeout [ 575.471506][ T4286] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 575.618698][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 575.633694][T12658] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 575.818739][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 575.895571][T12671] input: syz0 as /devices/virtual/input/input40 [ 576.174544][T11499] EXT4-fs (loop6): unmounting filesystem. [ 577.062263][T12689] loop6: detected capacity change from 0 to 1024 [ 577.116628][T12689] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 577.360717][T12697] loop9: detected capacity change from 0 to 512 [ 577.705290][T12695] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.717862][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 577.732463][T12697] EXT4-fs (loop9): Test dummy encryption mode enabled [ 577.768793][T12697] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.1868: inode has both inline data and extents flags [ 577.788850][T12699] loop2: detected capacity change from 0 to 512 [ 577.823933][T12697] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.1868: couldn't read orphan inode 15 (err -117) [ 577.862507][T12697] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 577.972979][T12699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 577.994512][T12699] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.027812][T11499] EXT4-fs (loop6): unmounting filesystem. [ 578.213608][T12706] loop8: detected capacity change from 0 to 4096 [ 578.231485][T12708] loop6: detected capacity change from 0 to 512 [ 578.280956][T12708] EXT4-fs (loop6): Test dummy encryption mode enabled [ 578.301588][T12706] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 578.349112][T12708] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.1871: inode has both inline data and extents flags [ 578.369058][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 578.461342][T12708] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1871: couldn't read orphan inode 15 (err -117) [ 578.524880][T12708] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 579.473633][T11499] EXT4-fs (loop6): unmounting filesystem. [ 579.524161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 579.544160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 579.735593][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 580.801606][T12736] loop6: detected capacity change from 0 to 256 [ 582.084343][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 582.298540][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.318510][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 582.343235][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 582.368835][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 582.418955][ T7] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 582.448714][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.923242][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f326000: rx timeout, send abort [ 583.092513][ T7] gud 4-1:1.0: Failed to get properties (error=-71) [ 583.107937][ T7] gud: probe of 4-1:1.0 failed with error -71 [ 583.151669][ T7] usb 4-1: USB disconnect, device number 3 [ 583.174312][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.181759][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.423311][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f326400: rx timeout, send abort [ 583.433317][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f326000: abort rx timeout. Force session deactivation [ 583.619324][T12765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.695587][T12765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.816984][T12787] loop3: detected capacity change from 0 to 4096 [ 583.888919][T12787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 583.931662][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f326400: abort rx timeout. Force session deactivation [ 584.383845][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 584.457851][T12765] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.477252][T12765] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.486853][T12765] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.497068][T12765] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.599241][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1883'. [ 584.811375][T12802] loop9: detected capacity change from 0 to 256 [ 584.960200][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 585.144674][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 585.237211][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 585.262404][ T22] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 585.441039][ T22] usb 3-1: config 0 has no interface number 0 [ 585.661466][ T22] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 585.674645][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.682856][ T22] usb 3-1: Product: syz [ 585.688043][ T22] usb 3-1: Manufacturer: syz [ 585.692744][ T22] usb 3-1: SerialNumber: syz [ 585.735321][T12815] ip_tables: iptables: counters copy to user failed while replacing table [ 585.908570][ T22] usb 3-1: config 0 descriptor?? [ 585.983142][ T22] smsc95xx v2.0.0 [ 586.131507][T12826] fuse: Bad value for 'fd' [ 586.377515][T12835] loop3: detected capacity change from 0 to 256 [ 586.392627][ T22] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 586.421953][ T22] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 586.563763][T12835] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 586.694035][ T22] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 586.883064][ T22] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 587.252873][ T26] audit: type=1800 audit(1791402844.467:33): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1900" name="file2" dev="loop3" ino=1048787 res=0 errno=0 [ 587.280805][ T22] usb 3-1: USB disconnect, device number 2 [ 587.337048][T12835] exFAT-fs (loop3): hint_cluster is invalid (17) [ 587.396626][T12842] overlayfs: missing 'lowerdir' [ 587.485932][T12847] X25: received unknown 00 with LCI 000 [ 587.508077][T12849] loop9: detected capacity change from 0 to 256 [ 587.651675][T12853] loop3: detected capacity change from 0 to 512 [ 587.703547][T12853] EXT4-fs: Ignoring removed nobh option [ 587.744256][T12853] EXT4-fs: Ignoring removed i_version option [ 587.807306][T12853] EXT4-fs: Mount option(s) incompatible with ext2 [ 587.877040][T12854] loop8: detected capacity change from 0 to 4096 [ 587.952685][T12854] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 588.061441][T12866] fuse: Bad value for 'fd' [ 588.537651][T12872] input: syz0 as /devices/virtual/input/input42 [ 589.039248][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 589.153971][T12887] loop8: detected capacity change from 0 to 512 [ 589.229209][T12887] EXT4-fs: inline encryption not supported [ 589.314450][T12887] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 589.569097][T12899] overlayfs: missing 'workdir' [ 589.712044][T12901] X25: received unknown 00 with LCI 000 [ 589.749127][T12904] loop8: detected capacity change from 0 to 256 [ 590.217619][T12912] fuse: Bad value for 'fd' [ 590.218659][T12909] loop3: detected capacity change from 0 to 512 [ 590.406242][T12909] EXT4-fs (loop3): Test dummy encryption mode enabled [ 590.964435][T12909] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1920: inode has both inline data and extents flags [ 591.003830][T12916] loop9: detected capacity change from 0 to 4096 [ 591.025050][T12909] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1920: couldn't read orphan inode 15 (err -117) [ 591.059109][T12909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 591.103477][T12920] loop2: detected capacity change from 0 to 1024 [ 591.207348][T12916] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 591.713667][T12920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 591.898058][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 592.548234][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 592.612850][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 592.720734][T12945] X25: received unknown 00 with LCI 000 [ 593.014327][ T22] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 593.405270][T12962] ip_tables: iptables: counters copy to user failed while replacing table [ 593.807568][ T22] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.820414][ T22] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 593.916842][ T22] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 593.926737][ T22] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.950371][ T22] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 593.972046][T12967] fuse: Bad value for 'fd' [ 593.991710][ T22] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.163135][T12979] loop3: detected capacity change from 0 to 128 [ 594.192992][T12979] EXT4-fs (loop3): Test dummy encryption mode enabled [ 594.229585][T12979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 594.241517][T12979] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 594.685726][ T22] gud 10-1:1.0: Failed to get properties (error=-71) [ 594.692461][ T22] gud: probe of 10-1:1.0 failed with error -71 [ 594.727411][ T22] usb 10-1: USB disconnect, device number 3 [ 594.811722][T12993] Bluetooth: MGMT ver 1.22 [ 595.468262][ T9037] EXT4-fs (loop3): unmounting filesystem. [ 596.353578][T13000] loop6: detected capacity change from 0 to 4096 [ 596.521879][T13000] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 596.639191][T13013] X25: received unknown 00 with LCI 000 [ 597.014820][ T4286] Bluetooth: hci0: command 0x0c57 tx timeout [ 597.021230][ T49] Bluetooth: hci1: link tx timeout [ 597.314385][ T49] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 597.868927][T11499] EXT4-fs (loop6): unmounting filesystem. [ 597.876259][T13040] binder: 13038:13040 unknown command 1074553619 [ 597.882649][T13040] binder: 13038:13040 ioctl c0306201 2000000001c0 returned -22 [ 598.609718][T13048] binder: 13038:13048 ioctl c0306201 0 returned -14 [ 600.203143][T13063] loop2: detected capacity change from 0 to 4096 [ 600.279399][T13071] loop3: detected capacity change from 0 to 256 [ 600.472898][T13078] fuse: Invalid rootmode [ 600.486173][T13063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 601.226719][T13086] FAULT_INJECTION: forcing a failure. [ 601.226719][T13086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.239881][T13086] CPU: 1 PID: 13086 Comm: syz.9.1960 Not tainted syzkaller #0 [ 601.247365][T13086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 601.257453][T13086] Call Trace: [ 601.260745][T13086] [ 601.263690][T13086] dump_stack_lvl+0x188/0x24e [ 601.268407][T13086] ? show_regs_print_info+0x12/0x12 [ 601.273633][T13086] ? load_image+0x410/0x410 [ 601.278173][T13086] ? __lock_acquire+0x7ea0/0x7ea0 [ 601.283229][T13086] ? verify_lock_unused+0x140/0x140 [ 601.288465][T13086] should_fail_ex+0x390/0x4c0 [ 601.293181][T13086] strncpy_from_user+0x32/0x340 [ 601.298068][T13086] setxattr+0x116/0x330 [ 601.302246][T13086] ? path_setxattr+0x290/0x290 [ 601.307033][T13086] ? __mnt_want_write+0x21f/0x2a0 [ 601.312061][T13086] ? mnt_want_write_file+0x16e/0x200 [ 601.317348][T13086] __se_sys_fsetxattr+0x15e/0x1d0 [ 601.322379][T13086] do_syscall_64+0x4c/0xa0 [ 601.326794][T13086] ? clear_bhb_loop+0x60/0xb0 [ 601.331467][T13086] ? clear_bhb_loop+0x60/0xb0 [ 601.336140][T13086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.342025][T13086] RIP: 0033:0x7f7053d9e199 [ 601.346449][T13086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.366058][T13086] RSP: 002b:00007f7054c00028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 601.374470][T13086] RAX: ffffffffffffffda RBX: 00007f7054025fa0 RCX: 00007f7053d9e199 [ 601.382437][T13086] RDX: 00002000000003c0 RSI: 00002000000001c0 RDI: 0000000000000005 [ 601.390412][T13086] RBP: 00007f7053e358e0 R08: 0000000000000003 R09: 0000000000000000 [ 601.398382][T13086] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 601.406354][T13086] R13: 00007f7054026038 R14: 00007f7054025fa0 R15: 00007fff81e2f848 [ 601.414329][T13086] [ 601.684694][ T9042] EXT4-fs (loop2): unmounting filesystem. [ 601.733099][T13094] loop9: detected capacity change from 0 to 8192 [ 602.736180][T13118] device syzkaller0 entered promiscuous mode [ 602.890244][T13123] input: syz0 as /devices/virtual/input/input44 [ 603.322617][T13126] fuse: Unknown parameter 'grou00000000000000000000' [ 603.346556][T13128] fuse: Invalid rootmode [ 603.684556][T13135] FAULT_INJECTION: forcing a failure. [ 603.684556][T13135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.698035][T13135] CPU: 0 PID: 13135 Comm: syz.9.1973 Not tainted syzkaller #0 [ 603.705527][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 603.715606][T13135] Call Trace: [ 603.718901][T13135] [ 603.721851][T13135] dump_stack_lvl+0x188/0x24e [ 603.726557][T13135] ? show_regs_print_info+0x12/0x12 [ 603.731802][T13135] ? load_image+0x410/0x410 [ 603.736337][T13135] ? __lock_acquire+0x7ea0/0x7ea0 [ 603.741412][T13135] ? verify_lock_unused+0x140/0x140 [ 603.746620][T13135] should_fail_ex+0x390/0x4c0 [ 603.751301][T13135] strncpy_from_user+0x32/0x340 [ 603.756152][T13135] setxattr+0x116/0x330 [ 603.760316][T13135] ? path_setxattr+0x290/0x290 [ 603.765091][T13135] ? __mnt_want_write+0x21f/0x2a0 [ 603.770111][T13135] ? mnt_want_write_file+0x16e/0x200 [ 603.775393][T13135] __se_sys_fsetxattr+0x15e/0x1d0 [ 603.780417][T13135] do_syscall_64+0x4c/0xa0 [ 603.784826][T13135] ? clear_bhb_loop+0x60/0xb0 [ 603.789500][T13135] ? clear_bhb_loop+0x60/0xb0 [ 603.794175][T13135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.800072][T13135] RIP: 0033:0x7f7053d9e199 [ 603.804484][T13135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.824087][T13135] RSP: 002b:00007f7054c00028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 603.832501][T13135] RAX: ffffffffffffffda RBX: 00007f7054025fa0 RCX: 00007f7053d9e199 [ 603.840473][T13135] RDX: 00002000000003c0 RSI: 00002000000001c0 RDI: 0000000000000005 [ 603.848440][T13135] RBP: 00007f7053e358e0 R08: 0000000000000003 R09: 0000000000000000 [ 603.856419][T13135] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 603.864408][T13135] R13: 00007f7054026038 R14: 00007f7054025fa0 R15: 00007fff81e2f848 [ 603.872423][T13135] [ 604.068628][T13147] loop8: detected capacity change from 0 to 512 [ 604.123363][T13147] EXT4-fs (loop8): Test dummy encryption mode enabled [ 604.153964][T13147] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.1974: inode has both inline data and extents flags [ 604.174631][T13147] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.1974: couldn't read orphan inode 15 (err -117) [ 604.228074][T13147] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 604.367743][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 604.932380][T13162] device syzkaller0 entered promiscuous mode [ 605.168835][T13175] input: syz0 as /devices/virtual/input/input46 [ 605.216519][T13174] fuse: Bad value for 'rootmode' [ 605.854295][ T4317] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 606.194528][ T4317] usb 10-1: device descriptor read/64, error -71 [ 606.316154][T13198] ip_tables: iptables: counters copy to user failed while replacing table [ 606.748191][ T4317] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 607.054754][ T4317] usb 10-1: device descriptor read/64, error -71 [ 607.184919][ T4317] usb usb10-port1: attempt power cycle [ 607.938080][T13215] loop8: detected capacity change from 0 to 512 [ 608.075035][T13215] EXT4-fs (loop8): Test dummy encryption mode enabled [ 608.209031][T13223] device syzkaller0 entered promiscuous mode [ 608.216275][T13215] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.1990: inode has both inline data and extents flags [ 608.294231][ T4317] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 608.356164][ T4317] usb 10-1: device descriptor read/8, error -71 [ 608.388151][T13215] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.1990: couldn't read orphan inode 15 (err -117) [ 608.447880][T13215] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 609.264038][ T7046] EXT4-fs (loop8): unmounting filesystem. [ 609.842055][T13259] ip_tables: iptables: counters copy to user failed while replacing table [ 609.946303][ T14] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 610.524322][ T4361] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 610.614267][ T14] usb 9-1: Using ep0 maxpacket: 16 [ 610.621852][ T14] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.663671][ T14] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.714244][ T14] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.736227][ T4361] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.775484][ T4361] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 610.780331][ T14] usb 9-1: config 0 interface 0 has no altsetting 0 [ 610.826029][ T14] usb 9-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 610.848844][ T4361] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 610.863659][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.916651][ T14] usb 9-1: config 0 descriptor?? [ 610.924204][ T4361] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 610.993208][ T4361] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 611.044215][ T4361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.298820][T13277] device syzkaller0 entered promiscuous mode [ 611.339099][ T14] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 611.382107][ T14] wacom 0003:056A:5200.0003: unknown main item tag 0x6 [ 611.411519][ T14] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 611.455679][ T14] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 611.483597][ T14] wacom 0003:056A:5200.0003: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 611.534426][ T4361] gud 3-1:1.0: No supported pixel formats found [ 611.540776][ T4361] gud: probe of 3-1:1.0 failed with error -22 [ 611.583852][ T14] usb 9-1: USB disconnect, device number 2 [ 611.718669][T13283] loop9: detected capacity change from 0 to 4096 [ 611.743706][ T4361] usb 3-1: USB disconnect, device number 3 [ 611.790247][T13286] loop6: detected capacity change from 0 to 512 [ 611.819478][T13283] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 611.895180][T13286] EXT4-fs (loop6): Test dummy encryption mode enabled [ 611.961507][T13286] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.2006: inode has both inline data and extents flags [ 612.076099][T13286] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.2006: couldn't read orphan inode 15 (err -117) [ 612.139326][T13286] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 612.535471][T11499] EXT4-fs (loop6): unmounting filesystem. [ 612.615985][T13299] loop2: detected capacity change from 0 to 8192 [ 613.009769][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 613.571282][T13319] ip_tables: iptables: counters copy to user failed while replacing table [ 614.239091][T13321] loop9: detected capacity change from 0 to 4096 [ 614.368531][T13325] device syzkaller0 entered promiscuous mode [ 614.398342][T13321] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 615.543304][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 615.681028][T13351] loop9: detected capacity change from 0 to 512 [ 615.695801][ T4317] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 615.729657][T13351] EXT4-fs (loop9): Test dummy encryption mode enabled [ 615.807330][T13351] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.2020: inode has both inline data and extents flags [ 615.849473][T13351] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.2020: couldn't read orphan inode 15 (err -117) [ 615.867342][T13351] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 615.908546][ T4317] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.960678][ T4317] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 616.003619][ T4317] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 616.039221][ T4317] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.062796][ T4317] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 616.094425][ T4317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.129335][ T8863] EXT4-fs (loop9): unmounting filesystem. [ 616.314038][T13370] loop3: detected capacity change from 0 to 4096 [ 616.390220][T13370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 616.449018][T13375] loop2: detected capacity change from 0 to 8192 [ 617.532887][T13388] loop9: detected capacity change from 0 to 512 [ 617.670023][T13388] EXT4-fs (loop9): orphan cleanup on readonly fs [ 617.676779][T12781] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 617.725433][T13388] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #11: comm syz.9.2028: ea_inode with extended attributes [ 617.825016][T13388] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2028: error while reading EA inode 11 err=-117 [ 617.884302][T12781] usb 9-1: Using ep0 maxpacket: 32 [ 617.899926][T12781] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 617.930429][T13388] EXT4-fs (loop9): 1 orphan inode deleted [ 617.958923][T12781] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.975029][T13388] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 618.063836][T12781] usb 9-1: config 0 descriptor?? [ 618.114080][T12781] as10x_usb: device has been detected [ 618.125008][T12781] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 618.174343][ T4361] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 618.266437][T12781] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 618.371544][ T4361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.453598][T13386] ------------[ cut here ]------------ [ 618.459216][T13386] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 618.522227][ T4361] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 618.575465][T12781] as10x_usb: error during firmware upload part1 [ 618.586084][T13386] WARNING: CPU: 1 PID: 13386 at kernel/locking/mutex.c:582 __mutex_lock+0xa1c/0xae0 [ 618.595606][T13386] Modules linked in: [ 618.599542][T13386] CPU: 1 PID: 13386 Comm: syz.8.2027 Not tainted syzkaller #0 [ 618.607064][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 618.617258][T13386] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 618.622563][T13386] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d5 4e e4 03 00 0f 85 f5 f6 ff ff 48 c7 c7 20 03 8c 8a 48 c7 c6 c0 03 8c 8a e8 54 fa 10 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 a1 c3 96 80 [ 618.630368][ T4317] usb 7-1: USB disconnect, device number 6 [ 618.642437][T13386] RSP: 0018:ffffc9000ca5fac0 EFLAGS: 00010246 [ 618.654245][T13386] RAX: 891ca0497d667400 RBX: ffff888065de6ce0 RCX: 0000000000080000 [ 618.662235][T13386] RDX: ffffc9000e79a000 RSI: 000000000000a14f RDI: 000000000000a150 [ 618.670269][T13386] RBP: ffffc9000ca5fc20 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 618.678291][T13386] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 618.686308][T13386] R13: 0000000000000000 R14: ffff888065de6000 R15: 0000000000000000 [ 618.694331][T13386] FS: 00007fe7f05556c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 618.703281][T13386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.709931][T13386] CR2: 0000562d8df14950 CR3: 0000000059195000 CR4: 00000000003506e0 [ 618.717970][T13386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 618.725993][T13386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 618.733988][T13386] Call Trace: [ 618.737319][T13386] [ 618.740265][T13386] ? trace_contention_end+0x5f/0x170 [ 618.745617][T13386] ? __mutex_lock+0x1ab/0xae0 [ 618.750322][T13386] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 618.756117][T13386] ? mutex_lock_nested+0x10/0x10 [ 618.761075][T13386] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 618.767144][T13386] ? mutex_lock_nested+0x10/0x10 [ 618.772108][T13386] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 618.777809][T13386] ? lockdep_hardirqs_on+0x94/0x140 [ 618.783036][T13386] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 618.788737][T13386] as102_dvb_dmx_start_feed+0x6c/0x280 [ 618.794254][T13386] dmx_ts_feed_start_filtering+0x11c/0x210 [ 618.800094][T13386] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 618.806055][T13386] dvb_dmxdev_filter_start+0x422/0x1060 [ 618.811631][T13386] dvb_demux_do_ioctl+0x47e/0x530 [ 618.816720][T13386] dvb_usercopy+0x191/0x2b0 [ 618.821235][T13386] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 618.826821][T13386] ? dvb_generic_ioctl+0xb0/0xb0 [ 618.831781][T13386] ? bpf_lsm_file_free_security+0x10/0x10 [ 618.837675][T13386] ? dvb_demux_poll+0x210/0x210 [ 618.842554][T13386] dvb_demux_ioctl+0x25/0x30 [ 618.847211][T13386] __se_sys_ioctl+0xfa/0x170 [ 618.851856][T13386] do_syscall_64+0x4c/0xa0 [ 618.856334][T13386] ? clear_bhb_loop+0x60/0xb0 [ 618.861029][T13386] ? clear_bhb_loop+0x60/0xb0 [ 618.865762][T13386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.871671][T13386] RIP: 0033:0x7fe7ef59e199 [ 618.876136][T13386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.895796][T13386] RSP: 002b:00007fe7f0555028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.904741][T13386] RAX: ffffffffffffffda RBX: 00007fe7ef825fa0 RCX: 00007fe7ef59e199 [ 618.912733][T13386] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 618.920771][T13386] RBP: 00007fe7ef6358e0 R08: 0000000000000000 R09: 0000000000000000 [ 618.928799][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.936839][T13386] R13: 00007fe7ef826038 R14: 00007fe7ef825fa0 R15: 00007fff4322fac8 [ 618.944869][T13386] [ 618.947922][T13386] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 618.955216][T13386] CPU: 1 PID: 13386 Comm: syz.8.2027 Not tainted syzkaller #0 [ 618.962669][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 618.972721][T13386] Call Trace: [ 618.975995][T13386] [ 618.978924][T13386] dump_stack_lvl+0x188/0x24e [ 618.983651][T13386] ? memcpy+0x3c/0x60 [ 618.987624][T13386] ? show_regs_print_info+0x12/0x12 [ 618.992814][T13386] ? load_image+0x410/0x410 [ 618.997314][T13386] panic+0x2d3/0x710 [ 619.001209][T13386] ? bpf_jit_dump+0xd0/0xd0 [ 619.005711][T13386] __warn+0x2f8/0x4f0 [ 619.009685][T13386] ? __mutex_lock+0xa1c/0xae0 [ 619.014360][T13386] ? __mutex_lock+0xa1c/0xae0 [ 619.019028][T13386] report_bug+0x2ba/0x4f0 [ 619.023381][T13386] ? __mutex_lock+0xa1c/0xae0 [ 619.028050][T13386] handle_bug+0x3a/0x70 [ 619.032218][T13386] exc_invalid_op+0x16/0x40 [ 619.036736][T13386] asm_exc_invalid_op+0x16/0x20 [ 619.041583][T13386] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 619.046864][T13386] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d5 4e e4 03 00 0f 85 f5 f6 ff ff 48 c7 c7 20 03 8c 8a 48 c7 c6 c0 03 8c 8a e8 54 fa 10 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 a1 c3 96 80 [ 619.066464][T13386] RSP: 0018:ffffc9000ca5fac0 EFLAGS: 00010246 [ 619.072526][T13386] RAX: 891ca0497d667400 RBX: ffff888065de6ce0 RCX: 0000000000080000 [ 619.080487][T13386] RDX: ffffc9000e79a000 RSI: 000000000000a14f RDI: 000000000000a150 [ 619.088449][T13386] RBP: ffffc9000ca5fc20 R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 619.096408][T13386] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: dffffc0000000000 [ 619.104369][T13386] R13: 0000000000000000 R14: ffff888065de6000 R15: 0000000000000000 [ 619.112334][T13386] ? trace_contention_end+0x5f/0x170 [ 619.117615][T13386] ? __mutex_lock+0x1ab/0xae0 [ 619.122283][T13386] ? as102_dvb_dmx_start_feed+0x6c/0x280 [ 619.127906][T13386] ? mutex_lock_nested+0x10/0x10 [ 619.132846][T13386] ? dmx_ts_feed_start_filtering+0x4e/0x210 [ 619.138730][T13386] ? mutex_lock_nested+0x10/0x10 [ 619.143660][T13386] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 619.149288][T13386] ? lockdep_hardirqs_on+0x94/0x140 [ 619.154486][T13386] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 619.160131][T13386] as102_dvb_dmx_start_feed+0x6c/0x280 [ 619.165585][T13386] dmx_ts_feed_start_filtering+0x11c/0x210 [ 619.171384][T13386] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 619.177269][T13386] dvb_dmxdev_filter_start+0x422/0x1060 [ 619.182810][T13386] dvb_demux_do_ioctl+0x47e/0x530 [ 619.187831][T13386] dvb_usercopy+0x191/0x2b0 [ 619.192323][T13386] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 619.197861][T13386] ? dvb_generic_ioctl+0xb0/0xb0 [ 619.202797][T13386] ? bpf_lsm_file_free_security+0x10/0x10 [ 619.208517][T13386] ? dvb_demux_poll+0x210/0x210 [ 619.213358][T13386] dvb_demux_ioctl+0x25/0x30 [ 619.217963][T13386] __se_sys_ioctl+0xfa/0x170 [ 619.222662][T13386] do_syscall_64+0x4c/0xa0 [ 619.227081][T13386] ? clear_bhb_loop+0x60/0xb0 [ 619.231847][T13386] ? clear_bhb_loop+0x60/0xb0 [ 619.236539][T13386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.242427][T13386] RIP: 0033:0x7fe7ef59e199 [ 619.246835][T13386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.266430][T13386] RSP: 002b:00007fe7f0555028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.274832][T13386] RAX: ffffffffffffffda RBX: 00007fe7ef825fa0 RCX: 00007fe7ef59e199 [ 619.282799][T13386] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 619.290757][T13386] RBP: 00007fe7ef6358e0 R08: 0000000000000000 R09: 0000000000000000 [ 619.298715][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.306675][T13386] R13: 00007fe7ef826038 R14: 00007fe7ef825fa0 R15: 00007fff4322fac8 [ 619.314643][T13386] [ 619.317893][T13386] Kernel Offset: disabled [ 619.322242][T13386] Rebooting in 86400 seconds..