last executing test programs: 9m45.961217095s ago: executing program 3 (id=301): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 9m44.506185612s ago: executing program 3 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 9m43.173211597s ago: executing program 3 (id=306): socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 9m41.85026742s ago: executing program 3 (id=310): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x1, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000480)={@private2, 0x18, r8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 9m41.547943938s ago: executing program 3 (id=314): ioprio_set$uid(0x3, 0x0, 0x0) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 9m39.335879534s ago: executing program 3 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002c40)={0x2, 0x0, 'Wd0', 0x4c, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 9m27.386060088s ago: executing program 2 (id=365): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x5, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7fff, 0x195c}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0xffff, 0xffe9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004850) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0xf8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m27.226218292s ago: executing program 2 (id=368): r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r3, &(0x7f00000005c0)=""/4096, 0x1000) wait4(r0, 0x0, 0x40000000, 0x0) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x86) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x101, 0x1) getdents(r6, &(0x7f00000002c0)=""/201, 0xc9) 9m26.029628853s ago: executing program 2 (id=373): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @mcast2}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 9m25.862958287s ago: executing program 1 (id=376): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48000) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 9m25.103718106s ago: executing program 2 (id=377): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 9m24.022360794s ago: executing program 32 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000002c40)={0x2, 0x0, 'Wd0', 0x4c, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 9m22.314801008s ago: executing program 2 (id=381): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 9m22.309821398s ago: executing program 1 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9m22.005638896s ago: executing program 1 (id=384): socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$update(0x2, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0xc600, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000400)=0xe98, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000) 9m21.80706649s ago: executing program 2 (id=385): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 9m21.806725661s ago: executing program 1 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) 9m21.697430293s ago: executing program 33 (id=385): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00') mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 9m20.865228355s ago: executing program 1 (id=393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffe0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m20.297054199s ago: executing program 1 (id=397): r0 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x3d) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009", 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkdK4VwwSCEcqhQVQ49W4nTWN0kVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/b6LS/rGD6faDzPzPPMM7/57TMzuxOtNsD/rSvn0ryfIlfOvXGvXN5YX2hvrC+8UFe3k5TlRtLszlLcSooHyWJZXwxMGZhv8/HK5bc+e7jxeXepWU9V+4ndththRNu1esps3d/syC0n97uLtTq8vJjkaj0fNrXfvoYalkk7W8/h0HW2WTvI5gc5b4HnTO/uVHTvm9vMJMeSTNfvA1JfHRrji/DZONBVDgAAAI6AUY+9P719CIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkVX0/k7UC0X9+/5VxWyK3u//T/Ubd8vPocV9t7z/TOMAAAAAAAAAgPH4+qM8yr0c7y13iur//M9UCyfzRSf5Ut7P3SznTs7nXpaymtXcyXySmYGOpu4tra7eme9vWRq95cWRW14c1xEDAAAAAAAAwP+kX6a1+f//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSie6smk7W88yk0cxmXdaSfyaZOux4D6AYtfL++OMAAACAJzL9GNt8+VEe5V6O95Y7RfWZ/yvV5+XpvJ9bWc1KVtPOcq7Vn6HLT/2NjfWF9sb6ws1yKpeH+/3+vw8UxlTdw0S1NGrPp6sWrVzPSrXmfK5WwVxLo7vvs8npXjwDcQ34qIyp+F5tn5E167SWO/v9Tk8RnorhRxGNXVq2NoNL+hmZq2MrtzzRzUBRPahJtmZiz1enObQ0Uz8JKpV7mk+j/+Tn5JPkfG303o/V8/J4fvNMc35QM1V+J3O90c3Exd7oK8+Z3TORfOOvf3r7RvvWuzeu3z33/BzSHiZ2WN/PRD36FgYy8cqRzkTzgO3nqkyc6i9fyY/yk5zLbN7Mnazkp1nKapbTqeuX6vFc/p3ZPVOLQ0tv7hXJVP26dF+z/cQ0mx9WpaWcqbY9npUUuZ1rWc7r1b+Lmc+3cymXcnngFT61Y9zVsVVnfWPrWd97pf82Mviz36wL5dXtt5tXucXdjnin0fm0dK/9ZV5PDOS1O+of9ludGDgP5gay9FIvO5MjO3+c+1Hzq3Wh3Mev9rhPjNdMnYnyBOrdJXrRvdzNRLO6F20f53/olNulfavTubH03g79b71ZvFbPy2G1/rW9WveMfimernK8vJTp+koyPDrKupf7V5mBus7mWO7WDV5d56vtTlV1RdE7U3+c29UA2H6mTtXv4bb3dLGqe2Vk3UJVd3qgbuj9Vm6nnWtjyB8Aj+Mfb/eLMzk21fpX69PWJ61ft2603pj+wQvfeeHVqUz+ffK7zbmJ1xqvFn/JJ/n55ud/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8d394MN3l9rt5TujC42dq4YKrWxds1fPWwpF/YM+B9vq+S1MJxlaU/3O0djDaG0NY1uh84tk7Pnp/Yjg6Da/KwvNbSNqVGFxaM2ft3f40QEjLPZ3XjzDQiPj3elERg+AQ7woAWNxYfXmexfufvDht1ZuLr2z/M7yrclLly7PXb70+sKF6yvt5bnu38OOEngWht4GAAAAAAAAAAAAAEfCqC8GnHlxry+N7Os7Hv01h32MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNF25Vya91Nkfu78XLm8sb7QLqdeebNlM0mjkRQ/S4oHyWK6U2YGuivyxwfpjNjPxyuX3/rs4cbnm301u+2TRj3f2e61SdbqKbNJJur5Exjq7+oT91f8p3cMZcK+6HQ6i08WHzwd/w0AAP//aKX0ZQ==") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9m5.132982235s ago: executing program 34 (id=397): r0 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x3d) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009", 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000000680)="$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") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17.609734577s ago: executing program 6 (id=1844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getresgid(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000002000/0x2000)=nil) io_setup(0x7d, &(0x7f0000000600)) getgroups(0x0, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 10.877596303s ago: executing program 4 (id=1860): ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x48, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7ff}}, {@auto_da_alloc}, {@nogrpid}, {@nouid32}]}, 0x6, 0x50a, &(0x7f00000018c0)="$eJzs3c1vVF0ZAPDnTju0lEKLslATAyqKhjD9ABrCxrLRGEJiJK5cQG2HpukM03RKpJVFWbonkcSV/gnuXJiwcuHOne7c4MIElfiGvsm7mDf3zqUd+jnQj0k7v19ye+85d7jPOTOcc+YeuD0BdK1LEbEaEaci4mFEDOX5Sb7FZHNLX/fu7bPptbfPppNoNO7/N8nOp3nR8mdSZ/Jr9kfEz34c8ctka9z68sr8VKVSXszTI0vVhZH68sq1uUKeMz4xNjF66/rN8QOr68XqH9/8aO7uz//8p2++/tvqD36dFmvwN2ezc631OEjNqhdjsCWvNyLuHkawDunN//5w/KSt7SsR8e2s/Q9FT/ZpAgAnWaMxFI2h1jQAcNKl9/+DkRRK+VzAYBQKpVJzDu9CDBQqtfrS1aHak8czkc1hDUex8GiuUh7N5wqHo5ik6bHseCM9/kH6Rfl6RJyPiBd9p7PzpelaZaaTX3wAoIud2TT+f9bXHP8BgBOuv9MFAACOnPEfALqP8R8Aus9HjP+eDgSAE8L9PwB0H+M/AHSfPcf/50dTDgDgSPz03r10a6w1f//1+9/UfW2mXJ8vVZ9Ml6Zriwul2VpttlIuTTcae12vUqstjN1YT9aXVx5Ua08eLz2Yq07Nlh+Ui4dZGQCgLecvvvpHOuiv3j6dbdGyloOxGk62QqcLAHRMT6cLAHSM53mge7Vxj28aAE64bZbo/cCO/0XopcVf4bi68nXz/9Ct9jP/b+4AjrdPm///4YGXAzh6xnDoXo1GYs1/AOgy5viBj/73/zv5/uXhlAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOg8FsSwqlbC3w1fRnoVSKOBsRw1FMHs1VyqMRcS4i/t5X7EvTY50uNACwT4V/J/n6X1eGLg9uPnsq+bwv20fEr353/7dPp5aWFsfS/P/1Teb5Sy/z/PFTHakBANBicmtWc5zO9y038u/ePpt+vx1lEd/caS4umsZdy7fmmd7ozfb9UYyIgf8nebop/b7ScwDxV59HxNc26v+0JcJgNgfSXPl0c/w09tlDiL/x/m+OX/ggfiE7l+6L2Xvx1QMoC3SbV3ea/WTe9tImlre/QlzK9tu3//6sh9q/tP9L+5K1Lf1fYb3/69kSP8na/KX19O4leXPjLz/ZktkYap57HvGN3u3iJ+vxk+373+LlNuv4z1066sbvI65sW//3K1JXs252ZKm6MFJfXrk2V52aLc+WH4+PT4xNjN66fnN8JJujbv7863Yx/nP76rmd4qf1H9ghfv/u9Y/vtln/P3zx8Bff2iX+97+z/ed/YZf46Zj4vTbjTw1Mblm+uzX+zA713+Pzj6ttxn/9r5WZNl8KAByB+vLK/FSlUl7c4yD9rrnXaxwc3cHpiDioC8ZqxEEVLJuUiIj9XCeJjr+9Diqd7pmAw7bR6DtdEgAAAAAAAAAAAAAAYCf15ZX5vk9+WiuG23kKrdN1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OT6MgAA//9Mj8T8") sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f0000000000)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQFolf5IK5YBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTuetdfrl66TxrtpP59o93lmnplnfs/vmZl9saIN8IW1MJH6gxRZmHhlvb28tTnT3NqcudupJxlNspHUk9SSFP9ttVofJvNJsdtN0VMe8P7y3GsffbL18c5SvXqU29eO269Htd1Gz+qNzrrxJGeq8hHs6+/GI/dX7EY+n+RqVcLAnU3S2udnf396t6VL47C9z51KjMDjVey8bh4wlpyvLvT2+4DOK2/tdKPr32if2/W+gwAAAIAnTT+fgb+8ne2sFxdOIRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4XNjY+/3/onrUOvXxFJ3f/x+p1qWqD5cXT7b5g8cVBwAAAAAAAACcohe3s531XOgst4ryb/4vlQuXyuen8lZWs5SVXMt6FrOWtaxkKslYV0cj64traytTfew5feie058S6GhVNj6bcQMAAAAAAADA58yvsrD3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGRXJmp0hxv2v1WGr1JOeSjLRXbCT/7NSfZA8GHQAAAACcgtFkO+u50FluFbmU5LnyO4BzeSv3spblrKWZpdwsvxfY+dRf29qcaW5tztxtPw72+/3/nCiMssfsfPdw+JGvlFs0civL5ZpruZE30szN1Mo9265U8XR67Ynrfjum4nuVPiO7WZXtkb9XlQe8e6LBHuWEX6aMlRk5u5uRySq2djae6czM4TN0wtnpPdJUarvBXuo50sj+wTxUzs9XZXs8vzsq5wPRm4nprrPvueNznnz9L3/66WRVH54h9edMVbbK58bBTMx0ZeL5fjJxu3nvzu1bqxNPWiYOmCwzcXl3eSE/yk8ykfG8mpUs5+dZzFqWMp4flrXFavKLrkv+iEzN71t69dMiGanO0J3JOllML5X7Xshyfpw3cjNLebn8N52pfDuzmc1c1wxfPn6Gy6u+tu+q35vm1pcODf7qN6pKI8nvq3I4tPP6TFdeu++5Y2Vb95q9LF3sI0snvDfWv1pV2sf4dVUOh95MTHVl4tnjM/GH8ray2rx3Z+X24pv9He7ie1WlfWb9NhkfnhtJ+3y52J6scmn/2dFue/bQtqmy7dJuW+1A2+Xdtp0rdePIK3Wkeg93sKfpsu35Q9tmyrYrXW2Hvd8CYOid/+b5kca/G/9ofND4TeN245VzPxj9zugLIzn717PfrU+e+VrtheLP+SC/3Pv8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzVt9+5s9hsLq30VFqt1rtHNPVZqVdHeMjdH6GS8X891T7yIU2dnzM7xXi+8nRyemMf1sr/Wq1WtaY4Yps//m1oEtWqDEXqBlQZ3D0JOB3X1+6+eX317Xe+tXx38fWl15fuzc3Ozk3Ozb48c/3WcnNpcud50FECj8Pei/6gIwEAAAAAAAAAAAD6dRr/nWDQYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebAsTqT9IkanJa5Pt5a3NmWb70anvbVlPUktS/CIpPkzmi6phrKu74qjjvL8899pHn2x9vNdXvbN97bj9+rNRPTKe5MxOef+z6u9GVR6rOG4Ixe4I55NcrUoYuP8HAAD//xokBkA=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) 10.645432418s ago: executing program 6 (id=1861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x1000000009, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.921581196s ago: executing program 4 (id=1862): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r2, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000600)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c26", 0xdc}], 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 9.683013382s ago: executing program 7 (id=1863): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, 0x0, 0x0, 0x40002103, &(0x7f0000003d40)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x3c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmmsg$inet(r5, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2090) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x3c}, 0x1, 0xba01}, 0x80) 9.504615346s ago: executing program 4 (id=1864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/251) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8.753556665s ago: executing program 7 (id=1865): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = open(0x0, 0x466040, 0x1a0) migrate_pages(r2, 0x0, &(0x7f0000000000)=0xff, &(0x7f0000000080)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fdatasync(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$can_bcm(0x1d, 0x2, 0x2) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x802, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x2000, @private0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) 8.667491837s ago: executing program 6 (id=1866): syz_mount_image$erofs(&(0x7f0000000240), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000580)="d17a82", 0x34000, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040), 0x2, 0x501, &(0x7f0000000a40)="$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") r3 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000280)={0x2d, 0x0, '\x00', {0x0, @reserved}}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000140)='./bus\x00', r4, r5) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 5.779649798s ago: executing program 5 (id=1867): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r5, 0xffffffffffffffff, 0x0) 5.779439888s ago: executing program 4 (id=1868): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020600) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="6c617374626c6f67ac9f9bea2c94743030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa000033bd97bb000000003b3c6cbb36a8edf44a84b545c800a7934aabb10cb81cb0b504f9add39b31"], 0x6, 0xc38, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x1, 0x0, r4, 0x0}]) 4.621271437s ago: executing program 5 (id=1870): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e508001240000000090500050002000000050001000600"], 0x58}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x44}}, 0x4000050) 4.571106468s ago: executing program 7 (id=1871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getresgid(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000002000/0x2000)=nil) io_setup(0x7d, &(0x7f0000000600)) getgroups(0x0, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@generic={0x73, 0x1, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 4.534878119s ago: executing program 4 (id=1872): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5529c70794973956, &(0x7f00000004c0)={[{@mb_optimize_scan}, {@auto_da_alloc}, {@dioread_nolock}, {@dax_never}, {@jqfmt_vfsv1}, {@oldalloc}, {@block_validity}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff90}}, {@nomblk_io_submit}]}, 0x1, 0xb93, &(0x7f0000002080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}}, 0x24) recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 4.46713554s ago: executing program 6 (id=1873): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) 4.423104411s ago: executing program 0 (id=1874): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xffffeffffffffbfd, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3e8) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mq_notify(r5, &(0x7f0000000200)={0x0, 0x19, 0x4, @tid=r1}) socket$netlink(0x10, 0x3, 0xf) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) setuid(0xee01) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.824519976s ago: executing program 0 (id=1875): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001b00), 0x109000, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0}, 0xc010) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x850) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000400)=""/85, 0x0, 0x41000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeee0000}) 3.783270537s ago: executing program 0 (id=1876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x1000000009, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.733116638s ago: executing program 7 (id=1877): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0xc004, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5f7, &(0x7f0000000c80)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f00000002c0)=[0x8, 0x6]) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0), 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000240)="ff", 0x1, 0xffffffffffffffff) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fstat(r3, &(0x7f0000000700)) 3.546144733s ago: executing program 5 (id=1878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) mincore(&(0x7f0000001000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/251) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.454912955s ago: executing program 4 (id=1879): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = inotify_init1(0x80000) r6 = inotify_add_watch(r5, &(0x7f0000010280)='./file0\x00', 0x20000000) write$binfmt_elf32(r1, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.411082456s ago: executing program 0 (id=1880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r5, &(0x7f0000000280)={0xffffffffffffffff, r0, 0xfffffb6e}) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 2.631871066s ago: executing program 7 (id=1881): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4}, 0x1c) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r5, 0xffffffffffffffff, 0x0) 2.536167038s ago: executing program 5 (id=1882): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x2, 0x48000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0xd5}, 0x90) 1.470449804s ago: executing program 5 (id=1883): syz_mount_image$erofs(&(0x7f0000000240), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r1, 0x1) sendto$inet(r1, &(0x7f0000000580)="d17a82", 0x34000, 0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040), 0x2, 0x501, &(0x7f0000000a40)="$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") r3 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000280)={0x2d, 0x0, '\x00', {0x0, @reserved}}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000140)='./bus\x00', r4, r5) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.135043053s ago: executing program 6 (id=1884): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQhiooTWxhEA1BjcmhkTX6tLEv8CdG6OuTExc6d6QEGUDGhdj7p17ZWbaoUNtZwrzPMnQc+acO+ecnnvuPfecDgH0rOHsnyRia0T8EhE7atHGDMO1H9eunJ3688rZqSSq1Vd/T/J8V6+cnSqzlsdtKSIjaUT6QVIU0mhu4cyJyUpl5nQRH5s/+fbY3MKZJ46fnDw2c2zm1MShQwcPjD/91MSTa9LOrF1X95yb3bv7xdcvvjR15OJb33+V1XdrkV7fjlUZXPrWcNbwP6q55rSH4///qbiNZltdOOnvYkW4KX0RkXXXQDb+q9Xq+bq0HfHC+yscvmWdqweso+zetGmZ94v74mK1peSGqcCtIIlu1wDojvJ+nz3/lq8OTj+67vKztQegrN3XilctpT/SIs9A0/PtWhqOiCOLf32WveLG6xB961QFAKDHfDT16eF4fLn5Xxr31OXbXuyhDEXEHRFxZ0TcFRE7I+LuiDzvvRGxq51C6zYImreGls5/0kurb93KsvnfM8XeVuP8r5z9xVBfEduWt38gOXq8MrO/+J2MxMCmLD5+gzK+ef6nj1ul1c//sldWfjkXLOpxqb9pgW56cn4yn5SugcvvRezpj7+r1WpT+5MoeymJiN0RsefmPnp7GTj+6Jd7W2Vauf1LPu66Ndhnqn4R8Uit/xejqf2lZOn+5OC26/uTY/+Lysz+sfKsWOqHHy+80qr89tu/PrL+39x4/hcpny8UgaE36/dr56LFzuXWlmVc+PXDls+Uqz3/B5PX8utRue367uT8/OnxiMHkcB5veH/i+rFlvMyftX9kX5ZStr88Ms2vcVH0/30Rsbd4CLs/Ih4o6v5gRDwUEftatj7iu+dap22E/p+u6/8kms//XedqP8v+X7jpQN+Jb79uVX57/X8wD40U7+TXvxW0W8HV/+YAAADg1pHmKzdJOvpvOE1HR2t/2LszNqeV2bn5x47OvnNqurbCMxQDabnStaNuPXQ8WSw+sRafKNaKy/QDxbrxJ32Rx0enZivTXW479LotLcZ/5jd/cQK3v+X20SaW+UIbcPtpHv9pY/T8y52sDNBRvq8NvWuF8Z92qh5A57n/Q+9abvyfb4rbC4Dbk/s/9C7jH3qX8Q+9q2n898XP3aoJ0EGr+Dq/gMDcwplIN0Q12gq0//9BrHfgjY1RjTYC3b4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArI1/AgAA//8f8uwu") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x22020600) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x6, 0xc38, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x1, 0x0, r4, 0x0}]) 1.079665864s ago: executing program 0 (id=1885): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x8, 0x7d, 0xfffffffffffffffd, 0x5, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r6, 0x8e53ef4891cff65b, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x2f1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}]}, 0x2c}}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000017, &(0x7f00000002c0), 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x18, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004) r7 = dup(r1) syz_open_dev$dri(0x0, 0x4, 0x129343) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r7, 0x3554000) syz_emit_ethernet(0x0, 0x0, 0x0) 765.547542ms ago: executing program 5 (id=1886): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') mkdir(0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) 89.694598ms ago: executing program 7 (id=1887): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x2, 0x1], [0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x9, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x8, 0x0, 0x8, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000540)='wg2\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x3f9, &(0x7f0000000900)="$eJzs3c1uG0UcAPD/br6atDSpxIGPSwRIREIkTdoClUAi4sKhPdEDR6zELVGdFiVGolXEh0DcQALxAHAAHoEjHHgHOAMHqBShHEg5IBmtveuY2E7r1MZV+vtJI8/srD1jj2e9O5mdBPDAmo2IlyNiJCJOR8R0vj3NQ7zfCNl+uztbK3/vbK0kUau99mcSSb6teK0kfzyev8BcGpF+lMTjHcrdvHHzaqlSKW/k6YXq+lsLmzduPru2XrpSvlK+tvTcmbPnzr1wfun5vr3X7fXkk6e+ufDbZx+vfv7TH9/PZPU9kee1vo9+mY3Z5mey3/l+FzZkx1riyegQKwIAwIHS/Nx/tH7+Px0jsXfyNh2f/jjUygEAAAB9UasVjwAAAMDRlbj2BwAAgCOumAewu7O1UoQhTkfgf7a9HBEzjfa/nYdGzmjznt6xfff39tNsRLx67OJSFmJA92EDAAAAPMh+WG4s/Nc+/vdP7ZGW/SYjYqpY26+PZvel28d/0lt9LpIW28sRL0bE7bbxv7TYZWYkTz1UHyocSy6vVcqnI+JkRMzF2ESWXjygjHefuPptt7zW8b8vf319MSs/e9zbI701OvHf56yWqqV7ec/s2f4g4rHRTu2fNMd8W9fJzKz1WMYba7svdcvL2j9r7yK0tz+DVPsqiac79v+9lUuTg9dnXagfDxbyo8JEexm/nPj6w27lt/b/LGTlF38LYPCy/j91cPvX18ltrte72XsZ3/118edueXdu/87H//HkUr2C4/m2d0rV6sZixHhyoX27b1NT8XkUn1fW/nNPdv79L87/kvy3/2TL+tC9eOW9U5e65en/w5W1/2pP/b/3yJtTj851K//u+v/ZemWKF3H+d2d320DDricAAAAAAAAA/ZHW5/Yl6Xwznqbz8415vg/HVFq5vll95vL1t6+tNuYAzsRYWsz/nG6ZD7rYuI28mV7alz4TEaci4ovpyXp6fmWyPu8AAAAAGLzjXa7/M78f5mYPAAAA4P40M+wKAAAAAAPn+h8AAACOtHtZ179S3ij+RdAhny4icrjISP7Fu1/qc/QiQzwoAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABD/BgAA///fEr3I") linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r3, 0xa, 0x28000000}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf64, 0x1f480, 0x0, 0xaf}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000500)={r3, 0x9}, 0x8) 15.14208ms ago: executing program 6 (id=1888): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e508001240000000090500050002000000050001000600"], 0x58}}, 0x4080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x44}}, 0x4000050) 0s ago: executing program 0 (id=1889): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5529c70794973956, &(0x7f00000004c0)={[{@mb_optimize_scan}, {@auto_da_alloc}, {@dioread_nolock}, {@dax_never}, {@jqfmt_vfsv1}, {@oldalloc}, {@block_validity}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffff90}}, {@nomblk_io_submit}]}, 0x1, 0xb93, &(0x7f0000002080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x6}}, 0x24) recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) kernel console output (not intermixed with test programs): ort 2(bridge_slave_1) entered disabled state [ 199.523166][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.181306][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.258539][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.793317][ T5873] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.802839][ T5873] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.812271][ T5873] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.821261][ T5873] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.888356][ T5873] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.897544][ T5873] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.907030][ T5873] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.916252][ T5873] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.976757][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.016245][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.053633][ T5674] device veth0_vlan entered promiscuous mode [ 201.114168][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.150353][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.211788][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.566196][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.194218][ T5674] device veth1_vlan entered promiscuous mode [ 202.242359][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.266743][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.319461][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.393703][ T5674] device veth0_macvtap entered promiscuous mode [ 202.412926][ T5674] device veth1_macvtap entered promiscuous mode [ 202.463809][ T5674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.538913][ T5674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.570520][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.632980][ T5947] No source specified [ 202.662029][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.757913][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.933839][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.079966][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.252474][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.363986][ T5704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.414647][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.430255][ T5674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.481886][ T5674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.523523][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.816098][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.027105][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.389586][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 206.411230][ T5674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.469129][ T5674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.501905][ T5674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.551625][ T5674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.613037][ T5967] netlink: 292 bytes leftover after parsing attributes in process `syz.4.435'. [ 206.872336][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.931400][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.992444][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.043503][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.063056][ T4514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.067205][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.213647][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.233224][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.252638][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.294198][ T5704] device veth0_vlan entered promiscuous mode [ 207.332853][ T4514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.356673][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.380564][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.397248][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.408035][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.418436][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 208.408600][ T5981] device bridge3 entered promiscuous mode [ 208.462470][ T5981] team0: Port device bridge3 added [ 208.529220][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 208.724973][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.751454][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.780197][ T5940] device bridge_slave_0 entered promiscuous mode [ 208.827024][ T5704] device veth1_vlan entered promiscuous mode [ 208.837707][ T5981] bridge0: port 3(team0) entered blocking state [ 208.847568][ T5981] bridge0: port 3(team0) entered disabled state [ 208.888352][ T5981] device team0 entered promiscuous mode [ 208.907819][ T5981] device team_slave_0 entered promiscuous mode [ 208.938543][ T5981] device team_slave_1 entered promiscuous mode [ 208.984557][ T4514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.030224][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.047028][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.070576][ T5940] device bridge_slave_1 entered promiscuous mode [ 209.147510][ T4514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.167324][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.189428][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.245795][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.303282][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.430791][ T5704] device veth0_macvtap entered promiscuous mode [ 209.502717][ T5704] device veth1_macvtap entered promiscuous mode [ 209.572095][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.590676][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.644877][ T5940] team0: Port device team_slave_0 added [ 209.714945][ T5940] team0: Port device team_slave_1 added [ 209.747859][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.755501][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.783950][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.950210][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.992359][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.549739][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 210.748926][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.779546][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.810756][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.830448][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.854631][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.929312][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.460427][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.467906][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.775825][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.789426][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 212.834693][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.307971][ T6013] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.317086][ T6013] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.326525][ T6013] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.335499][ T6013] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.469248][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.478108][ T4720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.503191][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.551151][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.562916][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.581763][ T5704] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.591171][ T5704] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.602705][ T5704] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.620799][ T5704] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.727341][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.742764][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.782617][ T5940] device hsr_slave_0 entered promiscuous mode [ 213.793713][ T5940] device hsr_slave_1 entered promiscuous mode [ 213.820409][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.845251][ T5940] Cannot create hsr debugfs directory [ 213.956667][ T4720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.979960][ T4720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.026715][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.085181][ T4642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.105090][ T4642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.156088][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.369781][ T5940] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 214.403533][ T5940] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 215.202356][ T5940] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 215.222042][ T5940] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 217.499416][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.236843][ T6092] loop5: detected capacity change from 0 to 4096 [ 219.021597][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.059779][ T6092] NILFS (loop5): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0 [ 219.069394][ T6092] NILFS (loop5): error -5 getting root inode [ 219.093055][ T6099] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.125704][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.136154][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.420152][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.446015][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.456460][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.463649][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.566538][ T6111] tipc: Enabling of bearer rejected, failed to enable media [ 220.530469][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.538909][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.578413][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.613885][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.621093][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.732447][ T6106] befs: (nullb0): invalid magic header [ 221.743544][ T6120] smc: removing ib device syz0 [ 221.779733][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.180173][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.242791][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.569260][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.621596][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.668282][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.682450][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.699496][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.754277][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.787588][ T5940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.864167][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.874511][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.896026][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.651683][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.664802][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.701373][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.333805][ T6166] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 225.095394][ T6173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.212252][ T6182] device syzkaller0 entered promiscuous mode [ 225.234088][ T6182] tipc: Started in network mode [ 225.246976][ T6182] tipc: Node identity , cluster identity 4711 [ 225.267678][ T6182] tipc: Failed to obtain node identity [ 225.288374][ T6182] tipc: Enabling of bearer rejected, failed to enable media [ 225.328304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.350112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.464355][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.483011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.505963][ T5940] device veth0_vlan entered promiscuous mode [ 225.515337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.591934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.674266][ T5940] device veth1_vlan entered promiscuous mode [ 226.799800][ T5940] device veth0_macvtap entered promiscuous mode [ 226.847326][ T5940] device veth1_macvtap entered promiscuous mode [ 226.944832][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.973350][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.983351][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.993864][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.014015][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.030440][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 227.039404][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 227.050199][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.059181][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.067964][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.079975][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.109794][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.127422][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.147626][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.169284][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.249586][ T6211] xt_TCPMSS: Only works on TCP SYN packets [ 227.297654][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.386951][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.482776][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.590269][ T5940] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.684983][ T5940] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.787632][ T5940] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.853464][ T5940] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.049598][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.058456][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.168467][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 228.250933][ T4758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.258814][ T4758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.276833][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.179218][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.199808][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.232703][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.328083][ T4514] device hsr_slave_0 left promiscuous mode [ 231.350018][ T4514] device hsr_slave_1 left promiscuous mode [ 231.480856][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.509341][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.545448][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.553297][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.569833][ T4514] device bridge_slave_1 left promiscuous mode [ 231.586136][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.632089][ T4514] device bridge_slave_0 left promiscuous mode [ 231.638496][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.626571][ T4514] device veth1_macvtap left promiscuous mode [ 232.639282][ T4514] device veth0_macvtap left promiscuous mode [ 232.645425][ T4514] device veth1_vlan left promiscuous mode [ 232.659445][ T4514] device veth0_vlan left promiscuous mode [ 232.948467][ T4514] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 232.962108][ T4514] device veth0_to_bond left promiscuous mode [ 232.970538][ T4514] bond1 (unregistering): Released all slaves [ 233.740356][ T4514] team0 (unregistering): Port device team_slave_1 removed [ 233.767647][ T4514] team0 (unregistering): Port device team_slave_0 removed [ 233.786448][ T4514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.805066][ T4514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.923913][ T4514] bond0 (unregistering): Released all slaves [ 234.881992][ T6284] device syzkaller0 entered promiscuous mode [ 234.950326][ T6292] tipc: Started in network mode [ 234.977196][ T6292] tipc: Node identity 2e22a1db71d, cluster identity 4711 [ 235.054717][ T6292] tipc: Enabled bearer , priority 0 [ 235.108999][ T6284] tipc: Resetting bearer [ 235.159463][ T6281] tipc: Resetting bearer [ 235.752780][ T6281] tipc: Disabling bearer [ 236.638366][ T6313] loop6: detected capacity change from 0 to 2048 [ 237.630999][ T6313] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 238.358760][ T6338] Cannot find add_set index 0 as target [ 238.607126][ T5704] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 238.964650][ T6352] netlink: 'syz.7.501': attribute type 9 has an invalid length. [ 238.973081][ T6352] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.501'. [ 242.336908][ T6395] syz.6.511 uses obsolete (PF_INET,SOCK_PACKET) [ 242.868066][ T6407] loop6: detected capacity change from 0 to 64 [ 244.241063][ T6422] netlink: 292 bytes leftover after parsing attributes in process `syz.5.519'. [ 246.662922][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.525'. [ 247.640234][ T6475] IPVS: Unknown mcast interface: vcan0 [ 248.006821][ T6484] loop6: detected capacity change from 0 to 256 [ 248.759883][ T6484] exfat: Deprecated parameter 'utf8' [ 248.786327][ T6484] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 248.844615][ T6479] loop7: detected capacity change from 0 to 4096 [ 249.347535][ T6479] EXT4-fs (loop7): Test dummy encryption mode enabled [ 249.463957][ T6479] EXT4-fs (loop7): Ignoring removed oldalloc option [ 249.971377][ T6479] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue. Quota mode: writeback. [ 251.174765][ T6479] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 251.313270][ T6521] netlink: 'syz.6.535': attribute type 10 has an invalid length. [ 251.601486][ T6521] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 253.502288][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.540'. [ 255.754398][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.760786][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.937577][ T6610] device bridge3 entered promiscuous mode [ 259.952409][ T6615] loop7: detected capacity change from 0 to 64 [ 259.966099][ T6610] team0: Port device bridge3 added [ 260.007199][ T6616] bridge0: port 3(team0) entered blocking state [ 260.019609][ T6616] bridge0: port 3(team0) entered disabled state [ 260.032841][ T6616] device team0 entered promiscuous mode [ 260.336980][ T6616] device team_slave_0 entered promiscuous mode [ 260.800669][ T6616] device team_slave_1 entered promiscuous mode [ 261.723016][ T6649] netlink: 'syz.4.564': attribute type 11 has an invalid length. [ 262.120301][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.126960][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.133212][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.139348][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.145441][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.151627][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.157731][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.163850][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.170025][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.176128][ T6653] tc action pedit 'at' offset 2 out of bounds [ 262.182305][ T6653] TC_ACT_REPEAT abuse ? [ 262.250183][ T4514] bond0: (slave netdevsim0): Releasing backup interface [ 264.528752][ T6689] device bridge1 entered promiscuous mode [ 265.656787][ T6689] team0: Port device bridge1 added [ 266.914637][ T6693] bridge0: port 3(team0) entered blocking state [ 266.946988][ T6693] bridge0: port 3(team0) entered disabled state [ 266.962547][ T6693] device team0 entered promiscuous mode [ 267.137557][ T6693] device team_slave_0 entered promiscuous mode [ 267.163575][ T6693] device team_slave_1 entered promiscuous mode [ 267.399319][ T6693] bridge0: port 3(team0) entered blocking state [ 267.406100][ T6693] bridge0: port 3(team0) entered forwarding state [ 268.288104][ T4514] tipc: Left network mode [ 269.718234][ T6750] device syzkaller0 entered promiscuous mode [ 275.548788][ T6811] loop5: detected capacity change from 0 to 4096 [ 276.417457][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.607'. [ 278.262391][ T6841] loop5: detected capacity change from 0 to 512 [ 279.213223][ T6841] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 279.277337][ T6841] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.787617][ T6876] overlayfs: failed to clone upperpath [ 281.217578][ T4514] device hsr_slave_0 left promiscuous mode [ 281.227335][ T4514] device hsr_slave_1 left promiscuous mode [ 281.237078][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.248258][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.264036][ T4514] device bridge_slave_1 left promiscuous mode [ 281.282271][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.051289][ T4514] device bridge_slave_0 left promiscuous mode [ 282.115556][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.130212][ T6904] loop7: detected capacity change from 0 to 64 [ 283.034060][ T6912] loop5: detected capacity change from 0 to 512 [ 283.156621][ T6914] loop6: detected capacity change from 0 to 16 [ 283.158922][ T6912] EXT4-fs (loop5): Ignoring removed oldalloc option [ 283.219476][ T6914] erofs: (device loop6): mounted with root inode @ nid 36. [ 283.299861][ T6914] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 283.311512][ T6912] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,minixdf,quota,,errors=continue. Quota mode: writeback. [ 283.328606][ T6914] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 283.349762][ T6914] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 283.359638][ T6912] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.386297][ T6912] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.626: corrupted inode contents [ 283.402336][ T6912] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #2: comm syz.5.626: mark_inode_dirty error [ 283.419380][ T6912] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.626: corrupted inode contents [ 283.436420][ T6914] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 283.462553][ T6912] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.626: mark_inode_dirty error [ 283.506328][ T6922] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 283.532236][ T6922] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 283.643997][ T4514] team0 (unregistering): Port device team_slave_1 removed [ 283.712378][ T4514] team0 (unregistering): Port device team_slave_0 removed [ 283.805847][ T4514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.857026][ T4514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.932678][ T4514] bond0 (unregistering): Released all slaves [ 286.031942][ T6941] loop6: detected capacity change from 0 to 1024 [ 286.057008][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.7.627'. [ 286.144534][ T6941] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 286.197149][ T6941] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.984786][ T6954] device syzkaller0 entered promiscuous mode [ 287.045942][ T6954] tipc: Started in network mode [ 287.066647][ T6954] tipc: Node identity , cluster identity 4711 [ 287.098483][ T6954] tipc: Failed to obtain node identity [ 287.126953][ T6954] tipc: Enabling of bearer rejected, failed to enable media [ 287.951662][ T6972] binder: BINDER_SET_CONTEXT_MGR already set [ 288.123800][ T6972] binder: 6966:6972 ioctl 4018620d 200000000240 returned -16 [ 289.988074][ T7010] device syzkaller0 entered promiscuous mode [ 290.032646][ T7010] tipc: Started in network mode [ 290.089091][ T7010] tipc: Node identity 2a6d2511ee7a, cluster identity 4711 [ 290.096808][ T7010] tipc: Enabled bearer , priority 0 [ 290.149579][ T7013] tipc: Resetting bearer [ 290.249614][ T7008] tipc: Resetting bearer [ 290.332195][ T7008] tipc: Disabling bearer [ 291.559141][ T7023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.754056][ T7033] device syzkaller0 entered promiscuous mode [ 291.777169][ T7033] tipc: Started in network mode [ 291.790916][ T7033] tipc: Node identity , cluster identity 4711 [ 291.807511][ T7033] tipc: Failed to obtain node identity [ 291.813444][ T7033] tipc: Enabling of bearer rejected, failed to enable media [ 292.976948][ T7046] xt_cgroup: path and classid specified [ 294.801084][ T7080] Cannot find add_set index 4 as target [ 295.172943][ T7089] device syzkaller0 entered promiscuous mode [ 295.218698][ T7089] tipc: Enabled bearer , priority 0 [ 295.366001][ T7086] tipc: Resetting bearer [ 295.857650][ T7086] tipc: Disabling bearer [ 297.580549][ T7141] netlink: 'syz.6.677': attribute type 9 has an invalid length. [ 297.588338][ T7141] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.677'. [ 298.825235][ T7161] bond1: option mode: unable to set because the bond device has slaves [ 298.835098][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 298.844063][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 298.853714][ T7161] netlink: 'syz.0.678': attribute type 4 has an invalid length. [ 298.869084][ T7161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.678'. [ 298.917850][ T7162] using random self ethernet address [ 298.931475][ T7161] .`: renamed from bond0 [ 299.165713][ T7162] using random host ethernet address [ 299.353809][ T7170] tipc: Enabling of bearer rejected, failed to enable media [ 299.735266][ T7178] loop7: detected capacity change from 0 to 16 [ 299.798356][ T7178] erofs: (device loop7): mounted with root inode @ nid 36. [ 299.842077][ T26] audit: type=1326 audit(1785810755.394:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.4.688" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x0 [ 299.912403][ T7178] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 299.949601][ T7178] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 299.971745][ T7190] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 300.026066][ T7190] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 300.072130][ T7178] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 300.102857][ T7178] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 303.026153][ T7182] Set syz1 is full, maxelem 6117 reached [ 304.017103][ T7244] tipc: Enabling of bearer rejected, failed to enable media [ 304.098868][ T7247] loop6: detected capacity change from 0 to 16 [ 304.189424][ T7247] erofs: (device loop6): mounted with root inode @ nid 36. [ 304.445062][ T7257] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 304.468042][ T7247] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.183493][ T7247] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 305.230458][ T7261] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.289872][ T7263] loop5: detected capacity change from 0 to 16 [ 305.311785][ T7261] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 305.387536][ T7263] erofs: (device loop5): mounted with root inode @ nid 36. [ 305.403329][ T7259] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.419130][ T7259] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 305.542762][ T7263] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.590540][ T7263] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 305.612181][ T7269] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 305.719356][ T7269] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 308.490531][ T7312] loop6: detected capacity change from 0 to 16 [ 308.589091][ T7312] erofs: (device loop6): mounted with root inode @ nid 36. [ 309.921981][ T7312] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 310.041769][ T7324] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 310.069352][ T4228] Bluetooth: hci5: command 0x0406 tx timeout [ 310.077363][ T4228] Bluetooth: hci2: command 0x0406 tx timeout [ 310.099945][ T7312] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 310.134991][ T7324] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 310.199640][ T7330] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 310.259190][ T7330] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 312.221030][ T7370] device syzkaller0 entered promiscuous mode [ 312.241136][ T7373] loop5: detected capacity change from 0 to 16 [ 312.310912][ T7373] erofs: (device loop5): mounted with root inode @ nid 36. [ 312.353293][ T7373] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 312.371831][ T7373] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 312.390010][ T7373] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 312.409577][ T7373] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 312.490576][ T7380] tipc: Enabling of bearer rejected, failed to enable media [ 312.693580][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.741'. [ 312.721811][ T7392] loop5: detected capacity change from 0 to 16 [ 313.330024][ T7392] erofs: (device loop5): mounted with root inode @ nid 36. [ 313.888982][ T7392] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 313.892929][ T7409] loop6: detected capacity change from 0 to 16 [ 313.943772][ T7392] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 313.952367][ T7414] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 314.086486][ T7414] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 314.113426][ T7395] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.161943][ T7409] erofs: (device loop6): mounted with root inode @ nid 36. [ 315.230743][ T7428] loop6: detected capacity change from 0 to 16 [ 316.037128][ T7428] erofs: (device loop6): mounted with root inode @ nid 36. [ 316.836822][ T7395] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.911842][ T7428] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 316.926122][ T7428] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 316.938447][ T7428] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 317.058926][ T7428] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 317.123537][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.129921][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.232218][ T7395] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.360788][ T7395] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.651057][ T7395] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.675351][ T7395] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.695406][ T7395] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.180748][ T7395] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.449812][ T7463] loop7: detected capacity change from 0 to 16 [ 318.688804][ T7463] erofs: (device loop7): mounted with root inode @ nid 36. [ 319.156503][ T7466] loop6: detected capacity change from 0 to 256 [ 319.293224][ T7466] tipc: Enabled bearer , priority 10 [ 319.357702][ T7463] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 319.439830][ T7469] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 319.449320][ T7463] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 319.462715][ T7469] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 320.601256][ T23] tipc: Node number set to 1609736667 [ 323.500704][ T7530] loop5: detected capacity change from 0 to 16 [ 323.563439][ T7530] erofs: (device loop5): mounted with root inode @ nid 36. [ 323.799699][ T7530] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 323.977577][ T7530] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 324.116909][ T7536] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 324.439431][ T7536] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 324.620776][ T7540] loop6: detected capacity change from 0 to 16 [ 324.660965][ T7540] erofs: (device loop6): mounted with root inode @ nid 36. [ 325.091364][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 326.881922][ T7588] tipc: Started in network mode [ 326.887027][ T7588] tipc: Node identity ac14140f, cluster identity 4711 [ 326.899145][ T7588] tipc: Enabled bearer , priority 10 [ 327.926165][ T7597] loop6: detected capacity change from 0 to 16 [ 327.951413][ T4264] tipc: Node number set to 2886997007 [ 327.999703][ T7597] erofs: (device loop6): mounted with root inode @ nid 36. [ 328.024727][ T7602] device syzkaller0 entered promiscuous mode [ 328.700490][ T7633] netlink: 532 bytes leftover after parsing attributes in process `syz.0.795'. [ 329.055150][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 329.636358][ T4237] Bluetooth: hci4: command 0x0406 tx timeout [ 329.671726][ T7654] loop5: detected capacity change from 0 to 16 [ 329.686817][ T7654] erofs: (device loop5): mounted with root inode @ nid 36. [ 331.711911][ T7670] loop5: detected capacity change from 0 to 256 [ 331.899198][ T7670] tipc: Started in network mode [ 331.904147][ T7670] tipc: Node identity ac14140f, cluster identity 4711 [ 331.911658][ T7670] tipc: Enabled bearer , priority 10 [ 333.029217][ T1107] tipc: Node number set to 2886997007 [ 333.177715][ T7692] loop7: detected capacity change from 0 to 16 [ 333.470855][ T7692] erofs: (device loop7): mounted with root inode @ nid 36. [ 333.972695][ T7692] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 334.004266][ T7702] loop5: detected capacity change from 0 to 16 [ 334.053723][ T7692] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 334.053751][ T7697] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 334.129402][ T7702] erofs: (device loop5): mounted with root inode @ nid 36. [ 334.204161][ T7697] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 334.289183][ T7692] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 334.312586][ T7702] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 334.369240][ T7692] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 334.596608][ T7702] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 337.009081][ T7743] loop5: detected capacity change from 0 to 1024 [ 337.512301][ T7754] tipc: Enabled bearer , priority 10 [ 338.899630][ T7772] netlink: 'syz.5.833': attribute type 10 has an invalid length. [ 339.021531][ T7772] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 339.066359][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 339.093729][ T7774] device bridge_slave_1 left promiscuous mode [ 339.129444][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.152424][ T7774] device bridge_slave_0 left promiscuous mode [ 339.158741][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.278631][ T7774] bond0: (slave bridge0): Releasing backup interface [ 342.364777][ T7823] loop7: detected capacity change from 0 to 512 [ 343.679416][ T7837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.945978][ T7823] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 344.328829][ T7848] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5704] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7848] [ 344.358188][ T7848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.385068][ T7823] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 344.422060][ T7841] tipc: Enabling of bearer rejected, failed to enable media [ 344.989425][ T7823] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.525691][ T7901] loop6: detected capacity change from 0 to 16 [ 349.664563][ T7901] erofs: (device loop6): mounted with root inode @ nid 36. [ 349.789323][ T7901] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 350.137908][ T7926] loop7: detected capacity change from 0 to 256 [ 350.305941][ T7901] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 350.461298][ T7926] tipc: Enabled bearer , priority 10 [ 350.749278][ T7911] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 350.809425][ T7911] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 351.499307][ T4264] tipc: Node number set to 3289851153 [ 352.519406][ T7953] device syzkaller0 entered promiscuous mode [ 352.691150][ T7958] tipc: Enabled bearer , priority 0 [ 352.829421][ T7953] tipc: Enabled bearer , priority 0 [ 353.041988][ T7963] device syzkaller0 entered promiscuous mode [ 353.399640][ T7958] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 353.460476][ T7951] tipc: Resetting bearer [ 353.541807][ T7951] tipc: Disabling bearer [ 353.589368][ T7968] tipc: Resetting bearer [ 353.868863][ T7973] syz.5.885 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 353.908597][ T7968] tipc: Disabling bearer [ 354.390191][ T7979] loop7: detected capacity change from 0 to 32768 [ 354.913406][ T7979] XFS (loop7): Mounting V5 Filesystem [ 355.317392][ T7979] XFS (loop7): Ending clean mount [ 355.339800][ T7979] XFS (loop7): Quotacheck needed: Please wait. [ 356.331827][ T7979] XFS (loop7): Quotacheck: Done. [ 357.294314][ T5940] XFS (loop7): Unmounting Filesystem [ 358.198838][ T8025] hub 8-0:1.0: USB hub found [ 358.358310][ T8025] hub 8-0:1.0: 1 port detected [ 359.188561][ T8035] tipc: Enabled bearer , priority 0 [ 359.282721][ T8034] tipc: Disabling bearer [ 361.584112][ T8065] Invalid ELF header magic: != ELF [ 364.667502][ T8093] loop5: detected capacity change from 0 to 16 [ 364.906358][ T8093] erofs: (device loop5): mounted with root inode @ nid 36. [ 365.144684][ T8105] tipc: Enabling of bearer rejected, failed to enable media [ 365.401137][ T8109] loop5: detected capacity change from 0 to 32768 [ 365.563004][ T8109] XFS (loop5): Mounting V5 Filesystem [ 366.317648][ T8109] XFS (loop5): Ending clean mount [ 366.325719][ T8109] XFS (loop5): Quotacheck needed: Please wait. [ 367.089852][ T8109] XFS (loop5): Quotacheck: Done. [ 368.026988][ T5674] XFS (loop5): Unmounting Filesystem [ 368.124524][ T8163] loop6: detected capacity change from 0 to 16 [ 369.294987][ T8163] erofs: (device loop6): mounted with root inode @ nid 36. [ 369.398222][ T8176] loop7: detected capacity change from 0 to 256 [ 369.453087][ T8176] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 370.671485][ T8179] tipc: Enabled bearer , priority 0 [ 370.721185][ T8178] tipc: Disabling bearer [ 372.729893][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.937'. [ 376.584993][ T8272] loop6: detected capacity change from 0 to 40427 [ 377.150261][ T8272] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 377.158564][ T8272] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 377.311845][ T8266] loop5: detected capacity change from 0 to 8192 [ 377.321233][ T8288] loop7: detected capacity change from 0 to 16 [ 377.331828][ T8288] erofs: (device loop7): mounted with root inode @ nid 36. [ 377.353005][ T8288] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 377.413373][ T8272] F2FS-fs (loop6): Found nat_bits in checkpoint [ 377.424326][ T8288] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 377.478101][ T26] audit: type=1326 audit(1785810833.024:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 377.504221][ T8272] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 377.511535][ T8272] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 377.675576][ T26] audit: type=1326 audit(1785810833.024:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 377.807493][ T26] audit: type=1326 audit(1785810833.114:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 378.559065][ T26] audit: type=1326 audit(1785810833.114:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2f82ccab code=0x7ffc0000 [ 378.586658][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.593090][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.743018][ T26] audit: type=1326 audit(1785810833.114:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2f82ccab code=0x7ffc0000 [ 378.969704][ T26] audit: type=1326 audit(1785810833.114:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2f82ccab code=0x7ffc0000 [ 379.026890][ T26] audit: type=1326 audit(1785810833.114:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2f82ccab code=0x7ffc0000 [ 379.391225][ T26] audit: type=1326 audit(1785810833.114:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 379.748693][ T4228] Bluetooth: hci4: command 0x0405 tx timeout [ 379.757078][ T26] audit: type=1326 audit(1785810833.114:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2f82ccab code=0x7ffc0000 [ 380.495659][ T26] audit: type=1326 audit(1785810833.114:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda2f82ccab code=0x7ffc0000 [ 383.078604][ T8346] device vlan0 entered promiscuous mode [ 385.092432][ T8372] overlayfs: failed to clone upperpath [ 386.018553][ T8393] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.837364][ T8400] loop5: detected capacity change from 0 to 16 [ 386.926653][ T8400] erofs: (device loop5): mounted with root inode @ nid 36. [ 386.972521][ T8400] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 387.185430][ T8400] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 387.522158][ T8410] loop5: detected capacity change from 0 to 16 [ 387.563869][ T8410] erofs: (device loop5): mounted with root inode @ nid 36. [ 387.634707][ T8410] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 387.655017][ T8410] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 387.694157][ T8415] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 387.743081][ T8415] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 387.777078][ T8410] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 387.787205][ T8410] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 387.800433][ T8419] overlayfs: failed to clone upperpath [ 391.507807][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.5.996'. [ 391.535890][ T8464] loop7: detected capacity change from 0 to 16 [ 391.549036][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.5.996'. [ 391.606150][ T8464] erofs: (device loop7): mounted with root inode @ nid 36. [ 391.642299][ T8465] device team0 entered promiscuous mode [ 391.672442][ T8465] device team_slave_0 entered promiscuous mode [ 391.705418][ T8464] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 391.707759][ T8465] device team_slave_1 entered promiscuous mode [ 391.805267][ T8474] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 391.815499][ T8464] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 391.838602][ T8465] device bond0 entered promiscuous mode [ 391.849144][ T8474] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 391.858841][ T8465] device bond_slave_0 entered promiscuous mode [ 391.875056][ T8465] device bond_slave_1 entered promiscuous mode [ 391.884625][ T8477] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 391.905792][ T8465] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 391.909915][ T8477] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 391.944660][ T8465] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 391.976808][ T8465] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 392.179397][ T8485] tc action pedit offset must be on 32 bit boundaries [ 392.334588][ T8490] loop5: detected capacity change from 0 to 16 [ 392.502567][ T8490] erofs: (device loop5): mounted with root inode @ nid 36. [ 393.149403][ T8490] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 393.182545][ T8490] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 393.207312][ T8492] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 393.265991][ T8492] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 393.337089][ T8490] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 393.401290][ T8490] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 394.271085][ T8500] bond0: (slave bond_slave_0): Releasing backup interface [ 394.309731][ T8500] device bond_slave_0 left promiscuous mode [ 394.337080][ T8500] bond0: (slave bond_slave_1): Releasing backup interface [ 394.391133][ T8500] device bond_slave_1 left promiscuous mode [ 394.417982][ T8500] device team_slave_0 left promiscuous mode [ 394.480472][ T8500] team0: Port device team_slave_0 removed [ 394.487003][ T8500] device team_slave_1 left promiscuous mode [ 394.524567][ T8500] team0: Port device team_slave_1 removed [ 394.534301][ T8500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.589784][ T8500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.878656][ T8512] ip6t_srh: unknown srh match flags FF3F [ 395.019846][ T8517] loop6: detected capacity change from 0 to 16 [ 395.102753][ T8517] erofs: (device loop6): mounted with root inode @ nid 36. [ 395.217611][ T8517] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 395.312536][ T8521] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 395.459359][ T8517] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 395.480592][ T8521] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 395.628025][ T8524] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 395.702519][ T8524] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 396.359652][ T8537] device ip6_vti0 left promiscuous mode [ 397.007561][ T8537] device bond3 left promiscuous mode [ 397.081208][ T8537] device bridge1 left promiscuous mode [ 397.086906][ T8537] device bridge2 left promiscuous mode [ 397.339526][ T8546] loop5: detected capacity change from 0 to 1024 [ 397.410485][ T8546] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 397.472608][ T8542] loop6: detected capacity change from 0 to 8192 [ 397.533597][ T8546] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 397.812173][ T8560] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 397.822473][ T8560] FAT-fs (loop6): Filesystem has been set read-only [ 398.348650][ T8569] netlink: 'syz.5.1010': attribute type 29 has an invalid length. [ 399.390908][ T8586] loop5: detected capacity change from 0 to 16 [ 399.463036][ T8586] erofs: (device loop5): mounted with root inode @ nid 36. [ 399.529667][ T8586] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 399.569458][ T8586] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 399.602069][ T8590] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 399.619075][ T8590] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 399.628400][ T8586] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 399.638389][ T8586] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 401.220485][ T8608] loop7: detected capacity change from 0 to 16 [ 401.308103][ T8608] erofs: (device loop7): mounted with root inode @ nid 36. [ 401.385269][ T8608] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 401.447734][ T8608] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 401.456091][ T8624] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 401.510483][ T8624] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 401.670530][ T8629] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 401.680204][ T8629] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 402.491002][ T8638] loop5: detected capacity change from 0 to 16 [ 402.555775][ T8640] loop7: detected capacity change from 0 to 128 [ 402.625336][ T8640] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 402.637613][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 402.670182][ T8638] erofs: (device loop5): mounted with root inode @ nid 36. [ 402.741596][ T8638] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 402.835510][ T8638] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 402.845231][ T8652] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 402.896646][ T8652] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 404.162823][ T8655] xt_CONNSECMARK: invalid mode: 254 [ 404.269878][ T8654] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 404.329725][ T8654] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 404.445605][ T8670] loop6: detected capacity change from 0 to 1024 [ 404.602363][ T8683] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 404.611273][ T8683] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 405.969526][ T8705] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 407.289754][ T8670] EXT4-fs: error -4 creating inode table initialization thread [ 407.298531][ T8670] EXT4-fs (loop6): mount failed [ 407.335110][ T8717] loop5: detected capacity change from 0 to 16 [ 407.751716][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1045'. [ 408.314264][ T8717] erofs: (device loop5): mounted with root inode @ nid 36. [ 408.913795][ T8717] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 409.120193][ T8717] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 409.128534][ T8739] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 409.999154][ T8739] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 410.055361][ T8743] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 410.104268][ T8743] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 410.147337][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 410.147354][ T26] audit: type=1326 audit(1785810865.694:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 410.464789][ T26] audit: type=1326 audit(1785810865.704:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 410.892992][ T8764] loop7: detected capacity change from 0 to 4096 [ 411.023900][ T8764] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 411.107162][ T26] audit: type=1326 audit(1785810865.704:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 411.163367][ T26] audit: type=1326 audit(1785810865.734:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 411.223676][ T8764] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 411.235154][ T8764] ntfs3: loop7: Failed to load $Extend. [ 411.256875][ T26] audit: type=1326 audit(1785810865.734:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 411.432675][ T26] audit: type=1326 audit(1785810865.734:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 412.669206][ T26] audit: type=1326 audit(1785810865.734:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 413.098058][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1062'. [ 413.113016][ T26] audit: type=1326 audit(1785810865.734:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 413.138714][ T26] audit: type=1326 audit(1785810865.734:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 413.167414][ T26] audit: type=1326 audit(1785810865.734:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8751 comm="syz.4.1053" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2f82d019 code=0x7ffc0000 [ 413.439566][ T8808] loop6: detected capacity change from 0 to 16 [ 413.573420][ T8808] erofs: (device loop6): mounted with root inode @ nid 36. [ 413.661577][ T8808] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 414.379329][ T8824] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 414.388886][ T8808] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 414.585206][ T8831] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1071'. [ 414.596778][ T8824] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 414.605753][ T8827] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 414.618128][ T8827] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 414.661276][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 416.702447][ T8856] loop7: detected capacity change from 0 to 16 [ 416.827208][ T8856] erofs: (device loop7): mounted with root inode @ nid 36. [ 416.889374][ T2239] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 417.169222][ T2239] usb 6-1: Using ep0 maxpacket: 16 [ 417.300529][ T2239] usb 6-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 417.431231][ T8856] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 417.501002][ T2239] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.691435][ T8856] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 417.742643][ T8862] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 417.786597][ T8862] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 417.846688][ T8870] loop5: detected capacity change from 0 to 16 [ 417.872330][ T8863] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 417.899169][ T2239] usb 6-1: string descriptor 0 read error: -71 [ 417.905476][ T2239] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.912569][ T8863] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 417.917814][ T2239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.125896][ T8870] erofs: (device loop5): mounted with root inode @ nid 36. [ 418.729253][ T2239] usb 6-1: can't set config #1, error -71 [ 418.774586][ T2239] usb 6-1: USB disconnect, device number 2 [ 418.829777][ T8870] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 418.901468][ T8877] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 418.911143][ T8870] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 418.928771][ T8877] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 419.320351][ T8881] loop7: detected capacity change from 0 to 16 [ 419.667410][ T8881] erofs: (device loop7): mounted with root inode @ nid 36. [ 420.032746][ T8881] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 420.059829][ T8881] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 421.536547][ T8914] trusted_key: encrypted_key: insufficient parameters specified [ 422.612375][ T8924] loop6: detected capacity change from 0 to 16 [ 422.674141][ T8924] erofs: (device loop6): mounted with root inode @ nid 36. [ 422.939905][ T8924] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 422.956639][ T8924] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 422.966092][ T8924] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 423.013109][ T8924] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 423.055718][ T8929] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 423.081656][ T8929] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 423.252815][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1097'. [ 424.403191][ T8956] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 425.808062][ T8980] loop5: detected capacity change from 0 to 16 [ 425.875368][ T8980] erofs: (device loop5): mounted with root inode @ nid 36. [ 426.943573][ T8980] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 426.965102][ T8980] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 426.981685][ T8980] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 427.087564][ T8990] tipc: Enabling of bearer rejected, already enabled [ 427.511305][ T8980] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 428.032221][ T9005] loop5: detected capacity change from 0 to 512 [ 428.329603][ T9005] EXT4-fs (loop5): Ignoring removed nobh option [ 428.503383][ T9005] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 428.636562][ T9005] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 429.691389][ T9005] EXT4-fs (loop5): 1 truncate cleaned up [ 429.697125][ T9005] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 429.755806][ T9023] loop7: detected capacity change from 0 to 512 [ 429.756536][ T9027] loop6: detected capacity change from 0 to 512 [ 430.633714][ T9027] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 430.650838][ T9027] UDF-fs: Scanning with blocksize 512 failed [ 430.688257][ T9023] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 430.791943][ T9027] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 430.823431][ T9023] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 430.867496][ T9027] UDF-fs: Scanning with blocksize 1024 failed [ 430.970138][ T9023] EXT4-fs (loop7): 1 truncate cleaned up [ 430.970664][ T9027] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 430.975852][ T9023] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 431.050244][ T9027] UDF-fs: Scanning with blocksize 2048 failed [ 431.087316][ T9027] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 431.164475][ T9027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 431.249885][ T9049] device wg0 entered promiscuous mode [ 432.021805][ T9049] team0: Refused to change device type [ 432.094705][ T9049] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 435.266981][ T9096] loop6: detected capacity change from 0 to 64 [ 436.121415][ T9114] No such timeout policy "syz1" [ 437.063513][ T9132] tipc: Enabled bearer , priority 0 [ 437.276346][ T9131] tipc: Disabling bearer [ 437.328286][ T9135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1144'. [ 437.341958][ T9135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1144'. [ 437.472538][ T9143] loop5: detected capacity change from 0 to 16 [ 437.641869][ T9143] erofs: (device loop5): mounted with root inode @ nid 36. [ 437.744677][ T9143] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 437.764342][ T9143] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 437.833746][ T9143] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 437.879682][ T9143] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 438.606094][ T9149] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 438.667712][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1140'. [ 438.678193][ T9149] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 439.776439][ T9163] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 439.844279][ T9168] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 439.891229][ T9163] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 440.119515][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.125863][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.137527][ T9163] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 440.152341][ T9163] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 440.667031][ T9168] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 440.733478][ T9163] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 440.846429][ T9168] file system registered [ 441.465926][ T9195] tipc: Enabled bearer , priority 0 [ 441.515418][ T9191] tipc: Disabling bearer [ 441.897970][ T9206] loop6: detected capacity change from 0 to 16 [ 442.135509][ T9206] erofs: (device loop6): mounted with root inode @ nid 36. [ 442.410478][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 442.573939][ T9209] device team_slave_0 left promiscuous mode [ 442.594436][ T9206] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 442.610654][ T9209] team0: Port device team_slave_0 removed [ 442.635692][ T9206] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 442.645138][ T9211] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 442.686886][ T9211] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 442.699183][ T9206] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 442.723962][ T9206] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 442.977384][ T9224] gadgetfs: bound to dummy_udc driver [ 444.285359][ T9244] tipc: Enabled bearer , priority 0 [ 444.321022][ T9243] tipc: Disabling bearer [ 444.801360][ T9259] capability: warning: `syz.6.1170' uses 32-bit capabilities (legacy support in use) [ 446.237782][ T9268] loop5: detected capacity change from 0 to 4096 [ 446.280752][ T9277] loop7: detected capacity change from 0 to 16 [ 446.340020][ T9268] EXT4-fs (loop5): Invalid log cluster size: 50331654 [ 446.348423][ T9277] erofs: (device loop7): mounted with root inode @ nid 36. [ 447.237349][ T9277] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 447.358484][ T9285] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 447.369283][ T9277] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 447.424233][ T9285] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 447.464212][ T9287] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 447.506336][ T9287] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 448.076207][ T9301] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1183'. [ 449.482327][ T9300] CIFS: Attempting to mount \\127.0.0.1\share [ 449.538675][ T9300] CIFS: VFS: Error connecting to socket. Aborting operation. [ 449.569470][ T9300] CIFS: VFS: cifs_mount failed w/return code = -4 [ 450.697537][ T9341] tipc: Enabling of bearer rejected, failed to enable media [ 451.145677][ T9349] ubi0: attaching mtd0 [ 451.163680][ T9349] ubi0: scanning is finished [ 451.168638][ T9349] ubi0: empty MTD device detected [ 451.617373][ T9349] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 451.637734][ T9353] loop6: detected capacity change from 0 to 16 [ 451.834046][ T9353] erofs: (device loop6): mounted with root inode @ nid 36. [ 452.274171][ T9353] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 452.310161][ T9353] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 452.334497][ T9370] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 452.547610][ T9370] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 452.598450][ T9353] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 452.646082][ T9353] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 460.340629][ T9483] loop7: detected capacity change from 0 to 16 [ 460.449503][ T9483] erofs: (device loop7): mounted with root inode @ nid 36. [ 461.506274][ T9483] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 461.549091][ T9483] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 461.557342][ T9489] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 461.557434][ T9489] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 461.576533][ T9489] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 461.764196][ T9489] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 464.162797][ T9520] loop6: detected capacity change from 0 to 16 [ 464.223232][ T9520] erofs: (device loop6): mounted with root inode @ nid 36. [ 464.569267][ T9520] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 464.600696][ T9520] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 464.617612][ T9533] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 464.664244][ T9533] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 464.839132][ T9520] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 464.859168][ T9520] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 466.026342][ T9547] loop5: detected capacity change from 0 to 32768 [ 466.691997][ T9562] loop7: detected capacity change from 0 to 16 [ 466.741825][ T9562] erofs: (device loop7): mounted with root inode @ nid 36. [ 466.789146][ T9547] XFS (loop5): Mounting V5 Filesystem [ 466.848002][ T9562] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 466.909535][ T9547] XFS (loop5): Ending clean mount [ 466.953529][ T9547] XFS (loop5): Quotacheck needed: Please wait. [ 467.024889][ T9547] XFS (loop5): Quotacheck: Done. [ 467.704264][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 467.704280][ T26] audit: type=1800 audit(1785810923.254:111): pid=9580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1231" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 467.746096][ T9562] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 467.754606][ T9574] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 467.783796][ T9574] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 467.797604][ T9578] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 467.950513][ T5674] XFS (loop5): Unmounting Filesystem [ 468.015139][ T9578] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 469.618216][ T9598] loop6: detected capacity change from 0 to 512 [ 469.746242][ T9598] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 469.767735][ T9598] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.404618][ T9626] loop7: detected capacity change from 0 to 128 [ 470.609788][ T9626] EXT4-fs (loop7): quotafile must be on filesystem root [ 470.711218][ T9628] loop5: detected capacity change from 0 to 32768 [ 471.933484][ T9651] futex_wake_op: syz.0.1252 tries to shift op by -1; fix this program [ 471.967788][ T9628] XFS (loop5): Mounting V5 Filesystem [ 471.999924][ T9659] loop7: detected capacity change from 0 to 16 [ 472.090693][ T9628] XFS (loop5): Ending clean mount [ 472.098292][ T9628] XFS (loop5): Quotacheck needed: Please wait. [ 472.197649][ T9659] erofs: (device loop7): mounted with root inode @ nid 36. [ 472.871591][ T9659] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 472.910121][ T9628] XFS (loop5): Quotacheck: Done. [ 473.045869][ T9659] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 473.070516][ T9669] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 473.115976][ T9669] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 473.155700][ T9668] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 473.189058][ T9668] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 473.591043][ T9678] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 473.640432][ T26] audit: type=1326 audit(1785810929.074:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 473.707239][ T26] audit: type=1326 audit(1785810929.074:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 473.712718][ T5674] XFS (loop5): Unmounting Filesystem [ 473.731520][ T26] audit: type=1326 audit(1785810929.074:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 473.731565][ T26] audit: type=1326 audit(1785810929.074:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 473.731604][ T26] audit: type=1326 audit(1785810929.074:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 473.932185][ T26] audit: type=1326 audit(1785810929.074:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 474.193242][ T26] audit: type=1326 audit(1785810929.074:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 474.331340][ T26] audit: type=1326 audit(1785810929.084:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 474.355996][ T26] audit: type=1326 audit(1785810929.084:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7152d33019 code=0x7ffc0000 [ 474.386101][ T26] audit: type=1326 audit(1785810929.084:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9672 comm="syz.6.1255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7152cf384e code=0x7ffc0000 [ 476.971386][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1266'. [ 478.867857][ T9756] futex_wake_op: syz.7.1270 tries to shift op by -1; fix this program [ 480.785977][ T9782] loop6: detected capacity change from 0 to 64 [ 481.067047][ T9782] attempt to access beyond end of device [ 481.067047][ T9782] loop6: rw=2049, want=164, limit=64 [ 481.079753][ T9782] Buffer I/O error on dev loop6, logical block 163, lost async page write [ 481.088845][ T9782] attempt to access beyond end of device [ 481.088845][ T9782] loop6: rw=2049, want=168, limit=64 [ 481.100102][ T9782] Buffer I/O error on dev loop6, logical block 167, lost async page write [ 481.109150][ T9782] attempt to access beyond end of device [ 481.109150][ T9782] loop6: rw=2049, want=170, limit=64 [ 481.120462][ T9782] Buffer I/O error on dev loop6, logical block 169, lost async page write [ 481.129799][ T9782] attempt to access beyond end of device [ 481.129799][ T9782] loop6: rw=2049, want=172, limit=64 [ 481.140948][ T9782] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 481.150136][ T9782] attempt to access beyond end of device [ 481.150136][ T9782] loop6: rw=2049, want=173, limit=64 [ 481.161303][ T9782] Buffer I/O error on dev loop6, logical block 172, lost async page write [ 481.170487][ T9782] attempt to access beyond end of device [ 481.170487][ T9782] loop6: rw=2049, want=174, limit=64 [ 481.468505][ T9782] Buffer I/O error on dev loop6, logical block 173, lost async page write [ 481.477492][ T9782] attempt to access beyond end of device [ 481.477492][ T9782] loop6: rw=2049, want=175, limit=64 [ 481.488899][ T9782] Buffer I/O error on dev loop6, logical block 174, lost async page write [ 481.498843][ T9782] attempt to access beyond end of device [ 481.498843][ T9782] loop6: rw=2049, want=176, limit=64 [ 481.510100][ T9782] Buffer I/O error on dev loop6, logical block 175, lost async page write [ 481.520119][ T9782] attempt to access beyond end of device [ 481.520119][ T9782] loop6: rw=2049, want=177, limit=64 [ 481.531080][ T9782] Buffer I/O error on dev loop6, logical block 176, lost async page write [ 481.541299][ T9782] attempt to access beyond end of device [ 481.541299][ T9782] loop6: rw=2049, want=178, limit=64 [ 481.552483][ T9782] Buffer I/O error on dev loop6, logical block 177, lost async page write [ 481.727119][ T9795] loop7: detected capacity change from 0 to 16 [ 481.798736][ T9795] erofs: (device loop7): mounted with root inode @ nid 36. [ 482.622169][ T9795] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 482.647362][ T9795] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 482.713315][ T9806] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 482.774315][ T9806] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 483.813018][ T9809] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 483.839165][ T9809] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 484.071938][ T9822] loop6: detected capacity change from 0 to 16 [ 484.147421][ T9822] erofs: (device loop6): mounted with root inode @ nid 36. [ 485.125904][ T9827] device wlan0 entered promiscuous mode [ 485.161536][ T9827] batman_adv: batadv0: Adding interface: wlan0 [ 485.321479][ T9827] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.351663][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.030151][ T9827] batman_adv: batadv0: Interface activated: wlan0 [ 486.334800][ T9863] loop6: detected capacity change from 0 to 64 [ 486.471300][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 486.471317][ T26] audit: type=1800 audit(1785810942.014:134): pid=9863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1292" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 486.497975][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.526487][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 486.541174][ T9860] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.550096][ T9860] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.558841][ T9860] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.567890][ T9860] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.577753][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 486.587638][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 486.866675][ T5704] hfs: node 4:3 still has 1 user(s)! [ 487.727263][ T9886] loop5: detected capacity change from 0 to 512 [ 488.017730][ T9886] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 488.076150][ T9886] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.677264][ T9898] loop6: detected capacity change from 0 to 128 [ 488.830434][ T9898] EXT4-fs (loop6): quotafile must be on filesystem root [ 488.999128][ T9898] loop6: detected capacity change from 0 to 64 [ 489.476643][ T9908] loop7: detected capacity change from 0 to 32768 [ 490.423304][ T9908] XFS (loop7): Mounting V5 Filesystem [ 490.520025][ T9908] XFS (loop7): Ending clean mount [ 490.530172][ T9908] XFS (loop7): Quotacheck needed: Please wait. [ 490.792246][ T9927] device syzkaller0 entered promiscuous mode [ 490.871103][ T9938] misc userio: Invalid payload size [ 490.881915][ T9938] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1302'. [ 491.043327][ T9908] XFS (loop7): Quotacheck: Done. [ 491.714057][ T26] audit: type=1800 audit(1785810946.914:135): pid=9941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1301" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4430 res=0 errno=0 [ 491.981740][ T5940] XFS (loop7): Unmounting Filesystem [ 492.245789][ T9944] loop6: detected capacity change from 0 to 32768 [ 492.753331][ T9944] XFS (loop6): Mounting V5 Filesystem [ 493.124974][ T9944] XFS (loop6): Ending clean mount [ 493.132883][ T9944] XFS (loop6): Quotacheck needed: Please wait. [ 493.539540][ T9944] XFS (loop6): Quotacheck: Done. [ 494.255188][ T26] audit: type=1800 audit(1785810949.554:136): pid=9970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1308" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0 [ 494.385021][ T5704] XFS (loop6): Unmounting Filesystem [ 496.250574][ T9993] loop7: detected capacity change from 0 to 16 [ 496.605628][ T9993] erofs: (device loop7): mounted with root inode @ nid 36. [ 496.791728][ T9993] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 496.827048][ T9993] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 496.850594][T10003] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 496.865503][T10003] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 496.895704][ T9993] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 496.910706][ T9993] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 496.935432][T10005] loop5: detected capacity change from 0 to 1024 [ 497.501581][T10005] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 497.672499][T10005] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.924001][T10013] loop7: detected capacity change from 0 to 32768 [ 498.547177][T10027] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.1325: lblock 0 mapped to illegal pblock 0 (length 6) [ 498.666883][T10027] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 498.679440][T10027] EXT4-fs (loop5): This should not happen!! Data will be lost [ 498.679440][T10027] [ 498.738215][T10013] XFS (loop7): Mounting V5 Filesystem [ 498.812626][ T4640] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:12: bg 0: block 112: padding at end of block bitmap is not set [ 498.890863][T10013] XFS (loop7): Ending clean mount [ 498.898718][T10013] XFS (loop7): Quotacheck needed: Please wait. [ 499.007743][ T4640] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 499.055983][ T4640] EXT4-fs (loop5): This should not happen!! Data will be lost [ 499.055983][ T4640] [ 499.104808][ T4640] EXT4-fs (loop5): Total free blocks count 0 [ 499.135237][ T4640] EXT4-fs (loop5): Free/Dirty block details [ 499.158546][ T4640] EXT4-fs (loop5): free_blocks=0 [ 499.179717][ T4640] EXT4-fs (loop5): dirty_blocks=48 [ 499.209889][ T4640] EXT4-fs (loop5): Block reservation details [ 499.286893][T10013] XFS (loop7): Quotacheck: Done. [ 500.151020][ T4640] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 500.419444][ T26] audit: type=1800 audit(1785810955.894:137): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1326" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4430 res=0 errno=0 [ 500.817702][ T5940] XFS (loop7): Unmounting Filesystem [ 501.962247][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.968598][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.045543][T10055] loop5: detected capacity change from 0 to 128 [ 502.124936][T10055] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 502.150481][ T9502] udevd[9502]: incorrect ext4 checksum on /dev/loop5 [ 503.744280][T10066] autofs4:pid:10066:autofs_fill_super: called with bogus options [ 503.779519][T10066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 503.795877][T10066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.804318][T10066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.138837][T10086] loop7: detected capacity change from 0 to 4096 [ 514.133076][T10164] ipt_REJECT: ECHOREPLY no longer supported. [ 514.152764][T10164] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.322565][T10170] loop6: detected capacity change from 0 to 4096 [ 516.573373][T10180] loop7: detected capacity change from 0 to 32768 [ 516.910198][T10180] XFS (loop7): Mounting V5 Filesystem [ 518.408474][T10180] XFS (loop7): Ending clean mount [ 518.744908][T10221] device syzkaller0 entered promiscuous mode [ 518.758062][T10221] tipc: Enabled bearer , priority 0 [ 518.810240][T10180] XFS (loop7): Quotacheck needed: Please wait. [ 518.824636][T10220] tipc: Resetting bearer [ 518.993930][T10180] XFS (loop7): Quotacheck: Done. [ 519.244030][T10220] tipc: Disabling bearer [ 519.599437][ T26] audit: type=1800 audit(1785810975.114:138): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1365" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4429 res=0 errno=0 [ 520.305932][ T5940] XFS (loop7): Unmounting Filesystem [ 520.764248][T10239] loop5: detected capacity change from 0 to 4096 [ 520.815983][T10243] loop6: detected capacity change from 0 to 4096 [ 521.862870][T10248] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 527.821693][T10301] device syzkaller0 entered promiscuous mode [ 531.154696][T10328] ipt_REJECT: ECHOREPLY no longer supported. [ 531.199746][T10328] IPv6: NLM_F_CREATE should be specified when creating new route [ 532.584060][T10340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 532.642042][T10340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 532.671738][T10340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 532.701658][T10340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 532.736943][T10340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 532.842735][T10340] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 532.866456][T10343] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 534.079656][T10352] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 535.346249][T10363] loop7: detected capacity change from 0 to 1024 [ 535.524919][T10363] EXT4-fs (loop7): Invalid want_extra_isize 7 [ 538.417726][T10388] device syzkaller0 entered promiscuous mode [ 538.523689][T10392] tipc: Enabled bearer , priority 0 [ 538.713545][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1420'. [ 539.120060][T10384] tipc: Resetting bearer [ 539.219148][T10384] tipc: Disabling bearer [ 543.125253][T10432] loop6: detected capacity change from 0 to 512 [ 543.190080][T10432] EXT4-fs (loop6): Ignoring removed nobh option [ 543.210431][T10432] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 543.261682][T10432] EXT4-fs (loop6): 1 truncate cleaned up [ 543.267419][T10432] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 544.406643][T10446] misc userio: Invalid payload size [ 544.419064][T10446] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1433'. [ 545.252309][T10453] device syzkaller0 entered promiscuous mode [ 545.496442][T10453] tipc: Enabled bearer , priority 0 [ 546.672486][T10451] tipc: Resetting bearer [ 546.769693][T10451] tipc: Disabling bearer [ 548.017254][T10479] loop6: detected capacity change from 0 to 4096 [ 548.477229][T10479] EXT4-fs (loop6): Invalid log cluster size: 50331654 [ 550.408712][T10500] loop7: detected capacity change from 0 to 1024 [ 552.008894][T10500] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 552.790816][T10500] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.660328][T10530] tipc: Enabling of bearer rejected, failed to enable media [ 554.386884][T10542] fuse: Bad value for 'fd' [ 554.642579][T10548] block device autoloading is deprecated and will be removed. [ 555.835877][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1460'. [ 556.130572][T10560] loop6: detected capacity change from 0 to 32768 [ 556.271100][T10560] XFS (loop6): Mounting V5 Filesystem [ 556.379705][T10560] XFS (loop6): Ending clean mount [ 556.388016][T10560] XFS (loop6): Quotacheck needed: Please wait. [ 556.503951][T10575] fuse: Bad value for 'fd' [ 556.929381][T10560] XFS (loop6): Quotacheck: Done. [ 558.150138][ T26] audit: type=1800 audit(1785811012.924:139): pid=10582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1461" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0 [ 558.438458][ T5704] XFS (loop6): Unmounting Filesystem [ 559.851842][T10601] loop7: detected capacity change from 0 to 4096 [ 559.934610][T10602] fuse: Bad value for 'fd' [ 559.992252][T10601] EXT4-fs (loop7): Invalid log cluster size: 50331654 [ 561.498362][T10611] device syzkaller0 entered promiscuous mode [ 561.512823][T10609] loop7: detected capacity change from 0 to 16 [ 561.525233][T10611] tipc: Enabled bearer , priority 0 [ 561.576849][T10609] erofs: (device loop7): mounted with root inode @ nid 36. [ 561.617063][T10609] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 561.630587][T10610] tipc: Resetting bearer [ 561.643257][T10609] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 561.672168][T10614] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 561.704001][T10610] tipc: Disabling bearer [ 561.765946][T10614] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 561.777356][T10609] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 561.790170][T10609] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 562.549386][T10621] loop7: detected capacity change from 0 to 512 [ 562.571326][T10621] EXT4-fs (loop7): Ignoring removed nobh option [ 562.589702][T10621] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 562.660259][T10621] EXT4-fs (loop7): 1 truncate cleaned up [ 562.681909][T10621] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 563.109600][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 563.476822][T10636] tmpfs: Bad value for 'mpol' [ 564.321000][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.327359][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.604716][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1478'. [ 564.665732][T10648] loop6: detected capacity change from 0 to 1024 [ 564.708680][T10648] EXT4-fs (loop6): test_dummy_encryption requires encrypt feature [ 564.945887][T10651] fuse: Bad value for 'fd' [ 566.436058][T10662] device syzkaller0 entered promiscuous mode [ 566.461001][T10662] tipc: Enabled bearer , priority 0 [ 566.475418][T10660] tipc: Resetting bearer [ 567.066316][T10660] tipc: Disabling bearer [ 568.942323][T10682] netlink: 'syz.5.1492': attribute type 29 has an invalid length. [ 568.971839][T10682] netlink: 'syz.5.1492': attribute type 29 has an invalid length. [ 569.190985][T10683] netlink: 'syz.5.1492': attribute type 29 has an invalid length. [ 572.489650][T10717] loop6: detected capacity change from 0 to 16 [ 572.548496][T10717] erofs: (device loop6): mounted with root inode @ nid 36. [ 572.594400][T10717] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 572.635191][T10717] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 572.655260][T10720] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 572.695575][T10720] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 572.714308][T10717] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 572.734524][T10717] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 572.755728][T10726] device syzkaller0 entered promiscuous mode [ 573.437598][T10730] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 574.194760][T10731] tipc: Enabled bearer , priority 0 [ 574.480650][T10719] tipc: Resetting bearer [ 574.529791][T10719] tipc: Disabling bearer [ 578.849844][T10793] loop6: detected capacity change from 0 to 16 [ 578.888255][T10793] erofs: (device loop6): mounted with root inode @ nid 36. [ 579.052717][T10793] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 579.741953][T10804] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 579.751523][T10793] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 579.826403][T10804] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 580.138510][T10818] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 582.755271][T10839] loop6: detected capacity change from 0 to 4096 [ 582.871444][T10846] tipc: Enabling of bearer rejected, failed to enable media [ 584.781043][T10870] loop5: detected capacity change from 0 to 16 [ 584.863129][T10862] loop6: detected capacity change from 0 to 4096 [ 584.886079][T10870] erofs: (device loop5): mounted with root inode @ nid 36. [ 585.226211][T10870] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 585.731936][T10870] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 585.979832][T10881] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 586.056325][T10881] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 586.102589][T10886] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 586.138389][T10886] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 586.535414][T10893] tipc: Enabling of bearer rejected, failed to enable media [ 588.507127][ T4881] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 588.643164][T10919] loop6: detected capacity change from 0 to 16 [ 588.694756][T10919] erofs: (device loop6): mounted with root inode @ nid 36. [ 590.606239][T10919] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 590.659667][ T4881] usb 6-1: device descriptor read/all, error -71 [ 591.592985][T10931] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 591.605666][T10919] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 591.628440][T10931] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 591.683650][T10943] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 591.822156][T10932] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 591.906607][T10932] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 593.497535][T10955] loop5: detected capacity change from 0 to 1024 [ 593.532115][T10954] tipc: Enabled bearer , priority 0 [ 593.543366][T10949] tipc: Disabling bearer [ 593.572846][T10955] EXT4-fs (loop5): Invalid want_extra_isize 7 [ 593.881499][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 594.300882][T10964] device team0 left promiscuous mode [ 594.306254][T10964] device team_slave_0 left promiscuous mode [ 594.412278][T10975] Mass Storage Function, version: 2009/09/11 [ 594.418591][T10975] LUN: removable file: (no medium) [ 594.436971][T10975] LUN: removable file: (no medium) [ 594.714151][T10964] device team_slave_1 left promiscuous mode [ 594.990189][T10964] bridge0: port 3(team0) entered disabled state [ 596.192430][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 596.899467][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 596.929099][T10964] device bridge_slave_0 left promiscuous mode [ 596.935373][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.948157][T10964] device bridge_slave_1 left promiscuous mode [ 596.963722][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.992110][T10964] bond0: (slave bond_slave_0): Releasing backup interface [ 597.025146][T10964] bond0: (slave bond_slave_1): Releasing backup interface [ 597.473634][T10998] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 599.297735][T10964] team0: Port device team_slave_0 removed [ 599.354930][T10964] team0: Port device team_slave_1 removed [ 599.370248][T10964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.378829][T10964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.391928][T10964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.403988][T10964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.580855][T10964] bond0: (slave netdevsim0): Releasing backup interface [ 600.636108][T10964] team0: Port device bridge1 removed [ 600.735915][T11010] tipc: Enabled bearer , priority 0 [ 600.914677][T11008] tipc: Disabling bearer [ 601.456194][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1575'. [ 601.651917][T11032] loop5: detected capacity change from 0 to 1024 [ 602.646421][T11032] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 603.189076][T11036] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 606.083256][T11062] loop5: detected capacity change from 0 to 256 [ 606.241405][T11062] FAT-fs (loop5): "posix" option is obsolete, not supported now [ 608.125297][T11080] tipc: Enabled bearer , priority 0 [ 608.846698][T11083] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 609.181299][T11079] tipc: Disabling bearer [ 609.720637][T11083] ±ÿ: renamed from team_slave_1 [ 610.653916][T11097] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 614.127080][T11121] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 619.614263][ T4230] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 620.475786][T11192] loop7: detected capacity change from 0 to 256 [ 621.211731][T11192] FAT-fs (loop7): "posix" option is obsolete, not supported now [ 621.329147][ T4230] usb 6-1: device descriptor read/all, error -71 [ 624.085193][T11215] loop7: detected capacity change from 0 to 512 [ 624.176689][T11215] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.1623: iget: bad i_size value: 38620345925642 [ 624.277673][T11215] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1623: couldn't read orphan inode 15 (err -117) [ 624.311845][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.324089][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.502620][T11215] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 624.779833][T11215] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1623: bg 0: block 5: invalid block bitmap [ 624.935381][T11215] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 256 with error 28 [ 624.956942][T11215] EXT4-fs (loop7): This should not happen!! Data will be lost [ 624.956942][T11215] [ 625.167719][T11215] EXT4-fs (loop7): Total free blocks count 0 [ 625.177552][T11215] EXT4-fs (loop7): Free/Dirty block details [ 625.184733][T11215] EXT4-fs (loop7): free_blocks=0 [ 625.584288][T11215] EXT4-fs (loop7): dirty_blocks=260 [ 625.593911][T11215] EXT4-fs (loop7): Block reservation details [ 625.600407][T11215] EXT4-fs (loop7): i_reserved_data_blocks=260 [ 630.802792][T11265] loop5: detected capacity change from 0 to 16 [ 631.135177][T11265] erofs: (device loop5): mounted with root inode @ nid 36. [ 631.667967][T11265] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 633.909948][T11265] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 633.918941][T11273] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 633.954708][T11273] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 634.214755][T11280] loop7: detected capacity change from 0 to 1024 [ 642.120272][T11326] loop6: detected capacity change from 0 to 512 [ 642.800681][T11332] loop7: detected capacity change from 0 to 16 [ 642.829650][T11327] batman_adv: batadv0: Adding interface: macvtap1 [ 642.849036][T11332] erofs: (device loop7): mounted with root inode @ nid 36. [ 642.870413][T11327] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.909777][T11326] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 642.948931][T11326] EXT4-fs (loop6): Ignoring removed orlov option [ 642.976559][T11332] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 642.986574][T11326] EXT4-fs (loop6): DAX unsupported by block device. [ 643.021849][T11332] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 643.030617][T11339] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 643.067532][T11339] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 643.107994][T11327] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 643.154028][T11342] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 643.163603][T11342] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 643.386649][T11329] batman_adv: batadv0: Removing interface: macvtap1 [ 647.444478][T11386] loop7: detected capacity change from 0 to 2048 [ 649.289654][T11392] Device name cannot be null; rc = [-22] [ 649.326461][T11392] overlayfs: overlapping lowerdir path [ 649.384601][T11398] overlayfs: overlapping lowerdir path [ 653.085387][T11427] loop5: detected capacity change from 0 to 16 [ 653.135866][T11427] erofs: (device loop5): mounted with root inode @ nid 36. [ 653.176626][T11427] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 653.336163][T11427] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 653.345780][T11431] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 654.689559][T11431] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 654.697925][T11433] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 654.708258][T11433] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 664.124690][T11529] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 664.894426][T11521] loop5: detected capacity change from 0 to 4096 [ 666.529007][T11543] Invalid ELF header magic: != ELF [ 672.115671][T11584] fuse: Unknown parameter '0x0000000000000004' [ 672.340806][T11585] loop5: detected capacity change from 0 to 256 [ 672.397654][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 672.410254][ T4195] CPU: 0 PID: 4195 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 672.417867][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.427961][ T4195] Workqueue: hci2 hci_rx_work [ 672.432904][ T4195] Call Trace: [ 672.436209][ T4195] [ 672.439165][ T4195] dump_stack_lvl+0x188/0x250 [ 672.443932][ T4195] ? show_regs_print_info+0x20/0x20 [ 672.449189][ T4195] ? load_image+0x410/0x410 [ 672.453820][ T4195] sysfs_create_dir_ns+0x26a/0x290 [ 672.459084][ T4195] ? sysfs_warn_dup+0xa0/0xa0 [ 672.463809][ T4195] ? kthread+0x42e/0x520 [ 672.468169][ T4195] ? do_raw_spin_unlock+0x11d/0x230 [ 672.473480][ T4195] kobject_add_internal+0x5ba/0xcd0 [ 672.478800][ T4195] kobject_add+0x160/0x230 [ 672.483271][ T4195] ? kobject_init+0x1c0/0x1c0 [ 672.487997][ T4195] ? __raw_spin_lock_init+0x41/0x100 [ 672.493317][ T4195] ? klist_children_get+0x50/0x50 [ 672.498468][ T4195] ? get_device_parent+0x121/0x3e0 [ 672.503619][ T4195] device_add+0x470/0x1050 [ 672.508080][ T4195] ? device_initialize+0x2a5/0x4d0 [ 672.513228][ T4195] hci_conn_add_sysfs+0xd1/0x1e0 [ 672.518323][ T4195] le_conn_complete_evt+0xc2e/0x14d0 [ 672.523667][ T4195] ? cs_le_create_conn+0x5e0/0x5e0 [ 672.528821][ T4195] ? __mutex_trylock_common+0x15c/0x260 [ 672.534531][ T4195] hci_le_meta_evt+0x285/0x3ca0 [ 672.539428][ T4195] ? mark_lock+0x94/0x320 [ 672.543789][ T4195] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 672.549824][ T4195] ? lock_chain_count+0x20/0x20 [ 672.554723][ T4195] ? hci_remote_host_features_evt+0x240/0x240 [ 672.560833][ T4195] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 672.567199][ T4195] ? lockdep_hardirqs_on+0x94/0x140 [ 672.572454][ T4195] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 672.578652][ T4195] ? hci_event_packet+0x5b7/0x1310 [ 672.583805][ T4195] hci_event_packet+0xe0b/0x1310 [ 672.588783][ T4195] ? _raw_spin_unlock+0x40/0x40 [ 672.593763][ T4195] ? rcu_lock_release+0x20/0x20 [ 672.598667][ T4195] ? hci_send_to_monitor+0x9c/0x4a0 [ 672.603898][ T4195] hci_rx_work+0x255/0xa10 [ 672.608359][ T4195] process_one_work+0x867/0xff0 [ 672.613347][ T4195] ? worker_detach_from_pool+0x240/0x240 [ 672.619018][ T4195] ? lockdep_hardirqs_off+0x70/0x100 [ 672.624367][ T4195] ? _raw_spin_lock_irq+0xb7/0xf0 [ 672.629438][ T4195] ? _raw_spin_lock_irqsave+0x100/0x100 [ 672.635026][ T4195] ? wq_worker_running+0x97/0x170 [ 672.640086][ T4195] worker_thread+0xad7/0x12a0 [ 672.644839][ T4195] kthread+0x42e/0x520 [ 672.648937][ T4195] ? rcu_lock_release+0x20/0x20 [ 672.653815][ T4195] ? kthread_blkcg+0xd0/0xd0 [ 672.658437][ T4195] ret_from_fork+0x1f/0x30 [ 672.662942][ T4195] [ 673.428096][ T4195] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 673.441812][ T4195] Bluetooth: hci2: failed to register connection device [ 673.473223][T11593] netlink: 'syz.6.1718': attribute type 2 has an invalid length. [ 673.511991][T11585] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 673.554440][ T26] audit: type=1800 audit(1785811129.094:140): pid=11585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1716" name="file1" dev="loop5" ino=1048652 res=0 errno=0 [ 673.576317][T11585] handle_bad_sector: 7 callbacks suppressed [ 673.576340][T11585] attempt to access beyond end of device [ 673.576340][T11585] loop5: rw=16777216, want=2623, limit=256 [ 673.634932][T11585] attempt to access beyond end of device [ 673.634932][T11585] loop5: rw=16777216, want=4687, limit=256 [ 673.732557][T11585] attempt to access beyond end of device [ 673.732557][T11585] loop5: rw=16777216, want=4791, limit=256 [ 676.034747][T11619] MTRR 1 not used [ 677.358422][T11632] loop5: detected capacity change from 0 to 256 [ 677.595485][T11632] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 678.129299][T11632] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 678.200158][T11632] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 680.088397][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.174142][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 680.185846][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.194436][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 680.450856][T11642] overlayfs: failed to clone upperpath [ 681.643216][T11662] tmpfs: Unknown parameter 'nr_blhcks' [ 681.873004][T11666] loop7: detected capacity change from 0 to 32768 [ 682.673477][T11666] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 683.371556][T11676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.451236][T11676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.351551][T11684] loop6: detected capacity change from 0 to 256 [ 685.168182][ T26] audit: type=1800 audit(1785811140.504:141): pid=11688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1741" name="file1" dev="loop7" ino=17059 res=0 errno=0 [ 685.555938][T11666] syz.7.1741 (11666) used greatest stack depth: 18304 bytes left [ 685.668425][T11684] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 685.689456][ T26] audit: type=1800 audit(1785811141.244:142): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1742" name="file1" dev="loop6" ino=1048656 res=0 errno=0 [ 685.713724][T11684] attempt to access beyond end of device [ 685.713724][T11684] loop6: rw=16777216, want=4495, limit=256 [ 685.732255][T11684] attempt to access beyond end of device [ 685.732255][T11684] loop6: rw=16777216, want=9159, limit=256 [ 685.760339][T11684] attempt to access beyond end of device [ 685.760339][T11684] loop6: rw=16777216, want=13111, limit=256 [ 685.773304][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.779909][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.794437][T11684] attempt to access beyond end of device [ 685.794437][T11684] loop6: rw=16777216, want=16583, limit=256 [ 685.971435][T11684] attempt to access beyond end of device [ 685.971435][T11684] loop6: rw=16777216, want=17407, limit=256 [ 686.037428][ T5940] ocfs2: Unmounting device (7,7) on (node local) [ 686.169375][T11698] loop5: detected capacity change from 0 to 1024 [ 687.373325][T11708] 9pnet_virtio: no channels available for device syz [ 688.509014][ T26] audit: type=1800 audit(1785811143.004:143): pid=11708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1749" name="file0" dev="loop5" ino=18 res=0 errno=0 [ 691.253534][T11722] loop6: detected capacity change from 0 to 4096 [ 694.321125][T11743] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 696.610467][T11766] loop7: detected capacity change from 0 to 256 [ 696.655065][T11766] exfat: Deprecated parameter 'utf8' [ 696.660981][T11766] exfat: Deprecated parameter 'utf8' [ 696.724994][T11766] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf5acca1d, utbl_chksum : 0xe619d30d) [ 698.289095][T11774] netlink: 'syz.6.1765': attribute type 5 has an invalid length. [ 698.387163][T11774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 698.396138][T11774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 699.050379][T11774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.345537][T11781] ip6t_srh: unknown srh match flags FF3F [ 703.464370][T11809] loop6: detected capacity change from 0 to 16 [ 703.651780][T11809] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 703.721102][T11815] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 705.106851][T11829] netlink: 'syz.7.1781': attribute type 5 has an invalid length. [ 705.252526][T11829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 705.263034][T11829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 705.379722][T11829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 706.270861][T11839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 718.195129][T11953] ip6t_srh: unknown srh match flags FF3F [ 726.418951][ T4230] Bluetooth: hci4: command 0x0405 tx timeout [ 727.254229][T12056] loop6: detected capacity change from 0 to 512 [ 727.457890][T12056] EXT4-fs (loop6): Ignoring removed nobh option [ 727.505618][T12056] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 727.802278][T12056] EXT4-fs (loop6): 1 truncate cleaned up [ 727.810111][T12056] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 728.780318][T12077] loop5: detected capacity change from 0 to 4096 [ 735.287551][T12133] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 735.655744][T12138] device syzkaller0 entered promiscuous mode [ 736.463439][T12133] cramfs: wrong magic [ 736.515130][T12145] mmap: syz.4.1862 (12145) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 740.490504][T12161] loop6: detected capacity change from 0 to 16 [ 740.538076][T12161] erofs: (device loop6): mounted with root inode @ nid 36. [ 740.549616][T12163] loop5: detected capacity change from 0 to 512 [ 740.614192][T12163] EXT4-fs (loop5): Ignoring removed bh option [ 740.658427][T12163] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1867: corrupted in-inode xattr [ 740.680718][T12163] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1867: couldn't read orphan inode 15 (err -117) [ 740.698214][T12163] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 741.057241][T12161] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 741.070791][T12161] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 741.081582][T12161] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 741.092006][T12161] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 741.101108][T12161] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 741.651108][T12161] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 741.984469][T12191] overlayfs: conflicting lowerdir path [ 742.558510][T12204] loop7: detected capacity change from 0 to 1024 [ 742.995949][T12215] 9pnet_virtio: no channels available for device syz [ 743.448008][ T26] audit: type=1800 audit(1785811198.634:144): pid=12215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1877" name="file0" dev="loop7" ino=18 res=0 errno=0 [ 743.924396][T12224] loop7: detected capacity change from 0 to 512 [ 743.944863][T12224] EXT4-fs (loop7): Ignoring removed bh option [ 744.842135][T12232] loop5: detected capacity change from 0 to 16 [ 744.902778][T12224] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.1881: corrupted in-inode xattr [ 744.935694][T12224] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1881: couldn't read orphan inode 15 (err -117) [ 744.948642][T12224] EXT4-fs (loop7): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 745.067130][T12237] loop6: detected capacity change from 0 to 512 [ 745.151411][T12232] erofs: (device loop5): mounted with root inode @ nid 36. [ 745.194298][T12232] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 745.230508][T12232] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 745.253061][T12237] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 745.271891][T12237] EXT4-fs (loop6): Unrecognized mount option "fscontext=system_u" or missing value [ 745.303594][T12232] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 745.344312][T12232] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 745.383481][T12239] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 745.393104][T12239] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 746.206178][T12245] [ 746.208575][T12245] ====================================================== [ 746.215609][T12245] WARNING: possible circular locking dependency detected [ 746.222635][T12245] syzkaller #0 Not tainted [ 746.227039][T12245] ------------------------------------------------------ [ 746.234050][T12245] syz.5.1886/12245 is trying to acquire lock: [ 746.240109][T12245] ffff888145f8aee0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 746.251598][T12245] [ 746.251598][T12245] but task is already holding lock: [ 746.258964][T12245] ffff8880610f4d20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 746.268098][T12245] [ 746.268098][T12245] which lock already depends on the new lock. [ 746.268098][T12245] [ 746.278497][T12245] [ 746.278497][T12245] the existing dependency chain (in reverse order) is: [ 746.287533][T12245] [ 746.287533][T12245] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 746.295180][T12245] __mutex_lock_common+0x1e5/0x2400 [ 746.300981][T12245] mutex_lock_nested+0x17/0x20 [ 746.306271][T12245] tcm_set_name+0x26/0x90 [ 746.311139][T12245] function_make+0x195/0x350 [ 746.316318][T12245] configfs_mkdir+0x511/0x9e0 [ 746.321516][T12245] vfs_mkdir+0x386/0x570 [ 746.326299][T12245] do_mkdirat+0x1dd/0x5c0 [ 746.331151][T12245] __x64_sys_mkdir+0x6a/0x80 [ 746.336276][T12245] do_syscall_64+0x4c/0xa0 [ 746.341212][T12245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.347629][T12245] [ 746.347629][T12245] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 746.355878][T12245] __mutex_lock_common+0x1e5/0x2400 [ 746.361598][T12245] mutex_lock_nested+0x17/0x20 [ 746.366881][T12245] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 746.373623][T12245] configfs_symlink+0x5a4/0x13b0 [ 746.379105][T12245] vfs_symlink+0x245/0x3d0 [ 746.384047][T12245] do_symlinkat+0x1ab/0x6b0 [ 746.389075][T12245] __x64_sys_symlink+0x7a/0x90 [ 746.394364][T12245] do_syscall_64+0x4c/0xa0 [ 746.399305][T12245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.405736][T12245] [ 746.405736][T12245] -> #0 (&sb->s_type->i_mutex_key#26){++++}-{3:3}: [ 746.414428][T12245] __lock_acquire+0x2c66/0x7b50 [ 746.419831][T12245] lock_acquire+0x19e/0x400 [ 746.424864][T12245] down_write+0x38/0x60 [ 746.429543][T12245] configfs_depend_item_unlocked+0x14f/0x430 [ 746.436043][T12245] usbg_make_tpg+0x1f3/0x580 [ 746.441156][T12245] target_fabric_make_tpg+0xa0/0x6d0 [ 746.447041][T12245] configfs_mkdir+0x511/0x9e0 [ 746.452247][T12245] vfs_mkdir+0x386/0x570 [ 746.457038][T12245] do_mkdirat+0x1dd/0x5c0 [ 746.461885][T12245] __x64_sys_mkdir+0x6a/0x80 [ 746.467013][T12245] do_syscall_64+0x4c/0xa0 [ 746.471971][T12245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.478413][T12245] [ 746.478413][T12245] other info that might help us debug this: [ 746.478413][T12245] [ 746.488637][T12245] Chain exists of: [ 746.488637][T12245] &sb->s_type->i_mutex_key#26 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 746.488637][T12245] [ 746.503326][T12245] Possible unsafe locking scenario: [ 746.503326][T12245] [ 746.510781][T12245] CPU0 CPU1 [ 746.516144][T12245] ---- ---- [ 746.521502][T12245] lock(&opts->dep_lock); [ 746.526006][T12245] lock(gadget_subsys.su_mutex); [ 746.533547][T12245] lock(&opts->dep_lock); [ 746.540479][T12245] lock(&sb->s_type->i_mutex_key#26); [ 746.545943][T12245] [ 746.545943][T12245] *** DEADLOCK *** [ 746.545943][T12245] [ 746.554078][T12245] 5 locks held by syz.5.1886/12245: [ 746.559272][T12245] #0: ffff888146512460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 746.568578][T12245] #1: ffff888077785080 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 746.579378][T12245] #2: ffffffff8cc23e70 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 746.589142][T12245] #3: ffffffff8cf21328 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 746.598870][T12245] #4: ffff8880610f4d20 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 746.608392][T12245] [ 746.608392][T12245] stack backtrace: [ 746.614277][T12245] CPU: 1 PID: 12245 Comm: syz.5.1886 Not tainted syzkaller #0 [ 746.621756][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.631823][T12245] Call Trace: [ 746.635107][T12245] [ 746.638058][T12245] dump_stack_lvl+0x188/0x250 [ 746.642752][T12245] ? load_image+0x410/0x410 [ 746.647272][T12245] ? show_regs_print_info+0x20/0x20 [ 746.652510][T12245] ? print_circular_bug+0x12b/0x1a0 [ 746.657734][T12245] check_noncircular+0x296/0x330 [ 746.662856][T12245] ? add_chain_block+0x9b0/0x9b0 [ 746.667791][T12245] ? lockdep_lock+0xf1/0x1f0 [ 746.672408][T12245] ? mark_lock+0x94/0x320 [ 746.676740][T12245] ? mark_lock+0x94/0x320 [ 746.681070][T12245] ? _find_first_zero_bit+0xd1/0xf0 [ 746.686347][T12245] __lock_acquire+0x2c66/0x7b50 [ 746.691225][T12245] ? verify_lock_unused+0x140/0x140 [ 746.696455][T12245] ? __mutex_trylock_common+0x15c/0x260 [ 746.702017][T12245] ? rcu_lock_release+0x20/0x20 [ 746.706874][T12245] lock_acquire+0x19e/0x400 [ 746.711381][T12245] ? configfs_depend_item_unlocked+0x14f/0x430 [ 746.717540][T12245] ? __might_sleep+0xf0/0xf0 [ 746.722186][T12245] ? __kasan_kmalloc+0xc6/0xe0 [ 746.727018][T12245] ? read_lock_is_recursive+0x10/0x10 [ 746.732414][T12245] ? mutex_lock_io_nested+0x60/0x60 [ 746.737644][T12245] down_write+0x38/0x60 [ 746.741811][T12245] ? configfs_depend_item_unlocked+0x14f/0x430 [ 746.747980][T12245] configfs_depend_item_unlocked+0x14f/0x430 [ 746.753971][T12245] usbg_make_tpg+0x1f3/0x580 [ 746.758571][T12245] ? mutex_lock_io_nested+0x60/0x60 [ 746.763776][T12245] ? usbg_drop_tport+0x20/0x20 [ 746.768547][T12245] ? vscnprintf+0x80/0x80 [ 746.772884][T12245] target_fabric_make_tpg+0xa0/0x6d0 [ 746.778182][T12245] ? target_fabric_release_wwn+0xa0/0xa0 [ 746.783824][T12245] configfs_mkdir+0x511/0x9e0 [ 746.788522][T12245] vfs_mkdir+0x386/0x570 [ 746.792775][T12245] do_mkdirat+0x1dd/0x5c0 [ 746.797120][T12245] ? vfs_mkdir+0x570/0x570 [ 746.801871][T12245] ? getname_flags+0x1f9/0x4f0 [ 746.806672][T12245] __x64_sys_mkdir+0x6a/0x80 [ 746.811268][T12245] do_syscall_64+0x4c/0xa0 [ 746.815688][T12245] ? clear_bhb_loop+0x30/0x80 [ 746.820371][T12245] ? clear_bhb_loop+0x30/0x80 [ 746.825052][T12245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.830960][T12245] RIP: 0033:0x7f8f0e63a019 [ 746.835390][T12245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.854995][T12245] RSP: 002b:00007f8f0c892028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 746.863466][T12245] RAX: ffffffffffffffda RBX: 00007f8f0e8c1fa0 RCX: 00007f8f0e63a019 [ 746.871442][T12245] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 746.879441][T12245] RBP: 00007f8f0e6d100c R08: 0000000000000000 R09: 0000000000000000 [ 746.887419][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.895391][T12245] R13: 00007f8f0e8c2038 R14: 00007f8f0e8c1fa0 R15: 00007ffd79b2a4d8 [ 746.903370][T12245] [ 747.133406][T12255] loop7: detected capacity change from 0 to 512 [ 747.195009][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.202004][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.295675][T12255] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 748.022121][T12245] Rounding down aligned max_sectors from 4294967295 to 4294967288