last executing test programs: 6m56.002076121s ago: executing program 3 (id=5798): syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000001a009b8a140000003b000000000000000000", 0x16) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xa7, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000540)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 6m54.384938219s ago: executing program 3 (id=5802): socket$igmp(0x2, 0x3, 0x2) symlinkat(&(0x7f0000000580)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000680)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a000000ffffffffff010000000000000000000000000001fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000002d9477d0a6f74000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0e7f77333686147465be232509966c859c789666754324ce5abdba9538b8d424f8a7aca400"/309], 0x110) sched_setscheduler(0x0, 0x2, 0x0) io_setup(0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000a40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x4000039, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000c40)='.\x00', 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x42, 0x40) fallocate(r5, 0x0, 0x8e14, 0x8ffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000d00), 0x1200010, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[], 0x68}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="d8000000190081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775010016a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920726f9a941", 0xd8}], 0x1}, 0x0) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) 6m43.501725424s ago: executing program 3 (id=5830): syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000001a009b8a140000003b000000000000000000", 0x16) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xa7, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000540)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 6m39.715990052s ago: executing program 3 (id=5835): syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000001a009b8a140000003b000000000000000000", 0x16) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x300, 0x0, 0x50565559, 0x1, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x0, 0x7}}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000540)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 6m37.554627023s ago: executing program 3 (id=5839): r0 = syz_open_dev$video(&(0x7f0000000740), 0x81, 0xa082) dup(r0) syz_open_procfs(0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 6m37.367181208s ago: executing program 3 (id=5841): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x2200002, &(0x7f0000000a40)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000b00)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") syz_mount_image$fuse(0x0, &(0x7f0000001080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 6m21.222866206s ago: executing program 32 (id=5841): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x2200002, &(0x7f0000000a40)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 2m31.124238424s ago: executing program 4 (id=6504): syz_open_dev$vim2m(0x0, 0xb173, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000540)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 2m29.716025398s ago: executing program 4 (id=6509): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c0000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0xfd8) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x1000040, &(0x7f0000000380)=ANY=[@ANYRES8=r4, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r4], 0x1, 0x3a2, &(0x7f00000010c0)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000001480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000406000008001b"], 0x30}}, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff004) 2m28.474046897s ago: executing program 4 (id=6513): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) bind$unix(r1, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') pread64(r4, 0x0, 0x0, 0x41e) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m26.604425552s ago: executing program 4 (id=6517): bind$alg(0xffffffffffffffff, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c1e735adcc0b3", 0x20}, {&(0x7f0000001200)="fa", 0x1}], 0x2, 0x0, 0x0, 0x408d0}], 0x1, 0xc0041) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/10, 0xa}, {&(0x7f0000001340)=""/111, 0x6f}], 0x2}, 0xacfc) 2m25.373284221s ago: executing program 4 (id=6521): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) bind$unix(r1, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') pread64(r4, 0x0, 0x0, 0x41e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m24.365021674s ago: executing program 4 (id=6526): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = memfd_create(&(0x7f0000000840)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x2200002, &(0x7f0000000a40)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 2m9.212364344s ago: executing program 33 (id=6526): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = memfd_create(&(0x7f0000000840)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x2200002, &(0x7f0000000a40)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001080)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 13.609930278s ago: executing program 0 (id=6837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee4", 0x2a) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c1e735adcc0b3", 0x20}, {&(0x7f0000001200)="fa", 0x1}], 0x2, &(0x7f0000001240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0xc0041) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001340)=""/111, 0x6f}], 0x1}, 0xacfc) 13.119354199s ago: executing program 0 (id=6840): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 10.862158553s ago: executing program 0 (id=6842): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) bind$unix(r1, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') pread64(r4, 0x0, 0x0, 0x41e) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000840)=""/3, 0x0, 0x3, 0x1}, 0x28) 9.804702868s ago: executing program 0 (id=6844): r0 = socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000001000)=""/4052, &(0x7f0000002000)=0xfd4) r5 = syz_open_dev$vim2m(&(0x7f0000002040), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000002080)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000020c0)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x0) 9.033567866s ago: executing program 1 (id=6845): syz_open_dev$vim2m(0x0, 0xb173, 0x2) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000540)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 8.902094819s ago: executing program 5 (id=6846): r0 = socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000001000)=""/4052, &(0x7f0000002000)=0xfd4) r6 = syz_open_dev$vim2m(&(0x7f0000002040), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000002080)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000020c0)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x0) 8.334296433s ago: executing program 0 (id=6847): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) write$FUSE_INTERRUPT(r0, &(0x7f0000000500)={0x10, 0xffffffffffffffda}, 0x10) 8.223666736s ago: executing program 1 (id=6848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0xc0041) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/10, 0xa}, {&(0x7f0000001340)=""/111, 0x6f}], 0x2}, 0xacfc) 7.445015634s ago: executing program 1 (id=6850): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee4", 0x2a) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c1e735adcc0b3", 0x20}, {&(0x7f0000001200)="fa", 0x1}], 0x2, &(0x7f0000001240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0xc0041) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001340)=""/111, 0x6f}], 0x1}, 0xacfc) 7.389109695s ago: executing program 5 (id=6851): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000027c0)={&(0x7f0000002880)={0x50, 0x0, 0x100000000, {0x7, 0x2d, 0x0, 0x0, 0x0, 0xfff7, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) ioctl(0xffffffffffffffff, 0x40946400, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='tcpci 0x2', 0x9) connect$bt_l2cap(r1, &(0x7f0000000480)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000003200)="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", 0x2000, &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f00000052c0)={0x8, 0x800000000000000, 0xffffff7ffffffffc, 0x10001, 0x5, 0xffffffffffffffff, 0x8100000}, 0x0, 0x0, 0x0, 0x0) 6.469914627s ago: executing program 2 (id=6853): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) 6.404944259s ago: executing program 1 (id=6854): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) bind$unix(r1, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000840)=""/3, 0x0, 0x3, 0x1}, 0x28) 6.34078861s ago: executing program 0 (id=6855): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000840)=""/3, 0x0, 0x3, 0x1}, 0x28) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0) 5.541721199s ago: executing program 6 (id=6856): socket$igmp(0x2, 0x3, 0x2) symlinkat(&(0x7f0000000580)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000680)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff000000"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a000000ffffffffff010000000000000000000000000001fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000002d9477d0a6f74000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0e7f77333686147465be232509966c859c789666754324ce5abdba9538b8d424f8a7aca400"/309], 0x110) sched_setscheduler(0x0, 0x2, 0x0) io_setup(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000a40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x4000039, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000c40)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000d00), 0x1200010, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="d8000000190081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775010016a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920726f9a941", 0xd8}], 0x1}, 0x0) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) 5.427160792s ago: executing program 5 (id=6857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000b00)={[{@numtail}, {@fat=@discard}, {@utf8no}, {}, {@numtail}, {@rodir}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@smackfshat={'smackfshat', 0x3d, '-#($$:'}}]}, 0x7, 0x2b1, &(0x7f0000000c40)="$eJzs3U+LG2UcB/Df5M8m0UNy8CRCB/TgqXTFF7CLVFAXBCUH9aCLjVAyobALgbRi7MmLV1+Br8eLePTiC1C82YM4MplJSNrJtlmbVrafz2V//J7nm+eZ2ZCc5skXr03Gt+683bj/9W/R7SbROIqjeJDEIBqx9G3U+uWP+j4A8D/3IM/jz7zUKVuzzRntLclWY++bAwD2Yv37f2PgCb7d732/v30BAPvz8SeffnB8cnLzozTtRky+mw6TKP+W48dfxe3IYhQ3oh9/R+QrZf3ueyc3o5UWBvHGZD4dFsnJ5z9Vr3/8e8Qifxj9GNTnD9PSWn4+HbbjpWr9oyxGH/4Y/XilyPz6/nLvy/xbNfkYHsSbr6/t/3r04+cv405kceuh/DeHafpO/sNf9z4rukU+mU+HndW8anbzWf1PAAAAAAAAAAAAAAAAAAAAAAC4+q6nK4PN83eWB/9fMP7o+UC95QE/87XzfW6kaZon5fxFvhURw1a82lpUAAAAAAAAAAAAAAAAAAAA8MI7n90dn2a9iFgU2eis7GSziNjs7FAsH+uvGYp/NjudiLjMEmVxbddUNKutZUlxye148ng7Oovk4yc3d7yK4vZno7OkFZe94Y8WyarTK4toRJydX4tyraLTK4u1zn9evRvlWpXxaXL7Malu3ZvkKRR5zduvuTV18HCnV11BzeTeBasfvHypPef9LUNJRLRXN/Pi12k/3Xu49iHR3P/nEAAAAAAAAAAAAAAAAAAAUD7/31g89FszeP85bAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnoPz2d3x6eL3/3co5lV425y8WRStqDo1yx4848sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgivs3AAD//7vhWeM=") mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./trace\x00', 0x1ff) 5.424544532s ago: executing program 2 (id=6858): syz_open_dev$vim2m(0x0, 0xb173, 0x2) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000540)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 5.342642724s ago: executing program 1 (id=6859): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000019ac0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019b00)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000019b40)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000019b80)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019c00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000019c80), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000019d00), 0x10106, 0x2, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000019d80)='devices.deny\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x6, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3], 0x0, 0x4, 0xc7, &(0x7f0000000380)=""/199, 0x0, 0x4a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) 4.414044996s ago: executing program 6 (id=6860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0xc0041) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/10, 0xa}, {&(0x7f0000001340)=""/111, 0x6f}], 0x2}, 0xacfc) 4.407759656s ago: executing program 5 (id=6870): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) getdents64(r0, &(0x7f0000000540)=""/181, 0xb5) r4 = socket$inet(0x2, 0x4000000000000001, 0x106) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r6, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmmsg$inet6(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x1, 0x20000000) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) 4.126947853s ago: executing program 2 (id=6861): r0 = socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000001000)=""/4052, &(0x7f0000002000)=0xfd4) r6 = syz_open_dev$vim2m(&(0x7f0000002040), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000002080)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000020c0)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x0) 3.793562091s ago: executing program 1 (id=6862): syz_open_dev$vim2m(0x0, 0xb173, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000001a009b8a140000003b000000000000000000", 0x16) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000540)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 3.599142315s ago: executing program 6 (id=6863): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000019ac0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000019b00)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000019b40)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000019b80)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019c00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000019c80), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000019d00), 0x10106, 0x2, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000019d80)='devices.deny\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x6, &(0x7f0000000140)=ANY=[@ANYRESDEC=r3], 0x0, 0x4, 0xc7, &(0x7f0000000380)=""/199, 0x0, 0x4a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) 2.852147313s ago: executing program 2 (id=6864): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee4", 0x2a) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c1e735adcc0b3", 0x20}, {&(0x7f0000001200)="fa", 0x1}], 0x2, &(0x7f0000001240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0xc0041) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001340)=""/111, 0x6f}], 0x1}, 0xacfc) 2.182938639s ago: executing program 6 (id=6865): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000880)=0x7f00000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/dev_mcast\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x313}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x6, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000840)=""/3, 0x0, 0x3, 0x1}, 0x28) 2.10906149s ago: executing program 2 (id=6866): r0 = socket$kcm(0x23, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYRES8=r2], 0x78) 2.10819896s ago: executing program 5 (id=6867): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c0000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0xfd8) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x1000040, &(0x7f0000000380)=ANY=[@ANYRES8=r4, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r4], 0x1, 0x3a2, &(0x7f00000010c0)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000001480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x7ffff004) 1.232636191s ago: executing program 6 (id=6868): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 189.963096ms ago: executing program 6 (id=6869): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) write$FUSE_INTERRUPT(r0, &(0x7f0000000500)={0x10, 0xffffffffffffffda}, 0x10) write(r0, &(0x7f0000000540)='1', 0x1) 184.319216ms ago: executing program 5 (id=6871): socket$igmp(0x2, 0x3, 0x2) symlinkat(&(0x7f0000000580)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000680)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x110) sched_setscheduler(0x0, 0x2, 0x0) io_setup(0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000a40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000ac0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x4000039, 0x0) recvmmsg(r2, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x6) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000c40)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) mount$tmpfs(0x0, 0x0, &(0x7f0000000d00), 0x1200010, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="d8000000190081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775010016a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920726f9a941", 0xd8}], 0x1}, 0x0) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) 0s ago: executing program 2 (id=6872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000b00)={[{@numtail}, {@fat=@discard}, {@utf8no}, {}, {@numtail}, {@rodir}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@smackfshat={'smackfshat', 0x3d, '-#($$:'}}]}, 0x7, 0x2b1, &(0x7f0000000c40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./trace\x00', 0x1ff) kernel console output (not intermixed with test programs): atadv0: Removing interface: batadv_slave_1 [ 1176.583457][ T4381] device bridge_slave_1 left promiscuous mode [ 1176.591865][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.752638][ T4381] device bridge_slave_0 left promiscuous mode [ 1176.851570][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.206503][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.213136][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.334115][ T4381] device veth1_macvtap left promiscuous mode [ 1177.371065][ T4381] device veth0_macvtap left promiscuous mode [ 1177.605988][ T4381] device veth1_vlan left promiscuous mode [ 1177.621146][ T4381] device veth0_vlan left promiscuous mode [ 1178.794598][T23009] loop4: detected capacity change from 0 to 512 [ 1178.822257][ T4381] bond2 (unregistering): Released all slaves [ 1178.849583][T23009] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.6022: corrupted inode contents [ 1178.850605][ T4381] bond1 (unregistering): Released all slaves [ 1178.876640][T23009] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1178.906247][T23009] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.6022: corrupted inode contents [ 1178.931640][T23009] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.6022: mark_inode_dirty error [ 1178.956629][T23009] EXT4-fs (loop4): 1 orphan inode deleted [ 1178.963761][T23009] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1179.062555][T13835] EXT4-fs (loop4): unmounting filesystem. [ 1179.555026][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 1179.635752][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 1179.712100][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.875999][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.975951][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6026'. [ 1180.056157][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6026'. [ 1181.621356][ T4381] bond0 (unregistering): Released all slaves [ 1181.698669][T22980] netlink: 'syz.1.6015': attribute type 21 has an invalid length. [ 1181.754453][T23004] netlink: 'syz.2.6021': attribute type 2 has an invalid length. [ 1181.776088][T23004] netlink: 'syz.2.6021': attribute type 8 has an invalid length. [ 1181.785285][T23004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6021'. [ 1181.808204][T23007] netlink: 'syz.2.6021': attribute type 2 has an invalid length. [ 1181.824538][T23007] netlink: 'syz.2.6021': attribute type 8 has an invalid length. [ 1181.850256][T23007] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6021'. [ 1181.875591][T23029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1181.966361][T23042] loop1: detected capacity change from 0 to 512 [ 1182.074089][T23042] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.6031: corrupted inode contents [ 1182.163052][T23042] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1182.172836][T23042] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.6031: corrupted inode contents [ 1182.192301][T23042] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.6031: mark_inode_dirty error [ 1182.287153][T23042] EXT4-fs (loop1): 1 orphan inode deleted [ 1183.669214][T23042] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1183.973094][T23063] netlink: 'syz.5.6035': attribute type 21 has an invalid length. [ 1184.144478][T22828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1184.162846][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1184.273355][T22828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1184.530911][T22828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1184.573410][T22828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1184.942429][T22828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.778356][T23078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1185.943383][T22828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.019820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1186.043200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1186.106330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1186.145358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1186.177039][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.184213][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.255052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1186.296877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1186.319600][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.326805][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.364101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1186.386478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1186.666919][T23104] netlink: 'syz.4.6045': attribute type 21 has an invalid length. [ 1186.985677][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1187.174024][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1187.227813][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1187.254573][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1187.277859][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1187.319970][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1187.336231][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1187.369890][T22828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1187.390831][T22828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1187.409899][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1188.075492][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1188.226427][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1189.011184][T23140] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1190.016932][T23156] loop2: detected capacity change from 0 to 512 [ 1190.156554][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1190.185588][T23156] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.6059: corrupted inode contents [ 1190.196050][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1190.238501][T23156] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1190.251122][T23156] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.6059: corrupted inode contents [ 1190.258996][T22828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.266206][T23156] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.6059: mark_inode_dirty error [ 1190.824409][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6060'. [ 1190.855089][T23156] EXT4-fs (loop2): 1 orphan inode deleted [ 1190.899483][T23156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1190.922214][T23167] netlink: 'syz.5.6061': attribute type 21 has an invalid length. [ 1190.946891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1190.965247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1191.032908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1191.050260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1191.068351][T22828] device veth0_vlan entered promiscuous mode [ 1191.080128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1191.089365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1191.105477][T22828] device veth1_vlan entered promiscuous mode [ 1191.140226][T23176] loop4: detected capacity change from 0 to 512 [ 1191.239958][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1191.278999][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1191.475947][T20694] kernel read not supported for file /video9 (pid: 20694 comm: kworker/1:0) [ 1191.503133][T22828] device veth0_macvtap entered promiscuous mode [ 1191.585028][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1192.286534][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1192.598172][T22828] device veth1_macvtap entered promiscuous mode [ 1192.606004][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1192.617363][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1192.676599][T22828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.710187][T22828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.368149][T22828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.378951][T22828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.395923][T22828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.428513][T22828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.472763][T22828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1193.503440][T22828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.539161][T22828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.554731][T23199] netlink: 'syz.5.6066': attribute type 21 has an invalid length. [ 1193.576074][T22828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.602672][T22828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.629256][T22828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.690654][T22828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.735973][T22828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.768318][T22828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.790462][T22828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1193.812113][T22828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1193.835731][T22828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.860188][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1193.886747][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1193.936344][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1193.965142][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1194.008811][T22828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.028579][T22828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.050726][T22828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.082165][T22828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.123386][T23216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1194.294324][T22043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.343437][T22043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.377653][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1194.432833][T22475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.448222][T22475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.464283][T22475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1194.871011][T23235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6073'. [ 1195.502137][T23242] netlink: 'syz.0.5979': attribute type 21 has an invalid length. [ 1196.590125][T23252] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1197.565454][T23264] netlink: 'syz.2.6080': attribute type 21 has an invalid length. [ 1198.697796][T23281] netlink: 'syz.0.6083': attribute type 21 has an invalid length. [ 1199.056684][T23286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1199.065925][T23286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1199.073475][T23286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1199.139633][T23282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1201.669554][T23315] loop5: detected capacity change from 0 to 512 [ 1201.804855][T23315] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.6093: corrupted inode contents [ 1201.861290][T23315] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1201.873044][T23326] loop0: detected capacity change from 0 to 128 [ 1201.918096][T23315] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.6093: corrupted inode contents [ 1201.991676][T23315] EXT4-fs error (device loop5): ext4_evict_inode:329: inode #15: comm syz.5.6093: mark_inode_dirty error [ 1202.027881][T23326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1202.045131][T23315] EXT4-fs (loop5): 1 orphan inode deleted [ 1202.055024][T23315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1202.077518][T23326] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.180874][T23333] loop4: detected capacity change from 0 to 512 [ 1202.804922][T23326] syz.0.6096 (pid 23326) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1202.936577][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1203.448170][T23343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'. [ 1204.439377][T23352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1204.459671][T23353] netlink: 'syz.4.6099': attribute type 21 has an invalid length. [ 1204.483753][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1205.956957][T23369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1205.973014][T23369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1205.980614][T23369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1206.003616][T23368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1206.012727][T23368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1206.020279][T23368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.757022][T23400] loop5: detected capacity change from 0 to 512 [ 1207.881588][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1208.294581][T23388] FAULT_INJECTION: forcing a failure. [ 1208.294581][T23388] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.325139][T23388] CPU: 0 PID: 23388 Comm: syz.2.6106 Not tainted syzkaller #0 [ 1208.332676][T23388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1208.342374][T23404] loop4: detected capacity change from 0 to 512 [ 1208.342735][T23388] Call Trace: [ 1208.342745][T23388] [ 1208.355263][T23388] dump_stack_lvl+0x188/0x24e [ 1208.359985][T23388] ? show_regs_print_info+0x12/0x12 [ 1208.365222][T23388] ? load_image+0x410/0x410 [ 1208.369761][T23388] ? __might_sleep+0xd0/0xd0 [ 1208.374387][T23388] ? __lock_acquire+0x7ea0/0x7ea0 [ 1208.379457][T23388] should_fail_ex+0x390/0x4c0 [ 1208.384179][T23388] should_failslab+0x5/0x20 [ 1208.388702][T23388] slab_pre_alloc_hook+0x59/0x300 [ 1208.393748][T23388] ? kobject_uevent_env+0x278/0x890 [ 1208.398979][T23388] __kmem_cache_alloc_node+0x4f/0x270 [ 1208.404370][T23388] ? up_write+0x1b6/0x410 [ 1208.408720][T23388] ? kobject_uevent_env+0x278/0x890 [ 1208.413934][T23388] kmalloc_trace+0x26/0xe0 [ 1208.418352][T23388] kobject_uevent_env+0x278/0x890 [ 1208.423386][T23388] __kobject_del+0xd1/0x2e0 [ 1208.427895][T23388] kobject_put+0x22f/0x450 [ 1208.432322][T23388] net_rx_queue_update_kobjects+0x457/0x4d0 [ 1208.438220][T23388] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 1208.444052][T23388] __tun_detach+0xc79/0x1590 [ 1208.448664][T23388] tun_chr_close+0x109/0x1b0 [ 1208.453269][T23388] ? tun_chr_open+0x4d0/0x4d0 [ 1208.457955][T23388] __fput+0x20a/0x8b0 [ 1208.461945][T23388] task_work_run+0x1d0/0x260 [ 1208.466544][T23388] ? task_work_cancel+0x220/0x220 [ 1208.471574][T23388] ? exit_to_user_mode_loop+0x3b/0x110 [ 1208.477041][T23388] exit_to_user_mode_loop+0xe6/0x110 [ 1208.482333][T23388] exit_to_user_mode_prepare+0xee/0x180 [ 1208.487880][T23388] syscall_exit_to_user_mode+0x16/0x40 [ 1208.493342][T23388] do_syscall_64+0x58/0xa0 [ 1208.497761][T23388] ? clear_bhb_loop+0x60/0xb0 [ 1208.502440][T23388] ? clear_bhb_loop+0x60/0xb0 [ 1208.507118][T23388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1208.513015][T23388] RIP: 0033:0x7f0eff59e559 [ 1208.517431][T23388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.537041][T23388] RSP: 002b:00007f0f004e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1208.545457][T23388] RAX: 0000000000000000 RBX: 00007f0eff825fa0 RCX: 00007f0eff59e559 [ 1208.553427][T23388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1208.561395][T23388] RBP: 00007f0eff635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1208.569369][T23388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.577339][T23388] R13: 00007f0eff826038 R14: 00007f0eff825fa0 R15: 00007ffd1d6b68f8 [ 1208.585321][T23388] [ 1208.628479][T23404] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.6112: corrupted inode contents [ 1208.747732][T23404] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1208.766295][T23404] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.6112: corrupted inode contents [ 1208.790132][T23404] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.6112: mark_inode_dirty error [ 1208.806663][T23404] EXT4-fs (loop4): 1 orphan inode deleted [ 1208.938657][T23404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1209.633360][T13835] EXT4-fs (loop4): unmounting filesystem. [ 1209.714404][T23415] netlink: 'syz.1.6124': attribute type 2 has an invalid length. [ 1209.745497][T23415] netlink: 'syz.1.6124': attribute type 8 has an invalid length. [ 1209.763683][T23415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6124'. [ 1211.077132][T23433] loop2: detected capacity change from 0 to 512 [ 1211.218773][T23437] loop4: detected capacity change from 0 to 256 [ 1211.348969][T23439] netlink: 'syz.1.6118': attribute type 21 has an invalid length. [ 1212.013444][T23441] loop5: detected capacity change from 0 to 256 [ 1214.118369][T23466] netlink: 'syz.4.6126': attribute type 21 has an invalid length. [ 1214.554982][T23471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1214.564215][T23471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1214.571797][T23471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1214.878382][T23475] loop2: detected capacity change from 0 to 128 [ 1214.921636][T23475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1214.937958][T23476] 9pnet_fd: Insufficient options for proto=fd [ 1214.982126][T23483] 9pnet_fd: Insufficient options for proto=fd [ 1214.989807][T23475] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1216.015008][T23490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1217.687334][T23516] loop4: detected capacity change from 0 to 512 [ 1217.721063][T23510] FAULT_INJECTION: forcing a failure. [ 1217.721063][T23510] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.787373][T23518] loop5: detected capacity change from 0 to 256 [ 1218.067279][T23516] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.6135: corrupted inode contents [ 1218.171734][T23510] CPU: 0 PID: 23510 Comm: syz.0.6134 Not tainted syzkaller #0 [ 1218.179267][T23510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1218.189355][T23510] Call Trace: [ 1218.192646][T23510] [ 1218.195589][T23510] dump_stack_lvl+0x188/0x24e [ 1218.200296][T23510] ? show_regs_print_info+0x12/0x12 [ 1218.205513][T23510] ? load_image+0x410/0x410 [ 1218.210033][T23510] ? __might_sleep+0xd0/0xd0 [ 1218.214641][T23510] ? __lock_acquire+0x7ea0/0x7ea0 [ 1218.219693][T23510] should_fail_ex+0x390/0x4c0 [ 1218.224399][T23510] should_failslab+0x5/0x20 [ 1218.228920][T23510] slab_pre_alloc_hook+0x59/0x300 [ 1218.233977][T23510] ? kobject_uevent_env+0x278/0x890 [ 1218.239221][T23510] __kmem_cache_alloc_node+0x4f/0x270 [ 1218.244618][T23510] ? up_write+0x1b6/0x410 [ 1218.248975][T23510] ? kobject_uevent_env+0x278/0x890 [ 1218.254225][T23510] kmalloc_trace+0x26/0xe0 [ 1218.258659][T23510] kobject_uevent_env+0x278/0x890 [ 1218.263712][T23510] __kobject_del+0xd1/0x2e0 [ 1218.268248][T23510] kobject_put+0x22f/0x450 [ 1218.272696][T23510] net_rx_queue_update_kobjects+0x457/0x4d0 [ 1218.279056][T23510] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 1218.284889][T23510] __tun_detach+0xc79/0x1590 [ 1218.289509][T23510] tun_chr_close+0x109/0x1b0 [ 1218.294122][T23510] ? tun_chr_open+0x4d0/0x4d0 [ 1218.298882][T23510] __fput+0x20a/0x8b0 [ 1218.302897][T23510] task_work_run+0x1d0/0x260 [ 1218.307519][T23510] ? task_work_cancel+0x220/0x220 [ 1218.309018][T23516] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1218.312558][T23510] ? exit_to_user_mode_loop+0x3b/0x110 [ 1218.326527][T23510] exit_to_user_mode_loop+0xe6/0x110 [ 1218.331842][T23510] exit_to_user_mode_prepare+0xee/0x180 [ 1218.336294][T23516] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.6135: corrupted inode contents [ 1218.337403][T23510] syscall_exit_to_user_mode+0x16/0x40 [ 1218.354672][T23510] do_syscall_64+0x58/0xa0 [ 1218.359120][T23510] ? clear_bhb_loop+0x60/0xb0 [ 1218.363817][T23510] ? clear_bhb_loop+0x60/0xb0 [ 1218.368516][T23510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1218.374431][T23510] RIP: 0033:0x7f0d26f9e559 [ 1218.378868][T23510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.386222][T23516] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.6135: mark_inode_dirty error [ 1218.398478][T23510] RSP: 002b:00007f0d27f4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1218.398508][T23510] RAX: 0000000000000000 RBX: 00007f0d27225fa0 RCX: 00007f0d26f9e559 [ 1218.398519][T23510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1218.398529][T23510] RBP: 00007f0d27035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1218.398539][T23510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.398550][T23510] R13: 00007f0d27226038 R14: 00007f0d27225fa0 R15: 00007ffe6122e2f8 [ 1218.398577][T23510] [ 1218.494320][T23516] EXT4-fs (loop4): 1 orphan inode deleted [ 1218.529032][T23516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1218.564065][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1218.717837][T23528] misc userio: The device must be registered before sending interrupts [ 1218.728129][T23527] 9pnet_fd: Insufficient options for proto=fd [ 1218.761072][T23528] misc userio: The device must be registered before sending interrupts [ 1218.772529][T13835] EXT4-fs (loop4): unmounting filesystem. [ 1218.930818][T23530] misc userio: The device must be registered before sending interrupts [ 1219.775046][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6140'. [ 1220.484453][T23560] loop0: detected capacity change from 0 to 256 [ 1220.566633][T23562] FAULT_INJECTION: forcing a failure. [ 1220.566633][T23562] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.580164][T23562] CPU: 1 PID: 23562 Comm: syz.1.6146 Not tainted syzkaller #0 [ 1220.587673][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1220.597795][T23562] Call Trace: [ 1220.601089][T23562] [ 1220.604036][T23562] dump_stack_lvl+0x188/0x24e [ 1220.608747][T23562] ? show_regs_print_info+0x12/0x12 [ 1220.613989][T23562] ? load_image+0x410/0x410 [ 1220.618516][T23562] ? __might_sleep+0xd0/0xd0 [ 1220.623124][T23562] ? __lock_acquire+0x7ea0/0x7ea0 [ 1220.628177][T23562] should_fail_ex+0x390/0x4c0 [ 1220.632881][T23562] should_failslab+0x5/0x20 [ 1220.637406][T23562] slab_pre_alloc_hook+0x59/0x300 [ 1220.642452][T23562] ? kobject_uevent_env+0x278/0x890 [ 1220.647677][T23562] __kmem_cache_alloc_node+0x4f/0x270 [ 1220.653070][T23562] ? up_write+0x1b6/0x410 [ 1220.657420][T23562] ? kobject_uevent_env+0x278/0x890 [ 1220.662648][T23562] kmalloc_trace+0x26/0xe0 [ 1220.667083][T23562] kobject_uevent_env+0x278/0x890 [ 1220.672143][T23562] __kobject_del+0xd1/0x2e0 [ 1220.676683][T23562] kobject_put+0x22f/0x450 [ 1220.681132][T23562] net_rx_queue_update_kobjects+0x457/0x4d0 [ 1220.687059][T23562] netif_set_real_num_rx_queues+0xfe/0x1e0 [ 1220.692894][T23562] __tun_detach+0xc79/0x1590 [ 1220.697521][T23562] tun_chr_close+0x109/0x1b0 [ 1220.702147][T23562] ? tun_chr_open+0x4d0/0x4d0 [ 1220.706850][T23562] __fput+0x20a/0x8b0 [ 1220.710858][T23562] task_work_run+0x1d0/0x260 [ 1220.715472][T23562] ? task_work_cancel+0x220/0x220 [ 1220.720531][T23562] ? exit_to_user_mode_loop+0x3b/0x110 [ 1220.726027][T23562] exit_to_user_mode_loop+0xe6/0x110 [ 1220.731339][T23562] exit_to_user_mode_prepare+0xee/0x180 [ 1220.736908][T23562] syscall_exit_to_user_mode+0x16/0x40 [ 1220.742399][T23562] do_syscall_64+0x58/0xa0 [ 1220.746835][T23562] ? clear_bhb_loop+0x60/0xb0 [ 1220.751528][T23562] ? clear_bhb_loop+0x60/0xb0 [ 1220.756231][T23562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.762146][T23562] RIP: 0033:0x7f8fb0d9e559 [ 1220.766582][T23562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.786215][T23562] RSP: 002b:00007f8fb1d1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1220.794651][T23562] RAX: 0000000000000000 RBX: 00007f8fb1025fa0 RCX: 00007f8fb0d9e559 [ 1220.802644][T23562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1220.810638][T23562] RBP: 00007f8fb0e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1220.818631][T23562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.826796][T23562] R13: 00007f8fb1026038 R14: 00007f8fb1025fa0 R15: 00007fffbe7dbc78 [ 1220.834801][T23562] [ 1220.969192][T23561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1221.158598][T23569] 9pnet_fd: Insufficient options for proto=fd [ 1222.451518][T23581] loop4: detected capacity change from 0 to 128 [ 1222.505736][T23581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1222.562138][T23581] ext4 filesystem being mounted at /581/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.959830][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6154'. [ 1223.428623][T23602] loop1: detected capacity change from 0 to 256 [ 1223.982819][T13835] EXT4-fs (loop4): unmounting filesystem. [ 1224.194937][T23608] loop5: detected capacity change from 0 to 512 [ 1224.332673][T23608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1224.366926][T23608] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1224.456853][T23620] 9pnet_fd: Insufficient options for proto=fd [ 1224.744833][T23627] netlink: 'syz.2.6159': attribute type 21 has an invalid length. [ 1225.115892][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1225.895670][T23643] loop1: detected capacity change from 0 to 512 [ 1226.161101][T23652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1226.867232][T23643] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1226.916100][T23643] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1227.152531][T23662] netlink: 'syz.2.6168': attribute type 21 has an invalid length. [ 1228.063743][T23673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6171'. [ 1228.224007][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1229.083964][T23686] loop0: detected capacity change from 0 to 256 [ 1229.110086][T23681] tcpci: probe of 0-0002 failed with error -5 [ 1229.117312][T23681] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 1229.209476][T23691] loop1: detected capacity change from 0 to 512 [ 1229.257630][T23695] 9pnet_fd: Insufficient options for proto=fd [ 1229.312931][T23691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1229.362100][T23691] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.513286][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1229.613186][T23702] loop0: detected capacity change from 0 to 128 [ 1229.688269][T23702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1229.705258][T23705] loop4: detected capacity change from 0 to 512 [ 1229.788872][T23702] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.885252][T23705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1229.897236][T23705] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.056990][T23714] loop2: detected capacity change from 0 to 1024 [ 1230.705292][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1230.730396][T23714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1232.189324][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1232.700081][T13835] EXT4-fs (loop4): unmounting filesystem. [ 1232.835577][T23736] loop0: detected capacity change from 0 to 1024 [ 1235.156244][T23739] 9pnet_fd: Insufficient options for proto=fd [ 1235.771678][T23736] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 1236.467051][T23757] loop5: detected capacity change from 0 to 256 [ 1237.530540][T23768] loop0: detected capacity change from 0 to 128 [ 1237.951275][T23774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1238.296742][T23768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1238.333157][T23768] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1238.638800][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.645158][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.937377][T23799] 9pnet_fd: Insufficient options for proto=fd [ 1240.235429][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1240.690376][T23803] 9pnet_fd: Insufficient options for proto=fd [ 1242.418852][T23824] 9pnet_fd: Insufficient options for proto=fd [ 1243.536750][T23834] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1245.742295][T23868] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1246.196606][T23869] loop5: detected capacity change from 0 to 1024 [ 1246.567854][T23869] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1247.177240][T23876] 9pnet_fd: Insufficient options for proto=fd [ 1247.518716][T23880] 9pnet_fd: Insufficient options for proto=fd [ 1247.975846][T23888] loop0: detected capacity change from 0 to 256 [ 1248.661949][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1250.966270][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 1252.488893][T23938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1253.549662][T23947] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1255.879795][T23975] loop2: detected capacity change from 0 to 1024 [ 1255.966927][T23975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1256.774418][T23986] fuse: Bad value for 'fd' [ 1257.472243][T23998] netlink: 'syz.0.6240': attribute type 21 has an invalid length. [ 1257.555472][T23984] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1258.225553][T24014] loop1: detected capacity change from 0 to 128 [ 1258.275432][T24014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1258.321801][T24014] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1258.772755][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1258.927755][T24020] loop1: detected capacity change from 0 to 256 [ 1259.997689][T24033] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1260.038502][T24036] netlink: 'syz.0.6247': attribute type 21 has an invalid length. [ 1261.442127][T24056] 9pnet_fd: Insufficient options for proto=fd [ 1262.376891][T24063] loop5: detected capacity change from 0 to 512 [ 1263.308616][T24080] binder_alloc: 24079: binder_alloc_buf, no vma [ 1263.894014][T24095] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1264.536537][T24108] netlink: 'syz.0.6263': attribute type 21 has an invalid length. [ 1264.943120][T24109] fuse: Bad value for 'fd' [ 1265.548548][T24103] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1266.653691][T12762] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1266.665108][T12762] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1266.674635][T12762] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1266.686318][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1266.693924][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1266.701322][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1266.908099][T24125] rxe_eth0 speed is unknown, defaulting to 1000 [ 1267.104614][T24135] loop5: detected capacity change from 0 to 512 [ 1268.716116][ T4345] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.716302][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 1268.762147][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1269.038298][T24153] misc userio: Invalid payload size [ 1269.044412][T24153] misc userio: The device must be registered before sending interrupts [ 1269.054396][T24153] misc userio: The device must be registered before sending interrupts [ 1269.307666][T24155] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1269.475172][T24159] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1269.555210][T24153] misc userio: The device must be registered before sending interrupts [ 1269.889149][T24162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6275'. [ 1269.966669][ T4345] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.362252][ T4345] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.393491][T24125] chnl_net:caif_netlink_parms(): no params data found [ 1270.481860][T24171] loop1: detected capacity change from 0 to 256 [ 1270.797764][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 1271.149414][ T4345] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.272059][T24173] netlink: 'syz.2.6276': attribute type 21 has an invalid length. [ 1271.364966][T24178] 9pnet_fd: Insufficient options for proto=fd [ 1271.394763][T24182] loop1: detected capacity change from 0 to 512 [ 1271.611427][T24182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1271.616065][T24125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.627678][T24125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.640315][T24125] device bridge_slave_0 entered promiscuous mode [ 1271.799659][T24182] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1271.867721][T24125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.975090][T24125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.138591][T24125] device bridge_slave_1 entered promiscuous mode [ 1272.358839][T24125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.551497][T24125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.591870][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1272.707201][T24198] loop5: detected capacity change from 0 to 512 [ 1272.887563][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 1273.320635][T24125] team0: Port device team_slave_0 added [ 1273.467692][T24125] team0: Port device team_slave_1 added [ 1273.746260][T24212] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1274.182250][T24125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.211550][T24125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.289184][T24125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.471504][T24125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.519271][T24125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1274.567582][T24219] 9pnet_fd: Insufficient options for proto=fd [ 1274.806876][T24125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.594782][T24236] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1275.604007][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 1275.964955][T24125] device hsr_slave_0 entered promiscuous mode [ 1275.996417][T24125] device hsr_slave_1 entered promiscuous mode [ 1276.295113][T24125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1276.449069][T24125] Cannot create hsr debugfs directory [ 1277.402219][T24247] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1277.414837][T24258] loop5: detected capacity change from 0 to 256 [ 1278.788732][T24273] loop2: detected capacity change from 0 to 1024 [ 1278.926081][T24273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1281.074359][T24302] 9pnet_fd: Insufficient options for proto=fd [ 1281.363811][ T4345] device hsr_slave_0 left promiscuous mode [ 1281.383390][ T4345] device hsr_slave_1 left promiscuous mode [ 1281.614307][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.769690][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.090116][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.105898][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1282.217242][ T4345] device bridge_slave_1 left promiscuous mode [ 1282.224925][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.306592][ T4345] device veth1_macvtap left promiscuous mode [ 1282.312700][ T4345] device veth0_macvtap left promiscuous mode [ 1282.353766][ T4345] device veth1_vlan left promiscuous mode [ 1282.366235][ T4345] device veth0_vlan left promiscuous mode [ 1283.537248][ T4345] bond1 (unregistering): Released all slaves [ 1284.362995][T24325] loop1: detected capacity change from 0 to 256 [ 1285.736935][T24334] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1287.170476][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 1287.490998][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 1288.209355][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.367761][T24352] loop1: detected capacity change from 0 to 256 [ 1288.455166][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.677129][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1288.783669][ T4345] team0 (unregistering): Port device bridge_slave_0 removed [ 1289.115287][T24357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6312'. [ 1290.288111][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6316'. [ 1291.096957][ T4345] bond0 (unregistering): Released all slaves [ 1291.464557][T24125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1291.568598][T24125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1291.578691][T24125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1291.588230][T24125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1291.876925][T24345] netlink: 'syz.5.6308': attribute type 21 has an invalid length. [ 1291.999681][T24391] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1292.034287][T24125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.131590][T24125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.157875][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1292.168944][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1292.232545][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1292.545166][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1292.745706][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.752956][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.851841][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1292.871207][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1292.901523][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.908727][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.976742][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1293.058535][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1293.076794][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1293.096455][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1293.140742][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1293.169880][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1293.200361][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1293.226640][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1293.304528][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.326994][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.351903][T24404] FAULT_INJECTION: forcing a failure. [ 1293.351903][T24404] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1293.356354][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1293.398970][T24404] CPU: 0 PID: 24404 Comm: syz.5.6323 Not tainted syzkaller #0 [ 1293.405331][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1293.406472][T24404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1293.406485][T24404] Call Trace: [ 1293.406492][T24404] [ 1293.406501][T24404] dump_stack_lvl+0x188/0x24e [ 1293.406529][T24404] ? show_regs_print_info+0x12/0x12 [ 1293.438510][T24125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.440356][T24404] ? load_image+0x410/0x410 [ 1293.451993][T24404] ? __lock_acquire+0x142d/0x7ea0 [ 1293.457058][T24404] should_fail_ex+0x390/0x4c0 [ 1293.461766][T24404] get_futex_key+0x1de/0x1000 [ 1293.466461][T24404] ? verify_lock_unused+0x140/0x140 [ 1293.471690][T24404] ? futex_setup_timer+0xc0/0xc0 [ 1293.476646][T24404] ? verify_lock_unused+0x140/0x140 [ 1293.481876][T24404] futex_wake+0x123/0x4f0 [ 1293.486230][T24404] ? futex_wake_mark+0x150/0x150 [ 1293.491198][T24404] do_futex+0x2e2/0x320 [ 1293.495373][T24404] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1293.501285][T24404] ? __might_fault+0xc2/0x120 [ 1293.505978][T24404] mm_release+0x20a/0x330 [ 1293.510321][T24404] ? exit_robust_list+0x2ce/0x2f0 [ 1293.515359][T24404] ? exit_mm_release+0x30/0x30 [ 1293.520133][T24404] ? lockdep_hardirqs_on+0x94/0x140 [ 1293.525358][T24404] exit_mm+0xa0/0x350 [ 1293.529364][T24404] ? sysctl_delayacct+0x220/0x220 [ 1293.534404][T24404] ? do_exit+0x2570/0x2570 [ 1293.538837][T24404] ? mm_trace_rss_stat+0xa7/0x250 [ 1293.543880][T24404] ? sync_mm_rss+0x211/0x350 [ 1293.548490][T24404] do_exit+0x958/0x2570 [ 1293.552680][T24404] ? put_task_struct+0x80/0x80 [ 1293.557471][T24404] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1293.563477][T24404] ? lock_chain_count+0x20/0x20 [ 1293.568346][T24404] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1293.573394][T24404] do_group_exit+0x229/0x2e0 [ 1293.577993][T24404] ? lockdep_hardirqs_on+0x94/0x140 [ 1293.583194][T24404] get_signal+0x1259/0x1340 [ 1293.587708][T24404] arch_do_signal_or_restart+0xc4/0x1310 [ 1293.593339][T24404] ? files_lookup_fd_locked+0x190/0x190 [ 1293.598876][T24404] ? vfs_write+0x777/0x9a0 [ 1293.603294][T24404] ? do_futex+0x310/0x320 [ 1293.607624][T24404] ? get_sigframe_size+0x10/0x10 [ 1293.612562][T24404] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1293.618463][T24404] ? exit_to_user_mode_loop+0x3b/0x110 [ 1293.623921][T24404] exit_to_user_mode_loop+0x70/0x110 [ 1293.629203][T24404] exit_to_user_mode_prepare+0xee/0x180 [ 1293.634743][T24404] syscall_exit_to_user_mode+0x16/0x40 [ 1293.640198][T24404] do_syscall_64+0x58/0xa0 [ 1293.644605][T24404] ? clear_bhb_loop+0x60/0xb0 [ 1293.649273][T24404] ? clear_bhb_loop+0x60/0xb0 [ 1293.653946][T24404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1293.659831][T24404] RIP: 0033:0x7f709c99e559 [ 1293.664237][T24404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.683845][T24404] RSP: 002b:00007f709d85c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1293.692254][T24404] RAX: fffffffffffffe00 RBX: 00007f709cc26188 RCX: 00007f709c99e559 [ 1293.700215][T24404] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f709cc26188 [ 1293.708177][T24404] RBP: 00007f709cc26180 R08: 0000000000000000 R09: 0000000000000000 [ 1293.716153][T24404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1293.724142][T24404] R13: 00007f709cc26218 R14: 00007ffcf666be90 R15: 00007ffcf666bf78 [ 1293.732129][T24404] [ 1294.421401][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1294.449638][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1294.487825][T24125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.053577][T24448] loop5: detected capacity change from 0 to 256 [ 1296.142568][T24450] netlink: 'syz.0.6331': attribute type 21 has an invalid length. [ 1297.634282][T24461] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1298.222507][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1298.241690][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1298.323257][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1298.333307][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1298.371721][T24125] device veth0_vlan entered promiscuous mode [ 1298.390476][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1298.416273][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1298.464814][T24125] device veth1_vlan entered promiscuous mode [ 1298.513547][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1298.533464][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1298.572216][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1298.611025][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1298.628752][T24125] device veth0_macvtap entered promiscuous mode [ 1298.811342][T24125] device veth1_macvtap entered promiscuous mode [ 1299.062914][T24125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.105841][T24125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.135773][T24125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.156681][T24125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.182572][T24125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.204717][T24125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.232556][T24125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.266952][T24125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.303840][T24125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.331584][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1299.357402][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1299.409339][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1299.457234][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1299.516308][T24125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.542337][T24125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.592070][T24125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.663375][T24125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.699304][T24125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.736881][T24125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.779772][T24125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.973024][T24125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.004816][T24125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.029041][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1300.094660][T24503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6342'. [ 1300.111016][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1300.662752][T24125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.665528][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.680008][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.725923][T24125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.734675][T24125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.809788][T24125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.942049][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6343'. [ 1301.066759][T24512] 9pnet_fd: Insufficient options for proto=fd [ 1302.044371][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.075000][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.108670][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1302.159387][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.181917][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.209501][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1302.515611][T24535] loop2: detected capacity change from 0 to 512 [ 1302.632577][T24535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1302.686038][T24535] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1302.850367][T24550] loop5: detected capacity change from 0 to 1024 [ 1303.028061][T24550] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1303.281271][T24554] loop1: detected capacity change from 0 to 512 [ 1303.488710][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1304.529185][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1304.751468][T24568] 9pnet_fd: Insufficient options for proto=fd [ 1304.792316][T24571] loop5: detected capacity change from 0 to 128 [ 1304.813483][T24573] netlink: 'syz.1.6357': attribute type 12 has an invalid length. [ 1304.898626][T24571] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1304.939513][T24573] netlink: 'syz.1.6357': attribute type 29 has an invalid length. [ 1305.186197][T24571] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1305.192844][T24573] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6357'. [ 1305.315316][T24573] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6357'. [ 1305.842893][T24573] loop1: detected capacity change from 0 to 8192 [ 1305.887535][T24598] loop4: detected capacity change from 0 to 512 [ 1305.903021][T24573] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1305.947619][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1305.990532][T24598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1306.033100][T24573] FAT-fs (loop1): Filesystem has been set read-only [ 1306.047639][T24598] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1306.087022][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1306.145904][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1306.166263][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1306.206782][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1306.240367][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1306.269783][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1306.296111][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1306.309880][T24125] EXT4-fs (loop4): unmounting filesystem. [ 1306.351845][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1306.374864][T24573] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1307.523382][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1307.617793][T24624] loop0: detected capacity change from 0 to 512 [ 1308.463367][T24630] device syzkaller0 entered promiscuous mode [ 1308.507628][T24638] 9pnet_fd: Insufficient options for proto=fd [ 1309.794510][T24652] loop5: detected capacity change from 0 to 8192 [ 1309.839856][T24652] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1309.888480][T24656] loop2: detected capacity change from 0 to 512 [ 1309.896753][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1309.905565][T24652] FAT-fs (loop5): Filesystem has been set read-only [ 1309.962598][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1309.975505][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1310.023603][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1310.033744][T24656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1310.052283][T24656] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1310.062955][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1310.123835][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1310.189858][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1310.245904][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1310.270674][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1310.307207][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1310.319509][T24652] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1312.940498][T24675] loop1: detected capacity change from 0 to 512 [ 1314.710507][T24641] netlink: 'syz.0.6375': attribute type 21 has an invalid length. [ 1314.720061][T24650] netlink: 'syz.5.6380': attribute type 12 has an invalid length. [ 1314.730066][T24650] netlink: 'syz.5.6380': attribute type 29 has an invalid length. [ 1314.742419][T24650] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6380'. [ 1314.754134][T24650] netlink: 59 bytes leftover after parsing attributes in process `syz.5.6380'. [ 1315.183962][T24690] loop1: detected capacity change from 0 to 512 [ 1315.359317][T24690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1315.422242][T24690] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.740741][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1316.861168][T24713] netlink: 'syz.5.6397': attribute type 21 has an invalid length. [ 1317.618662][T24711] loop2: detected capacity change from 0 to 1024 [ 1317.969112][T24721] loop1: detected capacity change from 0 to 1024 [ 1318.697905][T24721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1319.162605][T24711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1320.500199][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1320.610545][T24733] loop0: detected capacity change from 0 to 512 [ 1320.689715][T24732] loop5: detected capacity change from 0 to 1024 [ 1321.237801][T24732] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1323.179991][T24763] netlink: 'syz.4.6409': attribute type 21 has an invalid length. [ 1323.977924][T24766] netlink: 'syz.4.6412': attribute type 12 has an invalid length. [ 1324.006809][T24766] netlink: 'syz.4.6412': attribute type 29 has an invalid length. [ 1324.027129][T24766] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6412'. [ 1324.047149][T24766] netlink: 59 bytes leftover after parsing attributes in process `syz.4.6412'. [ 1324.342785][T24766] loop4: detected capacity change from 0 to 8192 [ 1324.380685][T24766] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1324.408517][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.431029][T24766] FAT-fs (loop4): Filesystem has been set read-only [ 1324.453699][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.479191][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.499337][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.523695][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.557390][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.616036][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.651835][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.700243][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.751456][T24766] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1324.846060][ T26] audit: type=1800 audit(1792413254.555:441): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6412" name="file2" dev="loop4" ino=1048862 res=0 errno=0 [ 1325.152179][T24776] loop0: detected capacity change from 0 to 256 [ 1325.577211][T24779] device syzkaller0 entered promiscuous mode [ 1326.825274][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1327.545444][T24792] loop0: detected capacity change from 0 to 8192 [ 1327.692510][T24792] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1328.156908][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.165817][T24792] FAT-fs (loop0): Filesystem has been set read-only [ 1328.172590][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.182072][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.236150][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.245376][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.254968][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.266292][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.316261][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.325107][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.344493][T24792] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1328.390866][ T26] audit: type=1800 audit(1792413258.095:442): pid=24792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6419" name="file2" dev="loop0" ino=1048864 res=0 errno=0 [ 1328.652280][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1331.232524][T24790] netlink: 'syz.0.6419': attribute type 12 has an invalid length. [ 1331.240450][T24790] netlink: 'syz.0.6419': attribute type 29 has an invalid length. [ 1331.248336][T24790] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6419'. [ 1331.257437][T24790] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6419'. [ 1331.274716][T24797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1331.346432][T24811] netlink: 'syz.1.6422': attribute type 21 has an invalid length. [ 1331.355081][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6424'. [ 1332.283913][T24835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1332.300192][T24835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1332.308658][T24835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1332.383752][T24838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1332.708780][T24842] loop4: detected capacity change from 0 to 256 [ 1333.965130][T24859] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1335.418104][T24874] netlink: 'syz.0.6439': attribute type 21 has an invalid length. [ 1335.854238][T24876] netlink: 'syz.2.6441': attribute type 12 has an invalid length. [ 1336.053139][T24876] netlink: 'syz.2.6441': attribute type 29 has an invalid length. [ 1336.062089][T24876] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6441'. [ 1336.071486][T24876] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6441'. [ 1336.205238][T24881] device syzkaller0 entered promiscuous mode [ 1336.329937][T24876] loop2: detected capacity change from 0 to 8192 [ 1336.374592][T24876] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1336.451915][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1336.466707][T24876] FAT-fs (loop2): Filesystem has been set read-only [ 1336.473596][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1336.483713][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1336.492638][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1336.697552][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1336.948824][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1337.186376][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1337.232020][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1337.249738][T24896] loop5: detected capacity change from 0 to 512 [ 1337.258073][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1337.267433][T24876] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1337.363042][T24896] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1337.396139][T24896] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.428282][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1338.260948][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1338.357277][T24907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1338.366471][T24907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1338.374700][T24907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1338.558464][T24912] FAULT_INJECTION: forcing a failure. [ 1338.558464][T24912] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.801296][T24912] CPU: 1 PID: 24912 Comm: syz.5.6451 Not tainted syzkaller #0 [ 1338.808836][T24912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1338.818917][T24912] Call Trace: [ 1338.822210][T24912] [ 1338.825151][T24912] dump_stack_lvl+0x188/0x24e [ 1338.829859][T24912] ? show_regs_print_info+0x12/0x12 [ 1338.835068][T24912] ? load_image+0x410/0x410 [ 1338.839575][T24912] ? __might_sleep+0xd0/0xd0 [ 1338.844185][T24912] ? __lock_acquire+0x7ea0/0x7ea0 [ 1338.849252][T24912] should_fail_ex+0x390/0x4c0 [ 1338.853943][T24912] should_failslab+0x5/0x20 [ 1338.858446][T24912] slab_pre_alloc_hook+0x59/0x300 [ 1338.863500][T24912] kmem_cache_alloc_lru+0x49/0x2e0 [ 1338.868623][T24912] ? __d_alloc+0x2e/0x6e0 [ 1338.872999][T24912] __d_alloc+0x2e/0x6e0 [ 1338.877155][T24912] d_alloc_name+0xb7/0x320 [ 1338.881573][T24912] ? do_raw_spin_unlock+0x11d/0x230 [ 1338.886770][T24912] ? d_alloc_pseudo+0x70/0x70 [ 1338.891456][T24912] ? do_raw_spin_unlock+0x11d/0x230 [ 1338.896654][T24912] fuse_ctl_add_dentry+0x77/0x470 [ 1338.901681][T24912] fuse_ctl_add_conn+0x207/0x370 [ 1338.906618][T24912] ? mutex_lock_nested+0x10/0x10 [ 1338.911562][T24912] ? fuse_inode_init_once+0x20/0x20 [ 1338.916761][T24912] ? do_raw_spin_unlock+0x11d/0x230 [ 1338.921975][T24912] ? _raw_spin_unlock+0x24/0x40 [ 1338.926830][T24912] fuse_fill_super_common+0xaf5/0x1110 [ 1338.932302][T24912] fuse_fill_super+0x173/0x1f0 [ 1338.937063][T24912] ? fuse_reconfigure+0xb0/0xb0 [ 1338.941913][T24912] get_tree_nodev+0xb0/0x160 [ 1338.946527][T24912] fuse_get_tree+0x2d7/0x4d0 [ 1338.951120][T24912] vfs_get_tree+0x88/0x270 [ 1338.955540][T24912] do_new_mount+0x247/0xa40 [ 1338.960047][T24912] __se_sys_mount+0x2e3/0x3d0 [ 1338.964728][T24912] ? __x64_sys_mount+0xc0/0xc0 [ 1338.969515][T24912] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.974736][T24912] ? __x64_sys_mount+0x1c/0xc0 [ 1338.979516][T24912] do_syscall_64+0x4c/0xa0 [ 1338.983942][T24912] ? clear_bhb_loop+0x60/0xb0 [ 1338.988624][T24912] ? clear_bhb_loop+0x60/0xb0 [ 1338.993301][T24912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1338.999192][T24912] RIP: 0033:0x7f709c99f7ca [ 1339.003611][T24912] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.023243][T24912] RSP: 002b:00007f709d89de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1339.031658][T24912] RAX: ffffffffffffffda RBX: 00007f709d89dee0 RCX: 00007f709c99f7ca [ 1339.039627][T24912] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 0000000000000000 [ 1339.047598][T24912] RBP: 0000200000000140 R08: 00007f709d89dee0 R09: 0000000001000000 [ 1339.055567][T24912] R10: 0000000001000000 R11: 0000000000000246 R12: 0000200000000180 [ 1339.063538][T24912] R13: 00007f709d89dea0 R14: 0000000000000000 R15: 00002000000001c0 [ 1339.071522][T24912] [ 1339.129095][T24921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6452'. [ 1340.729421][T24929] netlink: 'syz.1.6456': attribute type 21 has an invalid length. [ 1341.509012][T24938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1342.881054][T24955] netlink: 'syz.2.6464': attribute type 12 has an invalid length. [ 1342.911219][T24955] netlink: 'syz.2.6464': attribute type 29 has an invalid length. [ 1342.942059][T24955] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6464'. [ 1343.010363][T24955] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6464'. [ 1343.568035][T24955] loop2: detected capacity change from 0 to 8192 [ 1343.873856][T24955] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1344.029665][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1344.093348][T24955] FAT-fs (loop2): Filesystem has been set read-only [ 1344.106129][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1344.133102][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1344.330069][T24978] loop1: detected capacity change from 0 to 1024 [ 1345.164293][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1345.228227][T24978] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1345.255066][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1345.335800][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1345.451047][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1345.516020][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1345.609824][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1345.660502][T24955] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1346.093989][T24990] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1346.660845][ T26] audit: type=1800 audit(1792413275.425:443): pid=24955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6464" name="file2" dev="loop2" ino=1048867 res=0 errno=0 [ 1346.701020][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1347.838585][T25001] netlink: 'syz.2.6475': attribute type 12 has an invalid length. [ 1347.875826][T25001] netlink: 'syz.2.6475': attribute type 29 has an invalid length. [ 1347.915924][T25001] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6475'. [ 1347.932066][T25003] loop5: detected capacity change from 0 to 256 [ 1348.022238][T25001] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6475'. [ 1349.087927][T25010] 9pnet_fd: Insufficient options for proto=fd [ 1349.335805][T25001] loop2: detected capacity change from 0 to 8192 [ 1349.372120][T25001] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1349.402494][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.420651][T25001] FAT-fs (loop2): Filesystem has been set read-only [ 1349.429429][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.464295][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.481606][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.492451][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.507985][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.561296][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.784257][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.793512][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1349.808393][T25001] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1350.204579][T25023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1350.231133][T25024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1350.329147][T25030] loop0: detected capacity change from 0 to 512 [ 1350.350883][T25030] EXT4-fs: inline encryption not supported [ 1350.371294][T25030] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1350.556153][T25030] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.6482: inode #1: comm syz.0.6482: iget: illegal inode # [ 1350.611878][T25030] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.6482: error while reading EA inode 1 err=-117 [ 1350.731764][T25030] EXT4-fs (loop0): 1 orphan inode deleted [ 1350.746767][T25030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1350.828522][T25030] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 1350.832248][T25041] loop4: detected capacity change from 0 to 4096 [ 1351.188276][T25038] loop2: detected capacity change from 0 to 4096 [ 1351.582032][T25038] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1351.660224][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1352.390484][T25063] loop0: detected capacity change from 0 to 256 [ 1352.462181][T25041] EXT4-fs: Ignoring removed orlov option [ 1352.486584][T25041] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1352.554690][T25041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1352.604236][T25041] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1352.703136][T24125] EXT4-fs (loop4): unmounting filesystem. [ 1352.839904][T25071] loop5: detected capacity change from 0 to 512 [ 1352.948507][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1353.011259][T25076] loop1: detected capacity change from 0 to 512 [ 1353.072302][T25078] 9pnet_fd: Insufficient options for proto=fd [ 1353.117891][T25076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1353.158660][T25076] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1355.265585][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1356.534316][T25111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1357.782710][T25132] loop4: detected capacity change from 0 to 512 [ 1357.976535][ T4260] kernel read not supported for file /video9 (pid: 4260 comm: kworker/0:3) [ 1358.589572][T25149] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1361.220965][T25174] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1361.616706][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.625407][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.248945][ T4260] kernel read not supported for file /video9 (pid: 4260 comm: kworker/0:3) [ 1362.452602][T25193] loop1: detected capacity change from 0 to 512 [ 1362.525901][T25190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6525'. [ 1363.413971][T25204] loop4: detected capacity change from 0 to 1024 [ 1363.551194][T25204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1363.674619][T25211] loop5: detected capacity change from 0 to 512 [ 1363.716638][T25216] loop2: detected capacity change from 0 to 512 [ 1363.728584][T25216] EXT4-fs: inline encryption not supported [ 1363.754683][T25216] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1363.784829][T25216] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.6533: inode #1: comm syz.2.6533: iget: illegal inode # [ 1363.830791][T25211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1363.905939][T25211] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.925985][T25216] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.6533: error while reading EA inode 1 err=-117 [ 1363.971702][T25216] EXT4-fs (loop2): 1 orphan inode deleted [ 1363.997105][T25216] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1364.079925][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1365.146499][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1365.533951][T25243] loop5: detected capacity change from 0 to 512 [ 1365.637854][T25245] 9pnet_fd: Insufficient options for proto=fd [ 1368.330309][T25266] loop0: detected capacity change from 0 to 512 [ 1368.465827][T25266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1368.474829][T25266] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.963511][T25282] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6548'. [ 1369.429143][T25286] netlink: 'syz.2.6550': attribute type 2 has an invalid length. [ 1369.484512][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1369.501439][T25286] netlink: 'syz.2.6550': attribute type 8 has an invalid length. [ 1369.582335][T25286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6550'. [ 1369.646139][T25293] fuse: Bad value for 'fd' [ 1369.985938][T25289] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1370.036853][T25295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1370.438833][T20325] kernel read not supported for file /video9 (pid: 20325 comm: kworker/0:2) [ 1372.012840][T25326] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1373.673143][T25337] loop2: detected capacity change from 0 to 512 [ 1373.962892][T25337] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1373.979065][T25337] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.433697][T25350] netlink: 'syz.1.6566': attribute type 21 has an invalid length. [ 1376.038724][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1376.547571][T25366] loop0: detected capacity change from 0 to 512 [ 1377.135465][T25369] loop1: detected capacity change from 0 to 256 [ 1377.278822][ T4337] kernel read not supported for file /video9 (pid: 4337 comm: kworker/1:5) [ 1377.486742][T24125] EXT4-fs (loop4): unmounting filesystem. [ 1377.557432][T25384] netlink: 'syz.2.6577': attribute type 12 has an invalid length. [ 1377.690378][T25384] netlink: 'syz.2.6577': attribute type 29 has an invalid length. [ 1377.913507][T25384] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6577'. [ 1378.301045][T25384] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6577'. [ 1378.546010][T25390] loop5: detected capacity change from 0 to 512 [ 1378.634164][T25384] loop2: detected capacity change from 0 to 8192 [ 1378.667292][T25390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1378.695601][T25390] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.707915][T25384] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1378.731397][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1378.824404][T25384] FAT-fs (loop2): Filesystem has been set read-only [ 1378.842810][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1378.852035][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1378.861606][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1378.870735][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1378.879727][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1378.893078][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1378.912853][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1378.931151][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1378.999556][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1379.051370][T25384] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1379.119937][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1379.134440][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1379.144321][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1379.157768][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1379.166934][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1379.174239][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1379.197694][T25370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.559043][T25370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.915205][T25396] rxe_eth0 speed is unknown, defaulting to 1000 [ 1380.991556][T25410] netlink: 'syz.1.6582': attribute type 12 has an invalid length. [ 1381.013715][T25410] netlink: 'syz.1.6582': attribute type 29 has an invalid length. [ 1381.027895][T25410] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6582'. [ 1381.061020][T25410] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6582'. [ 1381.201321][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 1381.277736][T25370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.804564][T25417] netlink: 'syz.2.6583': attribute type 21 has an invalid length. [ 1381.860806][T25370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.948670][T25413] loop1: detected capacity change from 0 to 8192 [ 1381.969054][T25413] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1382.053057][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.061947][T25410] FAT-fs (loop1): Filesystem has been set read-only [ 1382.070374][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.079768][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.089091][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.097982][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.125880][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.155062][T25396] chnl_net:caif_netlink_parms(): no params data found [ 1382.155929][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.205772][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.214668][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1382.326652][T25410] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1383.275836][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 1383.371493][T25434] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1383.436324][T25396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.472780][T25396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.587848][T25396] device bridge_slave_0 entered promiscuous mode [ 1383.611324][T25396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.630405][T25396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.651463][T25396] device bridge_slave_1 entered promiscuous mode [ 1383.683315][T25443] loop5: detected capacity change from 0 to 512 [ 1384.372035][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6591'. [ 1384.651486][T25443] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1384.705957][T25443] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1384.842019][T25396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.863266][T25396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1384.998289][T25396] team0: Port device team_slave_0 added [ 1385.005426][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1385.024770][T25464] fuse: Bad value for 'fd' [ 1385.256457][T25473] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1385.438436][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 1385.749014][T25396] team0: Port device team_slave_1 added [ 1385.925620][T25396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.943093][T25396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.028388][T25396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.136359][T25396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.143538][T25396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.225777][T25396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.166631][T25396] device hsr_slave_0 entered promiscuous mode [ 1387.181012][T25396] device hsr_slave_1 entered promiscuous mode [ 1387.191006][T25396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1387.229791][T25396] Cannot create hsr debugfs directory [ 1387.515939][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 1387.966770][T25515] loop0: detected capacity change from 0 to 512 [ 1388.065553][T25515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1388.095093][T25515] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1388.426104][T25522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1388.630989][T25506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1389.025055][T25370] device hsr_slave_0 left promiscuous mode [ 1389.051424][T25370] device hsr_slave_1 left promiscuous mode [ 1389.075187][T25370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.078311][T25528] loop5: detected capacity change from 0 to 256 [ 1389.196379][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 1389.318541][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1389.340683][T25370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.505138][T25370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.633412][T25370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.777728][T25370] device bridge_slave_1 left promiscuous mode [ 1389.784015][T25370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.814274][T25370] device bridge_slave_0 left promiscuous mode [ 1389.853106][T25370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.888427][T25535] loop0: detected capacity change from 0 to 128 [ 1389.899046][T25535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1389.965634][T25535] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1390.022249][T25370] device veth1_macvtap left promiscuous mode [ 1390.051275][T25370] device veth0_macvtap left promiscuous mode [ 1390.253883][T25370] device veth1_vlan left promiscuous mode [ 1390.629650][T25370] device veth0_vlan left promiscuous mode [ 1390.878192][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1393.464120][T25579] loop1: detected capacity change from 0 to 8192 [ 1393.495270][T25579] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1393.633845][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1393.671583][T25579] FAT-fs (loop1): Filesystem has been set read-only [ 1393.721024][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1393.734570][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1393.751809][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1393.760977][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1393.796637][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1393.806092][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1393.820083][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1394.052380][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1394.134631][T25579] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1394.270172][ T26] audit: type=1800 audit(1792413323.975:444): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6612" name="file2" dev="loop1" ino=1048880 res=0 errno=0 [ 1394.369493][T25589] loop0: detected capacity change from 0 to 512 [ 1394.420533][T25589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1394.429884][T25589] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.545914][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1394.627809][T25370] team0 (unregistering): Port device team_slave_1 removed [ 1394.700171][T25370] team0 (unregistering): Port device team_slave_0 removed [ 1394.708469][T25594] loop0: detected capacity change from 0 to 4096 [ 1394.716103][T25594] EXT4-fs: Ignoring removed orlov option [ 1394.734753][T25594] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1394.769034][T25594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1394.778935][T25370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.852350][T25370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.094911][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1395.323668][T25370] bond0 (unregistering): Released all slaves [ 1395.407667][T25568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1395.423884][T25573] netlink: 'syz.1.6612': attribute type 12 has an invalid length. [ 1395.431961][T25573] netlink: 'syz.1.6612': attribute type 29 has an invalid length. [ 1395.643635][T25573] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6612'. [ 1395.766162][T25573] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6612'. [ 1396.054694][T25585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1396.194731][T25396] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1396.249574][T25605] loop5: detected capacity change from 0 to 128 [ 1396.259328][T25396] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1396.286737][T25396] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1396.305019][T25396] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1396.319819][T25605] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1396.427030][T25605] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1397.249019][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1397.346578][T25396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.443821][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1397.481950][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1397.539615][T25396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.569168][T25625] loop5: detected capacity change from 0 to 256 [ 1397.586178][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1397.594924][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1397.639142][T23953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.646347][T23953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.724176][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1397.763675][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1397.991911][T23953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.999154][T23953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.349107][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1398.776713][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1398.785612][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1398.836910][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1398.894861][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1398.936353][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1398.969907][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1399.047372][T23953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1399.050272][T25645] loop5: detected capacity change from 0 to 128 [ 1399.125253][T25645] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1399.138397][T25642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6626'. [ 1399.151578][T25645] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.211895][T25396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1399.276829][T25396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1399.342228][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1399.421911][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1399.596516][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1399.832565][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1399.996909][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1400.060289][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1401.566794][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1401.574333][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1401.614713][T25396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.802784][T25686] loop2: detected capacity change from 0 to 128 [ 1401.926784][T25686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1401.973535][T25686] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1402.159889][T25677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1402.860150][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1405.801354][T25740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6638'. [ 1406.625623][T25756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6640'. [ 1407.306253][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1407.330555][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1407.391230][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1407.406760][T20695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1407.448431][T25396] device veth0_vlan entered promiscuous mode [ 1408.223228][T25771] loop2: detected capacity change from 0 to 1024 [ 1408.371514][T25370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1408.425118][T25370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1409.097691][T25771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1409.203011][T25770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1409.375110][T25396] device veth1_vlan entered promiscuous mode [ 1409.566347][T25396] device veth0_macvtap entered promiscuous mode [ 1409.630225][T25396] device veth1_macvtap entered promiscuous mode [ 1409.682914][T25776] netlink: 'syz.0.6642': attribute type 21 has an invalid length. [ 1409.696030][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1409.720950][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1409.813815][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1409.876595][T25396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1409.953271][T25396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.024707][T25396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.105850][T25396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.153231][T25784] loop5: detected capacity change from 0 to 4096 [ 1410.163963][T25396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.410142][T25784] EXT4-fs: Ignoring removed orlov option [ 1410.513356][T25791] loop1: detected capacity change from 0 to 1024 [ 1410.657113][T25396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.693733][T25791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1410.695949][T25396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.934929][T25784] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1411.675266][T25784] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1411.705536][T25396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.746783][T25396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.757822][T25396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.768486][T25396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.778886][T25396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.791310][T25396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.801439][T25396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1411.812206][T25396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1411.835364][T25396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.038834][T25396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.114724][T25396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.153078][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1412.176365][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1412.202449][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1412.242067][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1412.290261][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1412.686873][T25396] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.691487][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1412.708977][T25396] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.733759][T25396] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.743979][T25396] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.787911][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1413.051018][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1413.631226][T25370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.659295][T25370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.667607][T25816] loop1: detected capacity change from 0 to 256 [ 1413.797678][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1415.055504][T22475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.106739][T22475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.118442][T25827] loop5: detected capacity change from 0 to 4096 [ 1415.126346][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1415.157997][T25827] EXT4-fs: Ignoring removed orlov option [ 1415.185844][T25827] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1415.262087][T25834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6654'. [ 1415.286952][T25827] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1416.981715][T25855] netlink: 'syz.6.6658': attribute type 21 has an invalid length. [ 1417.184936][T25860] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1417.576620][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1417.655903][T25864] netlink: 'syz.6.6661': attribute type 2 has an invalid length. [ 1417.676194][T25864] netlink: 'syz.6.6661': attribute type 8 has an invalid length. [ 1417.683975][T25864] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6661'. [ 1418.224615][T25877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6662'. [ 1418.477428][T25879] loop5: detected capacity change from 0 to 512 [ 1419.271689][T25887] loop0: detected capacity change from 0 to 128 [ 1419.308535][T25887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1419.326650][T25887] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1419.460919][T25895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1419.470025][T25895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1419.477590][T25895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1421.264717][T25914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1423.122167][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.137077][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.172919][T25931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1423.349454][T25937] netlink: 'syz.6.6678': attribute type 12 has an invalid length. [ 1423.357535][T25937] netlink: 'syz.6.6678': attribute type 29 has an invalid length. [ 1423.365448][T25937] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6678'. [ 1423.375030][T25937] netlink: 59 bytes leftover after parsing attributes in process `syz.6.6678'. [ 1423.768748][T25943] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1423.826797][T25945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1424.084295][T25937] loop6: detected capacity change from 0 to 8192 [ 1424.288721][T25937] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1424.476570][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1424.485425][T25937] FAT-fs (loop6): Filesystem has been set read-only [ 1424.596234][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1424.658888][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1424.717110][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1424.763429][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1424.815802][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1424.865843][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1425.613388][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1425.658168][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1425.806856][T25937] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1427.004125][T25978] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1427.350907][T25980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1427.562941][T25984] loop1: detected capacity change from 0 to 128 [ 1427.584289][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1427.843067][T25984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1427.886399][T25984] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1427.908591][T25989] 9pnet_fd: Insufficient options for proto=fd [ 1428.437170][T26003] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1429.069164][T26011] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1429.322701][T26012] netlink: 'syz.6.6691': attribute type 12 has an invalid length. [ 1429.387222][T26012] netlink: 'syz.6.6691': attribute type 29 has an invalid length. [ 1429.436438][T26012] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6691'. [ 1429.495206][T26012] netlink: 59 bytes leftover after parsing attributes in process `syz.6.6691'. [ 1429.999574][T26024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1430.812654][T26012] loop6: detected capacity change from 0 to 8192 [ 1431.089118][T26012] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1431.636261][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.716620][T26012] FAT-fs (loop6): Filesystem has been set read-only [ 1431.727518][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.732130][T26033] netlink: 'syz.0.6695': attribute type 2 has an invalid length. [ 1431.762311][T26033] netlink: 'syz.0.6695': attribute type 8 has an invalid length. [ 1431.774569][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.796637][T26033] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6695'. [ 1431.813296][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.841217][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.885923][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.962463][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.972217][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.981427][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1431.990650][T26012] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1432.011248][ T26] audit: type=1800 audit(1792413361.715:445): pid=26012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6691" name="file2" dev="loop6" ino=1048897 res=0 errno=0 [ 1432.149370][T26040] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1432.846999][T26042] device syzkaller0 entered promiscuous mode [ 1432.889488][T26046] loop5: detected capacity change from 0 to 128 [ 1433.020795][T26046] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1433.068772][T26047] loop0: detected capacity change from 0 to 4096 [ 1433.117340][T26052] netlink: 'syz.2.6700': attribute type 12 has an invalid length. [ 1433.125230][T26052] netlink: 'syz.2.6700': attribute type 29 has an invalid length. [ 1433.139745][T26046] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1433.153249][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1433.181373][T26047] EXT4-fs: Ignoring removed orlov option [ 1433.258692][T26052] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6700'. [ 1433.270053][T26047] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1433.276878][T26052] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6700'. [ 1434.092835][T26047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1434.138612][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1434.269086][T26071] loop1: detected capacity change from 0 to 128 [ 1434.352897][T26071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1434.363255][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1434.399961][T26052] loop2: detected capacity change from 0 to 8192 [ 1434.422230][T26071] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.477851][T26074] loop5: detected capacity change from 0 to 128 [ 1434.505421][T26052] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1434.559074][T26074] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1434.619980][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1434.624963][T26074] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.633343][T26052] FAT-fs (loop2): Filesystem has been set read-only [ 1434.741531][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1435.214245][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1435.302630][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1435.320035][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1435.334455][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1435.389481][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1435.587979][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1435.631436][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1435.846974][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1435.863722][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1436.428403][T26092] loop0: detected capacity change from 0 to 1024 [ 1436.593029][T26052] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1436.820571][T26092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1437.281548][ T26] audit: type=1800 audit(1792413366.985:446): pid=26052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6700" name="file2" dev="loop2" ino=1048898 res=0 errno=0 [ 1437.544854][T26099] netlink: 'syz.5.6708': attribute type 12 has an invalid length. [ 1437.583477][T26099] netlink: 'syz.5.6708': attribute type 29 has an invalid length. [ 1438.687040][T26099] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6708'. [ 1438.859519][T26099] netlink: 59 bytes leftover after parsing attributes in process `syz.5.6708'. [ 1438.888819][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1439.460155][T26112] loop6: detected capacity change from 0 to 128 [ 1439.552380][T26112] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1439.632520][T26112] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1439.850223][T26123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1441.024446][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6710'. [ 1441.628999][T25396] EXT4-fs (loop6): unmounting filesystem. [ 1443.978172][T26158] device syzkaller0 entered promiscuous mode [ 1446.199441][T26174] netlink: 'syz.2.6725': attribute type 12 has an invalid length. [ 1446.256083][T26174] netlink: 'syz.2.6725': attribute type 29 has an invalid length. [ 1446.263965][T26174] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1446.585902][T26174] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1446.775868][T26201] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1447.689567][T26203] loop0: detected capacity change from 0 to 128 [ 1447.727083][T26193] loop2: detected capacity change from 0 to 8192 [ 1447.736173][T26193] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1447.889911][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1447.906523][T26203] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1447.937350][T26174] FAT-fs (loop2): Filesystem has been set read-only [ 1447.937577][T26203] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1447.944464][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1447.963560][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1447.973966][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1448.020529][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1448.213278][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1448.629764][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1448.803284][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1448.813192][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1448.822365][T26174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1449.575290][T22828] EXT4-fs (loop0): unmounting filesystem. [ 1451.542223][T26248] netlink: 'syz.0.6737': attribute type 12 has an invalid length. [ 1451.687186][T26249] loop5: detected capacity change from 0 to 1024 [ 1451.824357][T26248] netlink: 'syz.0.6737': attribute type 29 has an invalid length. [ 1452.053613][T26249] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1452.576348][T26248] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6737'. [ 1452.668567][T26248] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6737'. [ 1452.724185][T26256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6738'. [ 1452.823154][T26251] loop0: detected capacity change from 0 to 8192 [ 1452.894870][T26251] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1453.007530][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.094505][T26248] FAT-fs (loop0): Filesystem has been set read-only [ 1453.132094][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.196059][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.274469][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.396834][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.456630][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.516552][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.528513][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.538360][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1453.552609][T22356] EXT4-fs (loop5): unmounting filesystem. [ 1453.555759][T26248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1454.231313][T26273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6739'. [ 1455.301835][T26294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1455.381787][T26291] loop1: detected capacity change from 0 to 128 [ 1456.061815][T26291] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1456.131855][T26291] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.788104][T26308] loop0: detected capacity change from 0 to 512 [ 1456.958375][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1457.031832][T26306] device syzkaller0 entered promiscuous mode [ 1457.668198][T26325] loop1: detected capacity change from 0 to 8192 [ 1457.703618][T26325] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1457.798391][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1457.839344][T26325] FAT-fs (loop1): Filesystem has been set read-only [ 1457.954715][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.340835][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.412764][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.458858][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.541153][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.615892][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.648257][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.698977][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.716394][T26336] loop6: detected capacity change from 0 to 8192 [ 1458.731505][T26325] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1458.784338][ T26] audit: type=1800 audit(1792413388.485:447): pid=26325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6750" name="file2" dev="loop1" ino=1048902 res=0 errno=0 [ 1459.228596][T26336] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1459.454743][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.476049][T26336] FAT-fs (loop6): Filesystem has been set read-only [ 1459.482884][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.492758][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.503669][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.512885][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.522364][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.547305][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.581150][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.625480][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1459.652173][T26336] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.527047][T26353] loop0: detected capacity change from 0 to 8192 [ 1460.555133][T26353] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1460.600361][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.612436][T26353] FAT-fs (loop0): Filesystem has been set read-only [ 1460.621652][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.630887][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.647896][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.664471][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.674452][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.686694][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.696092][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.705211][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.714783][T26353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1460.745368][ T26] audit: type=1800 audit(1792413390.455:448): pid=26353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6756" name="file2" dev="loop0" ino=1048904 res=0 errno=0 [ 1461.969458][T26320] netlink: 'syz.1.6750': attribute type 12 has an invalid length. [ 1461.977547][T26320] netlink: 'syz.1.6750': attribute type 29 has an invalid length. [ 1461.985361][T26320] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6750'. [ 1461.994806][T26320] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6750'. [ 1462.010104][T26334] netlink: 'syz.6.6753': attribute type 12 has an invalid length. [ 1462.036430][T26334] netlink: 'syz.6.6753': attribute type 29 has an invalid length. [ 1462.058148][T26334] netlink: 148 bytes leftover after parsing attributes in process `syz.6.6753'. [ 1462.085792][T26334] netlink: 59 bytes leftover after parsing attributes in process `syz.6.6753'. [ 1462.107232][T26347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1462.151136][T26350] netlink: 'syz.0.6756': attribute type 12 has an invalid length. [ 1462.171188][T26350] netlink: 'syz.0.6756': attribute type 29 has an invalid length. [ 1462.329136][T26350] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6756'. [ 1462.465862][T26350] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6756'. [ 1462.583295][T26363] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1462.992371][T26362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1464.559815][T26386] loop6: detected capacity change from 0 to 512 [ 1464.704474][T26388] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1464.783935][T26389] loop5: detected capacity change from 0 to 256 [ 1466.748454][T26411] netlink: 'syz.2.6767': attribute type 21 has an invalid length. [ 1467.372841][T26417] netlink: 'syz.0.6769': attribute type 12 has an invalid length. [ 1467.397678][T26420] loop2: detected capacity change from 0 to 128 [ 1467.398824][T26417] netlink: 'syz.0.6769': attribute type 29 has an invalid length. [ 1467.443198][T26417] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6769'. [ 1467.475793][T26417] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6769'. [ 1467.478191][T26420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1467.524246][T26421] device syzkaller0 entered promiscuous mode [ 1467.598191][T26420] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.079680][T26417] loop0: detected capacity change from 0 to 8192 [ 1468.340485][T26417] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1468.443294][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1468.444463][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1468.471672][T26417] FAT-fs (loop0): Filesystem has been set read-only [ 1468.541633][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1468.570383][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1468.831269][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1469.170110][T26447] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1469.324359][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1469.351489][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1469.565191][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1469.593658][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1469.660834][T26433] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1469.757565][T26454] loop1: detected capacity change from 0 to 128 [ 1469.975755][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1470.043364][T26454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1470.051994][T26417] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1470.068775][T26454] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1470.623584][T26470] loop2: detected capacity change from 0 to 512 [ 1470.714150][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1471.760556][T26492] netlink: 'syz.2.6780': attribute type 21 has an invalid length. [ 1471.799233][T26493] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1472.374727][T26503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1473.527609][T26515] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1473.652184][T26511] loop1: detected capacity change from 0 to 128 [ 1474.206715][T26511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1474.241415][T26511] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1475.565592][T26533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1476.262162][T26547] loop2: detected capacity change from 0 to 512 [ 1477.364567][T26558] loop2: detected capacity change from 0 to 128 [ 1477.406557][T26558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1477.457868][T26558] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.615096][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1481.073386][T26606] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1484.735958][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.742321][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.939258][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1485.793595][T26655] netlink: 'syz.0.6816': attribute type 21 has an invalid length. [ 1486.698882][T26658] loop1: detected capacity change from 0 to 128 [ 1487.293614][T26674] mmap: syz.0.6820 (26674) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1488.006685][T26658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1488.071057][T26658] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1489.639083][T20956] EXT4-fs (loop1): unmounting filesystem. [ 1490.089433][T26704] loop2: detected capacity change from 0 to 128 [ 1490.749626][T26704] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1490.778189][T26704] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1491.049337][T26726] netlink: 'syz.6.6831': attribute type 21 has an invalid length. [ 1491.366657][T26729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1492.679331][T26739] loop0: detected capacity change from 0 to 256 [ 1496.856507][T26783] netlink: 'syz.5.6843': attribute type 21 has an invalid length. [ 1498.705177][T26795] Console: switching to colour VGA+ 80x25 [ 1498.775434][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1500.214970][T26818] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 1500.306404][T26821] loop2: detected capacity change from 0 to 128 [ 1500.376891][T26821] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1500.400595][T26821] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.130581][T20059] EXT4-fs (loop2): unmounting filesystem. [ 1501.661072][T26846] loop5: detected capacity change from 0 to 256 [ 1501.676097][T26843] netlink: 'syz.6.6856': attribute type 21 has an invalid length. [ 1505.651788][T26893] loop5: detected capacity change from 0 to 512 [ 1506.674798][T26900] ================================================================== [ 1506.674815][T26900] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x48a/0xb50 [ 1506.674844][T26900] Read of size 218 at addr ffff88802aaa34aa by task syz.6.6869/26900 [ 1506.674862][T26900] [ 1506.674869][T26900] CPU: 0 PID: 26900 Comm: syz.6.6869 Not tainted syzkaller #0 [ 1506.674889][T26900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1506.674901][T26900] Call Trace: [ 1506.674908][T26900] [ 1506.674916][T26900] dump_stack_lvl+0x188/0x24e [ 1506.674940][T26900] ? read_lock_is_recursive+0x10/0x10 [ 1506.674975][T26900] ? show_regs_print_info+0x12/0x12 [ 1506.674996][T26900] ? load_image+0x410/0x410 [ 1506.675014][T26900] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1506.675035][T26900] ? __virt_addr_valid+0x188/0x540 [ 1506.675057][T26900] ? __virt_addr_valid+0x467/0x540 [ 1506.675078][T26900] ? fbcon_prepare_logo+0x48a/0xb50 [ 1506.675093][T26900] print_report+0xa8/0x210 [ 1506.675108][T26900] kasan_report+0x10b/0x140 [ 1506.675133][T26900] ? fbcon_prepare_logo+0x48a/0xb50 [ 1506.675151][T26900] kasan_check_range+0x235/0x290 [ 1506.675175][T26900] ? fbcon_prepare_logo+0x48a/0xb50 [ 1506.675192][T26900] memcpy+0x25/0x60 [ 1506.675209][T26900] fbcon_prepare_logo+0x48a/0xb50 [ 1506.675231][T26900] fbcon_init+0x137c/0x2460 [ 1506.675255][T26900] visual_init+0x2dd/0x650 [ 1506.675277][T26900] do_bind_con_driver+0x859/0x1030 [ 1506.675301][T26900] ? sysfs_kf_read+0x350/0x350 [ 1506.675324][T26900] store_bind+0x794/0xa20 [ 1506.675349][T26900] ? sysfs_kf_read+0x350/0x350 [ 1506.675368][T26900] kernfs_fop_write_iter+0x3a0/0x520 [ 1506.675392][T26900] vfs_write+0x482/0x9a0 [ 1506.675419][T26900] ? file_end_write+0x250/0x250 [ 1506.675444][T26900] ? __fget_files+0x3fc/0x460 [ 1506.675471][T26900] ? __fdget_pos+0x2ae/0x360 [ 1506.675494][T26900] ? ksys_write+0x70/0x260 [ 1506.675519][T26900] ksys_write+0x14d/0x260 [ 1506.675545][T26900] ? __ia32_sys_read+0x80/0x80 [ 1506.675569][T26900] ? lockdep_hardirqs_on+0x94/0x140 [ 1506.675595][T26900] do_syscall_64+0x4c/0xa0 [ 1506.675617][T26900] ? clear_bhb_loop+0x60/0xb0 [ 1506.675636][T26900] ? clear_bhb_loop+0x60/0xb0 [ 1506.675656][T26900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1506.675675][T26900] RIP: 0033:0x7f8d3c59e559 [ 1506.675690][T26900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.675707][T26900] RSP: 002b:00007f8d3d4ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1506.675727][T26900] RAX: ffffffffffffffda RBX: 00007f8d3c826090 RCX: 00007f8d3c59e559 [ 1506.675742][T26900] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 1506.675754][T26900] RBP: 00007f8d3c635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1506.675767][T26900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.675778][T26900] R13: 00007f8d3c826128 R14: 00007f8d3c826090 R15: 00007ffc07474948 [ 1506.675798][T26900] [ 1506.675805][T26900] [ 1506.675809][T26900] Allocated by task 26900: [ 1506.675818][T26900] kasan_set_track+0x4b/0x70 [ 1506.675838][T26900] __kasan_kmalloc+0x8e/0xa0 [ 1506.675860][T26900] __kmalloc+0xb3/0x240 [ 1506.675874][T26900] vc_do_resize+0x36e/0x17b0 [ 1506.675891][T26900] fbcon_init+0x1395/0x2460 [ 1506.675906][T26900] visual_init+0x2dd/0x650 [ 1506.675922][T26900] do_bind_con_driver+0x859/0x1030 [ 1506.675941][T26900] store_bind+0x794/0xa20 [ 1506.675993][T26900] kernfs_fop_write_iter+0x3a0/0x520 [ 1506.676013][T26900] vfs_write+0x482/0x9a0 [ 1506.676035][T26900] ksys_write+0x14d/0x260 [ 1506.676056][T26900] do_syscall_64+0x4c/0xa0 [ 1506.676074][T26900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1506.676091][T26900] [ 1506.676096][T26900] The buggy address belongs to the object at ffff88802aaa2000 [ 1506.676096][T26900] which belongs to the cache kmalloc-4k of size 4096 [ 1506.676110][T26900] The buggy address is located 1194 bytes to the right of [ 1506.676110][T26900] 4096-byte region [ffff88802aaa2000, ffff88802aaa3000) [ 1506.676132][T26900] [ 1506.676136][T26900] The buggy address belongs to the physical page: [ 1506.676144][T26900] page:ffffea0000aaa800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aaa0 [ 1506.676164][T26900] head:ffffea0000aaa800 order:3 compound_mapcount:0 compound_pincount:0 [ 1506.676179][T26900] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1506.676204][T26900] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888018442140 [ 1506.676219][T26900] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 1506.676227][T26900] page dumped because: kasan: bad access detected [ 1506.676244][T26900] page_owner tracks the page as allocated [ 1506.676250][T26900] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 22043, tgid 22043 (kworker/u4:11), ts 1483819267428, free_ts 1479436224359 [ 1506.676283][T26900] post_alloc_hook+0x173/0x1a0 [ 1506.676306][T26900] get_page_from_freelist+0x206b/0x2180 [ 1506.676330][T26900] __alloc_pages+0x1ec/0x4f0 [ 1506.676351][T26900] alloc_slab_page+0x5d/0x180 [ 1506.676369][T26900] new_slab+0x87/0x2d0 [ 1506.676387][T26900] ___slab_alloc+0xbc5/0x1240 [ 1506.676403][T26900] __kmem_cache_alloc_node+0x126/0x270 [ 1506.676421][T26900] __kmalloc_node_track_caller+0xa0/0x240 [ 1506.676437][T26900] __alloc_skb+0x226/0x7d0 [ 1506.676453][T26900] nsim_dev_trap_report_work+0x24f/0xa80 [ 1506.676477][T26900] process_one_work+0x8ab/0x1160 [ 1506.676496][T26900] worker_thread+0xaf5/0x12a0 [ 1506.676514][T26900] kthread+0x29d/0x330 [ 1506.676529][T26900] ret_from_fork+0x1f/0x30 [ 1506.676550][T26900] page last free stack trace: [ 1506.676556][T26900] free_unref_page_prepare+0x8e5/0x9e0 [ 1506.676578][T26900] free_unref_page+0x2e/0x3f0 [ 1506.676598][T26900] qlist_free_all+0x76/0xe0 [ 1506.676615][T26900] kasan_quarantine_reduce+0x144/0x160 [ 1506.676631][T26900] __kasan_slab_alloc+0x1e/0x80 [ 1506.676652][T26900] slab_post_alloc_hook+0x4b/0x490 [ 1506.676670][T26900] kmem_cache_alloc+0x18b/0x2f0 [ 1506.676686][T26900] vm_area_dup+0x23/0x1a0 [ 1506.676701][T26900] __split_vma+0xb9/0x4f0 [ 1506.676721][T26900] do_mas_align_munmap+0x7b8/0x12d0 [ 1506.676742][T26900] do_mas_munmap+0x240/0x2b0 [ 1506.676762][T26900] mmap_region+0x7ab/0x1c50 [ 1506.676780][T26900] do_mmap+0x9ce/0x10d0 [ 1506.676798][T26900] vm_mmap_pgoff+0x1c1/0x2d0 [ 1506.676820][T26900] ksys_mmap_pgoff+0x4bf/0x720 [ 1506.676838][T26900] do_syscall_64+0x4c/0xa0 [ 1506.676856][T26900] [ 1506.676859][T26900] Memory state around the buggy address: [ 1506.676869][T26900] ffff88802aaa3380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1506.676880][T26900] ffff88802aaa3400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1506.676892][T26900] >ffff88802aaa3480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1506.676900][T26900] ^ [ 1506.676909][T26900] ffff88802aaa3500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1506.676920][T26900] ffff88802aaa3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1506.676928][T26900] ================================================================== [ 1506.677100][T26900] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1506.677111][T26900] CPU: 1 PID: 26900 Comm: syz.6.6869 Not tainted syzkaller #0 [ 1506.677129][T26900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1506.677138][T26900] Call Trace: [ 1506.677144][T26900] [ 1506.677150][T26900] dump_stack_lvl+0x188/0x24e [ 1506.677171][T26900] ? memcpy+0x3c/0x60 [ 1506.677187][T26900] ? show_regs_print_info+0x12/0x12 [ 1506.677207][T26900] ? load_image+0x410/0x410 [ 1506.677228][T26900] panic+0x2d3/0x710 [ 1506.677254][T26900] ? bpf_jit_dump+0xd0/0xd0 [ 1506.677278][T26900] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 1506.677297][T26900] ? _raw_spin_unlock+0x40/0x40 [ 1506.677315][T26900] check_panic_on_warn+0x80/0xa0 [ 1506.677336][T26900] ? fbcon_prepare_logo+0x48a/0xb50 [ 1506.677353][T26900] end_report+0x66/0x110 [ 1506.677376][T26900] kasan_report+0x118/0x140 [ 1506.677400][T26900] ? fbcon_prepare_logo+0x48a/0xb50 [ 1506.677418][T26900] kasan_check_range+0x235/0x290 [ 1506.677442][T26900] ? fbcon_prepare_logo+0x48a/0xb50 [ 1506.677467][T26900] memcpy+0x25/0x60 [ 1506.677483][T26900] fbcon_prepare_logo+0x48a/0xb50 [ 1506.677506][T26900] fbcon_init+0x137c/0x2460 [ 1506.677528][T26900] visual_init+0x2dd/0x650 [ 1506.677548][T26900] do_bind_con_driver+0x859/0x1030 [ 1506.677571][T26900] ? sysfs_kf_read+0x350/0x350 [ 1506.677594][T26900] store_bind+0x794/0xa20 [ 1506.677618][T26900] ? sysfs_kf_read+0x350/0x350 [ 1506.677638][T26900] kernfs_fop_write_iter+0x3a0/0x520 [ 1506.677662][T26900] vfs_write+0x482/0x9a0 [ 1506.677688][T26900] ? file_end_write+0x250/0x250 [ 1506.677713][T26900] ? __fget_files+0x3fc/0x460 [ 1506.677739][T26900] ? __fdget_pos+0x2ae/0x360 [ 1506.677760][T26900] ? ksys_write+0x70/0x260 [ 1506.677784][T26900] ksys_write+0x14d/0x260 [ 1506.677808][T26900] ? __ia32_sys_read+0x80/0x80 [ 1506.677834][T26900] ? lockdep_hardirqs_on+0x94/0x140 [ 1506.677859][T26900] do_syscall_64+0x4c/0xa0 [ 1506.677876][T26900] ? clear_bhb_loop+0x60/0xb0 [ 1506.677895][T26900] ? clear_bhb_loop+0x60/0xb0 [ 1506.677913][T26900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1506.677932][T26900] RIP: 0033:0x7f8d3c59e559 [ 1506.677946][T26900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.677960][T26900] RSP: 002b:00007f8d3d4ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1506.677979][T26900] RAX: ffffffffffffffda RBX: 00007f8d3c826090 RCX: 00007f8d3c59e559 [ 1506.677991][T26900] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 1506.678002][T26900] RBP: 00007f8d3c635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1506.678013][T26900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.678022][T26900] R13: 00007f8d3c826128 R14: 00007f8d3c826090 R15: 00007ffc07474948 [ 1506.678040][T26900] [ 1506.678289][T26900] Kernel Offset: disabled [ 1507.637720][T26900] Rebooting in 86400 seconds..