last executing test programs: 4m10.040824654s ago: executing program 4 (id=694): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x1391, 0x46080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x1000) 4m9.50391457s ago: executing program 4 (id=695): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac14141d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000600)=""/46, &(0x7f0000000480)=0x2e) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m3.43540747s ago: executing program 4 (id=703): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r1, 0xcd2e8000) r5 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000fc0)=""/211, 0xd3) syz_emit_ethernet(0x22, &(0x7f0000001a00)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x64, 0x0, 0x2, 0x2b, 0x0, @multicast2, @empty}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xfffd, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 4m2.995343571s ago: executing program 4 (id=704): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x10028, &(0x7f0000000100), 0x1, 0x794, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, 0x0, 0x40441, 0x192) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$eJzs3M1vG0UbAPBnN7HbvO3bhFK+Wj4CBVEhSPoF9MABEEgcioQEBzhaSahK3YKaINEqEimHckIIiTviyL/ACS4IcQGJK9yrShXqhZaT0dq7iZ1s7Ka1Y8C/n+T2md21Zx7PjjO7EyeAkTWd/ZNE7I6I3yJislXsPGC69d+N68tzN68vzyXRaLz5R9I87s/ry3PFocXzdrUXIokDJfUuXrh4plavL5zPy7NLZz+YXbxw8ZnTZ6v5phPHjx15/rmjz/Ylz12R5tFr73zx+snPOvJfl0efTHfb+USj0efqhuv/bfH4ENvB1ozl/VVpjv/JGGvrvcl49ZPVwsdDaiAwMI1Go7Fr890rDeA/LInOsiEPo6L4QV9c/5ZdB784sNnH8F17qXUBlOV9I3+09oyv3jGorLu+7afpiHh75a+vskcM5j4EAECH77L5z9PZbGd5Lpt7rM0/0ri37bg9+drQVETcFRF7I+LuOBf7IuKeiOax90XE/Vuou9q5SNKcZm6c/6RX7yjBHrL53wv52lbn/K+Y/cXUWLN0oVWISvLu6frC4fw9ORSVHVn5SJc6vn/l188329c+/8seWf3FXDBvx9XxHZ3Pma8t1W4/407XLkXsHy/LP1ldCUgi4oGI2F/2AmnvOk4/9c2Dm+2bnumVfxd9WGhqfB3xZKv/V2Jd/oWkc32ydmrh1MK5oyeK9cnZnVFfODxbnBUb/fTL5TfKtqe31P+DlfX//0rP/9X8p5L29drFrddx+fdPN72mma7kwRbO/5XaUq2avNWMi8Xij2pLS+ePRFSTk61Gt28/uvbcolwcn+V/6GD5+N8ba+/EgYjITuKHIuLhiHgk77tHI+KxiDjYJf8fX378vfXbJor8u/d/tcvL9kWW//yW+n8tqEbnlrTkmCwYO/PDtx2VTq2Fef43u3/+HW9Gh/Itt/L5t7EV5cGdvn8AAADwb5BGxO5I0pnVOE1nZlq/w7+vtfSd+fDcfOs7AlNRSYs7XZNt90OL3xFolS9FRKOtXF84FmnzvvGXYxPN8szc+/X5oWUNRP5dnbLxn7kyNuzWAQPnC1swuox/GF1dx39l+9oBbL8N47/rmN8x0LYA26vk5//EMNoBbL+y+b+/9wOjYd34t+wHI8T9fxhdxj+MLuMfRtLiRPT+knzXoHil23x6r2Ay4k5beGZn2a6fS/+mQf+CqAzqlf8ZQaQDr6I62FNrYEGStXlP9D74ytCbunkwvM8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfvo7AAD//1yDywo=") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 4m2.906440515s ago: executing program 2 (id=707): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="018000000000000066646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 4m2.842340648s ago: executing program 2 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 4m2.678754976s ago: executing program 2 (id=712): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/dev/ram0,65536\n', 0x10) close(r0) 4m2.329768393s ago: executing program 2 (id=713): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x10028, &(0x7f0000000100), 0x1, 0x794, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, 0x0, 0x40441, 0x192) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$eJzs3M1vG0UbAPBnN7HbvO3bhFK+Wj4CBVEhSPoF9MABEEgcioQEBzhaSahK3YKaINEqEimHckIIiTviyL/ACS4IcQGJK9yrShXqhZaT0dq7iZ1s7Ka1Y8C/n+T2md21Zx7PjjO7EyeAkTWd/ZNE7I6I3yJislXsPGC69d+N68tzN68vzyXRaLz5R9I87s/ry3PFocXzdrUXIokDJfUuXrh4plavL5zPy7NLZz+YXbxw8ZnTZ6v5phPHjx15/rmjz/Ylz12R5tFr73zx+snPOvJfl0efTHfb+USj0efqhuv/bfH4ENvB1ozl/VVpjv/JGGvrvcl49ZPVwsdDaiAwMI1Go7Fr890rDeA/LInOsiEPo6L4QV9c/5ZdB784sNnH8F17qXUBlOV9I3+09oyv3jGorLu+7afpiHh75a+vskcM5j4EAECH77L5z9PZbGd5Lpt7rM0/0ri37bg9+drQVETcFRF7I+LuOBf7IuKeiOax90XE/Vuou9q5SNKcZm6c/6RX7yjBHrL53wv52lbn/K+Y/cXUWLN0oVWISvLu6frC4fw9ORSVHVn5SJc6vn/l188329c+/8seWf3FXDBvx9XxHZ3Pma8t1W4/407XLkXsHy/LP1ldCUgi4oGI2F/2AmnvOk4/9c2Dm+2bnumVfxd9WGhqfB3xZKv/V2Jd/oWkc32ydmrh1MK5oyeK9cnZnVFfODxbnBUb/fTL5TfKtqe31P+DlfX//0rP/9X8p5L29drFrddx+fdPN72mma7kwRbO/5XaUq2avNWMi8Xij2pLS+ePRFSTk61Gt28/uvbcolwcn+V/6GD5+N8ba+/EgYjITuKHIuLhiHgk77tHI+KxiDjYJf8fX378vfXbJor8u/d/tcvL9kWW//yW+n8tqEbnlrTkmCwYO/PDtx2VTq2Fef43u3/+HW9Gh/Itt/L5t7EV5cGdvn8AAADwb5BGxO5I0pnVOE1nZlq/w7+vtfSd+fDcfOs7AlNRSYs7XZNt90OL3xFolS9FRKOtXF84FmnzvvGXYxPN8szc+/X5oWUNRP5dnbLxn7kyNuzWAQPnC1swuox/GF1dx39l+9oBbL8N47/rmN8x0LYA26vk5//EMNoBbL+y+b+/9wOjYd34t+wHI8T9fxhdxj+MLuMfRtLiRPT+knzXoHil23x6r2Ay4k5beGZn2a6fS/+mQf+CqAzqlf8ZQaQDr6I62FNrYEGStXlP9D74ytCbunkwvM8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfvo7AAD//1yDywo=") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 4m1.536538561s ago: executing program 4 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x2, r1, 0x2007) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r4, 0x4, 0x6800) 3m59.777465015s ago: executing program 2 (id=718): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x1391, 0x46080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x1000) 3m58.238604989s ago: executing program 4 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 3m56.984623399s ago: executing program 32 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 3m56.74184525s ago: executing program 2 (id=725): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0xf5, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3m56.348595439s ago: executing program 33 (id=725): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0xf5, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15.891753364s ago: executing program 6 (id=1356): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.517582149s ago: executing program 6 (id=1360): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@errors_remount}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@quota}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 14.433975783s ago: executing program 1 (id=1361): symlink(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB="72f81ab6b02c9f0000000700994daf250499c1bc4471bd323fa573fb3f33e7a400"], 0x1, 0x28c, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000002740)={0x8008080, 0x2d, 0x9, 0x3a, 0x100000000000006, 0x2c}, 0x48) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x2]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x2, 0x0, 0x1, 0x40, 0xffffffffffffffff, 0x1}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@nullb, 0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11.877518235s ago: executing program 6 (id=1365): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000240)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x66005, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 10.873676612s ago: executing program 5 (id=1366): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x40c4) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r4, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) r5 = socket$inet6(0xa, 0x3, 0xff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) 10.868115372s ago: executing program 1 (id=1367): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xfdfdffff, 0x8}) write(0xffffffffffffffff, &(0x7f0000000640)='high-speed', 0xa) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x12c, 0x29, 0x100, 0x70bd27, 0x25dfdbfe, {0x4}, [@typed={0x8, 0x120, 0x0, 0x0, @u32=0x8}, @generic="e78fb4f76e2bbb52f0044f735be62ddb982fe472ea59f57c188b726feaf2c546266b39c51727ae0d95df0cd6e1de8b25225ec99e5be3466b4b0c44815bf45fdfd749f1ea527d5c3fea6984d908c1f4e3dcfe06e26e07b67a826c71c729eff92736d95def6619b1ec39b5f7d932a0a2ab0d2e515d0744db0e7fd717316b2077b544774e0a1855b5bac214d8021cbafa96fe86898fb21002df5eb2dc2a5c3d1c8d658e1dde5fe3f33f592f8d38216e06be2359e23b281e520bad2d", @nested={0x54, 0xc0, 0x0, 0x1, [@nested={0x4, 0x7c}, @typed={0x46, 0x13, 0x0, 0x0, @binary="11e5133b1e1cd94110dd938fa2d3c98171a373e3ee623b42338c4f9687cfe05d7aeb62178de2547f69befda2fbebfa8c4e816f57764b35365e954fa989fb5f4c9ef0"}, @nested={0x4, 0x9b}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x40) 10.71858668s ago: executing program 3 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000200)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r7 = fsmount(r4, 0x0, 0x80) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100)=0x18) r8 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00)=r1, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 9.632329282s ago: executing program 5 (id=1370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) socket(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000200)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$eJzs3MtvG8UfAPDvrp206eOX/Ep59AEECiLikTRpgR4QEggkLkhIcCjHkKRVqdugJki0qqAgxBVV4o44IvEXcIILAk5IiBt/AKpUoV5aOBmtvdvYjp3WqV0H/PlIG8/sjDPz9e7YsztxAhhak9mPJGJXRPweEeP1bHOFyfrDjWsXF/66dnEhiWr1zT+TWr3r1y4uFFWL5+3MM1NpRPppEgfatLty/sLp+Upl6VyeL+ePz5w6M39y6eTS2bljx44emX3+ublnNxvaQ42ZrE/X93+4fHDfa29ffn3h+OV3fvomKeJviaNHJl/coPDxarXHzQ3W7oZ0Uh5gR+hKKR97I7XxPx6lWDt44/HqJwPtHNBX1Wq1urNz8aUq8B+WxKB7AAxG8UGfXf8W212aemwJV1+qXwBlcd/It3pJOdK8zkjL9W0vTUbE8Ut/f5lt0Z/7EAAATb7L5j9Pt5v/pXFfQ73/5WtDExHx/4jYExH3RMTeiLg3olb3/oh4oMv2J1vy6+c/6ZVNBXabsvnfC/naVvP8r5j9xUQpz+2uxT+SnDhVWTqcvyZTMbIty89u0Mb3r/z6eaeyxvlftmXtF3PBvB9Xytuan7M4vzp/JzE3uvpxxP5yc/xjtZLk5kpAEhH7ImL/Jts49eTXBzuV3Tr+DfRgnan6VcQT9eN/KZqO/9oqaJaaWT3z3szK+Qtt1idntkdl6fBMcVas9/Mvn73Rqf07ir8HsuO/o+35fzP+iaRxvXalu9+/7Rblmz3/R5O3aunRfN8H86ur52YjRk83nBSlfP/c2q4iX9TP4p861H7874m1V+JARGQn8YP5wvLDed8fiYhHI+LQBjH++PJj724+/v7K4l/s6vivJUajdU/7ROn0D9/G9oZGJ7qJPzv+R2upqXxPh/e/3xozt9Ov7s9mAAAA+HdKI2JXJOn0zXSaTk/X/15+b+xIK8srq0+dWH7/7GL9OwITMZIWd7rGG+6HzuaX9UV+riV/JL9v/EVprJafXliuLA46eBhyOzuM/8wfpUH3Dug739eC4WX8w/Ay/mF4Gf8wvNqM/7FB9AO4+9p9/n80gH4Ad1/L+LfsB0PE9T8ML+MfhpfxD0NpZSxu/SV5CYl1iUi3RDf6mEjKW6IbfU1E/t9/1xcN+p0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN/4JAAD//wUA5Iw=") listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x80) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100)=0x18) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00)=r1, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 7.802912899s ago: executing program 0 (id=1371): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@nested_load_syzos={0x136, 0x38, {0x2, 0x0, [@nested_vmlaunch={0x12f, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0x3f5c, 0x4}}, @in_dx={0x69, 0x20, {0xf712, 0x7}}, @rdmsr={0x66, 0x18, {0xaae}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xc3f1}}, @in_dx={0x69, 0x20, {0x4c6b, 0x6}}, @code={0xa, 0x4f, {"430f01ca26450f01df430fce66b886008ed0b9800000c00f3235010000000f30450f01c2f30fa7d842a00000000000000100c443dd6bf423c4619173fa2e"}}, @wrmsr={0x65, 0x20, {0xa49, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0x15a08}}, @out_dx={0x6a, 0x28, {0xc846, 0x3, 0x73b2}}, @wr_crn={0x67, 0x20, {0x0, 0x2}}], 0x207}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.743129812s ago: executing program 3 (id=1372): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@errors_remount}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@quota}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 7.703765833s ago: executing program 0 (id=1373): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) timer_create(0x2, &(0x7f0000002500)={0x0, 0x7, 0x4, @thr={&(0x7f0000001400)="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", &(0x7f0000000300)="133c9e00291f966d1d2648db7984b1b35470a0b6e62988b555d8c290696f524bf8e59b2724a22173352cc7a5127effe58208d2f83ddfe99a35d0d424cd82a358fa481f0bd735c6c3f0b52578ae391fa5e97e5868b45d2d44347f6ec72aa4a90334384b7bb85049bebbf42e5d1cf6b68959824db45eecb0742b47ba06a76b159f8bd9efc7ab54e3231377fd1134e676e2e2c4aae3412de9352be3deef53221fa0ef0b6973f7752d6c65195fd9befa733f9446ad36a1f052d17cab60c59efb6632c95cb830c4503d0d569589400a315e26eae3b98daaaa7c4801be421872f3571297fc69e967c7565f907aaa4b0f9d54eb26a5106259baa3b58a96e39cb7a13adef24dd72f6ba639682552495c6209d84c9e810d0437ce62b59c1435d092ee4ba0405a55dd0a8fe3b251ee45c7e0c9d0a7eb263cd6b04a815e382b4b70151ad2d805976a1a9a0bd0d6a0bd0f95e05ec20563de6021a4e504307103f796061a4a4c68abbaea5b48a08564a29a"}}, &(0x7f0000002540)) 7.461787595s ago: executing program 6 (id=1374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, 0x0) socket(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000200)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100)=0x18) r7 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00)=r1, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 7.35545758s ago: executing program 1 (id=1375): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@errors_remount}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@quota}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 6.243195333s ago: executing program 3 (id=1376): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/test\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/test/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='tcp\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='ipv4\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1\x00', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='4420\x00', 0x5) close(r4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/test\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/test\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write(r5, &(0x7f0000000480)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=test\x00', 0x36) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/test\x00', 0x0) 6.167314307s ago: executing program 0 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 5.806611233s ago: executing program 5 (id=1378): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0xf5, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4.62977363s ago: executing program 0 (id=1379): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x14081, 0xa) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="018000000000000066646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 4.509439475s ago: executing program 1 (id=1380): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) 4.033875658s ago: executing program 6 (id=1381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000200)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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") listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r7 = fsmount(r4, 0x0, 0x80) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100)=0x18) r8 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00)=r1, 0x12) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 3.954746702s ago: executing program 3 (id=1382): symlink(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB="72f81ab6b02c9f0000000700994daf250499c1bc4471bd323fa573fb3f33e7a400"], 0x1, 0x28c, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000002740)={0x8008080, 0x2d, 0x9, 0x3a, 0x100000000000006, 0x2c}, 0x48) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x2]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x2, 0x0, 0x1, 0x40, 0xffffffffffffffff, 0x1}, 0x50) getpid() r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xf0, 0x150, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0xfe, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x7, 0x4, 0x4], 0x3, 0x2}, {0xffffffffffffffff, [0x1, 0x1, 0x0, 0x0, 0x3, 0x1], 0x1, 0x4}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x0, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@nullb, 0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.946034692s ago: executing program 0 (id=1383): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000240)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3.877166925s ago: executing program 1 (id=1384): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="01080000000000000500270006000000", @ANYRES8=r0, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x28}}, 0x40c4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r5, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) socket$inet6(0xa, 0x3, 0xff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008340)=ANY=[@ANYBLOB="3c0100002100010000000000fd5bbbe350a174dbdf25fc020000000000000000000000000005ac14142e00000000000000000000000000000001000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000ac1e0101000000000000000000000000200100000000000000000000000000023c040000000000100a0002000a010101"], 0x13c}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r8, r8, 0x0) 3.594772599s ago: executing program 5 (id=1385): symlink(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x804, &(0x7f0000000180)=ANY=[@ANYBLOB="72f81ab6b02c9f0000000700994daf250499c1bc4471bd323fa573fb3f33e7a400"], 0x1, 0x28c, &(0x7f0000000580)="$eJzs3c2KI1UUAOBTncqfLpKFKxGmQBeuhmmfII2MIDYIShbqQgcnA9IJAzMQGBVjr3wCn8CNL+NGfAEfQHFnL8SS6qqkE60kpG2Spvm+Rffl3HPqnsotuld189lrk7PHT58/Of/61+h0kjgaxCAukujHUcx9G7V++b0+DgDcchd5Hn/kpXYZerGa0Sx+/PjfyvRoLw0CADdu+f//oXsBAPbjw48+fu/k9PThB1nWiZh8Nx0mUf4u50+exBcxjlE8iF78FZEvlON33j19GGlW6Mcbk9l0WFROPv2puv7JbxGX9cfRi359/XFWWqqfTYfNeKlafzCO0fs/RC9eqa9/q6Y+hq148/Wl/u9HL37+PJ7GOB5Xvc3rvznOsrfz7//86pMiWtQns+mwvcirsht73RgAAAAAAAAAAAAAAAAAAAAAAO60+9lCf/X8nfnB/xvmN5wPNFs6n+dBlmV5UuZf1afxahrpIe8dAAAAAAAAAAAAAAAAAAAAbovnL748ezQej57d6GD+Wn/NVPy9GmlHxPXXurdrVTSq1sZJxG5rNaN9Wbk9ubHjXXSLfkbPkjRWptL/szvJItJdnroX5VpFpFsOliLbrjyILTmduBzMn66zR8m2ze3UPSQ3MMhrHr/G2qrWvyPd6g5qkrsbVm+9fK2e896aqSQimosPc/N1mtf7oFpr9nR/f4MAAAAAAAAAAAAAAAAAAIDS1Uu/NZPnB2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7g6vv/dxjMquJ1OXmjGKRRRars5gFvEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDvunwAAAP//b5hmMg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000002740)={0x8008080, 0x2d, 0x9, 0x3a, 0x100000000000006, 0x2c}, 0x48) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x2]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x2, 0x0, 0x1, 0x40, 0xffffffffffffffff, 0x1}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xf0, 0x150, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0xfe, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x7, 0x4, 0x4], 0x3, 0x2}, {0xffffffffffffffff, [0x1, 0x1, 0x0, 0x0, 0x3, 0x1], 0x1, 0x4}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x0, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@nullb, 0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.719900431s ago: executing program 1 (id=1386): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) timer_create(0x2, &(0x7f0000002500)={0x0, 0x7, 0x4, @thr={&(0x7f0000001400)="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", &(0x7f0000000300)="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"}}, &(0x7f0000002540)) 1.990335875s ago: executing program 5 (id=1387): unshare(0x8040000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa2040, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22a00, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x68382, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10fffb, 0xfffffffd}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000300)={0x2, 0x0, 0xd, 0xffffff01, 0xc, "d2ed01c6fd6588173b783032f2c34f89dc5b7d"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x2, 0x2, 0x9, 0x1, 0xb, 0x0, 0x51, 0x0, 0x40004, 0x3ff, 0xef, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000002}) 1.885625331s ago: executing program 3 (id=1388): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@jqfmt_vfsv0}, {@errors_remount}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@quota}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x1}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 534.477724ms ago: executing program 0 (id=1389): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000240)=ANY=[], 0x21, 0x14ff, &(0x7f0000000740)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) brk(0xfffffffffffffff8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000280)='./bus\x00') 504.930706ms ago: executing program 5 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x30, 0x5f]}}, 0x0, 0x29}, 0x28) 91.865766ms ago: executing program 6 (id=1391): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000240)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x66005, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 0s ago: executing program 3 (id=1392): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/test\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/test/attr_allow_any_host\x00', 0x2, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='tcp\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='ipv4\x00', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1\x00', 0xa) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='4420\x00', 0x5) close(r4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/test\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/test\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write(r5, &(0x7f0000000480)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=test\x00', 0x36) close(r5) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/test\x00', 0x0) kernel console output (not intermixed with test programs): 1-19 (0x7fffffff) [ 336.005826][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.069646][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.134809][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.187290][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.307959][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.513597][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.543395][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.647572][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.727789][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.738265][ T7236] device veth0_vlan entered promiscuous mode [ 337.795356][ T7236] device veth1_vlan entered promiscuous mode [ 337.841392][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.855967][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.905082][ T7577] device-mapper: table: 248:0: cache: Insufficient args [ 337.943930][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 337.956422][ T7577] device-mapper: ioctl: error adding target to table [ 338.688214][ T7585] loop1: detected capacity change from 0 to 1024 [ 338.703920][ T7236] device veth0_macvtap entered promiscuous mode [ 338.729166][ T7585] EXT4-fs (loop1): Ignoring removed bh option [ 338.749171][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.777672][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.800594][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.820201][ T7236] device veth1_macvtap entered promiscuous mode [ 338.838462][ T7585] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000006,noquota,barrier,auto_da_alloc,i_version,bh,,errors=continue. Quota mode: none. [ 338.870168][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.894048][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.894673][ T7585] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.930719][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.957677][ T26] audit: type=1800 audit(1789713851.599:185): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.804" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 339.003504][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.027000][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.052913][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.067043][ T4367] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 339.070469][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.092136][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.104120][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.121291][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.142009][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.182630][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.194348][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.231241][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.244066][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.267200][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.280069][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.290928][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.311135][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.325192][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.349570][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.362075][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.374866][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.394911][ T7236] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.407499][ T7236] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.416468][ T7236] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.452845][ T7236] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.465820][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.475235][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.487291][ T4367] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.492029][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.497031][ T4367] usb 1-1: config 0 has no interface number 0 [ 339.510652][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.519908][ T4367] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.523068][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.541388][ T4367] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.553298][ T4367] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.566725][ T4367] usb 1-1: config 0 interface 1 has no altsetting 0 [ 339.573459][ T4367] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 339.582929][ T4367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.593420][ T4367] usb 1-1: config 0 descriptor?? [ 339.609745][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.684638][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.721259][ T2300] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 339.977005][ T2300] usb 2-1: Using ep0 maxpacket: 16 [ 340.097117][ T2300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 340.301322][ T4367] uclogic 0003:145F:0212.0008: pen parameters not found [ 340.313904][ T4367] uclogic 0003:145F:0212.0008: interface is invalid, ignoring [ 340.374243][ T4367] usb 1-1: USB disconnect, device number 7 [ 340.410073][ T2300] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 340.420311][ T2300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.429299][ T2300] usb 2-1: Product: syz [ 340.433479][ T2300] usb 2-1: Manufacturer: syz [ 340.438287][ T2300] usb 2-1: SerialNumber: syz [ 340.445473][ T2300] usb 2-1: config 0 descriptor?? [ 340.494224][ T2300] hub 2-1:0.0: bad descriptor, ignoring hub [ 340.505064][ T2300] hub: probe of 2-1:0.0 failed with error -5 [ 340.721022][ T7605] fuse: Bad value for 'fd' [ 340.747741][ T7605] FAULT_INJECTION: forcing a failure. [ 340.747741][ T7605] name failslab, interval 1, probability 0, space 0, times 0 [ 340.782023][ T7605] CPU: 1 PID: 7605 Comm: syz.1.807 Not tainted syzkaller #0 [ 340.789387][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.799454][ T7605] Call Trace: [ 340.802735][ T7605] [ 340.805674][ T7605] dump_stack_lvl+0x188/0x250 [ 340.810461][ T7605] ? show_regs_print_info+0x20/0x20 [ 340.815686][ T7605] ? load_image+0x410/0x410 [ 340.820205][ T7605] ? __might_sleep+0xf0/0xf0 [ 340.824802][ T7605] ? __lock_acquire+0x7b50/0x7b50 [ 340.829842][ T7605] ? mpol_shared_policy_init+0x19c/0x4b0 [ 340.835492][ T7605] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 340.841314][ T7605] should_fail+0x383/0x4b0 [ 340.845747][ T7605] should_failslab+0x5/0x20 [ 340.850285][ T7605] slab_pre_alloc_hook+0x51/0xc0 [ 340.855323][ T7605] ? __d_alloc+0x27/0x6d0 [ 340.859653][ T7605] kmem_cache_alloc+0x3d/0x280 [ 340.864578][ T7605] __d_alloc+0x27/0x6d0 [ 340.868739][ T7605] ? d_alloc_pseudo+0xe/0x70 [ 340.873330][ T7605] d_alloc_pseudo+0x19/0x70 [ 340.877835][ T7605] alloc_file_pseudo+0xe0/0x200 [ 340.882695][ T7605] ? alloc_empty_file_noaccount+0x80/0x80 [ 340.888419][ T7605] ? shmem_get_inode+0x87b/0xa40 [ 340.893386][ T7605] __shmem_file_setup+0x1cf/0x290 [ 340.898473][ T7605] ? shmem_file_setup+0x13/0x30 [ 340.903430][ T7605] __se_sys_memfd_create+0x290/0x450 [ 340.908713][ T7605] ? __x64_sys_memfd_create+0x60/0x60 [ 340.914418][ T7605] ? lockdep_hardirqs_on+0x94/0x140 [ 340.919737][ T7605] do_syscall_64+0x4c/0xa0 [ 340.924177][ T7605] ? clear_bhb_loop+0x30/0x80 [ 340.928849][ T7605] ? clear_bhb_loop+0x30/0x80 [ 340.933544][ T7605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.939439][ T7605] RIP: 0033:0x7f3994937159 [ 340.943841][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.963456][ T7605] RSP: 002b:00007f3992b8ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 340.971875][ T7605] RAX: ffffffffffffffda RBX: 0000000000000447 RCX: 00007f3994937159 [ 340.979850][ T7605] RDX: 00007f3992b8eee0 RSI: 0000000000000000 RDI: 00007f39949ce24b [ 340.987830][ T7605] RBP: 0000200000000380 R08: 00000000ffffffff R09: 0000000000000000 [ 340.996044][ T7605] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 341.004029][ T7605] R13: 00007f3992b8eee0 R14: 00007f3992b8eea0 R15: 0000200000000180 [ 341.012004][ T7605] [ 341.098471][ T2300] usb 2-1: USB disconnect, device number 8 [ 341.407779][ T7572] block2mtd: error: cannot open device /dev/ram0 [ 341.507490][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.592773][ T4584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.648754][ T4584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.744608][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.758499][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 341.776391][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.833828][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.957234][ T26] audit: type=1800 audit(1789713854.579:186): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.813" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 343.175583][ T26] audit: type=1800 audit(1789713855.199:187): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.816" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 343.344263][ T7652] loop3: detected capacity change from 0 to 2048 [ 343.383859][ T7657] loop5: detected capacity change from 0 to 2048 [ 343.598090][ T7652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.609629][ T7657] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.620489][ T4230] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 343.991091][ T7670] netlink: 80 bytes leftover after parsing attributes in process `syz.3.817'. [ 344.514939][ T4230] usb 2-1: Using ep0 maxpacket: 16 [ 344.586515][ T7673] netlink: 1 bytes leftover after parsing attributes in process `syz.6.820'. [ 344.647258][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 344.663056][ T7679] netlink: 80 bytes leftover after parsing attributes in process `syz.5.819'. [ 344.725179][ T9] device hsr_slave_0 left promiscuous mode [ 344.741977][ T9] device hsr_slave_1 left promiscuous mode [ 344.772773][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.802815][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.806582][ T7684] loop3: detected capacity change from 0 to 2048 [ 344.827982][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.847149][ T4230] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 344.880246][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.897050][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.917348][ T4230] usb 2-1: Product: syz [ 344.921555][ T4230] usb 2-1: Manufacturer: syz [ 344.953749][ T4230] usb 2-1: SerialNumber: syz [ 344.960696][ T7684] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 344.991444][ T9] device bridge_slave_0 left promiscuous mode [ 345.147097][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.175467][ T4230] usb 2-1: config 0 descriptor?? [ 345.218387][ T4230] hub 2-1:0.0: bad descriptor, ignoring hub [ 345.224435][ T4230] hub: probe of 2-1:0.0 failed with error -5 [ 345.292670][ T7673] loop6: detected capacity change from 0 to 40427 [ 345.427448][ T7655] fuse: Bad value for 'fd' [ 345.436430][ T7655] FAULT_INJECTION: forcing a failure. [ 345.436430][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 345.456463][ T7655] CPU: 0 PID: 7655 Comm: syz.1.818 Not tainted syzkaller #0 [ 345.463804][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.473871][ T7655] Call Trace: [ 345.477156][ T7655] [ 345.480087][ T7655] dump_stack_lvl+0x188/0x250 [ 345.484771][ T7655] ? show_regs_print_info+0x20/0x20 [ 345.489973][ T7655] ? load_image+0x410/0x410 [ 345.494482][ T7655] ? __might_sleep+0xf0/0xf0 [ 345.499072][ T7655] ? __lock_acquire+0x7b50/0x7b50 [ 345.504093][ T7655] ? mpol_shared_policy_init+0x19c/0x4b0 [ 345.509725][ T7655] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 345.515623][ T7655] should_fail+0x383/0x4b0 [ 345.520048][ T7655] should_failslab+0x5/0x20 [ 345.524551][ T7655] slab_pre_alloc_hook+0x51/0xc0 [ 345.529494][ T7655] ? __d_alloc+0x27/0x6d0 [ 345.533826][ T7655] kmem_cache_alloc+0x3d/0x280 [ 345.538611][ T7655] __d_alloc+0x27/0x6d0 [ 345.542782][ T7655] ? d_alloc_pseudo+0xe/0x70 [ 345.547386][ T7655] d_alloc_pseudo+0x19/0x70 [ 345.551903][ T7655] alloc_file_pseudo+0xe0/0x200 [ 345.556774][ T7655] ? alloc_empty_file_noaccount+0x80/0x80 [ 345.562518][ T7655] ? shmem_get_inode+0x87b/0xa40 [ 345.567501][ T7655] __shmem_file_setup+0x1cf/0x290 [ 345.572629][ T7655] ? shmem_file_setup+0x13/0x30 [ 345.577508][ T7655] __se_sys_memfd_create+0x290/0x450 [ 345.582813][ T7655] ? __x64_sys_memfd_create+0x60/0x60 [ 345.588284][ T7655] ? lockdep_hardirqs_on+0x94/0x140 [ 345.593513][ T7655] do_syscall_64+0x4c/0xa0 [ 345.597941][ T7655] ? clear_bhb_loop+0x30/0x80 [ 345.602635][ T7655] ? clear_bhb_loop+0x30/0x80 [ 345.607335][ T7655] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.613242][ T7655] RIP: 0033:0x7f3994937159 [ 345.617681][ T7655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.637298][ T7655] RSP: 002b:00007f3992b8ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 345.645897][ T7655] RAX: ffffffffffffffda RBX: 0000000000000447 RCX: 00007f3994937159 [ 345.653875][ T7655] RDX: 00007f3992b8eee0 RSI: 0000000000000000 RDI: 00007f39949ce24b [ 345.661847][ T7655] RBP: 0000200000000380 R08: 00000000ffffffff R09: 0000000000000000 [ 345.669901][ T7655] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 345.677860][ T7655] R13: 00007f3992b8eee0 R14: 00007f3992b8eea0 R15: 0000200000000180 [ 345.685829][ T7655] [ 345.708264][ T9] device veth1_macvtap left promiscuous mode [ 345.714677][ T9] device veth0_macvtap left promiscuous mode [ 345.769750][ T4185] usb 2-1: USB disconnect, device number 9 [ 345.786168][ T9] device veth1_vlan left promiscuous mode [ 345.813777][ T7673] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 345.831115][ T7673] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 345.835742][ T9] device veth0_vlan left promiscuous mode [ 345.942409][ T7673] F2FS-fs (loop6): Found nat_bits in checkpoint [ 346.013419][ T7704] md: could not open device unknown-block(7,0). [ 346.064493][ T7704] md: md_import_device returned -16 [ 346.241871][ T7706] md: loop1 has zero or unknown size, marking faulty! [ 346.268712][ T7706] md: md_import_device returned -22 [ 346.277847][ T7673] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 346.310043][ T7673] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 346.403055][ T7714] jffs2: notice: (7714) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 346.943766][ T7714] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 348.386836][ T26] audit: type=1800 audit(1789713861.019:188): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.832" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 349.359075][ T9] team0 (unregistering): Port device team_slave_1 removed [ 349.394371][ T9] team0 (unregistering): Port device team_slave_0 removed [ 349.605163][ T9] bond0 (unregistering): Released all slaves [ 350.269804][ T7757] loop5: detected capacity change from 0 to 2048 [ 350.377159][ T26] audit: type=1800 audit(1789713863.009:189): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.841" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 350.497553][ T7757] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 350.969256][ T7772] netlink: 80 bytes leftover after parsing attributes in process `syz.5.839'. [ 352.557150][ T26] audit: type=1800 audit(1789713865.149:190): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.845" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 353.806471][ T26] audit: type=1800 audit(1789713865.719:191): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.844" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 353.838521][ T7793] md: couldn't update array info. -22 [ 353.844828][ T7793] md: could not open device unknown-block(7,0). [ 353.851447][ T7793] md: md_import_device returned -16 [ 353.991577][ T7801] loop1: detected capacity change from 0 to 1024 [ 354.083249][ T7801] EXT4-fs (loop1): Ignoring removed bh option [ 354.221817][ T7801] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000006,noquota,barrier,auto_da_alloc,i_version,bh,,errors=continue. Quota mode: none. [ 354.282692][ T7801] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.301597][ T26] audit: type=1800 audit(1789713866.939:192): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.850" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 354.348181][ T7811] loop3: detected capacity change from 0 to 1024 [ 354.442038][ T7811] EXT4-fs (loop3): Ignoring removed bh option [ 354.548051][ T7811] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000006,noquota,barrier,auto_da_alloc,i_version,bh,,errors=continue. Quota mode: none. [ 354.577250][ T7811] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.628442][ T7817] loop1: detected capacity change from 0 to 2048 [ 354.784206][ T7817] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.837668][ T26] audit: type=1800 audit(1789713867.459:193): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.852" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 355.245420][ T26] audit: type=1800 audit(1789713867.839:194): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.856" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 355.796778][ T7833] loop5: detected capacity change from 0 to 2048 [ 356.057013][ T7833] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 356.178704][ T4185] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 356.470745][ T7861] netlink: 80 bytes leftover after parsing attributes in process `syz.5.857'. [ 357.147102][ T4185] usb 7-1: Using ep0 maxpacket: 16 [ 357.277297][ T4185] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 357.507174][ T4185] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 357.516288][ T4185] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.547111][ T4185] usb 7-1: Product: syz [ 357.574637][ T4185] usb 7-1: Manufacturer: syz [ 357.585618][ T4185] usb 7-1: SerialNumber: syz [ 357.593302][ T7881] loop1: detected capacity change from 0 to 1024 [ 357.623286][ T4185] usb 7-1: config 0 descriptor?? [ 357.688173][ T4185] hub 7-1:0.0: bad descriptor, ignoring hub [ 357.704768][ T4185] hub: probe of 7-1:0.0 failed with error -5 [ 357.737153][ T7881] EXT4-fs (loop1): Ignoring removed bh option [ 357.847897][ T7881] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000006,noquota,barrier,auto_da_alloc,i_version,bh,,errors=continue. Quota mode: none. [ 357.957391][ T7881] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.050433][ T7842] fuse: Bad value for 'fd' [ 358.055062][ T26] audit: type=1800 audit(1789713870.689:195): pid=7881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.866" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 358.092065][ T7842] FAULT_INJECTION: forcing a failure. [ 358.092065][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 358.191004][ T7842] CPU: 0 PID: 7842 Comm: syz.6.858 Not tainted syzkaller #0 [ 358.198339][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.208466][ T7842] Call Trace: [ 358.211779][ T7842] [ 358.215029][ T7842] dump_stack_lvl+0x188/0x250 [ 358.219893][ T7842] ? show_regs_print_info+0x20/0x20 [ 358.225091][ T7842] ? load_image+0x410/0x410 [ 358.229588][ T7842] ? __might_sleep+0xf0/0xf0 [ 358.234307][ T7842] ? __lock_acquire+0x7b50/0x7b50 [ 358.239422][ T7842] ? lockdep_init_map_type+0x98/0x900 [ 358.244811][ T7842] should_fail+0x383/0x4b0 [ 358.249311][ T7842] should_failslab+0x5/0x20 [ 358.253876][ T7842] slab_pre_alloc_hook+0x51/0xc0 [ 358.258869][ T7842] ? security_inode_alloc+0x30/0x110 [ 358.264311][ T7842] kmem_cache_alloc+0x3d/0x280 [ 358.269136][ T7842] security_inode_alloc+0x30/0x110 [ 358.274249][ T7842] inode_init_always+0x8e5/0xc90 [ 358.279288][ T7842] new_inode_pseudo+0x8e/0x210 [ 358.284062][ T7842] new_inode+0x25/0x1d0 [ 358.288206][ T7842] shmem_get_inode+0x304/0xa40 [ 358.293041][ T7842] __shmem_file_setup+0x10b/0x290 [ 358.298137][ T7842] ? shmem_file_setup+0x13/0x30 [ 358.303071][ T7842] __se_sys_memfd_create+0x290/0x450 [ 358.308602][ T7842] ? __x64_sys_memfd_create+0x60/0x60 [ 358.313972][ T7842] ? lockdep_hardirqs_on+0x94/0x140 [ 358.319161][ T7842] do_syscall_64+0x4c/0xa0 [ 358.323576][ T7842] ? clear_bhb_loop+0x30/0x80 [ 358.328321][ T7842] ? clear_bhb_loop+0x30/0x80 [ 358.332984][ T7842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.338894][ T7842] RIP: 0033:0x7f9a3a361159 [ 358.343352][ T7842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.363009][ T7842] RSP: 002b:00007f9a385b8e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 358.371414][ T7842] RAX: ffffffffffffffda RBX: 0000000000000447 RCX: 00007f9a3a361159 [ 358.379376][ T7842] RDX: 00007f9a385b8ee0 RSI: 0000000000000000 RDI: 00007f9a3a3f824b [ 358.387463][ T7842] RBP: 0000200000000380 R08: 00000000ffffffff R09: 0000000000000000 [ 358.395437][ T7842] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 358.403402][ T7842] R13: 00007f9a385b8ee0 R14: 00007f9a385b8ea0 R15: 0000200000000180 [ 358.411373][ T7842] [ 358.664606][ T7906] jffs2: notice: (7906) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 359.388241][ T7901] loop3: detected capacity change from 0 to 2048 [ 359.476892][ T4230] usb 7-1: USB disconnect, device number 2 [ 359.652881][ T7901] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.198098][ T7954] md: could not open device unknown-block(7,0). [ 361.204425][ T7954] md: md_import_device returned -16 [ 361.263167][ T7958] md: loop1 has zero or unknown size, marking faulty! [ 361.327748][ T7958] md: md_import_device returned -22 [ 361.818720][ T7976] loop6: detected capacity change from 0 to 2048 [ 361.840654][ T7974] loop1: detected capacity change from 0 to 2048 [ 362.058311][ T7980] loop3: detected capacity change from 0 to 1024 [ 362.113724][ T7974] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.228063][ T7976] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.402272][ T7980] EXT4-fs (loop3): Ignoring removed bh option [ 362.636828][ T7980] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000006,noquota,barrier,auto_da_alloc,i_version,bh,,errors=continue. Quota mode: none. [ 362.655082][ T7980] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.709133][ T7991] netlink: 80 bytes leftover after parsing attributes in process `syz.6.886'. [ 363.387661][ T26] audit: type=1800 audit(1789713876.029:196): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.888" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 363.429581][ T7992] netlink: 80 bytes leftover after parsing attributes in process `syz.1.885'. [ 364.353812][ T8027] "syz.3.896" (8027) uses obsolete ecb(arc4) skcipher [ 364.728510][ T8033] jffs2: notice: (8033) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 365.379385][ T8033] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 366.940712][ T8088] jffs2: notice: (8088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 367.979851][ T26] audit: type=1800 audit(1789713880.609:197): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 368.329033][ T26] audit: type=1800 audit(1789713880.959:198): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.914" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 369.393771][ T8115] loop3: detected capacity change from 0 to 32768 [ 369.586370][ T8115] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 369.618483][ T8126] jffs2: notice: (8126) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 370.490656][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 370.545529][ T8136] loop1: detected capacity change from 0 to 1024 [ 370.667503][ T8136] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 371.947279][ T8147] "syz.0.922" (8147) uses obsolete ecb(arc4) skcipher [ 372.344290][ T8170] netlink: 80 bytes leftover after parsing attributes in process `syz.3.924'. [ 373.194475][ T26] audit: type=1800 audit(1789713885.809:199): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.927" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 374.226394][ T8189] loop3: detected capacity change from 0 to 32768 [ 374.294412][ T26] audit: type=1800 audit(1789713886.929:200): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.929" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 374.385808][ T8189] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 375.183401][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 375.548054][ T8239] netlink: 80 bytes leftover after parsing attributes in process `syz.6.938'. [ 376.561260][ T26] audit: type=1800 audit(1789713889.179:201): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.942" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 377.358549][ T8266] md: could not open device unknown-block(7,0). [ 377.387141][ T8266] md: md_import_device returned -16 [ 377.408639][ T8266] md: loop1 has zero or unknown size, marking faulty! [ 377.415480][ T8266] md: md_import_device returned -22 [ 379.100298][ T8280] loop3: detected capacity change from 0 to 1024 [ 379.216713][ T8280] EXT4-fs (loop3): Ignoring removed bh option [ 379.231728][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.238262][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.273987][ T8276] device veth1_macvtap left promiscuous mode [ 379.934432][ T8280] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,stripe=0x0000000000000006,noquota,barrier,auto_da_alloc,i_version,bh,,errors=continue. Quota mode: none. [ 379.993318][ T8280] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.012650][ T8304] device veth1_macvtap left promiscuous mode [ 381.239688][ T8302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 381.258839][ T26] audit: type=1800 audit(1789713893.899:202): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.950" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 381.419083][ T26] audit: type=1800 audit(1789713894.019:203): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.951" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 382.186122][ T8321] netlink: 80 bytes leftover after parsing attributes in process `syz.0.957'. [ 386.867174][ T26] audit: type=1800 audit(1789713899.499:204): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.970" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 388.253197][ T8394] netlink: 80 bytes leftover after parsing attributes in process `syz.5.974'. [ 388.747657][ T8395] loop6: detected capacity change from 0 to 16 [ 389.048295][ T8395] erofs: (device loop6): mounted with root inode @ nid 36. [ 389.762324][ T8399] loop5: detected capacity change from 0 to 2048 [ 389.797859][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'. [ 389.948103][ T8399] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.015445][ T8398] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 391.031510][ T8398] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 391.044356][ T8398] EXT4-fs (loop5): This should not happen!! Data will be lost [ 391.044356][ T8398] [ 391.054064][ T8398] EXT4-fs (loop5): Total free blocks count 0 [ 391.060132][ T8398] EXT4-fs (loop5): Free/Dirty block details [ 391.066068][ T8398] EXT4-fs (loop5): free_blocks=4096 [ 391.071341][ T8398] EXT4-fs (loop5): dirty_blocks=64 [ 391.076782][ T8398] EXT4-fs (loop5): Block reservation details [ 391.082820][ T8398] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 391.231173][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 391.261383][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 391.261383][ T9] [ 393.308253][ T8436] loop5: detected capacity change from 0 to 16 [ 394.267369][ T8436] erofs: (device loop5): mounted with root inode @ nid 36. [ 395.704968][ T8463] syz.6.985 uses obsolete (PF_INET,SOCK_PACKET) [ 397.183824][ T26] audit: type=1800 audit(1789713909.319:205): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.988" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 397.551356][ T8473] loop6: detected capacity change from 0 to 2048 [ 397.797784][ T8480] fuse: Bad value for 'fd' [ 398.146243][ T8473] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 398.294388][ T8487] xt_hashlimit: size too large, truncated to 1048576 [ 398.301364][ T8487] xt_hashlimit: invalid interval [ 399.008446][ T8490] loop5: detected capacity change from 0 to 2048 [ 400.251374][ T8490] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.412718][ T8493] loop3: detected capacity change from 0 to 2048 [ 401.178448][ T8488] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 401.193192][ T8488] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 401.205437][ T8488] EXT4-fs (loop5): This should not happen!! Data will be lost [ 401.205437][ T8488] [ 401.215213][ T8488] EXT4-fs (loop5): Total free blocks count 0 [ 401.221369][ T8488] EXT4-fs (loop5): Free/Dirty block details [ 401.227350][ T8488] EXT4-fs (loop5): free_blocks=4096 [ 401.232562][ T8488] EXT4-fs (loop5): dirty_blocks=64 [ 401.238001][ T8488] EXT4-fs (loop5): Block reservation details [ 401.244060][ T8488] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 401.294414][ T8509] loop1: detected capacity change from 0 to 512 [ 401.339760][ T8516] loop6: detected capacity change from 0 to 512 [ 401.355077][ T4321] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 401.355763][ T8493] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 401.379479][ T4321] EXT4-fs (loop5): This should not happen!! Data will be lost [ 401.379479][ T4321] [ 401.448708][ T8516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 401.519410][ T8509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 401.527644][ T8516] System zones: 1-12 [ 401.533637][ T8516] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.998: missing EA_INODE flag [ 401.597195][ T8509] System zones: 1-12 [ 401.674520][ T8509] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.999: missing EA_INODE flag [ 402.147984][ T8516] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.998: error while reading EA inode 12 err=-117 [ 402.197235][ T8509] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.999: error while reading EA inode 12 err=-117 [ 402.262360][ T8516] EXT4-fs (loop6): 1 orphan inode deleted [ 402.268199][ T8516] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 402.303791][ T8492] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 402.318967][ T8492] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 402.323080][ T8509] EXT4-fs (loop1): 1 orphan inode deleted [ 402.331339][ T8492] EXT4-fs (loop3): This should not happen!! Data will be lost [ 402.331339][ T8492] [ 402.347006][ T8492] EXT4-fs (loop3): Total free blocks count 0 [ 402.353002][ T8492] EXT4-fs (loop3): Free/Dirty block details [ 402.359093][ T8492] EXT4-fs (loop3): free_blocks=4096 [ 402.364313][ T8492] EXT4-fs (loop3): dirty_blocks=64 [ 402.368743][ T8509] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 402.369464][ T8492] EXT4-fs (loop3): Block reservation details [ 402.389243][ T8492] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 402.599844][ T5288] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 402.643148][ T5288] EXT4-fs (loop3): This should not happen!! Data will be lost [ 402.643148][ T5288] [ 403.789498][ T8535] loop5: detected capacity change from 0 to 128 [ 403.953480][ T8535] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 403.998590][ T8550] loop6: detected capacity change from 0 to 1024 [ 404.051791][ T8535] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.066461][ T8550] EXT4-fs (loop6): Unrecognized mount option "context=user_u" or missing value [ 404.283426][ T8559] jffs2: notice: (8559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 405.842010][ T8535] raw_sendmsg: syz.5.1000 forgot to set AF_INET. Fix it! [ 406.459210][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1005'. [ 406.469460][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1005'. [ 409.353425][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1010'. [ 409.669538][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1013'. [ 409.943495][ T8606] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1011'. [ 410.710344][ T8608] device-mapper: table: 248:0: zero-length target [ 410.728016][ T8608] device-mapper: ioctl: error adding target to table [ 410.741017][ T8611] loop1: detected capacity change from 0 to 512 [ 411.040364][ T8611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 411.067269][ T8611] System zones: 1-12 [ 411.441894][ T8632] xt_hashlimit: size too large, truncated to 1048576 [ 411.448705][ T8632] xt_hashlimit: invalid interval [ 411.606797][ T8611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1015: missing EA_INODE flag [ 411.816340][ T8611] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1015: error while reading EA inode 12 err=-117 [ 411.897384][ T8611] EXT4-fs (loop1): 1 orphan inode deleted [ 411.903513][ T8611] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 412.154404][ T8640] loop5: detected capacity change from 0 to 1024 [ 414.233429][ T8640] EXT4-fs (loop5): Ignoring removed bh option [ 415.257697][ T8640] EXT4-fs: error -4 creating inode table initialization thread [ 415.265589][ T8640] EXT4-fs (loop5): mount failed [ 416.365662][ T8650] device veth1_macvtap left promiscuous mode [ 418.236827][ T8662] loop3: detected capacity change from 0 to 512 [ 419.314160][ T8662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 419.327206][ T8662] System zones: 1-12 [ 419.407466][ T8662] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1026: missing EA_INODE flag [ 419.469380][ T8662] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1026: error while reading EA inode 12 err=-117 [ 419.483082][ T8680] device-mapper: table: 248:0: zero-length target [ 419.529495][ T8681] loop6: detected capacity change from 0 to 128 [ 419.532620][ T8680] device-mapper: ioctl: error adding target to table [ 419.573322][ T8662] EXT4-fs (loop3): 1 orphan inode deleted [ 419.609663][ T8662] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 419.685198][ T8681] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 419.726614][ T8681] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.873628][ T8694] loop5: detected capacity change from 0 to 1024 [ 421.174840][ T8694] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 422.038187][ T8713] loop3: detected capacity change from 0 to 2048 [ 422.164824][ T8713] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.343973][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1039'. [ 422.378070][ T8728] netlink: 'syz.6.1037': attribute type 1 has an invalid length. [ 423.094195][ T8712] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 423.108574][ T8712] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 423.120771][ T8712] EXT4-fs (loop3): This should not happen!! Data will be lost [ 423.120771][ T8712] [ 423.130779][ T8712] EXT4-fs (loop3): Total free blocks count 0 [ 423.136769][ T8712] EXT4-fs (loop3): Free/Dirty block details [ 423.142782][ T8712] EXT4-fs (loop3): free_blocks=4096 [ 423.148050][ T8712] EXT4-fs (loop3): dirty_blocks=64 [ 423.153165][ T8712] EXT4-fs (loop3): Block reservation details [ 423.159172][ T8712] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 423.793037][ T5288] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 423.885072][ T5288] EXT4-fs (loop3): This should not happen!! Data will be lost [ 423.885072][ T5288] [ 424.239931][ T8752] md: could not open device unknown-block(7,0). [ 424.284984][ T8751] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1040'. [ 424.355881][ T26] audit: type=1326 audit(1789713936.979:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 424.416106][ T8752] md: md_import_device returned -16 [ 424.466147][ T8754] md: loop1 has zero or unknown size, marking faulty! [ 424.482851][ T8754] md: md_import_device returned -22 [ 424.605710][ T26] audit: type=1326 audit(1789713936.979:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 424.670882][ T26] audit: type=1326 audit(1789713936.979:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 424.787214][ T26] audit: type=1326 audit(1789713936.989:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 424.843249][ T26] audit: type=1326 audit(1789713936.989:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 424.916736][ T26] audit: type=1326 audit(1789713936.989:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 424.941297][ T26] audit: type=1326 audit(1789713936.989:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 426.321059][ T26] audit: type=1326 audit(1789713936.989:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 426.389401][ T26] audit: type=1326 audit(1789713936.989:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 426.482371][ T26] audit: type=1326 audit(1789713936.989:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.1041" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e91b2159 code=0x7ffc0000 [ 426.958547][ T8790] xt_hashlimit: size too large, truncated to 1048576 [ 426.965312][ T8790] xt_hashlimit: invalid interval [ 429.554411][ T8810] loop1: detected capacity change from 0 to 512 [ 429.605549][ T8823] md: could not open device unknown-block(7,0). [ 430.234973][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 430.235022][ T26] audit: type=1326 audit(1789713942.469:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 430.592088][ T8826] xt_hashlimit: size too large, truncated to 1048576 [ 430.598851][ T8826] xt_hashlimit: invalid interval [ 431.229818][ T26] audit: type=1326 audit(1789713942.469:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 431.260468][ T26] audit: type=1326 audit(1789713942.469:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 431.538036][ T26] audit: type=1326 audit(1789713942.479:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 431.775943][ T8823] md: md_import_device returned -16 [ 432.251863][ T8835] loop5: detected capacity change from 0 to 2048 [ 432.258437][ T26] audit: type=1326 audit(1789713942.479:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 432.495739][ T26] audit: type=1326 audit(1789713942.479:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 432.521622][ T26] audit: type=1326 audit(1789713942.489:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 432.546202][ T26] audit: type=1326 audit(1789713942.489:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 432.570349][ T26] audit: type=1326 audit(1789713942.489:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 432.607429][ T26] audit: type=1326 audit(1789713942.509:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.3.1056" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7509b3e159 code=0x7ffc0000 [ 432.632754][ T8835] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.020509][ T8880] loop3: detected capacity change from 0 to 2048 [ 434.145880][ T8884] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 434.248687][ T8890] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1070'. [ 434.354488][ T8889] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 434.550151][ T8880] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.939087][ T8888] loop5: detected capacity change from 0 to 2048 [ 434.992124][ T8886] loop6: detected capacity change from 0 to 2048 [ 435.045890][ T8900] md: could not open device unknown-block(7,0). [ 435.062200][ T8888] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.106063][ T8900] md: md_import_device returned -16 [ 435.352075][ T8886] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.420419][ T8905] md: loop1 has zero or unknown size, marking faulty! [ 435.609674][ T8905] md: md_import_device returned -22 [ 437.044861][ T8930] device-mapper: table: 248:0: zero-length target [ 437.113544][ T8930] device-mapper: ioctl: error adding target to table [ 437.370195][ T4338] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 438.256303][ T8956] loop6: detected capacity change from 0 to 2048 [ 438.257872][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 438.257884][ T26] audit: type=1800 audit(1789713950.889:276): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1084" name="attr_allow_any_host" dev="configfs" ino=51817 res=0 errno=0 [ 438.291944][ T8955] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 438.311719][ T8950] loop1: detected capacity change from 0 to 2048 [ 438.322231][ T8956] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 438.359078][ T8955] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 438.367247][ T4338] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.382402][ T4338] usb 4-1: config 0 has no interface number 0 [ 438.388921][ T4338] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.400737][ T4338] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.410709][ T8959] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 438.411014][ T4338] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.533085][ T26] audit: type=1800 audit(1789713950.929:277): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1084" name="addr_trtype" dev="configfs" ino=51818 res=0 errno=0 [ 438.568346][ T4338] usb 4-1: config 0 interface 1 has no altsetting 0 [ 438.574190][ T8950] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 438.575427][ T4338] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 438.595147][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.608505][ T4338] usb 4-1: config 0 descriptor?? [ 438.637114][ T26] audit: type=1800 audit(1789713950.999:278): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1084" name="addr_adrfam" dev="configfs" ino=51820 res=0 errno=0 [ 438.659419][ T26] audit: type=1800 audit(1789713950.999:279): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1084" name="addr_traddr" dev="configfs" ino=51821 res=0 errno=0 [ 438.941956][ T8955] nvme nvme0: failed to connect socket: -111 [ 438.952700][ T26] audit: type=1800 audit(1789713951.039:280): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1084" name="addr_trsvcid" dev="configfs" ino=51822 res=0 errno=0 [ 439.487208][ T4338] uclogic 0003:145F:0212.0009: pen parameters not found [ 439.496987][ T4338] uclogic 0003:145F:0212.0009: interface is invalid, ignoring [ 439.709814][ T8980] md: could not open device unknown-block(7,0). [ 439.736517][ T8980] md: md_import_device returned -16 [ 439.792483][ T4339] usb 4-1: USB disconnect, device number 3 [ 439.818057][ T8980] md: loop1 has zero or unknown size, marking faulty! [ 439.824898][ T8980] md: md_import_device returned -22 [ 439.930788][ T8985] loop1: detected capacity change from 0 to 128 [ 439.953939][ T8989] device-mapper: table: 248:0: zero-length target [ 439.969655][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.976059][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.007747][ T8985] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 440.008475][ T8989] device-mapper: ioctl: error adding target to table [ 440.042328][ T8985] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.247430][ T9001] device-mapper: table: 248:0: zero-length target [ 440.264391][ T9001] device-mapper: ioctl: error adding target to table [ 441.665949][ T9030] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1096'. [ 441.675321][ T9030] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1096'. [ 442.145128][ T9035] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1097'. [ 442.196604][ T4585] Bluetooth: hci3: command 0x0406 tx timeout [ 442.209273][ T4585] Bluetooth: hci4: command 0x0406 tx timeout [ 442.379705][ T4585] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 442.617066][ T4585] usb 7-1: device descriptor read/64, error -71 [ 442.917235][ T4585] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 442.935728][ T26] audit: type=1800 audit(1789713955.569:281): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1099" name="attr_allow_any_host" dev="configfs" ino=52053 res=0 errno=0 [ 442.969167][ T9058] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 442.984568][ T26] audit: type=1800 audit(1789713955.609:282): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1099" name="addr_trtype" dev="configfs" ino=52054 res=0 errno=0 [ 443.015287][ T9060] device-mapper: table: 248:0: zero-length target [ 443.022256][ T9060] device-mapper: ioctl: error adding target to table [ 443.047864][ T9063] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 443.061969][ T9058] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 443.065504][ T26] audit: type=1800 audit(1789713955.689:283): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1099" name="addr_traddr" dev="configfs" ino=52678 res=0 errno=0 [ 443.129438][ T4585] usb 7-1: device descriptor read/64, error -71 [ 443.190481][ T26] audit: type=1800 audit(1789713955.699:284): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1099" name="addr_trsvcid" dev="configfs" ino=52679 res=0 errno=0 [ 443.252922][ T4585] usb usb7-port1: attempt power cycle [ 443.295461][ T150] nvmet: connect request for invalid subsystem test! [ 443.307187][ T9058] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "test" [ 443.329170][ T9058] nvme nvme0: failed to connect queue: 0 ret=16770 [ 443.368789][ T9076] device-mapper: table: 248:0: zero-length target [ 443.375477][ T9076] device-mapper: ioctl: error adding target to table [ 443.782470][ T9077] xt_hashlimit: size too large, truncated to 1048576 [ 443.789278][ T9077] xt_hashlimit: invalid interval [ 444.047096][ T4369] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 444.277036][ T4585] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 444.547154][ T4585] usb 7-1: device descriptor read/8, error -71 [ 445.376652][ T9094] md: couldn't update array info. -22 [ 445.457514][ T4369] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 445.465829][ T4369] usb 6-1: config 0 has no interface number 0 [ 445.472575][ T9098] md: could not open device unknown-block(7,0). [ 445.479243][ T4369] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.491223][ T9098] md: md_import_device returned -16 [ 445.536632][ T9097] xt_hashlimit: size too large, truncated to 1048576 [ 445.543552][ T9097] xt_hashlimit: invalid interval [ 445.577023][ T4369] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.616745][ T4369] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.634522][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1110'. [ 445.674332][ T4369] usb 6-1: config 0 interface 1 has no altsetting 0 [ 445.696041][ T4369] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 445.705836][ T4369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.885524][ T4369] usb 6-1: config 0 descriptor?? [ 447.538156][ T4369] usbhid 6-1:0.1: can't add hid device: -71 [ 447.554245][ T4369] usbhid: probe of 6-1:0.1 failed with error -71 [ 447.628985][ T4369] usb 6-1: USB disconnect, device number 2 [ 448.111222][ T9131] device-mapper: table: 248:0: zero-length target [ 448.134731][ T9140] loop5: detected capacity change from 0 to 128 [ 448.162820][ T9131] device-mapper: ioctl: error adding target to table [ 448.184326][ T26] audit: type=1800 audit(1789713960.819:285): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="attr_allow_any_host" dev="configfs" ino=53331 res=0 errno=0 [ 448.211374][ T9145] device-mapper: table: 248:0: zero-length target [ 448.219277][ T9142] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 448.247040][ T9145] device-mapper: ioctl: error adding target to table [ 448.257064][ T9140] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.268658][ T26] audit: type=1800 audit(1789713960.859:286): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="addr_trtype" dev="configfs" ino=52766 res=0 errno=0 [ 448.297756][ T26] audit: type=1800 audit(1789713960.939:287): pid=9142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="addr_traddr" dev="configfs" ino=52767 res=0 errno=0 [ 448.320222][ T9146] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 448.367410][ T9140] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.420357][ T9142] nvme nvme0: failed to connect socket: -111 [ 448.443261][ T26] audit: type=1800 audit(1789713960.959:288): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="addr_trsvcid" dev="configfs" ino=52768 res=0 errno=0 [ 449.257777][ T9167] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1118'. [ 449.269308][ T9167] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1118'. [ 451.377592][ T4339] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 451.803127][ T9175] md: couldn't update array info. -22 [ 451.871494][ T9180] loop3: detected capacity change from 0 to 512 [ 451.876443][ T9179] md: could not open device unknown-block(7,0). [ 451.914683][ T9179] md: md_import_device returned -16 [ 452.032732][ T9183] jffs2: notice: (9183) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 452.084247][ T9182] device-mapper: table: 248:0: : unknown target type [ 452.094503][ T9182] device-mapper: ioctl: error adding target to table [ 452.101937][ T9180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 452.117497][ T9180] System zones: 1-12 [ 452.164493][ T9191] loop6: detected capacity change from 0 to 2048 [ 452.207005][ T4185] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 452.235629][ T9180] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1124: missing EA_INODE flag [ 452.331132][ T9191] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.347257][ T9180] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1124: error while reading EA inode 12 err=-117 [ 452.382503][ T9200] device-mapper: table: 248:0: : unknown target type [ 452.394817][ T9180] EXT4-fs (loop3): 1 orphan inode deleted [ 452.407040][ T9200] device-mapper: ioctl: error adding target to table [ 452.429945][ T9180] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 452.469985][ T9205] device-mapper: table: 248:0: zero-length target [ 452.476634][ T9205] device-mapper: ioctl: error adding target to table [ 452.642129][ T4185] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.984903][ T9217] loop5: detected capacity change from 0 to 1024 [ 452.996854][ T4185] usb 2-1: config 0 has no interface number 0 [ 453.740625][ T4185] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 453.753854][ T4185] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.769467][ T4185] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.797211][ T9217] EXT4-fs (loop5): Ignoring removed bh option [ 453.824910][ T4185] usb 2-1: config 0 interface 1 has no altsetting 0 [ 453.839690][ T9217] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 453.860846][ T4185] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 453.870319][ T4185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.878756][ T9217] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.890990][ T4185] usb 2-1: config 0 descriptor?? [ 453.960662][ T9217] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.1129: Freeing blocks not in datazone - block = 0, count = 16 [ 454.034130][ T9217] EXT4-fs (loop5): Remounting filesystem read-only [ 454.039798][ T26] audit: type=1800 audit(1789713966.669:289): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1130" name="attr_allow_any_host" dev="configfs" ino=53466 res=0 errno=0 [ 454.116244][ T26] audit: type=1800 audit(1789713966.749:290): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1130" name="addr_trtype" dev="configfs" ino=53475 res=0 errno=0 [ 454.116485][ T9227] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 454.181030][ T9229] loop3: detected capacity change from 0 to 1024 [ 454.247655][ T9229] EXT4-fs (loop3): Ignoring removed bh option [ 454.266795][ T9227] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 454.286281][ T9227] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 454.324436][ T26] audit: type=1800 audit(1789713966.899:291): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1130" name="addr_traddr" dev="configfs" ino=53476 res=0 errno=0 [ 454.879426][ T9227] nvme nvme0: failed to connect socket: -512 [ 454.933086][ T26] audit: type=1800 audit(1789713966.919:292): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1130" name="addr_trsvcid" dev="configfs" ino=53477 res=0 errno=0 [ 454.962385][ T9229] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 455.010724][ T4185] uclogic 0003:145F:0212.000A: pen parameters not found [ 455.026947][ T4185] uclogic 0003:145F:0212.000A: interface is invalid, ignoring [ 455.170398][ T9229] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.216164][ T9253] FAULT_INJECTION: forcing a failure. [ 455.216164][ T9253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.229734][ T9253] CPU: 0 PID: 9253 Comm: syz.0.1134 Not tainted syzkaller #0 [ 455.237123][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.247336][ T9253] Call Trace: [ 455.250710][ T9253] [ 455.253647][ T9253] dump_stack_lvl+0x188/0x250 [ 455.258336][ T9253] ? show_regs_print_info+0x20/0x20 [ 455.263557][ T9253] ? load_image+0x410/0x410 [ 455.268065][ T9253] ? uncharge_page+0x490/0x490 [ 455.272917][ T9253] should_fail+0x383/0x4b0 [ 455.277345][ T9253] prepare_alloc_pages+0x1e3/0x5b0 [ 455.282504][ T9253] __alloc_pages+0x11b/0x480 [ 455.287107][ T9253] ? zone_statistics+0x170/0x170 [ 455.292118][ T9253] ? rcu_lock_acquire+0x30/0x30 [ 455.296985][ T9253] ? alloc_pages+0x452/0x560 [ 455.301669][ T9253] __get_free_pages+0x8/0x30 [ 455.306266][ T9253] __tlb_remove_page_size+0x1f2/0x3f0 [ 455.311740][ T9253] unmap_page_range+0xfcf/0x2410 [ 455.316717][ T9253] unmap_vmas+0x131/0x250 [ 455.321071][ T9253] ? unmap_page_range+0x2410/0x2410 [ 455.326291][ T9253] ? __mutex_lock_common+0x435/0x2400 [ 455.331680][ T9253] ? exit_mm_release+0x16/0x30 [ 455.336547][ T9253] exit_mmap+0x3b9/0x640 [ 455.340806][ T9253] ? vm_brk+0x20/0x20 [ 455.344899][ T9253] ? uprobe_clear_state+0x2f6/0x460 [ 455.350244][ T9253] __mmput+0x115/0x390 [ 455.354334][ T9253] exit_mm+0x632/0x7b0 [ 455.358528][ T9253] ? perf_pmu_migrate_context+0xb70/0xb70 [ 455.364365][ T9253] ? do_exit+0x2110/0x2110 [ 455.368886][ T9253] ? __ia32_sys_timer_delete+0x40/0x40 [ 455.374473][ T9253] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 455.376001][ T4339] usb 2-1: USB disconnect, device number 10 [ 455.380025][ T9253] ? tty_audit_exit+0x149/0x1f0 [ 455.391134][ T9253] do_exit+0x5b8/0x2110 [ 455.395318][ T9253] ? put_task_struct+0x80/0x80 [ 455.400102][ T9253] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 455.406112][ T9253] ? _raw_spin_lock_irq+0xb7/0xf0 [ 455.411371][ T9253] do_group_exit+0x12c/0x2f0 [ 455.415975][ T9253] ? lockdep_hardirqs_on+0x94/0x140 [ 455.421364][ T9253] get_signal+0x7eb/0x12e0 [ 455.425897][ T9253] arch_do_signal_or_restart+0xe6/0x12a0 [ 455.431689][ T9253] ? futex_exit_release+0x1c0/0x1c0 [ 455.437346][ T9253] ? get_sigframe_size+0x10/0x10 [ 455.442300][ T9253] ? __context_tracking_exit+0x4c/0x80 [ 455.447796][ T9253] ? exit_to_user_mode_loop+0x3b/0x130 [ 455.453282][ T9253] exit_to_user_mode_loop+0x9e/0x130 [ 455.458584][ T9253] exit_to_user_mode_prepare+0xee/0x180 [ 455.464148][ T9253] syscall_exit_to_user_mode+0x16/0x40 [ 455.469635][ T9253] do_syscall_64+0x58/0xa0 [ 455.474064][ T9253] ? clear_bhb_loop+0x30/0x80 [ 455.478757][ T9253] ? clear_bhb_loop+0x30/0x80 [ 455.483449][ T9253] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 455.489358][ T9253] RIP: 0033:0x7f59d5848159 [ 455.493787][ T9253] Code: Unable to access opcode bytes at RIP 0x7f59d584812f. [ 455.501166][ T9253] RSP: 002b:00007f59d3aa00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 455.510394][ T9253] RAX: 0000000000000001 RBX: 00007f59d5acffa8 RCX: 00007f59d5848159 [ 455.518386][ T9253] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59d5acffac [ 455.526462][ T9253] RBP: 00007f59d5acffa0 R08: 000a98ff4d05e24f R09: 0000000000000000 [ 455.530435][ T9259] md: couldn't update array info. -22 [ 455.534449][ T9253] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 455.534467][ T9253] R13: 00007f59d5ad0038 R14: 00007ffcb5b20920 R15: 00007ffcb5b20a08 [ 455.534492][ T9253] [ 455.545646][ T9259] md: could not open device unknown-block(7,0). [ 455.721136][ T9260] loop6: detected capacity change from 0 to 128 [ 455.741578][ T9259] md: md_import_device returned -16 [ 455.770902][ T9260] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 455.956485][ T9269] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.1132: Freeing blocks not in datazone - block = 0, count = 16 [ 456.499637][ T9269] EXT4-fs (loop3): Remounting filesystem read-only [ 456.505969][ T9260] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.278942][ T9276] jffs2: notice: (9276) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 458.192277][ T9289] device-mapper: table: 248:0: : unknown target type [ 458.592578][ T9289] device-mapper: ioctl: error adding target to table [ 458.770734][ T9298] device-mapper: table: 248:0: zero-length target [ 458.773469][ T9296] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 458.778599][ T26] audit: type=1800 audit(1789713971.409:293): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1144" name="attr_allow_any_host" dev="configfs" ino=52945 res=0 errno=0 [ 458.844311][ T9299] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 458.846286][ T9300] loop1: detected capacity change from 0 to 256 [ 458.863392][ T9298] device-mapper: ioctl: error adding target to table [ 458.893452][ T9296] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 458.923047][ T9296] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 458.923737][ T26] audit: type=1800 audit(1789713971.409:294): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1144" name="addr_trtype" dev="configfs" ino=52946 res=0 errno=0 [ 458.961731][ T9300] FAT-fs (loop1): Unrecognized mount option "rų¶°" or missing value [ 459.041747][ T26] audit: type=1800 audit(1789713971.479:295): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1144" name="addr_adrfam" dev="configfs" ino=52947 res=0 errno=0 [ 459.041797][ T26] audit: type=1800 audit(1789713971.529:296): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1144" name="addr_traddr" dev="configfs" ino=52949 res=0 errno=0 [ 459.041867][ T26] audit: type=1800 audit(1789713971.559:297): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1144" name="addr_trsvcid" dev="configfs" ino=52950 res=0 errno=0 [ 459.098405][ T9296] nvme nvme0: failed to connect socket: -111 [ 459.339858][ T9315] md: couldn't update array info. -22 [ 459.347277][ T9315] md: could not open device unknown-block(7,0). [ 459.682447][ T9315] md: md_import_device returned -16 [ 460.376131][ T9327] loop1: detected capacity change from 0 to 1024 [ 460.529174][ T9327] EXT4-fs (loop1): Ignoring removed bh option [ 460.866996][ T9327] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 461.734643][ T9327] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.466545][ T9345] loop5: detected capacity change from 0 to 16 [ 463.260048][ T9345] erofs: (device loop5): mounted with root inode @ nid 36. [ 463.271152][ T9345] attempt to access beyond end of device [ 463.271152][ T9345] loop5: rw=524288, want=1342177304, limit=16 [ 463.283454][ T9345] attempt to access beyond end of device [ 463.283454][ T9345] loop5: rw=0, want=1342177280, limit=16 [ 463.310288][ T26] audit: type=1800 audit(1789713975.929:298): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1153" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 464.421606][ T9342] jffs2: notice: (9342) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 464.572363][ T9349] device-mapper: table: 248:0: : unknown target type [ 464.579392][ T9349] device-mapper: ioctl: error adding target to table [ 464.604258][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1158'. [ 464.676717][ T9358] device-mapper: table: 248:0: : unknown target type [ 464.691642][ T9358] device-mapper: ioctl: error adding target to table [ 464.731293][ T9367] loop1: detected capacity change from 0 to 512 [ 464.774931][ T26] audit: type=1800 audit(1789713977.409:299): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1161" name="attr_allow_any_host" dev="configfs" ino=53623 res=0 errno=0 [ 464.805288][ T9370] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 464.821328][ T9367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 464.855898][ T9367] System zones: 1-12 [ 464.862908][ T9372] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 464.898987][ T9367] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1160: missing EA_INODE flag [ 464.948581][ T26] audit: type=1800 audit(1789713977.439:300): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1161" name="addr_trtype" dev="configfs" ino=53624 res=0 errno=0 [ 464.948919][ T9370] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 464.984831][ T9374] md: couldn't update array info. -22 [ 465.000895][ T9372] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 465.010937][ T9374] md: could not open device unknown-block(7,0). [ 465.027950][ T9377] loop6: detected capacity change from 0 to 2048 [ 465.037075][ T9374] md: md_import_device returned -16 [ 465.042285][ T9367] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1160: error while reading EA inode 12 err=-117 [ 465.044778][ T26] audit: type=1800 audit(1789713977.499:301): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1161" name="addr_adrfam" dev="configfs" ino=53019 res=0 errno=0 [ 465.082637][ T9367] EXT4-fs (loop1): 1 orphan inode deleted [ 465.131593][ T26] audit: type=1800 audit(1789713977.589:302): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1161" name="addr_traddr" dev="configfs" ino=53631 res=0 errno=0 [ 465.155649][ T9367] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 465.225765][ T26] audit: type=1800 audit(1789713977.639:303): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1161" name="addr_trsvcid" dev="configfs" ino=53632 res=0 errno=0 [ 465.312452][ T9377] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 465.339084][ T9372] nvme nvme0: failed to connect socket: -111 [ 466.658268][ T9391] loop3: detected capacity change from 0 to 512 [ 466.708114][ T9391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 466.717327][ T9391] System zones: 1-12 [ 466.913302][ T9391] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1167: missing EA_INODE flag [ 466.934080][ T9376] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 466.948822][ T9376] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 466.961421][ T9376] EXT4-fs (loop6): This should not happen!! Data will be lost [ 466.961421][ T9376] [ 466.971114][ T9376] EXT4-fs (loop6): Total free blocks count 0 [ 466.977254][ T9376] EXT4-fs (loop6): Free/Dirty block details [ 466.983376][ T9376] EXT4-fs (loop6): free_blocks=4096 [ 466.988751][ T9376] EXT4-fs (loop6): dirty_blocks=64 [ 466.993879][ T9376] EXT4-fs (loop6): Block reservation details [ 467.001957][ T9376] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 467.086597][ T4606] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 467.889271][ T4606] EXT4-fs (loop6): This should not happen!! Data will be lost [ 467.889271][ T4606] [ 467.902362][ T9391] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1167: error while reading EA inode 12 err=-117 [ 467.926743][ T9403] loop1: detected capacity change from 0 to 2048 [ 467.954971][ T9391] EXT4-fs (loop3): 1 orphan inode deleted [ 468.005250][ T9391] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 468.112986][ T9403] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 468.310159][ T9411] device-mapper: table: 248:0: : unknown target type [ 468.331118][ T9411] device-mapper: ioctl: error adding target to table [ 468.528822][ T9427] md: couldn't update array info. -22 [ 468.856785][ T9430] md: could not open device unknown-block(7,0). [ 468.894542][ T26] audit: type=1800 audit(1789713981.529:304): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1175" name="attr_allow_any_host" dev="configfs" ino=53715 res=0 errno=0 [ 468.925964][ T9430] md: md_import_device returned -16 [ 468.938612][ T9432] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 468.957267][ T9418] device-mapper: table: 248:0: cach: unknown target type [ 468.964592][ T9418] device-mapper: ioctl: error adding target to table [ 468.998139][ T26] audit: type=1800 audit(1789713981.569:305): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1175" name="addr_trtype" dev="configfs" ino=53716 res=0 errno=0 [ 469.021780][ T26] audit: type=1800 audit(1789713981.659:306): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1175" name="addr_adrfam" dev="configfs" ino=53718 res=0 errno=0 [ 469.064904][ T9432] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 469.115783][ T26] audit: type=1800 audit(1789713981.699:307): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1175" name="addr_traddr" dev="configfs" ino=53722 res=0 errno=0 [ 469.118538][ T9435] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 469.137093][ T26] audit: type=1800 audit(1789713981.749:308): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1175" name="addr_trsvcid" dev="configfs" ino=53729 res=0 errno=0 [ 469.244587][ T9444] loop6: detected capacity change from 0 to 128 [ 469.275793][ T9432] nvme nvme0: failed to connect socket: -111 [ 469.387906][ T9444] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 469.454911][ T9444] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.018714][ T4339] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 471.086960][ T4339] usb 2-1: Using ep0 maxpacket: 16 [ 472.326995][ T4339] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 472.344629][ T4339] usb 2-1: can't read configurations, error -71 [ 472.416053][ T9495] md: couldn't update array info. -22 [ 472.801813][ T9508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'. [ 472.825353][ T9506] loop6: detected capacity change from 0 to 128 [ 472.920163][ T9515] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1191'. [ 473.502066][ T9506] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 473.587592][ T9506] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.881658][ T9531] md: could not open device unknown-block(7,0). [ 474.003767][ T9527] device-mapper: table: 248:0: : unknown target type [ 474.837376][ T9527] device-mapper: ioctl: error adding target to table [ 474.859146][ T9531] md: md_import_device returned -16 [ 474.900462][ T9533] md: loop1 has zero or unknown size, marking faulty! [ 474.941650][ T9533] md: md_import_device returned -22 [ 475.015583][ T9538] loop1: detected capacity change from 0 to 128 [ 475.125014][ T9538] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 475.145215][ T9538] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.294161][ T9550] md: couldn't update array info. -22 [ 475.312986][ T2237] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 475.677095][ T2237] usb 6-1: Using ep0 maxpacket: 16 [ 476.455527][ T9557] device-mapper: table: 248:0: cach: unknown target type [ 476.465114][ T9557] device-mapper: ioctl: error adding target to table [ 476.477150][ T2237] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 476.485265][ T2237] usb 6-1: config 0 has no interface number 0 [ 476.604121][ T2237] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 476.832404][ T2237] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 477.207192][ T2237] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 477.276975][ T2237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.357089][ T2237] usb 6-1: Product: syz [ 477.368510][ T9575] loop3: detected capacity change from 0 to 128 [ 477.392524][ T2237] usb 6-1: Manufacturer: syz [ 477.424115][ T2237] usb 6-1: SerialNumber: syz [ 477.477371][ T9575] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 477.501265][ T2237] usb 6-1: config 0 descriptor?? [ 477.534622][ T9576] device-mapper: table: 248:0: : unknown target type [ 477.556538][ T9576] device-mapper: ioctl: error adding target to table [ 477.563997][ T9542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 477.579163][ T9542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 477.588615][ T9575] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.780396][ T9586] md: could not open device unknown-block(7,0). [ 477.795571][ T9586] md: md_import_device returned -16 [ 477.803833][ T9586] md: loop1 has zero or unknown size, marking faulty! [ 477.815838][ T9586] md: md_import_device returned -22 [ 477.960140][ T9542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 478.037203][ T9542] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 478.212568][ T9599] md: couldn't update array info. -22 [ 478.812652][ T2237] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 479.110922][ T9622] device-mapper: table: 248:0: cache: Insufficient args [ 479.627120][ T9623] loop6: detected capacity change from 0 to 16 [ 480.236971][ T2237] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 480.266910][ T9622] device-mapper: ioctl: error adding target to table [ 481.250045][ T2237] asix: probe of 6-1:0.34 failed with error -61 [ 481.666113][ T2237] usb 6-1: USB disconnect, device number 3 [ 481.754818][ T9623] erofs: (device loop6): mounted with root inode @ nid 36. [ 483.030569][ T9641] xt_hashlimit: size too large, truncated to 1048576 [ 483.037516][ T9641] xt_hashlimit: invalid interval [ 483.825225][ T9653] md: couldn't update array info. -22 [ 484.008664][ T9658] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1224'. [ 484.708202][ T9656] md: could not open device unknown-block(0,0). [ 484.714643][ T9656] md: md_import_device returned -6 [ 485.013501][ T9681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'. [ 485.708598][ T9693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1230'. [ 485.747168][ T9685] loop6: detected capacity change from 0 to 4096 [ 485.841336][ T9685] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 485.947323][ T9685] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 486.127205][ T9685] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,data_err=ignore,jqfmt=vfsv1,quota,nombcache,grpid,minixdf,debug_want_extra_isize=0x0000000000000040,data_err=abort,,errors=continue. Quota mode: writeback. [ 487.784042][ T9711] loop5: detected capacity change from 0 to 512 [ 487.804255][ T9716] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 487.814490][ T9716] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 487.823889][ T26] audit: type=1800 audit(1789714000.439:309): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1222" name="attr_allow_any_host" dev="configfs" ino=54505 res=0 errno=0 [ 487.850153][ T9716] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 487.873309][ T9711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 487.899321][ T26] audit: type=1800 audit(1789714000.439:310): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1222" name="addr_trtype" dev="configfs" ino=54506 res=0 errno=0 [ 487.955691][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1235'. [ 487.965344][ T9720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1235'. [ 488.277476][ T4338] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 488.341743][ T9711] System zones: 1-12 [ 488.535654][ T9716] nvme nvme0: failed to connect socket: -512 [ 488.547004][ T4338] usb 1-1: device descriptor read/64, error -71 [ 488.791788][ T9711] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1232: missing EA_INODE flag [ 488.817181][ T4338] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 489.007187][ T4338] usb 1-1: device descriptor read/64, error -71 [ 489.027388][ T26] audit: type=1800 audit(1789714000.439:311): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1222" name="addr_adrfam" dev="configfs" ino=54507 res=0 errno=0 [ 489.127718][ T4338] usb usb1-port1: attempt power cycle [ 489.229907][ T9711] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1232: error while reading EA inode 12 err=-117 [ 489.253610][ T9711] EXT4-fs (loop5): 1 orphan inode deleted [ 489.259742][ T9711] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 489.354889][ T26] audit: type=1800 audit(1789714000.449:312): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1222" name="addr_traddr" dev="configfs" ino=54508 res=0 errno=0 [ 489.537240][ T4338] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 489.687784][ T4338] usb 1-1: device descriptor read/8, error -71 [ 489.708547][ T26] audit: type=1800 audit(1789714000.489:313): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1222" name="addr_trsvcid" dev="configfs" ino=54509 res=0 errno=0 [ 490.057013][ T4338] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 490.198890][ T4338] usb 1-1: device descriptor read/8, error -71 [ 490.334336][ T9728] md: couldn't update array info. -22 [ 490.491712][ T9728] md: could not open device unknown-block(0,0). [ 490.498994][ T4338] usb usb1-port1: unable to enumerate USB device [ 491.205512][ T9728] md: md_import_device returned -6 [ 491.349671][ T9743] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 493.240070][ T9746] loop6: detected capacity change from 0 to 2048 [ 493.952587][ T9749] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 493.953769][ T26] audit: type=1800 audit(1789714006.589:314): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1240" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 493.963839][ T9749] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 493.993928][ T9749] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 494.103278][ T9749] syz.1.1240 (9749) used greatest stack depth: 18176 bytes left [ 495.059064][ T9746] EXT4-fs warning (device loop6): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop6. [ 495.064458][ T9773] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 495.136260][ T26] audit: type=1800 audit(1789714007.699:315): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1246" name="attr_allow_any_host" dev="configfs" ino=54651 res=0 errno=0 [ 495.290897][ T9773] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 495.349964][ T9773] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 495.516324][ T26] audit: type=1800 audit(1789714007.699:316): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1246" name="addr_trtype" dev="configfs" ino=54652 res=0 errno=0 [ 495.610369][ T26] audit: type=1800 audit(1789714007.699:317): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1246" name="addr_adrfam" dev="configfs" ino=54653 res=0 errno=0 [ 495.632077][ T26] audit: type=1800 audit(1789714007.899:318): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1246" name="addr_traddr" dev="configfs" ino=55548 res=0 errno=0 [ 495.743830][ T9786] loop1: detected capacity change from 0 to 128 [ 495.832343][ T26] audit: type=1800 audit(1789714007.979:319): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1246" name="addr_trsvcid" dev="configfs" ino=54658 res=0 errno=0 [ 495.866601][ T9788] xt_hashlimit: size too large, truncated to 1048576 [ 495.873517][ T9788] xt_hashlimit: invalid interval [ 495.945102][ T9789] loop3: detected capacity change from 0 to 16 [ 497.232574][ T9774] nvme nvme0: failed to connect socket: -512 [ 498.254867][ T9786] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 498.274108][ T9789] erofs: (device loop3): mounted with root inode @ nid 36. [ 498.310680][ T9789] attempt to access beyond end of device [ 498.310680][ T9789] loop3: rw=524288, want=1342177304, limit=16 [ 498.322887][ T9789] attempt to access beyond end of device [ 498.322887][ T9789] loop3: rw=0, want=1342177280, limit=16 [ 498.423314][ T9789] attempt to access beyond end of device [ 498.423314][ T9789] loop3: rw=524288, want=1342179832, limit=16 [ 498.508204][ T9786] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.557087][ T26] audit: type=1800 audit(1789714010.969:320): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1250" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 498.712412][ T9795] loop6: detected capacity change from 0 to 512 [ 498.749861][ T9796] loop5: detected capacity change from 0 to 128 [ 498.803335][ T9796] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 498.816953][ T9795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 498.855360][ T9795] System zones: 1-12 [ 498.872975][ T9796] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.893456][ T9795] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1252: missing EA_INODE flag [ 498.963065][ T9801] md: could not open device unknown-block(7,0). [ 499.123403][ T9801] md: md_import_device returned -16 [ 499.143744][ T9795] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1252: error while reading EA inode 12 err=-117 [ 499.253100][ T9803] md: could not open device unknown-block(7,1). [ 499.271404][ T9795] EXT4-fs (loop6): 1 orphan inode deleted [ 499.298086][ T9803] md: md_import_device returned -16 [ 499.306798][ T9795] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 499.773211][ T9807] loop3: detected capacity change from 0 to 32768 [ 500.084080][ T9807] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 501.104464][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 501.144366][ T9826] device-mapper: table: 248:0: cache: Error opening metadata device [ 501.163605][ T9826] device-mapper: ioctl: error adding target to table [ 501.330062][ T9835] md: couldn't update array info. -22 [ 501.336101][ T9835] md: could not open device unknown-block(7,0). [ 501.345814][ T9835] md: md_import_device returned -16 [ 501.353536][ T9834] loop5: detected capacity change from 0 to 256 [ 501.399274][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.401945][ T9828] loop3: detected capacity change from 0 to 4096 [ 501.405729][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.470093][ T26] audit: type=1800 audit(1789714014.109:321): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1264" name="attr_allow_any_host" dev="configfs" ino=54907 res=0 errno=0 [ 501.490298][ T9834] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 501.493220][ T9837] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 501.509304][ T9828] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 501.545522][ T26] audit: type=1800 audit(1789714014.129:322): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1264" name="addr_adrfam" dev="configfs" ino=54908 res=0 errno=0 [ 501.572429][ T9838] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 501.599054][ T9837] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 501.610207][ T9828] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 501.625605][ T26] audit: type=1800 audit(1789714014.209:323): pid=9838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1264" name="addr_traddr" dev="configfs" ino=54909 res=0 errno=0 [ 501.683751][ T9828] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,data_err=ignore,jqfmt=vfsv1,quota,nombcache,grpid,minixdf,debug_want_extra_isize=0x0000000000000040,data_err=abort,,errors=continue. Quota mode: writeback. [ 501.710104][ T26] audit: type=1800 audit(1789714014.239:324): pid=9837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1264" name="addr_trsvcid" dev="configfs" ino=54912 res=0 errno=0 [ 502.296102][ T9837] nvme nvme0: failed to connect socket: -512 [ 503.102983][ T9858] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1268'. [ 503.140693][ T9862] loop1: detected capacity change from 0 to 2048 [ 503.407875][ T9870] device-mapper: table: 248:0: cache: Error opening metadata device [ 503.447285][ T9870] device-mapper: ioctl: error adding target to table [ 503.556881][ T9862] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 503.840433][ T9877] md: couldn't update array info. -22 [ 505.173522][ T9882] md: could not open device unknown-block(7,0). [ 505.202673][ T9884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1278'. [ 505.202848][ T9882] md: md_import_device returned -16 [ 505.465111][ T26] audit: type=1800 audit(1789714018.099:325): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1279" name="attr_allow_any_host" dev="configfs" ino=54987 res=0 errno=0 [ 505.468116][ T9893] loop1: detected capacity change from 0 to 4096 [ 505.498335][ T9897] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 505.545089][ T9893] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 505.552340][ T9897] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 505.588112][ T26] audit: type=1800 audit(1789714018.139:326): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1279" name="addr_adrfam" dev="configfs" ino=54988 res=0 errno=0 [ 505.612667][ T9899] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 505.615313][ T9893] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 505.640300][ T26] audit: type=1800 audit(1789714018.189:327): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1279" name="addr_traddr" dev="configfs" ino=54989 res=0 errno=0 [ 505.648255][ T9893] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,data_err=ignore,jqfmt=vfsv1,quota,nombcache,grpid,minixdf,debug_want_extra_isize=0x0000000000000040,data_err=abort,,errors=continue. Quota mode: writeback. [ 505.668966][ T26] audit: type=1800 audit(1789714018.249:328): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1279" name="addr_trsvcid" dev="configfs" ino=54990 res=0 errno=0 [ 505.746177][ T9897] nvme nvme0: failed to connect socket: -111 [ 506.315499][ T9913] loop3: detected capacity change from 0 to 2048 [ 506.413728][ T9913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.414663][ T9918] loop5: detected capacity change from 0 to 512 [ 506.483432][ T9921] device-mapper: table: 248:0: cache: Error opening metadata device [ 506.491770][ T9921] device-mapper: ioctl: error adding target to table [ 506.537202][ T9923] loop6: detected capacity change from 0 to 2048 [ 506.552368][ T9925] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(9) [ 506.652427][ T9918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 506.673716][ T9918] System zones: 1-12 [ 506.682428][ T9923] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.942011][ T9918] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1283: missing EA_INODE flag [ 507.156492][ T9918] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1283: error while reading EA inode 12 err=-117 [ 507.867306][ T9918] EXT4-fs (loop5): 1 orphan inode deleted [ 507.896929][ T9918] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 508.827887][ T9949] loop3: detected capacity change from 0 to 2048 [ 509.081132][ T9954] loop6: detected capacity change from 0 to 16 [ 509.108399][ T9949] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 509.169626][ T9953] loop5: detected capacity change from 0 to 4096 [ 509.176254][ T9954] erofs: (device loop6): mounted with root inode @ nid 36. [ 509.186297][ T9954] attempt to access beyond end of device [ 509.186297][ T9954] loop6: rw=524288, want=1342177304, limit=16 [ 509.198538][ T9954] attempt to access beyond end of device [ 509.198538][ T9954] loop6: rw=0, want=1342177280, limit=16 [ 509.209862][ T26] audit: type=1800 audit(1789714021.849:329): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1291" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 509.248889][ T9954] attempt to access beyond end of device [ 509.248889][ T9954] loop6: rw=524288, want=1342179832, limit=16 [ 509.293551][ T9958] device-mapper: table: 248:0: cache: Insufficient args [ 509.300883][ T9958] device-mapper: ioctl: error adding target to table [ 509.336629][ T9953] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 509.376518][ T9953] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 509.753805][ T9953] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,data_err=ignore,jqfmt=vfsv1,quota,nombcache,grpid,minixdf,debug_want_extra_isize=0x0000000000000040,data_err=abort,,errors=continue. Quota mode: writeback. [ 511.119093][ T9974] device-mapper: table: 248:0: cache: Error opening cache device [ 511.129218][ T9974] device-mapper: ioctl: error adding target to table [ 511.142451][ T9978] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(9) [ 511.862930][ T9986] md: couldn't update array info. -22 [ 511.902820][ T9986] md: could not open device unknown-block(7,0). [ 511.910713][ T9986] md: md_import_device returned -16 [ 512.355560][ T9989] loop3: detected capacity change from 0 to 256 [ 512.482868][ T9989] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 512.528534][ T9991] device-mapper: table: 248:0: cache: Insufficient args [ 512.576352][ T9991] device-mapper: ioctl: error adding target to table [ 513.376810][T10000] loop5: detected capacity change from 0 to 1024 [ 513.450292][ T9999] loop1: detected capacity change from 0 to 2048 [ 513.575110][ T9999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 514.860777][T10000] EXT4-fs (loop5): Ignoring removed bh option [ 515.037785][T10000] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 515.076441][T10018] loop6: detected capacity change from 0 to 256 [ 515.181337][T10000] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.386028][T10018] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 516.438263][T10024] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.1299: Freeing blocks not in datazone - block = 0, count = 16 [ 516.535733][ T26] audit: type=1800 audit(1789714029.169:330): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1310" name="attr_allow_any_host" dev="configfs" ino=56142 res=0 errno=0 [ 516.558746][T10028] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 516.629513][T10024] EXT4-fs (loop5): Remounting filesystem read-only [ 516.700381][T10029] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 516.752139][T10028] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 516.773278][ T26] audit: type=1800 audit(1789714029.199:331): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1310" name="addr_trtype" dev="configfs" ino=56143 res=0 errno=0 [ 516.785523][T10028] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 516.803406][T10032] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(9) [ 516.901723][ T26] audit: type=1800 audit(1789714029.339:332): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1310" name="addr_adrfam" dev="configfs" ino=56151 res=0 errno=0 [ 516.992789][T10029] nvme nvme0: failed to connect socket: -111 [ 517.023689][ T26] audit: type=1800 audit(1789714029.389:333): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1310" name="addr_traddr" dev="configfs" ino=56152 res=0 errno=0 [ 517.059200][T10039] loop6: detected capacity change from 0 to 512 [ 517.065722][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1314'. [ 517.100410][T10039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 517.121319][ T26] audit: type=1800 audit(1789714029.409:334): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1310" name="addr_trsvcid" dev="configfs" ino=56153 res=0 errno=0 [ 517.149176][T10039] System zones: 1-12 [ 517.155502][T10039] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1312: missing EA_INODE flag [ 517.170306][T10039] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1312: error while reading EA inode 12 err=-117 [ 517.183319][T10039] EXT4-fs (loop6): 1 orphan inode deleted [ 517.189555][T10039] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 517.427921][T10045] xt_hashlimit: size too large, truncated to 1048576 [ 517.435146][T10045] xt_hashlimit: invalid interval [ 517.733539][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1315'. [ 517.743550][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1315'. [ 518.358382][ T2237] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 518.617036][ T2237] usb 2-1: device descriptor read/64, error -71 [ 518.887136][ T2237] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 519.127103][ T2237] usb 2-1: device descriptor read/64, error -71 [ 519.267103][ T2237] usb usb2-port1: attempt power cycle [ 519.687013][ T2237] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 519.845207][ T2237] usb 2-1: device descriptor read/8, error -71 [ 520.226973][ T2237] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 520.327144][ T2237] usb 2-1: device descriptor read/8, error -71 [ 520.366073][T10064] loop5: detected capacity change from 0 to 2048 [ 520.585892][T10064] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 520.640344][ T2237] usb usb2-port1: unable to enumerate USB device [ 520.893894][T10079] loop1: detected capacity change from 0 to 32768 [ 520.937715][T10081] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1319'. [ 520.946809][T10081] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1319'. [ 521.417556][T10079] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 524.272666][T10089] loop3: detected capacity change from 0 to 1024 [ 524.374654][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 524.423520][T10089] EXT4-fs (loop3): Ignoring removed bh option [ 524.553207][T10089] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 524.587772][ T26] audit: type=1800 audit(1789714037.229:335): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1325" name="attr_allow_any_host" dev="configfs" ino=55253 res=0 errno=0 [ 524.627058][T10095] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 524.836136][T10099] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 524.848130][ T4585] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 524.856424][T10089] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.378084][ T26] audit: type=1800 audit(1789714037.259:336): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1325" name="addr_trtype" dev="configfs" ino=55254 res=0 errno=0 [ 525.436215][ T26] audit: type=1800 audit(1789714037.469:337): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1325" name="addr_adrfam" dev="configfs" ino=55258 res=0 errno=0 [ 525.498426][T10106] loop6: detected capacity change from 0 to 512 [ 525.507801][T10105] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.1322: Freeing blocks not in datazone - block = 0, count = 16 [ 525.585531][T10105] EXT4-fs (loop3): Remounting filesystem read-only [ 526.056510][T10096] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 526.106197][T10117] loop1: detected capacity change from 0 to 16 [ 526.129128][T10106] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 526.192025][T10117] erofs: (device loop1): mounted with root inode @ nid 36. [ 526.198481][T10106] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.212035][T10117] attempt to access beyond end of device [ 526.212035][T10117] loop1: rw=524288, want=1342177304, limit=16 [ 526.224340][T10117] attempt to access beyond end of device [ 526.224340][T10117] loop1: rw=0, want=1342177280, limit=16 [ 526.235944][ T26] audit: type=1800 audit(1789714038.879:338): pid=10117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1329" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 526.257268][T10096] EXT4-fs (loop3): Remounting filesystem read-only [ 526.277843][T10117] attempt to access beyond end of device [ 526.277843][T10117] loop1: rw=524288, want=1342179832, limit=16 [ 527.356222][T10126] loop1: detected capacity change from 0 to 1024 [ 527.641279][T10126] EXT4-fs (loop1): Ignoring removed bh option [ 527.871612][T10126] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 528.102592][T10134] xt_hashlimit: size too large, truncated to 1048576 [ 528.109512][T10134] xt_hashlimit: invalid interval [ 529.192130][T10126] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.266196][T10139] loop6: detected capacity change from 0 to 128 [ 529.774655][T10139] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 529.806069][T10139] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.898561][T10126] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.1333: Freeing blocks not in datazone - block = 0, count = 16 [ 529.917356][T10126] EXT4-fs (loop1): Remounting filesystem read-only [ 530.757346][T10152] loop5: detected capacity change from 0 to 256 [ 530.830293][T10152] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 531.002973][T10132] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 531.093960][T10155] loop6: detected capacity change from 0 to 2048 [ 531.101226][T10132] EXT4-fs (loop1): Remounting filesystem read-only [ 531.469894][T10155] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 531.715874][T10172] loop5: detected capacity change from 0 to 128 [ 531.788157][T10172] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 532.203197][T10172] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.436121][T10181] loop1: detected capacity change from 0 to 128 [ 532.512639][T10181] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 532.555186][T10181] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.049374][T10201] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1347'. [ 535.953762][T10206] loop3: detected capacity change from 0 to 128 [ 536.052102][T10206] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 536.281457][T10206] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.502511][T10217] loop1: detected capacity change from 0 to 128 [ 537.107420][T10217] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 537.253723][ T26] audit: type=1800 audit(1789714049.889:339): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1354" name="attr_allow_any_host" dev="configfs" ino=57556 res=0 errno=0 [ 537.276707][T10224] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 537.280053][T10217] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.344823][ T26] audit: type=1800 audit(1789714049.919:340): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1354" name="addr_trtype" dev="configfs" ino=57557 res=0 errno=0 [ 537.346170][T10224] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 537.365922][ T26] audit: type=1800 audit(1789714049.979:341): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1354" name="addr_adrfam" dev="configfs" ino=56517 res=0 errno=0 [ 537.412331][ T26] audit: type=1800 audit(1789714050.049:342): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1354" name="addr_traddr" dev="configfs" ino=56518 res=0 errno=0 [ 537.412726][T10226] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 537.506392][ T26] audit: type=1800 audit(1789714050.139:343): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1354" name="addr_trsvcid" dev="configfs" ino=57562 res=0 errno=0 [ 537.532728][T10224] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 537.953401][T10224] nvme nvme0: failed to connect socket: -111 [ 538.140771][T10232] jffs2: notice: (10232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 538.864088][T10243] loop5: detected capacity change from 0 to 512 [ 539.146813][T10243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 539.279200][T10243] System zones: 1-12 [ 539.332474][T10243] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1357: missing EA_INODE flag [ 539.393608][T10243] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1357: error while reading EA inode 12 err=-117 [ 539.466602][T10246] loop3: detected capacity change from 0 to 512 [ 539.501491][T10243] EXT4-fs (loop5): 1 orphan inode deleted [ 539.512792][T10243] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 539.584884][T10248] loop6: detected capacity change from 0 to 1024 [ 539.650157][T10248] EXT4-fs (loop6): Ignoring removed bh option [ 539.689819][T10246] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 539.733666][T10246] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.766281][T10248] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 540.488639][T10248] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.711611][T10260] loop1: detected capacity change from 0 to 256 [ 540.931706][T10263] EXT4-fs error (device loop6): ext4_free_blocks:6231: comm syz.6.1360: Freeing blocks not in datazone - block = 0, count = 16 [ 542.034471][T10263] EXT4-fs (loop6): Remounting filesystem read-only [ 542.068426][T10260] FAT-fs (loop1): Unrecognized mount option "rų¶°" or missing value [ 543.095864][T10275] loop6: detected capacity change from 0 to 512 [ 543.334185][T10275] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 543.387452][T10283] loop3: detected capacity change from 0 to 128 [ 543.434329][T10285] loop5: detected capacity change from 0 to 2048 [ 543.434550][T10275] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.469876][T10283] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 543.541734][T10285] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 543.566965][ T8566] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 543.567133][T10283] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.407214][ T8566] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.415385][ T8566] usb 2-1: config 0 has no interface number 0 [ 544.446819][ T8566] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.525733][ T8566] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.892842][ T8566] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.055147][T10305] loop5: detected capacity change from 0 to 128 [ 545.089181][ T8566] usb 2-1: config 0 interface 1 has no altsetting 0 [ 545.125955][ T8566] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 545.155923][ T8566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.182514][T10305] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 545.204479][ T8566] usb 2-1: config 0 descriptor?? [ 545.214940][T10305] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.897159][ T8566] uclogic 0003:145F:0212.000B: pen parameters not found [ 545.916488][ T8566] uclogic 0003:145F:0212.000B: interface is invalid, ignoring [ 546.116635][ T8566] usb 2-1: USB disconnect, device number 17 [ 546.423827][T10316] loop3: detected capacity change from 0 to 1024 [ 546.514314][T10316] EXT4-fs (loop3): Ignoring removed bh option [ 546.586065][T10316] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 546.665841][T10316] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.731596][T10321] loop6: detected capacity change from 0 to 128 [ 546.755035][T10322] loop1: detected capacity change from 0 to 1024 [ 547.084478][T10327] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.1372: Freeing blocks not in datazone - block = 0, count = 16 [ 547.104894][T10327] EXT4-fs (loop3): Remounting filesystem read-only [ 547.222775][T10322] EXT4-fs (loop1): Ignoring removed bh option [ 547.667805][T10321] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 547.761349][T10321] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.782688][T10322] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 547.907027][T10322] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.098466][ T26] audit: type=1800 audit(1789714060.739:344): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1376" name="attr_allow_any_host" dev="configfs" ino=57759 res=0 errno=0 [ 548.134905][T10334] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 548.145343][T10334] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 548.192251][ T26] audit: type=1800 audit(1789714060.769:345): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1376" name="addr_trtype" dev="configfs" ino=57760 res=0 errno=0 [ 548.243853][ T26] audit: type=1800 audit(1789714060.779:346): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1376" name="addr_adrfam" dev="configfs" ino=57761 res=0 errno=0 [ 548.267403][T10334] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 548.274369][ T26] audit: type=1800 audit(1789714060.909:347): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1376" name="addr_traddr" dev="configfs" ino=56823 res=0 errno=0 [ 548.280405][T10334] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 548.303077][ T26] audit: type=1800 audit(1789714060.909:348): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1376" name="addr_trsvcid" dev="configfs" ino=56824 res=0 errno=0 [ 549.046340][T10341] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.1375: Freeing blocks not in datazone - block = 0, count = 16 [ 549.389337][T10341] EXT4-fs (loop1): Remounting filesystem read-only [ 549.568994][T10334] nvme nvme0: failed to connect socket: -512 [ 550.476784][T10359] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1384'. [ 551.032619][ T4185] nvmet_tcp: failed to allocate queue [ 551.057418][T10362] loop5: detected capacity change from 0 to 256 [ 551.083746][T10362] FAT-fs (loop5): Unrecognized mount option "rų¶°" or missing value [ 551.177550][T10364] loop3: detected capacity change from 0 to 256 [ 551.242271][T10364] FAT-fs (loop3): Unrecognized mount option "rų¶°" or missing value [ 551.269281][T10366] loop6: detected capacity change from 0 to 128 [ 551.352996][T10370] loop1: detected capacity change from 0 to 512 [ 551.441784][T10366] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.521016][T10366] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.177704][T10381] loop3: detected capacity change from 0 to 1024 [ 552.182359][T10370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 553.189495][T10381] EXT4-fs (loop3): Ignoring removed bh option [ 553.228454][T10370] System zones: 1-12 [ 553.373990][T10370] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1386: missing EA_INODE flag [ 553.378731][T10381] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noquota,barrier,auto_da_alloc,quota,bh,. Quota mode: writeback. [ 553.436033][T10370] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1386: error while reading EA inode 12 err=-117 [ 553.480797][T10381] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.627368][T10370] EXT4-fs (loop1): 1 orphan inode deleted [ 553.662229][T10370] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 553.681345][T10392] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 553.734771][T10399] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.1388: Freeing blocks not in datazone - block = 0, count = 16 [ 553.763014][T10399] EXT4-fs (loop3): Remounting filesystem read-only [ 553.914149][T10392] EXT4-fs (loop3): Remounting filesystem read-only [ 554.141938][T10401] loop6: detected capacity change from 0 to 512 [ 554.245667][ T26] audit: type=1800 audit(1789714066.879:349): pid=10405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1392" name="attr_allow_any_host" dev="configfs" ino=56965 res=0 errno=0 [ 554.251155][T10405] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 554.309125][T10408] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 554.309982][T10401] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 554.348484][T10408] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 554.391754][ T26] audit: type=1800 audit(1789714066.879:350): pid=10405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1392" name="addr_trtype" dev="configfs" ino=56966 res=0 errno=0 [ 554.414435][ T26] audit: type=1800 audit(1789714066.949:351): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1392" name="addr_adrfam" dev="configfs" ino=56967 res=0 errno=0 [ 554.435684][T10410] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 554.465773][ T26] audit: type=1800 audit(1789714066.989:352): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1392" name="addr_traddr" dev="configfs" ino=57920 res=0 errno=0 [ 554.498050][T10401] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.498881][ T150] [ 554.510965][ T150] ====================================================== [ 554.517984][ T150] WARNING: possible circular locking dependency detected [ 554.525086][ T150] syzkaller #0 Not tainted [ 554.529496][ T150] ------------------------------------------------------ [ 554.536504][ T150] kworker/0:1H/150 is trying to acquire lock: [ 554.542561][ T150] ffff88814728c138 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: flush_workqueue+0x14e/0x1390 [ 554.552829][ T150] [ 554.552829][ T150] but task is already holding lock: [ 554.560194][ T150] ffffc9000184fd00 ((work_completion)(&queue->io_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 554.568809][ T26] audit: type=1800 audit(1789714067.049:353): pid=10410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1392" name="addr_trsvcid" dev="configfs" ino=56968 res=0 errno=0 [ 554.571165][ T150] [ 554.571165][ T150] which lock already depends on the new lock. [ 554.571165][ T150] [ 554.571171][ T150] [ 554.571171][ T150] the existing dependency chain (in reverse order) is: [ 554.571177][ T150] [ 554.571177][ T150] -> #2 ((work_completion)(&queue->io_work)){+.+.}-{0:0}: [ 554.620695][ T150] __flush_work+0x116/0x210 [ 554.625729][ T150] nvmet_tcp_release_queue_work+0x32f/0xdb0 [ 554.632269][ T150] process_one_work+0x867/0xff0 [ 554.637650][ T150] worker_thread+0xad7/0x12a0 [ 554.642948][ T150] kthread+0x42e/0x520 [ 554.647631][ T150] ret_from_fork+0x1f/0x30 [ 554.652602][ T150] [ 554.652602][ T150] -> #1 ((work_completion)(&queue->release_work)){+.+.}-{0:0}: [ 554.662588][ T150] process_one_work+0x7ba/0xff0 [ 554.668137][ T150] worker_thread+0xad7/0x12a0 [ 554.673334][ T150] kthread+0x42e/0x520 [ 554.678041][ T150] ret_from_fork+0x1f/0x30 [ 554.682976][ T150] [ 554.682976][ T150] -> #0 ((wq_completion)nvmet-wq){+.+.}-{0:0}: [ 554.691313][ T150] __lock_acquire+0x2c66/0x7b50 [ 554.696685][ T150] lock_acquire+0x19e/0x400 [ 554.701798][ T150] flush_workqueue+0x16a/0x1390 [ 554.707169][ T150] nvmet_tcp_install_queue+0x7e/0x380 [ 554.713079][ T150] nvmet_install_queue+0x335/0x760 [ 554.718766][ T150] nvmet_execute_admin_connect+0x332/0x750 [ 554.725113][ T150] nvmet_tcp_io_work+0x1923/0x8510 [ 554.730781][ T150] process_one_work+0x867/0xff0 [ 554.736174][ T150] worker_thread+0xad7/0x12a0 [ 554.741390][ T150] kthread+0x42e/0x520 [ 554.745996][ T150] ret_from_fork+0x1f/0x30 [ 554.750954][ T150] [ 554.750954][ T150] other info that might help us debug this: [ 554.750954][ T150] [ 554.761182][ T150] Chain exists of: [ 554.761182][ T150] (wq_completion)nvmet-wq --> (work_completion)(&queue->release_work) --> (work_completion)(&queue->io_work) [ 554.761182][ T150] [ 554.778919][ T150] Possible unsafe locking scenario: [ 554.778919][ T150] [ 554.786369][ T150] CPU0 CPU1 [ 554.791760][ T150] ---- ---- [ 554.797133][ T150] lock((work_completion)(&queue->io_work)); [ 554.803201][ T150] lock((work_completion)(&queue->release_work)); [ 554.812241][ T150] lock((work_completion)(&queue->io_work)); [ 554.820834][ T150] lock((wq_completion)nvmet-wq); [ 554.825962][ T150] [ 554.825962][ T150] *** DEADLOCK *** [ 554.825962][ T150] [ 554.834144][ T150] 2 locks held by kworker/0:1H/150: [ 554.839453][ T150] #0: ffff88814728c938 ((wq_completion)nvmet_tcp_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 554.850265][ T150] #1: ffffc9000184fd00 ((work_completion)(&queue->io_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 554.861682][ T150] [ 554.861682][ T150] stack backtrace: [ 554.867576][ T150] CPU: 0 PID: 150 Comm: kworker/0:1H Not tainted syzkaller #0 [ 554.875033][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.885091][ T150] Workqueue: nvmet_tcp_wq nvmet_tcp_io_work [ 554.890996][ T150] Call Trace: [ 554.894281][ T150] [ 554.897305][ T150] dump_stack_lvl+0x188/0x250 [ 554.901999][ T150] ? load_image+0x410/0x410 [ 554.906525][ T150] ? show_regs_print_info+0x20/0x20 [ 554.911752][ T150] ? print_circular_bug+0x12b/0x1a0 [ 554.916960][ T150] check_noncircular+0x296/0x330 [ 554.921895][ T150] ? add_chain_block+0x9b0/0x9b0 [ 554.926852][ T150] ? add_chain_block+0x9b0/0x9b0 [ 554.931795][ T150] ? lockdep_lock+0xf1/0x1f0 [ 554.936383][ T150] ? add_lock_to_list+0x18d/0x280 [ 554.941430][ T150] ? mark_lock+0x94/0x320 [ 554.945749][ T150] ? _find_first_zero_bit+0xd1/0xf0 [ 554.950975][ T150] __lock_acquire+0x2c66/0x7b50 [ 554.955858][ T150] ? verify_lock_unused+0x140/0x140 [ 554.961220][ T150] ? verify_lock_unused+0x140/0x140 [ 554.966494][ T150] ? verify_lock_unused+0x140/0x140 [ 554.971785][ T150] ? memset+0x1e/0x40 [ 554.975873][ T150] lock_acquire+0x19e/0x400 [ 554.980386][ T150] ? flush_workqueue+0x14e/0x1390 [ 554.985423][ T150] ? read_lock_is_recursive+0x10/0x10 [ 554.990796][ T150] ? __init_swait_queue_head+0xa4/0x140 [ 554.996415][ T150] flush_workqueue+0x16a/0x1390 [ 555.001361][ T150] ? flush_workqueue+0x14e/0x1390 [ 555.006517][ T150] ? nvmet_alloc_ctrl+0xa16/0x1260 [ 555.011742][ T150] ? rcu_work_rcufn+0x120/0x120 [ 555.016615][ T150] ? queue_delayed_work_on+0x19d/0x1f0 [ 555.022177][ T150] nvmet_tcp_install_queue+0x7e/0x380 [ 555.027556][ T150] ? nvmet_sq_setup+0x24/0x120 [ 555.032330][ T150] ? nvmet_tcp_disc_port_addr+0xc0/0xc0 [ 555.037869][ T150] nvmet_install_queue+0x335/0x760 [ 555.042990][ T150] nvmet_execute_admin_connect+0x332/0x750 [ 555.048799][ T150] ? aa_sock_msg_perm+0x94/0x150 [ 555.053816][ T150] ? nvmet_parse_connect_cmd+0x290/0x290 [ 555.059469][ T150] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 555.064826][ T150] ? sock_recvmsg+0x6f/0xf0 [ 555.069376][ T150] nvmet_tcp_io_work+0x1923/0x8510 [ 555.074508][ T150] ? nvmet_tcp_release_queue_work+0xdb0/0xdb0 [ 555.080578][ T150] ? register_lock_class+0xc0/0x880 [ 555.085874][ T150] ? __lock_acquire+0x13dc/0x7b50 [ 555.090894][ T150] ? is_dynamic_key+0x1f0/0x1f0 [ 555.095740][ T150] ? mark_lock+0x94/0x320 [ 555.100062][ T150] ? __lock_acquire+0x13dc/0x7b50 [ 555.105084][ T150] ? verify_lock_unused+0x140/0x140 [ 555.110295][ T150] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 555.116446][ T150] ? verify_lock_unused+0x140/0x140 [ 555.121737][ T150] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 555.127722][ T150] ? _local_bh_enable+0xa0/0xa0 [ 555.132574][ T150] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 555.138554][ T150] ? _raw_spin_unlock_irq+0x1f/0x40 [ 555.143774][ T150] process_one_work+0x867/0xff0 [ 555.148738][ T150] ? worker_detach_from_pool+0x240/0x240 [ 555.154372][ T150] ? lockdep_hardirqs_off+0x70/0x100 [ 555.159654][ T150] ? _raw_spin_lock_irq+0xb7/0xf0 [ 555.164675][ T150] ? _raw_spin_lock_irqsave+0x100/0x100 [ 555.170234][ T150] ? wq_worker_running+0x97/0x170 [ 555.175270][ T150] worker_thread+0xad7/0x12a0 [ 555.179960][ T150] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 555.185885][ T150] kthread+0x42e/0x520 [ 555.189989][ T150] ? rcu_lock_release+0x20/0x20 [ 555.195024][ T150] ? kthread_blkcg+0xd0/0xd0 [ 555.199615][ T150] ret_from_fork+0x1f/0x30 [ 555.204037][ T150] [ 559.567022][ T4185] nvmet: ctrl 1 keep-alive timer (5 seconds) expired! [ 559.573907][ T4185] nvmet: ctrl 1 fatal error occurred! [ 562.838752][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.845290][ T1419] ieee802154 phy1 wpan1: encryption failed: -22