last executing test programs: 19m55.157805074s ago: executing program 32 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, 0x0) 13m35.868037022s ago: executing program 0 (id=893): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000006c0)={0x0, 0x0, '\x00', @raw_data=[0x2, 0x9, 0x6, 0x4, 0x400, 0x6, 0x8, 0x40000000, 0x2, 0x8, 0x6, 0x100, 0x5, 0x800, 0x8, 0x101, 0x7, 0x7f, 0x3, 0x2, 0x40, 0xa, 0x401, 0x80000000, 0x561, 0x1607, 0x6, 0x6, 0x10, 0xeca4, 0x7c4c, 0x1]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 13m34.520085505s ago: executing program 0 (id=894): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 13m34.096145987s ago: executing program 0 (id=897): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x20, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x0) 13m33.867177602s ago: executing program 0 (id=899): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 13m32.893146905s ago: executing program 0 (id=902): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r5, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 13m31.643413894s ago: executing program 0 (id=906): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r2, 0x1a, 0x0, 0x1) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000080)={0xe00, 0x34324142, 0x640, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}}) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x38201) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000180)="660f73f3c1b8a3058ed80fc75cb1660f3acf80386c67660fc7340f221abad104b030eef0818e1be506860f8bca00652e260f01cf", 0x34}], 0x1, 0x3d, &(0x7f00000004c0)=[@cstype3={0x5, 0x3}], 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) 13m15.852679544s ago: executing program 33 (id=906): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r2, 0x1a, 0x0, 0x1) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000080)={0xe00, 0x34324142, 0x640, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}}) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x38201) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000180)="660f73f3c1b8a3058ed80fc75cb1660f3acf80386c67660fc7340f221abad104b030eef0818e1be506860f8bca00652e260f01cf", 0x34}], 0x1, 0x3d, &(0x7f00000004c0)=[@cstype3={0x5, 0x3}], 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) 10m10.558292114s ago: executing program 6 (id=1336): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 10m9.797512905s ago: executing program 6 (id=1337): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m7.998632866s ago: executing program 6 (id=1341): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x1e) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)="39afabf445b93dc11880518260bb4f8db20c78a639c566", 0x17}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0) ioctl$TCSETSW(r3, 0x5403, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x5, 0x7, 0x0, &(0x7f0000000080)="0080048b0038e2", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x606}, 0x50) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1}) 10m6.881250034s ago: executing program 6 (id=1348): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 10m6.790606555s ago: executing program 6 (id=1349): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="090000001800000008000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r5, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 10m4.459629903s ago: executing program 6 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x8, 0x8, 0xfbee}, 0x8000001, 0x0, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9m48.859814718s ago: executing program 34 (id=1351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x8, 0x8, 0xfbee}, 0x8000001, 0x0, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 8m3.243518662s ago: executing program 2 (id=1606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100"], 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES32], 0x0, 0x0, 0x0}, 0x0) 8m1.758824588s ago: executing program 4 (id=1611): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 7m59.433584394s ago: executing program 2 (id=1616): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000009c0)=""/4127, 0x101f}], 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020200000900010073797a30000000000900020073797a300000000008000a40000000010800054000000004080003400000002060000000060a01060000000000000000020000000900010073797a30000000000900020073797a300000000034000480300001800b00010064796e7365740000200002800900010073797a30000000000800034000000000080004"], 0x118}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x7c, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000091}, 0x4040000) socket$inet(0x2b, 0x801, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xfffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xfb, 0xa4, 0xfd, 0x0, 0x0, 0x1, 0x28, 0x0, 0x0, 0x7, 0xf7}, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 7m57.23961133s ago: executing program 2 (id=1619): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00') r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000200)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="2022e3969800e30780210b7c9c417da7e8c4145e5642d58e7377395a402c371e16e92a81bdff3dfd51c4a7eecd7a28f90dcdc7a0b8b565bf28af1efc3f12b221a8975f8b06000000ecaf2d8ed15d33b95817f77e3ca11f410a02143ebc9b4696ef7426b0b568f03e7dcb4cc909c6c397b8501a379ce4c8bf42aedd955f7a4f0a256970177f34113b968a98ede57224d65d7a6160959b55c161338d499261e7c2b95361150ba46383caf27ca6dba7aa"], &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x2b, 0x5, 0x0) setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000506030000000000000000000000000705000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) close(0x3) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4ecf, r6, 0x0, 0x0, 0x80000000600}]) pipe2$watch_queue(&(0x7f0000001180), 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0xc3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 7m55.809998602s ago: executing program 4 (id=1623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x7e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000a00)="b9800000c00f3235000400000f30440f20c03508000000440f22c036746665f36526f24c22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30470f013848b80010000000000045808023c00f21f83500000b00c40238f76600c481e57dcd", 0x6c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100ff0004000000560ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 7m52.868152776s ago: executing program 4 (id=1628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x4000040) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x9, 0x6, 0x2, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4, 0x400}, {0x402, 0x0, 0xfffffff7, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 7m49.846709489s ago: executing program 2 (id=1630): openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff9909", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x15) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x5c}}, 0x2000400c) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) syz_usb_disconnect(r0) 7m46.515222427s ago: executing program 4 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_getaffinity(r0, 0x0, 0x0) getpriority(0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0}) capget(&(0x7f00000002c0)={0x20080522, r0}, &(0x7f0000000300)={0x9, 0x8000000, 0x9, 0x10, 0xfffffffc, 0xffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) write$FUSE_NOTIFY_DELETE(r3, 0x0, 0x2a) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000280), 0x4) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x2) 7m45.076807852s ago: executing program 4 (id=1637): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r1, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, 0x0, 0x2000007ff) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m44.863007793s ago: executing program 2 (id=1640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="700100002d00070100000000fcdbdf25097c000008000180040006000c0002"], 0x170}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, &(0x7f0000000000)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000600)={0x8, 0x41}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x840000000002, 0x3, 0xff) r7 = gettid() r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 7m43.459902489s ago: executing program 2 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES32], 0x0, 0x0, 0x0}, 0x0) 7m40.702632139s ago: executing program 4 (id=1648): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00') r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000200)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="2022e3969800e30780210b7c9c417da7e8c4145e5642d58e7377395a402c371e16e92a81bdff3dfd51c4a7eecd7a28f90dcdc7a0b8b565bf28af1efc3f12b221a8975f8b06000000ecaf2d8ed15d33b95817f77e3ca11f410a02143ebc9b4696ef7426b0b568f03e7dcb4cc909c6c397b8501a379ce4c8bf42aedd955f7a4f0a256970177f34113b968a98ede57224d65d7a6160959b55c161338d499261e7c2b95361150ba46383caf27ca6dba7aa"], &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x2b, 0x5, 0x0) setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000506030000000000000000000000000705000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) close(0x3) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4ecf, r6, 0x0, 0x0, 0x80000000600}]) pipe2$watch_queue(&(0x7f0000001180), 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0xc3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 7m28.357289384s ago: executing program 35 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ac1414bb000000000000000000000000000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x600c010) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES32], 0x0, 0x0, 0x0}, 0x0) 7m25.106267832s ago: executing program 36 (id=1648): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00') r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000200)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="2022e3969800e30780210b7c9c417da7e8c4145e5642d58e7377395a402c371e16e92a81bdff3dfd51c4a7eecd7a28f90dcdc7a0b8b565bf28af1efc3f12b221a8975f8b06000000ecaf2d8ed15d33b95817f77e3ca11f410a02143ebc9b4696ef7426b0b568f03e7dcb4cc909c6c397b8501a379ce4c8bf42aedd955f7a4f0a256970177f34113b968a98ede57224d65d7a6160959b55c161338d499261e7c2b95361150ba46383caf27ca6dba7aa"], &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x2b, 0x5, 0x0) setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000506030000000000000000000000000705000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) close(0x3) io_submit(0x0, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4ecf, r6, 0x0, 0x0, 0x80000000600}]) pipe2$watch_queue(&(0x7f0000001180), 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0xc3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 1m30.615918847s ago: executing program 7 (id=2305): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x26, 0xe, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x2007) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) rt_tgsigqueueinfo(r1, 0x0, 0x15, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000000)=0x4d) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80008, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e3502c9], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0xda4a, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x2, 0xe, 0x8000001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 1m29.43326449s ago: executing program 7 (id=2309): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000380), &(0x7f0000000480)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000100000000"], 0x20}], 0x1}, 0x0) 1m27.783764735s ago: executing program 7 (id=2312): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='macvtap0\x00', 0x10) connect$inet(r0, &(0x7f0000001200)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m27.506357231s ago: executing program 7 (id=2313): socket$inet6(0xa, 0x3, 0xff) pipe2$9p(&(0x7f00000000c0), 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m27.026371216s ago: executing program 7 (id=2315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4005) 1m26.50812506s ago: executing program 7 (id=2318): mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1m9.536285713s ago: executing program 37 (id=2318): mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 15.297456168s ago: executing program 1 (id=2470): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x7ff, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8, 0x8206}, 0x90) 15.104112754s ago: executing program 5 (id=2472): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 12.930447385s ago: executing program 3 (id=2474): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x41, 0x4e8, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000240)='./file2\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a6d2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x60040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x101, 0xfc, 0xa1, 0x0, 0x42}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848150000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 12.623084958s ago: executing program 1 (id=2476): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x407f, r1, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000500), 0x0}, 0x20) 12.148070642s ago: executing program 9 (id=2477): mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xba01fffe) 12.079840198s ago: executing program 1 (id=2478): inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x4000094}, 0x24000052) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x0) 12.017525603s ago: executing program 9 (id=2479): set_mempolicy(0x2, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3818014, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000240)={[{@fat=@errors_remount}, {@numtail}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0x81, 0x2f8, &(0x7f0000000580)="$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") 11.61316155s ago: executing program 3 (id=2480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='tcpci 0x50\x00', 0xb) 11.297662065s ago: executing program 5 (id=2481): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r2) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 11.296802546s ago: executing program 8 (id=2482): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r2 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getsockname$unix(r1, &(0x7f0000019080)=@abs, &(0x7f0000019100)=0x6e) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4d}, 0x94) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(r2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0CFOxEAUx+F/l+0AhhVcCIFbB5a7gEFyARJuwYkQOBIkZvPIdDYNFwDM94lJ2/f6ExP+1baSOmmpqkoOrc6Pg7vTfo63jymVzLsxqWQ7J5vH3Y9Onc2ZxuNVL06HWrwtmYelf/+StB6devcym6TdXN/uM2f67Guv45/nizX7fmw+rV/acu6/xmr94tUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/5DgAA//9Qiy9Q") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) mremap(&(0x7f00002cc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000649000/0x3000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000001400)={[{@resuid}, {@dioread_lock}, {@grpjquota}, {@dax_always}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 9.625491816s ago: executing program 3 (id=2483): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0xc0000000, 0x250, "dbf80da99065d4ef1c1700e3b3527e0bd28f71c360e1cd952f614cffbec517e7", 0x2, 0xffff, 0x7, 0x5, 0x5bdb, 0x2, 0x6, 0x5, [0x6, 0x6, 0x6, 0x1]}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x17b) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) write(r5, &(0x7f0000000400)='p:lygroup/myevent ./dummy:0x2', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010", @ANYRES16=r3, @ANYBLOB="95e81c56b0c66eed25bebda6bb7d6f0579e9be7fc1d3415e372e90873f8c0ec583088faf27205301bcc953f7877985f275f5696efe769853d32963ab68f463", @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ea73d19a7409f9533827c03fb325056e40"]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/29) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000004c0)={0x4, 0x91, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2"}) 8.472893162s ago: executing program 1 (id=2484): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x26, 0xe, 0x0, 0x0) ioprio_set$pid(0x1, r1, 0x2007) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) rt_tgsigqueueinfo(r1, 0x0, 0x15, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000000)=0x4d) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80008, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e3502c9], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffff9, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0xda4a, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x2, 0xe, 0x8000001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x7ffffff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$OCFS2_IOC_RESVSP64(r4, 0x4030582a, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x44008) write$uinput_user_dev(r0, 0x0, 0x0) 6.958093754s ago: executing program 8 (id=2485): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 6.957439604s ago: executing program 9 (id=2486): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000140)="0000000001000000", 0x8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) 6.909334116s ago: executing program 5 (id=2487): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x802, 0x104) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) 6.584097414s ago: executing program 3 (id=2488): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 6.507712152s ago: executing program 5 (id=2489): mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xba01fffe) 6.455132805s ago: executing program 8 (id=2490): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x41, 0x4e8, &(0x7f00000005c0)="$eJzs3U9oVNsZAPDvTv5YY2LSUrHVFgItVrGdmESjQilmVRAtbS100T8Sk5iISSaYCagUahCLFCpddGFx1Y1ddBO6K9IiFB681Vu4eG8hCm/1njyfPHkuXOVxJ3d0jGPyYmLuY/z94DL3nEnmfHc+7p1zhnPPBPDW6o6IIxHRFBHFiOjM6gvZFpcWt/TvTvXPj6dbEgsLJx4lkUTE0f758eprJdnjluwFvpU+XInY2/xyuzMXLp4dmpgYPZeVe8qT0z0zFy7+6Mzk0Njo2OjUwMGDhw8dGDhweP2OdfP26ze//fdjd669M/fdbVuGJ9N427Pnao9jvXRHd/aetERH7RNJxKn1bixnX8s7AFbtk8LOW3nHAABsvELW92+u9P87oykWO+v37/72cWf8sS3v+AAAAIC1W1hoyh4BAACAxpUY+wMAAECDq84DONo/P17dNmruwYOfblRLvMrDwYjoWsx/9f7uxWean93T2/KG7u/9w9OI7uh48tFPvvH/dIs3dB82X03zH+YdAXlq3Z93BORpxy/yjoA8vXc17wi4NBcRt4/U6f8na+7ztS8pJ0vKxwfT/t9fZmrr9P/eHr88kXcE5OlnA3lHQJ5uPMo7Am4PRsS+et//FSrr91Vtjoi26tp+6+RQe/r5/+/7tXUvf/4XHqxjkyzxcDDixzVrO56qyX+mqykrdVS+KmxJTp+ZGN0XEVsjYne0bErLvcu00Ttw46/16r/zJM3/P5Pq93/plrZf/S4wi+NB86YX/29kqDy01uNm0cO5iB3N9fL/vP+fZLl+Xf8tXftzvfqBPZV1RXctn3/epIV/ROyqe/4/H60ly67P2lO5HPRULwp1/OuDz67Uq//+79P8n90j//lJz/+25fNfuf4/W693ZvVtXP7fzSf16p/eSvP/t0uvc/1vTX5VCbA1qzs/VC6f641oTY69XN+3+pgbVfX9qL5faf53f6/+53+1/5dk60J3RcTXX6PNuXvTd+rVXy+k+b/xO+d/ftL8j6xw/icvnP+r35l//4c/qNf2zqtp/rt+vfL5v78SzO6sRv9vZV82QXnHCQAAAAAAAMD6KFTu00kKxWf7hUKxuDjP95vRVpgozZT3ni7NTo0s3s/TFS2F6lSvzpr5oL3Z/JBquW9JuT+bO3K1c3OlXBwuTYzkffAAAADQ4Noj7v3m8n+2b3nF+D91tzPvKAEAAIC1SMf/HffaKst5fW6cDwAAAA0pHf8//tOn74bxPwAAADSs2vE/AAAA0Nh+fvx4ui1Uf/dvqjR25uz49OG+fcXJ2eHicOncdHGsVBqrrNg3ufLrTZRK0719MXu+pzw6U+6ZuXDx5GRpdqp8svK7sSdHWzbgmICVFbd+vC3vGAAAgI2zlt/1t2PHTqPu5H1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLb4IAAD//wws/WY=") chdir(&(0x7f0000000240)='./file2\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a6d2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x60040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x101, 0xfc, 0xa1, 0x0, 0x42}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848150000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6.285377885s ago: executing program 5 (id=2491): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_getaffinity(r0, 0x0, 0x0) getpriority(0x2, 0x0) 6.258480952s ago: executing program 9 (id=2492): syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 6.064362018s ago: executing program 3 (id=2493): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1100, 0x8}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r1, 0x40186f40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x8, 0x3, 0x5, 0x1}, 0x8) fsopen(&(0x7f0000000280)='binder\x00', 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socket$kcm(0x29, 0x2, 0x0) 5.713546752s ago: executing program 1 (id=2494): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "0430ca2f9610b6fb", "73b59657269ef929ee540a8a0a86c5d0", '\x00', "21be0dd9f7f3c312"}, 0x28) sendfile(r3, r4, &(0x7f0000000100)=0x1010, 0x10001) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0xffff4a9c0080ffff, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1, 0x0, 0x0) 4.903735706s ago: executing program 3 (id=2495): socket$kcm(0x2, 0x922000000001, 0x106) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500050a00"], 0x17) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) write(r1, &(0x7f0000000280)='disconnect 11:aa:aa:aa:aa:aa 0\n', 0x1f) 4.76178474s ago: executing program 8 (id=2496): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000064000/0x400000)=nil, 0x400000, 0x0, 0x0) 3.480048537s ago: executing program 9 (id=2498): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000040)={0xc0000000, 0x250, "dbf80da99065d4ef1c1700e3b3527e0bd28f71c360e1cd952f614cffbec517e7", 0x2, 0xffff, 0x7, 0x5, 0x5bdb, 0x2, 0x6, 0x5, [0x6, 0x6, 0x6, 0x1]}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x17b) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000140), &(0x7f0000000180)=0x4) write(r5, &(0x7f0000000400)='p:lygroup/myevent ./dummy:0x2', 0x1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010", @ANYRES16=r3, @ANYBLOB="95e81c56b0c66eed25bebda6bb7d6f0579e9be7fc1d3415e372e90873f8c0ec583088faf27205301bcc953f7877985f275f5696efe769853d32963ab68f463", @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="ea73d19a7409f9533827c03fb325056e40"]) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000080)=""/29) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000004c0)={0x4, 0x91, &(0x7f0000000400)="2072871afeed7ef366b116932ec3edd94c2c93389a7c88e3df51d56cb0079f5b969d472c97a4c5e530c2dce0975dae4c751c8a86a2702d505ea96b19cbd08b9fcacbc4740255be90e15b2bbe8da850fbca97ef4d241ec54fb5fb50bb84d8a032c1eb47d8b481928352ad4e7bc74771ad53b76148caaca5dbdc6c9e76f85be9c6ffbcb8de534a0c20658fb9974633321dc2"}) 3.234747276s ago: executing program 1 (id=2499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 1.614752774s ago: executing program 8 (id=2500): inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x4000094}, 0x24000052) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrquota}]}, 0x3, 0x470, &(0x7f0000000500)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x0) 201.897962ms ago: executing program 8 (id=2501): mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000100001000100000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="4813ad9160826af2e83e3f2602eba17e4bb9745171fd7ba9c46cee903f90158ec3af8a98a18a6114bfff0b39aa55010093cf5c43a3fa04ae96586cf941663dbd7f550002d2b32745873d3cf133985874097009d329c93b890d0b3f11106d2085ce9873cd52364eb6a379d046"], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20004804) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x30, 0xffffffffffffffff, 0x80000000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 731.22µs ago: executing program 5 (id=2502): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x802, 0x104) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) 0s ago: executing program 9 (id=2503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000140)="0000000001000000", 0x8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) kernel console output (not intermixed with test programs): 3][T12342] device hsr_slave_0 entered promiscuous mode [ 1083.981528][T12475] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1812'. [ 1084.690257][ T9703] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1085.129548][T12342] device hsr_slave_1 entered promiscuous mode [ 1085.494777][ T9703] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.514343][T12342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.558244][T12342] Cannot create hsr debugfs directory [ 1085.611978][ T9703] usb 8-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1085.820466][ T9703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.063701][ T9703] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1086.230173][T12475] overlayfs: missing 'lowerdir' [ 1086.244486][ T9703] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1086.298554][T12480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.308628][T12480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.445439][ T9703] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1086.569784][ T9703] usb 8-1: media controller created [ 1086.978511][ T9703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1087.266873][T12482] ieee802154 phy0 wpan0: encryption failed: -22 [ 1087.615657][T12483] Cannot find add_set index 0 as target [ 1087.932475][ T9703] usb 8-1: selecting invalid altsetting 1 [ 1087.938439][ T9703] set interface failed [ 1087.938518][ T9703] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1087.949217][ T9703] error writing reg: 0xff, val: 0x00 [ 1088.022739][ T9703] dvb_usb_mxl111sf: probe of 8-1:1.0 failed with error -22 [ 1088.314403][ T9703] usb 8-1: USB disconnect, device number 6 [ 1088.593163][T12502] ieee802154 phy0 wpan0: encryption failed: -22 [ 1088.705966][T12503] SET target dimension over the limit! [ 1090.190314][T12511] md: array md0 already has disks! [ 1090.274756][T12520] md: could not open device unknown-block(1,0). [ 1090.281450][T12520] md: error, md_import_device() returned -16 [ 1090.288726][T12520] md: could not open device unknown-block(1,1). [ 1090.295179][T12520] md: error, md_import_device() returned -16 [ 1090.571005][T12520] md: pers->run() failed ... [ 1091.061729][T12506] device syzkaller0 entered promiscuous mode [ 1091.115762][T12533] ieee802154 phy0 wpan0: encryption failed: -22 [ 1091.214433][T12534] Cannot find add_set index 0 as target [ 1092.653964][T12543] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1827'. [ 1092.968748][T11420] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1094.249492][T11420] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.297682][T11420] usb 8-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1094.365695][T11420] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.504897][T11420] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1094.554001][T11420] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1094.633047][T11420] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1094.700881][T12543] overlayfs: missing 'lowerdir' [ 1094.721521][T11420] usb 8-1: media controller created [ 1094.758308][T12549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.770756][T12549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.985733][T11420] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1095.210841][T11420] usb 8-1: selecting invalid altsetting 1 [ 1095.266819][T11420] set interface failed [ 1095.267054][T11420] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1095.326086][T11420] error writing reg: 0xff, val: 0x00 [ 1095.575586][T11420] dvb_usb_mxl111sf: probe of 8-1:1.0 failed with error -22 [ 1096.428528][T11420] usb 8-1: USB disconnect, device number 7 [ 1096.783604][T12559] Console: switching to colour VGA+ 80x25 [ 1100.332122][T12569] device syzkaller0 entered promiscuous mode [ 1100.485701][T12581] ieee802154 phy0 wpan0: encryption failed: -22 [ 1100.588925][T12584] Cannot find add_set index 0 as target [ 1100.603296][T12583] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.658259][T12583] binder: 12582:12583 ioctl 4018620d 200000004a80 returned -16 [ 1101.685137][T12591] md: array md0 already has disks! [ 1101.691029][T12591] md: could not open device unknown-block(1,0). [ 1101.697518][T12591] md: error, md_import_device() returned -16 [ 1101.704726][T12591] md: could not open device unknown-block(1,1). [ 1101.711341][T12591] md: error, md_import_device() returned -16 [ 1102.275682][T12591] md: pers->run() failed ... [ 1102.323666][T12595] ieee802154 phy0 wpan0: encryption failed: -22 [ 1102.432698][T12598] Cannot find add_set index 0 as target [ 1103.479146][T12604] loop5: detected capacity change from 0 to 1024 [ 1103.609217][T12604] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1104.055702][T12609] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1105.151705][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1105.675754][ T4278] Bluetooth: hci2: command 0x1003 tx timeout [ 1105.675790][T11012] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1105.970112][T12618] loop7: detected capacity change from 0 to 2048 [ 1106.022255][T12618] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1107.015585][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1107.485574][T12629] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.496852][T12629] binder: 12628:12629 ioctl 4018620d 200000004a80 returned -16 [ 1107.599269][T12631] loop7: detected capacity change from 0 to 2048 [ 1107.671205][T12631] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1108.652533][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1108.868126][ T7454] device hsr_slave_0 left promiscuous mode [ 1108.994229][ T7454] device hsr_slave_1 left promiscuous mode [ 1109.039227][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.059559][T12647] ieee802154 phy0 wpan0: encryption failed: -22 [ 1109.164719][T12654] Cannot find add_set index 0 as target [ 1109.287092][ T7454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.430959][ T7454] device bridge_slave_1 left promiscuous mode [ 1109.541966][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.727906][ T7454] device bridge_slave_0 left promiscuous mode [ 1109.828392][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.951541][T12651] loop3: detected capacity change from 0 to 4096 [ 1110.087660][T12651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1110.108398][T12662] FAULT_INJECTION: forcing a failure. [ 1110.108398][T12662] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.176773][T12662] CPU: 1 PID: 12662 Comm: syz.5.1852 Not tainted syzkaller #0 [ 1110.184344][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.194600][T12662] Call Trace: [ 1110.197937][T12662] [ 1110.201040][T12662] dump_stack_lvl+0x188/0x24e [ 1110.205807][T12662] ? show_regs_print_info+0x12/0x12 [ 1110.211164][T12662] ? load_image+0x410/0x410 [ 1110.215762][T12662] ? __might_sleep+0xd0/0xd0 [ 1110.220458][T12662] ? __lock_acquire+0x7c40/0x7c40 [ 1110.225570][T12662] should_fail_ex+0x390/0x4c0 [ 1110.230331][T12662] should_failslab+0x5/0x20 [ 1110.234891][T12662] slab_pre_alloc_hook+0x59/0x300 [ 1110.239993][T12662] kmem_cache_alloc+0x56/0x2f0 [ 1110.244922][T12662] ? flock_lock_inode+0x22f/0x1920 [ 1110.250222][T12662] flock_lock_inode+0x22f/0x1920 [ 1110.255590][T12662] ? __might_sleep+0xd0/0xd0 [ 1110.260348][T12662] ? check_conflicting_open+0x230/0x230 [ 1110.266086][T12662] locks_lock_inode_wait+0x113/0x480 [ 1110.271506][T12662] ? fcntl_setlease+0x310/0x310 [ 1110.276524][T12662] ? lockdep_softirqs_off+0x430/0x430 [ 1110.282336][T12662] ? end_current_label_crit_section+0x14b/0x170 [ 1110.288767][T12662] ? common_file_perm+0x171/0x1c0 [ 1110.293909][T12662] ? bpf_lsm_file_lock+0x5/0x10 [ 1110.298843][T12662] __se_sys_flock+0x489/0x5b0 [ 1110.303591][T12662] ? __x64_sys_flock+0x60/0x60 [ 1110.308481][T12662] ? lock_chain_count+0x20/0x20 [ 1110.313411][T12662] ? lockdep_hardirqs_on+0x94/0x140 [ 1110.318663][T12662] do_syscall_64+0x4c/0xa0 [ 1110.323223][T12662] ? clear_bhb_loop+0x60/0xb0 [ 1110.327976][T12662] ? clear_bhb_loop+0x60/0xb0 [ 1110.332710][T12662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1110.338757][T12662] RIP: 0033:0x7fc4ff39e159 [ 1110.343298][T12662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.363388][T12662] RSP: 002b:00007fc500215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 1110.371961][T12662] RAX: ffffffffffffffda RBX: 00007fc4ff625fa0 RCX: 00007fc4ff39e159 [ 1110.380261][T12662] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 1110.388291][T12662] RBP: 00007fc4ff43506b R08: 0000000000000000 R09: 0000000000000000 [ 1110.396308][T12662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.404327][T12662] R13: 00007fc4ff626038 R14: 00007fc4ff625fa0 R15: 00007ffcc6c4f0d8 [ 1110.412486][T12662] [ 1110.601551][T12651] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1851: corrupted inode contents [ 1110.677983][T12651] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #15: comm syz.3.1851: mark_inode_dirty error [ 1110.723439][T12651] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1851: corrupted inode contents [ 1110.781970][T12651] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1851: mark_inode_dirty error [ 1110.793813][T12666] loop5: detected capacity change from 0 to 2048 [ 1110.822880][T12651] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1851: corrupted inode contents [ 1110.854796][T12651] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.1851: mark_inode_dirty error [ 1110.891035][T12651] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.1851: corrupted inode contents [ 1110.898615][T12666] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1110.938619][T12651] EXT4-fs error (device loop3): ext4_truncate:4325: inode #15: comm syz.3.1851: mark_inode_dirty error [ 1110.969300][T12651] EXT4-fs error (device loop3) in ext4_setattr:5695: Corrupt filesystem [ 1111.420973][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1111.853394][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1111.931822][ T7454] team0 (unregistering): Port device team_slave_1 removed [ 1112.049477][ T7454] team0 (unregistering): Port device team_slave_0 removed [ 1112.153189][ T7454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.306287][ T7454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.345112][T11012] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1112.671132][T12683] loop9: detected capacity change from 0 to 512 [ 1112.690799][T12685] md: array md0 already has disks! [ 1112.696674][T12685] md: could not open device unknown-block(1,0). [ 1112.703245][T12685] md: error, md_import_device() returned -16 [ 1112.709965][T12685] md: could not open device unknown-block(1,1). [ 1112.716528][T12685] md: error, md_import_device() returned -16 [ 1113.072231][T12683] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1113.225292][T12685] md: pers->run() failed ... [ 1114.179728][ T7454] bond0 (unregistering): Released all slaves [ 1114.311815][T12695] netlink: 'syz.9.1858': attribute type 10 has an invalid length. [ 1114.325721][T12695] team0: Device vxcan0 is of different type [ 1114.538363][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1114.716001][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1860'. [ 1114.812865][T12707] ieee802154 phy0 wpan0: encryption failed: -22 [ 1114.905291][T12708] Cannot find add_set index 0 as target [ 1116.834678][T12342] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1116.875739][T12342] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1116.974294][T12342] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1117.073517][T12342] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1117.141872][T12726] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1868'. [ 1117.482507][ T6575] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1117.995843][T12736] md: array md0 already has disks! [ 1118.002215][T12736] md: could not open device unknown-block(1,0). [ 1118.008920][T12736] md: error, md_import_device() returned -16 [ 1118.016292][T12736] md: could not open device unknown-block(1,1). [ 1118.023017][T12736] md: error, md_import_device() returned -16 [ 1119.001799][ T6575] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.060854][ T6575] usb 8-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1119.183043][ T6575] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.201584][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.211451][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.439574][ T6575] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1119.546848][T12736] md: pers->run() failed ... [ 1119.652279][ T6575] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1119.727361][ T6575] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1119.763278][ T6575] usb 8-1: media controller created [ 1119.827724][ T6575] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1119.917321][ T6575] usb 8-1: selecting invalid altsetting 1 [ 1119.923510][ T6575] set interface failed [ 1119.923537][ T6575] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1119.947279][ T6575] error writing reg: 0xff, val: 0x00 [ 1120.012202][ T6575] dvb_usb_mxl111sf: probe of 8-1:1.0 failed with error -22 [ 1120.065685][ T6575] usb 8-1: USB disconnect, device number 8 [ 1120.444633][ T4278] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 1120.489104][T12342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.525021][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1120.549372][ T3653] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1120.568993][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1120.610528][T12342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.633653][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1120.684962][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1120.715973][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.723559][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.755207][ T3653] usb 6-1: Using ep0 maxpacket: 8 [ 1120.762250][ T3653] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1120.772704][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1120.792609][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1120.803542][ T3653] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1120.815411][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1120.821529][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.830892][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.861073][ T3653] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1120.880901][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1874'. [ 1120.904893][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1120.912440][ T3653] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1120.950697][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1120.958983][ T3653] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1120.985150][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1121.032936][ T3653] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1121.051568][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1121.066523][ T3653] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1121.092076][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1121.102223][ T3653] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1121.126435][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1121.139771][ T3653] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1121.163874][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1121.181503][ T3653] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1121.213322][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1121.215211][ T3653] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1121.244170][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1121.274564][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1121.289617][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1121.301920][T12342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1121.310406][ T3653] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1121.370100][ T3653] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1121.387715][T12768] loop7: detected capacity change from 0 to 4096 [ 1121.394485][ T3653] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1121.460736][ T3653] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1121.512359][T12768] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1121.569552][ T3653] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1121.669003][ T3653] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1121.729059][ T3653] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1121.795168][ T3653] usb 6-1: string descriptor 0 read error: -22 [ 1121.837251][ T3653] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1121.881455][ T3653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.936088][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1121.949757][ T3653] adutux 6-1:168.0: interrupt endpoints not found [ 1122.055051][T12787] loop9: detected capacity change from 0 to 2048 [ 1122.654057][T12787] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1123.874109][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1123.972896][ T7500] usb 6-1: USB disconnect, device number 40 [ 1125.264231][T12819] md: array md0 already has disks! [ 1125.269899][T12819] md: could not open device unknown-block(1,0). [ 1125.276346][T12819] md: error, md_import_device() returned -16 [ 1125.282970][T12819] md: could not open device unknown-block(1,1). [ 1125.289426][T12819] md: error, md_import_device() returned -16 [ 1125.943172][T12819] md: pers->run() failed ... [ 1126.344393][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1126.357026][T12836] loop7: detected capacity change from 0 to 8 [ 1126.366605][T12836] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1126.375061][T12836] SQUASHFS error: Failed to read block 0x9b: -5 [ 1126.381647][T12836] SQUASHFS error: Unable to read metadata cache entry [99] [ 1126.389088][T12836] SQUASHFS error: Unable to read inode 0x127 [ 1126.418190][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1126.513404][T11908] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1127.329335][T12342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.022314][T12853] device syzkaller0 entered promiscuous mode [ 1128.522573][T12858] loop5: detected capacity change from 0 to 2048 [ 1128.774528][T12858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1129.556008][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1129.749916][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1129.781843][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1130.004556][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1130.049706][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1130.145407][T12342] device veth0_vlan entered promiscuous mode [ 1130.179011][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1130.220828][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1130.253622][T12883] syz.7.1892 (12883): /proc/12881/oom_adj is deprecated, please use /proc/12881/oom_score_adj instead. [ 1130.488583][T12342] device veth1_vlan entered promiscuous mode [ 1130.601352][T11597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1130.623284][T11597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1130.664432][T12887] loop9: detected capacity change from 0 to 4096 [ 1130.754462][T11597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1130.831856][T11597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1130.849809][T12887] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1130.863418][T12342] device veth0_macvtap entered promiscuous mode [ 1130.913225][T12342] device veth1_macvtap entered promiscuous mode [ 1130.949408][T12887] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.1893: corrupted inode contents [ 1131.015825][T12887] EXT4-fs error (device loop9): ext4_dirty_inode:6166: inode #15: comm syz.9.1893: mark_inode_dirty error [ 1131.033991][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.066728][T12887] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.1893: corrupted inode contents [ 1131.081888][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.179041][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.191942][ T129] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1131.227000][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.286738][T12887] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #15: comm syz.9.1893: mark_inode_dirty error [ 1131.310911][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.355693][T12887] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.1893: corrupted inode contents [ 1131.410254][ T129] usb 8-1: Using ep0 maxpacket: 8 [ 1131.417601][ T129] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1131.448588][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.470997][T12906] md: array md0 already has disks! [ 1131.477056][T12906] md: could not open device unknown-block(1,0). [ 1131.483972][T12906] md: error, md_import_device() returned -16 [ 1131.491255][T12906] md: could not open device unknown-block(1,1). [ 1131.498326][T12906] md: error, md_import_device() returned -16 [ 1131.540391][ T129] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1131.603829][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1131.650020][T12887] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #15: comm syz.9.1893: mark_inode_dirty error [ 1131.676338][ T129] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1131.736368][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1131.785105][T12887] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.1893: corrupted inode contents [ 1131.819638][ T129] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1131.846122][T12887] EXT4-fs error (device loop9): ext4_truncate:4325: inode #15: comm syz.9.1893: mark_inode_dirty error [ 1131.869317][T12906] md: pers->run() failed ... [ 1131.887106][T12342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.907931][T12887] EXT4-fs error (device loop9) in ext4_setattr:5695: Corrupt filesystem [ 1131.947843][ T129] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1131.969815][ T129] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1131.994782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1132.003895][ T129] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1132.024027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1132.086737][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1132.170627][ T129] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1132.189950][ T129] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1132.201866][ T129] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1132.209968][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.221679][ T129] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1132.241549][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.268824][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.290693][ T129] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1132.313820][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.324651][ T129] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1132.346101][ T129] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1132.365011][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.394971][ T129] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1132.407690][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.427510][ T129] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1132.438956][T12342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.460024][ T129] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1132.473752][T12342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.496260][T12342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.514106][ T129] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1132.545746][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1132.559574][ T129] usb 8-1: string descriptor 0 read error: -22 [ 1132.566397][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1132.588187][ T129] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1132.599114][ T129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.612233][T12342] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.671600][T12342] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.693430][ T129] adutux 8-1:168.0: interrupt endpoints not found [ 1132.721835][T12342] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.783994][T12342] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.816558][T12918] 9pnet_fd: Insufficient options for proto=fd [ 1133.194646][T11420] usb 8-1: USB disconnect, device number 9 [ 1133.840546][T11012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1133.853642][T11012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1133.864901][T11012] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1134.004719][T11012] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1134.012676][T11012] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1134.059089][ T8343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1134.593197][T12940] loop7: detected capacity change from 0 to 512 [ 1134.610276][T12940] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1135.871399][T12955] md: array md0 already has disks! [ 1135.877106][T12955] md: could not open device unknown-block(1,0). [ 1135.884075][T12955] md: error, md_import_device() returned -16 [ 1135.891244][T12955] md: could not open device unknown-block(1,1). [ 1135.898014][T12955] md: error, md_import_device() returned -16 [ 1136.113145][T12956] loop3: detected capacity change from 0 to 256 [ 1136.187500][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1136.217003][T12955] md: pers->run() failed ... [ 1136.274993][ T8343] Bluetooth: hci2: command 0x0409 tx timeout [ 1136.708514][ T4476] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.799259][T12971] 9pnet_fd: Insufficient options for proto=fd [ 1137.195035][ T4476] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.608019][ T7500] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1138.279894][ T7500] usb 4-1: Using ep0 maxpacket: 8 [ 1138.431658][ T7500] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1138.446528][ T4476] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.461652][ T7500] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1138.548439][ T7500] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1138.560744][ T8343] Bluetooth: hci2: command 0x041b tx timeout [ 1138.617218][ T7500] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1138.829447][ T7500] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1139.071348][ T7500] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1139.165428][ T7500] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1139.233738][ T7500] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1139.292999][ T7500] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1139.373153][ T7500] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1139.445312][ T7500] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1139.484534][T13001] ieee802154 phy0 wpan0: encryption failed: -22 [ 1139.514620][ T7500] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1139.574338][ T7500] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1139.603462][T13004] Cannot find add_set index 0 as target [ 1139.658554][ T7500] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1139.796441][ T7500] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1139.960019][ T7500] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1140.093408][ T7500] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1140.258171][ T7500] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1140.383391][ T7500] usb 4-1: string descriptor 0 read error: -22 [ 1140.389680][ T7500] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1140.471278][ T7500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.510044][T12933] chnl_net:caif_netlink_parms(): no params data found [ 1140.557200][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1918'. [ 1140.602479][ T7500] usb 4-1: can't set config #168, error -71 [ 1140.621435][ T7500] usb 4-1: USB disconnect, device number 34 [ 1140.694226][ T4476] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.783647][ T8343] Bluetooth: hci2: command 0x040f tx timeout [ 1141.198004][T13022] md: array md0 already has disks! [ 1141.203566][T13022] md: could not open device unknown-block(1,0). [ 1141.210159][T13022] md: error, md_import_device() returned -16 [ 1141.217187][T13022] md: could not open device unknown-block(1,1). [ 1141.223997][T13022] md: error, md_import_device() returned -16 [ 1141.852801][T13022] md: pers->run() failed ... [ 1141.900918][T13026] netlink: 'syz.7.1926': attribute type 10 has an invalid length. [ 1141.924937][T13012] loop9: detected capacity change from 0 to 4096 [ 1141.945190][T13026] team0: Device vxcan0 is of different type [ 1142.216281][T13012] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1142.350763][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.365123][T12933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.414238][T13032] 9pnet_fd: Insufficient options for proto=fd [ 1142.423948][T12933] device bridge_slave_0 entered promiscuous mode [ 1142.517830][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1142.561262][T12933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.568609][T12933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.627225][T12933] device bridge_slave_1 entered promiscuous mode [ 1143.037717][ T8343] Bluetooth: hci2: command 0x0419 tx timeout [ 1143.644558][ T8343] Bluetooth: hci6: command 0x0406 tx timeout [ 1143.771605][T12933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1144.109049][T12933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1144.376491][T13050] ieee802154 phy0 wpan0: encryption failed: -22 [ 1144.469887][T13053] Cannot find add_set index 0 as target [ 1145.423238][T12933] team0: Port device team_slave_0 added [ 1145.434563][T12933] team0: Port device team_slave_1 added [ 1145.955224][T13062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1933'. [ 1146.268333][T13066] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1936'. [ 1146.671492][T13071] CIFS: Attempting to mount \\127.0.0.1\share [ 1146.677889][T13071] CIFS: VFS: No username specified [ 1147.004414][T12933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.011585][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.208437][T12933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.262428][T13078] loop5: detected capacity change from 0 to 2048 [ 1147.350337][T13082] netlink: 'syz.9.1938': attribute type 10 has an invalid length. [ 1147.354211][T13078] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1147.397926][T13082] team0: Device vxcan0 is of different type [ 1147.624783][T12933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.631916][T12933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.469357][T12933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.448822][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1150.153167][T13109] md: array md0 already has disks! [ 1150.158999][T13109] md: could not open device unknown-block(1,0). [ 1150.166015][T13109] md: error, md_import_device() returned -16 [ 1150.172842][T13109] md: could not open device unknown-block(1,1). [ 1150.180282][T13109] md: error, md_import_device() returned -16 [ 1150.221386][T12933] device hsr_slave_0 entered promiscuous mode [ 1150.274232][T12933] device hsr_slave_1 entered promiscuous mode [ 1150.303795][T12933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1150.322658][T13109] md/raid10:md0: not clean -- starting background reconstruction [ 1150.326147][T12933] Cannot create hsr debugfs directory [ 1150.330900][T13109] md/raid10:md0: active with 1 out of 2 devices [ 1150.344619][T13109] md0: detected capacity change from 0 to 2048 [ 1150.397267][T13116] ieee802154 phy0 wpan0: encryption failed: -22 [ 1150.489580][T13123] Cannot find add_set index 0 as target [ 1150.498609][T13122] md: recovery of RAID array md0 [ 1151.082464][T13122] md: md0: recovery done. [ 1151.245026][T13124] md: resync of RAID array md0 [ 1151.328469][T13124] md: md0: resync done. [ 1151.334282][T13126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1949'. [ 1151.558696][T13130] CIFS: Attempting to mount \\127.0.0.1\share [ 1151.565082][T13130] CIFS: VFS: No username specified [ 1152.529158][T13137] loop9: detected capacity change from 0 to 2048 [ 1152.613739][T13137] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1153.519397][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1153.628186][T13151] loop7: detected capacity change from 0 to 2048 [ 1153.870934][T13151] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1154.691583][ T4476] device hsr_slave_0 left promiscuous mode [ 1154.872430][ T4476] device hsr_slave_1 left promiscuous mode [ 1155.388266][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.414452][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.449887][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1155.458934][ T4476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.490466][ T4476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.556410][ T4476] device bridge_slave_1 left promiscuous mode [ 1155.586385][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.597556][ T4476] device bridge_slave_0 left promiscuous mode [ 1155.606199][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.691424][T13175] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1960'. [ 1155.709377][ T4476] device veth1_macvtap left promiscuous mode [ 1155.716922][ T4476] device veth0_macvtap left promiscuous mode [ 1155.725298][ T4476] device veth1_vlan left promiscuous mode [ 1155.731456][ T4476] device veth0_vlan left promiscuous mode [ 1155.741993][T13176] ieee802154 phy0 wpan0: encryption failed: -22 [ 1155.832715][T13178] Cannot find add_set index 0 as target [ 1156.768179][T13179] CIFS: Attempting to mount \\127.0.0.1\share [ 1156.774993][T13179] CIFS: VFS: No username specified [ 1157.606700][T13186] loop9: detected capacity change from 0 to 4096 [ 1157.626775][T13186] EXT4-fs: inline encryption not supported [ 1157.692857][T13191] loop3: detected capacity change from 0 to 8 [ 1157.704936][T13191] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1157.714274][T13191] SQUASHFS error: Failed to read block 0x9b: -5 [ 1157.720656][T13191] SQUASHFS error: Unable to read metadata cache entry [99] [ 1157.728014][T13191] SQUASHFS error: Unable to read inode 0x127 [ 1158.023412][T13186] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1158.044083][T13186] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ee1a8, mo2=0002] [ 1158.055346][T13186] System zones: 0-5 [ 1158.080362][T11915] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1158.096403][T13186] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1158.495731][T13195] loop3: detected capacity change from 0 to 2048 [ 1158.577336][T13195] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1158.820395][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1159.209689][ T4476] team0 (unregistering): Port device team_slave_1 removed [ 1159.510875][ T4476] team0 (unregistering): Port device team_slave_0 removed [ 1159.570166][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1159.739106][ T4476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.748166][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 1159.873840][ T4476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.034567][T13209] md: couldn't update array info. -22 [ 1160.052456][T13209] md: could not open device unknown-block(1,0). [ 1160.059060][T13209] md: md_import_device returned -16 [ 1160.064971][T13209] md: could not open device unknown-block(1,1). [ 1160.071755][T13209] md: md_import_device returned -16 [ 1160.236608][ T129] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1160.392502][ T4476] bond0 (unregistering): Released all slaves [ 1160.454340][ T129] usb 4-1: Using ep0 maxpacket: 8 [ 1160.467148][ T129] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1160.474925][ T129] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1160.487618][ T129] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1160.499571][ T129] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1160.510749][ T129] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1160.524813][ T129] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1160.543129][ T129] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1160.550956][ T129] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1160.563220][ T129] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1160.574974][ T129] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1160.586242][ T129] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1160.602053][ T129] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1160.638995][ T129] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1160.646470][ T129] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1160.714640][ T129] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1160.734694][ T129] usb 4-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1160.759688][ T129] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1160.788759][ T129] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1160.822618][ T129] usb 4-1: string descriptor 0 read error: -22 [ 1160.829340][ T129] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1160.846169][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.875089][ T129] adutux 4-1:168.0: interrupt endpoints not found [ 1160.888198][T13212] loop7: detected capacity change from 0 to 2048 [ 1161.073348][T13212] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1161.926557][ T14] usb 4-1: USB disconnect, device number 35 [ 1162.161129][T13229] CIFS: Attempting to mount \\127.0.0.1\share [ 1162.167691][T13229] CIFS: VFS: No username specified [ 1162.350031][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1163.381487][T13246] loop9: detected capacity change from 0 to 2048 [ 1163.821967][T13246] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1164.423092][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 1164.876017][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1166.217760][T13281] md: couldn't update array info. -22 [ 1166.223908][T13281] md: could not open device unknown-block(1,0). [ 1166.230421][T13281] md: md_import_device returned -16 [ 1166.236385][T13281] md: could not open device unknown-block(1,1). [ 1166.242975][T13281] md: md_import_device returned -16 [ 1166.924188][T10186] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1166.980344][T13283] loop3: detected capacity change from 0 to 2048 [ 1167.098123][T12933] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1167.140762][T10186] usb 8-1: Using ep0 maxpacket: 8 [ 1167.151455][T10186] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1167.162483][T10186] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1167.174949][T10186] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1167.188000][T10186] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1167.203809][T10186] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1167.224847][T10186] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1167.251302][T10186] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1167.263871][T12933] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1167.272440][T13283] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1167.278583][T12933] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1167.292338][T12933] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1167.342978][T10186] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1167.398542][T12933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.501072][T10186] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1167.515964][T10233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1167.524289][T10233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1167.531980][T10186] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1167.554919][T13297] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1983'. [ 1168.017007][T10186] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1168.035935][T10186] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1168.043132][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1168.052300][T10186] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1168.060031][T10186] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1168.107576][T10186] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1168.143444][T12933] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.283828][T13304] CIFS: Attempting to mount \\127.0.0.1\share [ 1168.291079][T13304] CIFS: VFS: No username specified [ 1168.313284][T10186] usb 8-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1168.465029][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1168.520543][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1168.545839][T10186] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1168.604557][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.612115][ T7454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.665531][T10186] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1168.672470][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1168.704593][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1168.732011][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1168.766217][T10186] usb 8-1: string descriptor 0 read error: -22 [ 1168.774529][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.781940][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.809907][T10186] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1168.819463][T10186] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.850573][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1168.873419][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1168.910557][T10186] adutux 8-1:168.0: interrupt endpoints not found [ 1168.940089][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1168.981377][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1169.010496][T13313] loop9: detected capacity change from 0 to 2048 [ 1169.021068][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1169.058500][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1169.087238][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1985'. [ 1169.102377][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1169.122126][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1169.153509][T13313] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1169.163877][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1169.173275][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1169.182510][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1169.194372][T12933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1169.235531][ T14] usb 8-1: USB disconnect, device number 10 [ 1169.282391][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1987'. [ 1170.068291][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1170.395173][T13335] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1173.226504][T13346] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1996'. [ 1173.390804][T13349] CIFS: Attempting to mount \\127.0.0.1\share [ 1173.397418][T13349] CIFS: VFS: No username specified [ 1174.964093][T13364] netlink: 'syz.7.1994': attribute type 10 has an invalid length. [ 1174.986066][T13364] team0: Device vxcan0 is of different type [ 1175.446615][T13363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1997'. [ 1175.511108][T13368] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1999'. [ 1175.798402][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1175.823530][T13373] loop5: detected capacity change from 0 to 2048 [ 1175.836617][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1175.880306][T13373] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1175.892282][T12933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.147435][ T4338] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1176.342382][ T4338] usb 10-1: Using ep0 maxpacket: 8 [ 1176.380192][ T4338] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1176.527463][ T4338] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1177.102445][ T4338] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1177.115466][ T4338] usb 10-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1177.127147][ T4338] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1177.147367][ T4338] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1177.164101][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1177.181075][ T4338] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1177.202588][ T4338] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1177.214673][ T4338] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1177.230833][ T4338] usb 10-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1177.243345][ T4338] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1177.257940][ T4338] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1177.267084][ T4338] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1177.275703][ T4338] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1177.289277][ T4338] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1177.301865][ T4338] usb 10-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 1177.316033][ T4338] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1177.331130][ T4338] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1177.353956][ T4338] usb 10-1: string descriptor 0 read error: -22 [ 1177.360408][ T4338] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1177.389372][ T4338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.411036][ T4338] adutux 10-1:168.0: interrupt endpoints not found [ 1177.572423][T13398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2006'. [ 1177.784434][T13401] CIFS: Attempting to mount \\127.0.0.1\share [ 1177.790786][T13401] CIFS: VFS: No username specified [ 1178.076177][ T8343] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1178.076216][ T4278] Bluetooth: hci1: command 0x1003 tx timeout [ 1178.575929][T10186] usb 10-1: USB disconnect, device number 3 [ 1179.974098][T13422] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2010'. [ 1179.981475][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2011'. [ 1180.201709][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1180.225000][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1180.300541][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1180.321192][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1180.334481][T12933] device veth0_vlan entered promiscuous mode [ 1180.363986][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1180.381325][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1180.396220][T10186] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1180.413199][T12933] device veth1_vlan entered promiscuous mode [ 1180.512830][T13429] loop9: detected capacity change from 0 to 2048 [ 1180.519583][T13431] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1180.614786][T10186] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.695215][T10186] usb 8-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1180.740141][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1180.788109][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1180.822210][T10186] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.879589][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1180.883058][ C0] hrtimer: interrupt took 111599 ns [ 1181.130032][T10186] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1181.147583][T13429] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1181.172638][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1181.236520][T13418] overlayfs: missing 'lowerdir' [ 1181.297164][T13422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.434299][T12933] device veth0_macvtap entered promiscuous mode [ 1182.305948][T13422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.543528][T10186] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1182.698265][T10186] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1182.767066][T10186] usb 8-1: media controller created [ 1182.826917][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1182.868570][T10186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1183.006471][T10186] usb 8-1: selecting invalid altsetting 1 [ 1183.061519][T10186] set interface failed [ 1183.062011][T10186] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1183.118693][T13436] device syzkaller0 entered promiscuous mode [ 1183.149399][T10186] error writing reg: 0xff, val: 0x00 [ 1183.182878][T12933] device veth1_macvtap entered promiscuous mode [ 1183.298930][T10186] dvb_usb_mxl111sf: probe of 8-1:1.0 failed with error -22 [ 1183.326500][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.480640][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.603398][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.627521][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.638104][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.649383][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.659760][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.670760][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.723054][ T129] usb 8-1: USB disconnect, device number 11 [ 1183.742002][T12933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1183.790560][T12544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1183.801669][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1183.837431][T12544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1184.036069][T13457] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2017'. [ 1185.130892][T13464] CIFS: Attempting to mount \\127.0.0.1\share [ 1185.137663][T13464] CIFS: VFS: No username specified [ 1185.789016][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.803613][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.621815][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.637916][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.648701][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.660720][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.672607][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.683802][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.694463][T12933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.706559][T12933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.719187][T12933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.726683][T12544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1188.738149][T12544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1188.759150][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2020'. [ 1188.824995][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2022'. [ 1188.842210][T12933] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.859321][T12933] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.875098][T12933] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.884900][T12933] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.002267][T13521] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2027'. [ 1190.368052][ T6575] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1191.329872][T13517] loop7: detected capacity change from 0 to 2048 [ 1191.393428][T12544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1191.464384][ T6575] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.503171][T12544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.565880][ T6575] usb 10-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1191.666960][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1191.789308][ T6575] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.814682][T13517] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1192.156636][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.348830][T13521] overlayfs: missing 'lowerdir' [ 1192.413436][T13527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.423227][T13527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.633257][ T6575] usb 10-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1193.644261][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.886636][ T6575] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1194.017291][ T6575] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1194.037224][ T6575] usb 10-1: media controller created [ 1194.055725][ T6575] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1194.082682][ T6575] usb 10-1: selecting invalid altsetting 1 [ 1194.088634][ T6575] set interface failed [ 1194.088676][ T6575] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1194.207432][ T6575] error writing reg: 0xff, val: 0x00 [ 1194.491147][ T6575] dvb_usb_mxl111sf: probe of 10-1:1.0 failed with error -22 [ 1195.065646][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1195.102714][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1195.112819][ T6575] usb 10-1: USB disconnect, device number 4 [ 1195.749992][T13558] device syzkaller0 entered promiscuous mode [ 1196.051164][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2035'. [ 1196.231195][T13565] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2036'. [ 1198.287925][T13596] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2043'. [ 1198.603050][ T6575] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1198.865510][ T6575] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.948127][ T6575] usb 8-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1199.081710][ T6575] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.701619][ T6575] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1199.861390][T13596] overlayfs: missing 'lowerdir' [ 1199.902511][T13596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.915996][T13596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.981692][ T6575] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1200.232599][ T6575] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1200.380870][ T6575] usb 8-1: media controller created [ 1200.968962][ T6575] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1201.508897][ T6575] usb 8-1: selecting invalid altsetting 1 [ 1202.017695][ T6575] set interface failed [ 1202.019289][ T6575] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1202.207089][ T6575] error writing reg: 0xff, val: 0x00 [ 1202.462272][ T6575] dvb_usb_mxl111sf: probe of 8-1:1.0 failed with error -22 [ 1202.481326][T13618] loop5: detected capacity change from 0 to 256 [ 1203.308951][ T6575] usb 8-1: USB disconnect, device number 12 [ 1203.620126][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2050'. [ 1206.146587][T13659] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2058'. [ 1206.460360][ T9703] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1206.712062][ T9703] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.516923][ T9703] usb 9-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 1207.664827][ T9703] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.952904][ T9703] usb 9-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 1208.128239][T13659] overlayfs: missing 'lowerdir' [ 1208.189836][T13662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.199755][T13662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.238829][ T9703] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1208.485592][ T9703] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 1208.652927][ T9703] usb 9-1: media controller created [ 1209.242103][ T9703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1209.992759][T13667] loop5: detected capacity change from 0 to 256 [ 1210.330218][ T9703] usb 9-1: selecting invalid altsetting 1 [ 1210.336149][ T9703] set interface failed [ 1210.336176][ T9703] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1210.529054][ T9703] error writing reg: 0xff, val: 0x00 [ 1210.976092][ T9703] dvb_usb_mxl111sf: probe of 9-1:1.0 failed with error -22 [ 1211.130111][ T14] usb 9-1: USB disconnect, device number 2 [ 1211.672207][T13686] netlink: 'syz.9.2065': attribute type 10 has an invalid length. [ 1211.694391][T13686] team0: Device vxcan0 is of different type [ 1212.671947][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2066'. [ 1213.420949][T13712] md: couldn't update array info. -22 [ 1213.426852][T13712] md: could not open device unknown-block(1,0). [ 1213.433511][T13712] md: md_import_device returned -16 [ 1213.439349][T13712] md: could not open device unknown-block(1,1). [ 1213.446079][T13712] md: md_import_device returned -16 [ 1214.481189][T13722] ieee802154 phy0 wpan0: encryption failed: -22 [ 1214.584246][T13726] Cannot find add_set index 0 as target [ 1215.325559][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2073'. [ 1216.451534][T13741] loop7: detected capacity change from 0 to 256 [ 1216.506379][T13736] vivid-000: kernel_thread() failed [ 1217.183099][T13747] loop9: detected capacity change from 0 to 512 [ 1217.402476][T13752] loop8: detected capacity change from 0 to 2048 [ 1217.434313][T13747] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1217.472668][T13747] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1217.518837][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2080'. [ 1217.532007][T13752] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1218.504545][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1218.740990][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1220.882581][T13785] md: couldn't update array info. -22 [ 1220.888501][T13785] md: could not open device unknown-block(1,0). [ 1220.895178][T13785] md: md_import_device returned -16 [ 1220.902253][T13785] md: could not open device unknown-block(1,1). [ 1220.908765][T13785] md: md_import_device returned -16 [ 1221.112516][T13789] ieee802154 phy0 wpan0: encryption failed: -22 [ 1221.208005][T13790] SET target dimension over the limit! [ 1223.491649][T13807] loop5: detected capacity change from 0 to 2048 [ 1223.590473][T13809] loop7: detected capacity change from 0 to 256 [ 1224.433858][T13807] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1224.801080][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'. [ 1225.055012][T13821] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1225.477195][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1228.032439][T13860] md: couldn't update array info. -22 [ 1228.038415][T13860] md: could not open device unknown-block(1,0). [ 1228.045154][T13860] md: md_import_device returned -16 [ 1228.051019][T13860] md: could not open device unknown-block(1,1). [ 1228.057475][T13860] md: md_import_device returned -16 [ 1228.430711][T13870] ieee802154 phy0 wpan0: encryption failed: -22 [ 1228.542913][T13872] Cannot find add_set index 0 as target [ 1229.578371][T13876] netlink: 'syz.3.2104': attribute type 10 has an invalid length. [ 1230.521212][T13881] loop8: detected capacity change from 0 to 2048 [ 1230.662115][T13881] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1231.632912][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1237.477932][T13941] netlink: 'syz.8.2117': attribute type 10 has an invalid length. [ 1237.655076][T13935] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.667582][T13941] team0: Device vxcan0 is of different type [ 1237.784672][T13947] Cannot find add_set index 0 as target [ 1238.005117][T13948] loop5: detected capacity change from 0 to 2048 [ 1238.036879][T13948] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1239.165001][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1240.018849][T13983] loop7: detected capacity change from 0 to 128 [ 1241.199515][ T6575] Process accounting resumed [ 1242.399169][T14006] device syzkaller0 entered promiscuous mode [ 1243.375693][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2129'. [ 1243.781024][T14022] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.172707][T14028] Cannot find add_set index 0 as target [ 1245.254253][T14031] loop5: detected capacity change from 0 to 2048 [ 1245.594875][T14031] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1246.280971][T14051] loop7: detected capacity change from 0 to 1024 [ 1246.361638][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 1246.438608][T14051] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1246.765728][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1246.891288][T14078] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1249.180977][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1250.342652][T14113] device syzkaller0 entered promiscuous mode [ 1251.621277][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2146'. [ 1252.384542][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.391165][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1254.437704][T14162] loop9: detected capacity change from 0 to 4096 [ 1254.576552][T14162] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1254.792852][T14177] loop3: detected capacity change from 0 to 512 [ 1254.875290][T14177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1254.970463][T14177] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1256.452266][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1256.782842][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1258.112675][T14213] device syzkaller0 entered promiscuous mode [ 1260.054979][T14227] loop5: detected capacity change from 0 to 2048 [ 1260.072820][T14221] loop9: detected capacity change from 0 to 8192 [ 1260.212727][T14221] loop9: p1[EZD] p3 p4 [ 1260.229517][T14221] loop9: partition table partially beyond EOD, truncated [ 1260.275457][T14227] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1260.356509][T14221] loop9: p1 size 67043332 extends beyond EOD, truncated [ 1260.386234][T14221] loop9: p3 start 33556736 is beyond EOD, truncated [ 1260.483051][T14221] loop9: p4 size 32769 extends beyond EOD, truncated [ 1261.175911][T14247] loop7: detected capacity change from 0 to 512 [ 1261.309106][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1261.738026][T14247] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1261.772953][T11915] udevd[11915]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1261.809173][T13323] udevd[13323]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1262.062552][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2169'. [ 1262.276858][T14266] netlink: 'syz.7.2167': attribute type 10 has an invalid length. [ 1262.293020][T14266] team0: Device vxcan0 is of different type [ 1262.819063][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1263.053411][T14272] loop7: detected capacity change from 0 to 128 [ 1263.387114][T14272] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1263.752519][T14279] netlink: 'syz.5.2171': attribute type 10 has an invalid length. [ 1263.855796][T14272] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1263.911524][T14272] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.998408][T14279] team0: Device vxcan0 is of different type [ 1265.058286][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1265.414354][T14319] md: couldn't update array info. -22 [ 1265.420955][T14319] md: could not open device unknown-block(1,0). [ 1265.428175][T14319] md: md_import_device returned -16 [ 1265.434373][T14319] md: could not open device unknown-block(1,1). [ 1265.440813][T14319] md: md_import_device returned -16 [ 1266.797554][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2181'. [ 1267.026341][T14338] loop8: detected capacity change from 0 to 2048 [ 1267.180623][T14338] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1268.167681][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1269.379808][T14367] ip_tables: iptables: counters copy to user failed while replacing table [ 1269.493460][T14369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2188'. [ 1269.714701][T14373] CIFS: Attempting to mount \\127.0.0.1\share [ 1269.721275][T14373] CIFS: VFS: No username specified [ 1271.016312][T14385] md: couldn't update array info. -22 [ 1271.022547][T14385] md: could not open device unknown-block(1,0). [ 1271.029093][T14385] md: md_import_device returned -16 [ 1271.035265][T14385] md: could not open device unknown-block(1,1). [ 1271.041623][T14385] md: md_import_device returned -16 [ 1271.139380][T14387] loop7: detected capacity change from 0 to 128 [ 1271.281206][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 1271.440716][T14394] loop3: detected capacity change from 0 to 1024 [ 1271.553469][T14394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1271.705835][T14400] loop9: detected capacity change from 0 to 2048 [ 1272.266285][T14400] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1272.794034][ T8343] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 1273.005348][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1273.058951][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1274.357720][T14433] loop3: detected capacity change from 0 to 4096 [ 1275.310176][T14433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1275.417658][T14448] md: couldn't update array info. -22 [ 1275.425133][T14448] md: could not open device unknown-block(1,0). [ 1275.431724][T14448] md: md_import_device returned -16 [ 1275.437814][T14448] md: could not open device unknown-block(1,1). [ 1275.444458][T14448] md: md_import_device returned -16 [ 1275.475662][T14433] EXT4-fs error (device loop3): ext4_generic_delete_entry:2731: inode #2: block 16: comm syz.3.2200: bad entry in directory: inode out of bounds - offset=24, inode=41227, rec_len=20, size=4096 fake=0 [ 1275.702794][T14433] EXT4-fs error (device loop3) in ext4_delete_entry:2802: Corrupt filesystem [ 1275.791235][T14433] EXT4-fs warning (device loop3): ext4_rename_delete:3780: inode #2: comm syz.3.2200: Deleting old file: nlink 4, error=-117 [ 1275.936381][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1276.498378][T14469] loop5: detected capacity change from 0 to 2048 [ 1276.630366][T14469] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1276.784432][T14471] loop8: detected capacity change from 0 to 1024 [ 1276.892815][T14471] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1277.501263][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1278.674364][T14498] md: couldn't update array info. -22 [ 1278.681939][T14498] md: could not open device unknown-block(1,0). [ 1278.688520][T14498] md: md_import_device returned -16 [ 1278.716734][T14498] md: could not open device unknown-block(1,1). [ 1278.723108][T14498] md: md_import_device returned -16 [ 1278.741260][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1279.617514][T14518] loop8: detected capacity change from 0 to 512 [ 1279.700936][T14518] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.2219: attempt to clear invalid blocks 2 len 1 [ 1279.749728][T14518] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1279.766364][T14518] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2219: invalid indirect mapped block 1819239214 (level 0) [ 1279.790004][T14518] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2219: invalid indirect mapped block 1819239214 (level 1) [ 1279.819173][T14518] EXT4-fs (loop8): 1 truncate cleaned up [ 1279.825014][T14518] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1280.048884][T14527] loop5: detected capacity change from 0 to 8 [ 1280.059143][T14527] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1280.067481][T14527] SQUASHFS error: Failed to read block 0x9b: -5 [ 1280.074308][T14527] SQUASHFS error: Unable to read metadata cache entry [99] [ 1280.081797][T14527] SQUASHFS error: Unable to read inode 0x127 [ 1280.347383][T14526] loop9: detected capacity change from 0 to 2048 [ 1280.761942][T14526] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1280.778235][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1281.634988][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1282.684235][T14560] loop8: detected capacity change from 0 to 512 [ 1282.745526][T14562] loop7: detected capacity change from 0 to 128 [ 1282.787906][T14560] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1283.994985][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1284.442004][T14589] loop8: detected capacity change from 0 to 2048 [ 1284.586884][T14589] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1285.577462][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1285.805287][T14613] md: couldn't update array info. -22 [ 1285.811351][T14613] md: could not open device unknown-block(1,0). [ 1285.817901][T14613] md: md_import_device returned -16 [ 1285.824230][T14613] md: could not open device unknown-block(1,1). [ 1285.830703][T14613] md: md_import_device returned -16 [ 1286.250412][T14621] loop3: detected capacity change from 0 to 128 [ 1286.420088][T14627] FAULT_INJECTION: forcing a failure. [ 1286.420088][T14627] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1286.455786][T14627] CPU: 1 PID: 14627 Comm: syz.5.2247 Not tainted syzkaller #0 [ 1286.463448][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.473805][T14627] Call Trace: [ 1286.477173][T14627] [ 1286.480329][T14627] dump_stack_lvl+0x188/0x24e [ 1286.485096][T14627] ? show_regs_print_info+0x12/0x12 [ 1286.490366][T14627] ? load_image+0x410/0x410 [ 1286.495135][T14627] should_fail_ex+0x390/0x4c0 [ 1286.499988][T14627] get_futex_key+0x1de/0x1000 [ 1286.504803][T14627] ? futex_setup_timer+0xc0/0xc0 [ 1286.509808][T14627] ? futex_wait_queue+0x134/0x1b0 [ 1286.514987][T14627] ? futex_unqueue+0xc7/0xf0 [ 1286.519741][T14627] futex_wake_op+0x15f/0xd90 [ 1286.524596][T14627] ? futex_wake+0x4f0/0x4f0 [ 1286.529208][T14627] do_futex+0x18e/0x320 [ 1286.533508][T14627] ? asm_exc_page_fault+0x22/0x30 [ 1286.537768][T14621] Process accounting resumed [ 1286.538613][T14627] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1286.538647][T14627] ? strncpy_from_user+0x24c/0x340 [ 1286.554936][T14627] ? strncpy_from_user+0x324/0x340 [ 1286.560122][T14627] __se_sys_futex+0x381/0x410 [ 1286.564894][T14627] ? __x64_sys_futex+0xf0/0xf0 [ 1286.569805][T14627] ? __x64_sys_futex+0x1d/0xf0 [ 1286.574649][T14627] do_syscall_64+0x4c/0xa0 [ 1286.579157][T14627] ? clear_bhb_loop+0x60/0xb0 [ 1286.584000][T14627] ? clear_bhb_loop+0x60/0xb0 [ 1286.589199][T14627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1286.595173][T14627] RIP: 0033:0x7fc4ff39e159 [ 1286.599650][T14627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.619650][T14627] RSP: 002b:00007fc500215028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1286.628362][T14627] RAX: ffffffffffffffda RBX: 00007fc4ff625fa0 RCX: 00007fc4ff39e159 [ 1286.636448][T14627] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 1286.644532][T14627] RBP: 00007fc4ff43506b R08: 0000000000000000 R09: 00000000ba01fffe [ 1286.652708][T14627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.660816][T14627] R13: 00007fc4ff626038 R14: 00007fc4ff625fa0 R15: 00007ffcc6c4f0d8 [ 1286.669267][T14627] [ 1287.235383][T14633] loop3: detected capacity change from 0 to 1024 [ 1287.360068][T14633] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1287.574951][T14633] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1287.668276][T14633] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1287.687477][T14633] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1288.104348][T14633] syz.3.2248 (14633) used greatest stack depth: 20032 bytes left [ 1288.149716][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1288.424410][T14644] overlayfs: missing 'lowerdir' [ 1288.570007][T14649] loop8: detected capacity change from 0 to 8 [ 1288.608648][T14649] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1288.617199][T14649] SQUASHFS error: Failed to read block 0x9b: -5 [ 1288.623751][T14649] SQUASHFS error: Unable to read metadata cache entry [99] [ 1288.631007][T14649] SQUASHFS error: Unable to read inode 0x127 [ 1288.883363][T14652] loop5: detected capacity change from 0 to 2048 [ 1289.131924][T14652] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1290.045429][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1291.695971][T14702] netlink: 'syz.9.2261': attribute type 10 has an invalid length. [ 1291.712544][T14702] team0: Device vxcan0 is of different type [ 1292.390669][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2260'. [ 1292.874187][T14711] overlayfs: missing 'lowerdir' [ 1293.108496][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2266'. [ 1293.646300][T14732] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 1294.196484][T14735] md: couldn't update array info. -22 [ 1294.202600][T14735] md: could not open device unknown-block(1,0). [ 1294.209206][T14735] md: md_import_device returned -16 [ 1294.217822][T14733] md: could not open device unknown-block(1,1). [ 1294.236076][T14733] md: md_import_device returned -16 [ 1295.339509][T14760] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2274'. [ 1296.002570][T14766] overlayfs: missing 'lowerdir' [ 1296.253653][T14769] netlink: 'syz.8.2276': attribute type 10 has an invalid length. [ 1296.273957][T14769] team0: Device vxcan0 is of different type [ 1296.905414][T14773] loop3: detected capacity change from 0 to 512 [ 1297.071287][T14773] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2279: attempt to clear invalid blocks 2 len 1 [ 1297.106010][T14773] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1297.122176][T14773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2279: invalid indirect mapped block 1819239214 (level 0) [ 1297.141468][T14773] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2279: invalid indirect mapped block 1819239214 (level 1) [ 1297.157785][T14773] EXT4-fs (loop3): 1 truncate cleaned up [ 1297.164116][T14773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1297.251226][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1297.541780][T14786] netlink: 'syz.8.2280': attribute type 10 has an invalid length. [ 1297.560673][T14786] team0: Device vxcan0 is of different type [ 1300.215002][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2291'. [ 1301.305694][T14833] netlink: 'syz.7.2292': attribute type 10 has an invalid length. [ 1301.316140][T14833] team0: Device vxcan0 is of different type [ 1301.816633][T14835] md: couldn't update array info. -22 [ 1301.823674][T14835] md: could not open device unknown-block(1,0). [ 1301.831642][T14835] md: md_import_device returned -16 [ 1301.838754][T14835] md: could not open device unknown-block(1,1). [ 1301.845519][T14835] md: md_import_device returned -16 [ 1302.219732][T14839] loop7: detected capacity change from 0 to 2048 [ 1302.537907][T14839] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1302.640292][T14847] netlink: 'syz.3.2294': attribute type 10 has an invalid length. [ 1303.181867][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1305.609827][T14888] netlink: 'syz.5.2304': attribute type 10 has an invalid length. [ 1305.631647][T14888] team0: Device vxcan0 is of different type [ 1306.158697][T14887] loop7: detected capacity change from 0 to 2048 [ 1306.364965][T14887] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1306.477852][T10721] EXT4-fs (loop7): unmounting filesystem. [ 1306.726131][T14902] netlink: 'syz.9.2306': attribute type 10 has an invalid length. [ 1306.740420][T14902] team0: Device vxcan0 is of different type [ 1309.955349][T14953] loop5: detected capacity change from 0 to 2048 [ 1310.078559][T14953] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1310.366718][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1310.381186][T14963] md: couldn't update array info. -22 [ 1310.387349][T14963] md: could not open device unknown-block(1,0). [ 1310.394867][T14963] md: md_import_device returned -16 [ 1310.400701][T14963] md: could not open device unknown-block(1,1). [ 1310.407373][T14963] md: md_import_device returned -16 [ 1312.731822][T14984] siw: device registration error -23 [ 1315.279095][T15007] loop5: detected capacity change from 0 to 256 [ 1316.121796][T15007] FAT-fs (loop5): Directory bread(block 64) failed [ 1316.173483][T15007] FAT-fs (loop5): Directory bread(block 65) failed [ 1316.180401][T15007] FAT-fs (loop5): Directory bread(block 66) failed [ 1316.201853][T15014] loop3: detected capacity change from 0 to 2048 [ 1316.363021][T15007] FAT-fs (loop5): Directory bread(block 67) failed [ 1316.370459][T15007] FAT-fs (loop5): Directory bread(block 68) failed [ 1316.378690][T15007] FAT-fs (loop5): Directory bread(block 69) failed [ 1316.385535][T15007] FAT-fs (loop5): Directory bread(block 70) failed [ 1316.398397][T15007] FAT-fs (loop5): Directory bread(block 71) failed [ 1316.419088][T15014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1316.430978][T15007] FAT-fs (loop5): Directory bread(block 72) failed [ 1316.483306][T15007] FAT-fs (loop5): Directory bread(block 73) failed [ 1316.529236][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1317.038590][T15030] loop3: detected capacity change from 0 to 512 [ 1317.046203][T15030] EXT4-fs: Ignoring removed nobh option [ 1317.062850][T15030] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1317.187903][T15030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 1317.283610][T15030] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1317.377974][T15030] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.2336: attempt to clear invalid blocks 1024 len 1 [ 1317.494527][T15030] EXT4-fs (loop3): Remounting filesystem read-only [ 1317.530988][T15030] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2336: bg 0: block 361: padding at end of block bitmap is not set [ 1318.961035][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1318.967521][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1319.308782][T15030] EXT4-fs (loop3): Remounting filesystem read-only [ 1319.412776][T15030] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1319.550369][T15030] EXT4-fs (loop3): Remounting filesystem read-only [ 1319.591837][T15030] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2336: invalid indirect mapped block 1811939328 (level 0) [ 1319.607979][T15030] EXT4-fs (loop3): Remounting filesystem read-only [ 1319.614856][T15030] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2336: invalid indirect mapped block 2185560079 (level 1) [ 1319.631797][T15030] EXT4-fs (loop3): Remounting filesystem read-only [ 1319.639435][T15030] EXT4-fs (loop3): 1 truncate cleaned up [ 1319.645161][T15030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1319.780805][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1320.993603][T15045] md: couldn't update array info. -22 [ 1320.999540][T15045] md: could not open device unknown-block(1,0). [ 1321.006016][T15045] md: md_import_device returned -16 [ 1321.011798][T15045] md: could not open device unknown-block(1,1). [ 1321.018530][T15045] md: md_import_device returned -16 [ 1321.250062][T15070] loop5: detected capacity change from 0 to 2048 [ 1321.359927][T15070] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1324.010199][ T26] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1324.069206][ T26] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1325.521269][T15097] hid-generic 0000:0000:0000.0002: pid 15097 passed too short report [ 1326.860746][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1327.518420][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1327.532887][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1327.560023][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1327.569862][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1327.578400][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1327.586077][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1327.910111][T15149] chnl_net:caif_netlink_parms(): no params data found [ 1328.367446][T15173] loop9: detected capacity change from 0 to 1024 [ 1328.429767][T15173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1328.760429][T15173] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1328.810730][T15173] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1329.048225][T15149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.135761][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1329.142070][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.199198][T15149] device bridge_slave_0 entered promiscuous mode [ 1329.258208][T15149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.291847][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.306389][T15172] md: couldn't update array info. -22 [ 1329.341452][T15149] device bridge_slave_1 entered promiscuous mode [ 1329.354722][T15172] md: could not open device unknown-block(1,0). [ 1329.398924][T15172] md: md_import_device returned -16 [ 1329.475519][T15179] md: could not open device unknown-block(1,1). [ 1329.518305][T15149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.795329][ T8343] Bluetooth: hci1: command 0x0409 tx timeout [ 1329.867548][T15179] md: md_import_device returned -16 [ 1329.935873][T15149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1330.547435][T15149] team0: Port device team_slave_0 added [ 1330.640541][T15149] team0: Port device team_slave_1 added [ 1330.689080][T15149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.708261][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.848216][T15149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.890109][T15149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.897304][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.975198][T15149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.313629][T15206] loop5: detected capacity change from 0 to 1024 [ 1331.374012][T15206] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1331.928019][T15206] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1331.965397][T15206] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1332.048066][ T8343] Bluetooth: hci1: command 0x041b tx timeout [ 1332.059805][T15149] device hsr_slave_0 entered promiscuous mode [ 1332.067137][T15149] device hsr_slave_1 entered promiscuous mode [ 1332.074237][T15149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.091652][T15149] Cannot create hsr debugfs directory [ 1332.228144][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1333.484394][T15229] loop5: detected capacity change from 0 to 512 [ 1333.557869][T15229] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2367: attempt to clear invalid blocks 2 len 1 [ 1333.611777][T15229] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1333.695477][T15229] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2367: invalid indirect mapped block 1819239214 (level 0) [ 1333.812732][T15229] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2367: invalid indirect mapped block 1819239214 (level 1) [ 1333.885329][T15229] EXT4-fs (loop5): 1 truncate cleaned up [ 1333.922694][T15229] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1334.150862][T15237] loop3: detected capacity change from 0 to 1024 [ 1334.182067][T15237] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1334.302364][ T8343] Bluetooth: hci1: command 0x040f tx timeout [ 1334.922510][T15237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1334.956519][T15236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1334.986128][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1335.239772][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1336.062716][T15149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1336.159176][T15149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1336.225099][T15149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1336.264298][T15149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1336.556921][ T8343] Bluetooth: hci1: command 0x0419 tx timeout [ 1336.616776][T15149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.706986][T15149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1336.742573][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1336.757243][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1336.840502][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1336.863882][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1336.883500][T15283] loop8: detected capacity change from 0 to 256 [ 1336.918014][T13609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.925970][T13609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1337.017663][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1337.053714][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1337.088768][T13609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.096063][T13609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1337.137602][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1337.182294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1337.221204][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1337.312898][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1337.343040][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1337.398229][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1337.422384][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1337.471987][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1337.494958][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1337.538518][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1337.568805][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1337.606325][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1337.636320][T15149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1337.762252][T15300] md: couldn't update array info. -22 [ 1337.805035][T15300] md: could not open device unknown-block(1,0). [ 1337.965443][T15300] md: md_import_device returned -16 [ 1338.108539][T15309] md: could not open device unknown-block(1,1). [ 1338.115028][T15309] md: md_import_device returned -16 [ 1338.924198][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1338.958063][T13609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1339.000165][T15149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.094847][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1339.131913][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1339.232607][T13443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1339.262432][T13443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1339.306127][T15149] device veth0_vlan entered promiscuous mode [ 1339.379043][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1339.430865][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1339.536391][T15326] loop9: detected capacity change from 0 to 1024 [ 1339.623484][T15326] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1339.855233][T15326] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1339.896695][T15326] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1340.215236][T15149] device veth1_vlan entered promiscuous mode [ 1340.258857][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1340.317952][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1340.334543][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1340.349348][T15149] device veth0_macvtap entered promiscuous mode [ 1340.398718][T15149] device veth1_macvtap entered promiscuous mode [ 1340.481177][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.547267][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.610168][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.635971][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.655427][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.685929][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.696105][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.750859][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.761119][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.805613][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.868453][T15149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.915923][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.991589][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.025815][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.061795][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.093928][T15340] loop8: detected capacity change from 0 to 1024 [ 1341.104399][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.151410][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.184280][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.209654][T15340] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1341.243747][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.276724][T15149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.312723][T15149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.412864][T15149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.436033][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1341.445716][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1341.454140][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1341.470482][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1341.482123][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1341.492856][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1341.527080][T15149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.546774][T15149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.580601][T15149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.613840][T15149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.871506][ T4546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.905598][ T4546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.980829][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1342.005530][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.133031][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.145560][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1342.347759][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1343.654574][T15382] loop1: detected capacity change from 0 to 8 [ 1343.905542][T15382] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1343.914111][T15382] SQUASHFS error: Failed to read block 0x9b: -5 [ 1343.920531][T15382] SQUASHFS error: Unable to read metadata cache entry [99] [ 1343.928054][T15382] SQUASHFS error: Unable to read inode 0x127 [ 1344.562461][T15396] loop9: detected capacity change from 0 to 1024 [ 1344.581585][T15396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1344.897429][T15396] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1344.932530][T15396] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1345.469740][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1346.283868][T15415] loop5: detected capacity change from 0 to 256 [ 1346.949313][T15425] md: couldn't update array info. -22 [ 1347.082747][T15427] md: could not open device unknown-block(1,0). [ 1347.089208][T15427] md: md_import_device returned -16 [ 1347.242823][T15425] md: could not open device unknown-block(1,1). [ 1347.303977][T15425] md: md_import_device returned -16 [ 1347.482264][T15432] loop8: detected capacity change from 0 to 1024 [ 1347.594615][T15432] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1347.704381][T15438] loop3: detected capacity change from 0 to 1024 [ 1347.768395][T15438] EXT4-fs: Ignoring removed oldalloc option [ 1347.847536][T15438] EXT4-fs: Ignoring removed orlov option [ 1347.953588][T15438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1347.985829][T15438] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1348.334368][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1348.583056][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1352.086060][T15506] loop9: detected capacity change from 0 to 1024 [ 1352.224288][T15506] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1352.623550][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e325c00: rx timeout, send abort [ 1353.165545][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d1b800: rx timeout, send abort [ 1353.271536][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e325c00: abort rx timeout. Force session deactivation [ 1353.715940][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d1b800: abort rx timeout. Force session deactivation [ 1353.768196][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1354.045256][T15536] loop8: detected capacity change from 0 to 1024 [ 1354.058502][T15536] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1354.335458][T15536] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1354.383865][T15536] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1354.788981][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1355.049689][T15537] loop3: detected capacity change from 0 to 256 [ 1355.101948][T15549] loop9: detected capacity change from 0 to 1024 [ 1355.110239][T15549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1355.179410][T15549] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1355.718956][T15564] md: couldn't update array info. -22 [ 1355.725962][T15564] md: could not open device unknown-block(1,0). [ 1355.732659][T15564] md: md_import_device returned -16 [ 1355.739454][T15564] md: could not open device unknown-block(1,1). [ 1355.746023][T15564] md: md_import_device returned -16 [ 1356.435527][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1358.293854][T15585] loop9: detected capacity change from 0 to 1024 [ 1358.407070][T15585] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1358.681073][T15585] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1358.717492][T15585] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1359.124523][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1360.519666][T15601] loop1: detected capacity change from 0 to 1024 [ 1360.609044][T15601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1362.010599][T15615] loop5: detected capacity change from 0 to 1024 [ 1362.055722][T15149] EXT4-fs (loop1): unmounting filesystem. [ 1362.061829][T15617] loop8: detected capacity change from 0 to 4096 [ 1362.064720][T15617] EXT4-fs: inline encryption not supported [ 1362.104021][T15623] loop3: detected capacity change from 0 to 512 [ 1362.169423][T15617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1362.183385][T15623] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.2431: attempt to clear invalid blocks 2 len 1 [ 1362.197736][T15615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1362.223068][T15623] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1362.239918][T15623] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2431: invalid indirect mapped block 1819239214 (level 0) [ 1362.259502][T15623] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2431: invalid indirect mapped block 1819239214 (level 1) [ 1362.287454][T15623] EXT4-fs (loop3): 1 truncate cleaned up [ 1362.293299][T15623] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1362.309400][T15617] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1363.115704][T15637] overlayfs: conflicting lowerdir path [ 1363.211378][T15617] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 1363.265089][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1363.283437][T15617] System zones: 0-5 [ 1363.289240][T15617] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1363.757354][T15645] md: couldn't update array info. -22 [ 1363.764192][T15645] md: could not open device unknown-block(1,0). [ 1363.770809][T15645] md: md_import_device returned -16 [ 1363.777897][T15645] md: could not open device unknown-block(1,1). [ 1363.784876][T15645] md: md_import_device returned -16 [ 1364.013709][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1364.568673][T15652] loop3: detected capacity change from 0 to 512 [ 1364.584575][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1365.077220][T15654] loop8: detected capacity change from 0 to 1024 [ 1365.114676][T15654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1365.588781][T15654] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1365.604237][T15652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1365.620707][T15653] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1365.875768][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1366.380898][T15669] netlink: 'syz.3.2438': attribute type 10 has an invalid length. [ 1367.156409][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1367.505477][T15682] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2440'. [ 1369.399434][T15690] loop5: detected capacity change from 0 to 1024 [ 1369.594574][T15690] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1369.655300][T15697] loop8: detected capacity change from 0 to 128 [ 1370.691407][T15705] loop1: detected capacity change from 0 to 1024 [ 1370.893269][T15705] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1370.925094][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1371.091558][T15713] FAULT_INJECTION: forcing a failure. [ 1371.091558][T15713] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1371.125689][T15716] loop3: detected capacity change from 0 to 256 [ 1371.148111][T15713] CPU: 1 PID: 15713 Comm: syz.9.2448 Not tainted syzkaller #0 [ 1371.156076][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1371.166533][T15713] Call Trace: [ 1371.169869][T15713] [ 1371.173094][T15713] dump_stack_lvl+0x188/0x24e [ 1371.177885][T15713] ? show_regs_print_info+0x12/0x12 [ 1371.183166][T15713] ? load_image+0x410/0x410 [ 1371.187728][T15713] should_fail_ex+0x390/0x4c0 [ 1371.192449][T15713] get_futex_key+0x1de/0x1000 [ 1371.197448][T15713] ? futex_setup_timer+0xc0/0xc0 [ 1371.202760][T15713] ? futex_wait_queue+0x134/0x1b0 [ 1371.207916][T15713] ? futex_unqueue+0xc7/0xf0 [ 1371.212627][T15713] futex_wake_op+0x15f/0xd90 [ 1371.217789][T15713] ? futex_wake+0x4f0/0x4f0 [ 1371.222620][T15713] do_futex+0x18e/0x320 [ 1371.226903][T15713] ? asm_exc_page_fault+0x22/0x30 [ 1371.232056][T15713] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1371.238156][T15713] ? strncpy_from_user+0x24c/0x340 [ 1371.243575][T15713] ? strncpy_from_user+0x324/0x340 [ 1371.248731][T15713] __se_sys_futex+0x381/0x410 [ 1371.253644][T15713] ? __x64_sys_futex+0xf0/0xf0 [ 1371.258496][T15713] ? __x64_sys_futex+0x1d/0xf0 [ 1371.263428][T15713] do_syscall_64+0x4c/0xa0 [ 1371.267987][T15713] ? clear_bhb_loop+0x60/0xb0 [ 1371.272694][T15713] ? clear_bhb_loop+0x60/0xb0 [ 1371.277871][T15713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1371.283897][T15713] RIP: 0033:0x7f563b79e159 [ 1371.288435][T15713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1371.308957][T15713] RSP: 002b:00007f563c59c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1371.317409][T15713] RAX: ffffffffffffffda RBX: 00007f563ba25fa0 RCX: 00007f563b79e159 [ 1371.325696][T15713] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 1371.333881][T15713] RBP: 00007f563b83506b R08: 0000000000000000 R09: 00000000ba01fffe [ 1371.341883][T15713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1371.350240][T15713] R13: 00007f563ba26038 R14: 00007f563ba25fa0 R15: 00007ffd0d550458 [ 1371.358779][T15713] [ 1371.431643][T15719] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1372.420997][T15725] loop8: detected capacity change from 0 to 8 [ 1372.433424][T15725] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1372.442216][T15725] SQUASHFS error: Failed to read block 0x9b: -5 [ 1372.449004][T15725] SQUASHFS error: Unable to read metadata cache entry [99] [ 1372.457493][T15725] SQUASHFS error: Unable to read inode 0x127 [ 1373.304106][T15726] md: couldn't update array info. -22 [ 1373.310128][T15726] md: could not open device unknown-block(1,0). [ 1373.316682][T15726] md: md_import_device returned -16 [ 1373.322781][T15726] md: could not open device unknown-block(1,1). [ 1373.329683][T15726] md: md_import_device returned -16 [ 1373.363211][T15149] EXT4-fs (loop1): unmounting filesystem. [ 1373.763413][T15736] loop8: detected capacity change from 0 to 1024 [ 1373.824571][T15736] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1374.470218][T15736] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1374.511187][T15734] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1374.530805][T15740] loop1: detected capacity change from 0 to 512 [ 1374.957428][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1375.009467][T15740] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1375.981250][T15752] loop5: detected capacity change from 0 to 2048 [ 1376.145019][T15752] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1377.206796][T15768] input: syz0 as /devices/virtual/input/input43 [ 1377.300839][T15749] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 1377.391372][T15749] team0: Device vxcan0 is of different type [ 1377.490743][T15772] loop8: detected capacity change from 0 to 1024 [ 1377.603396][T15772] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1377.625619][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1377.657558][T15778] loop9: detected capacity change from 0 to 512 [ 1377.756465][T15778] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.2460: attempt to clear invalid blocks 2 len 1 [ 1377.770583][T15778] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1377.786127][T15778] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2460: invalid indirect mapped block 1819239214 (level 0) [ 1377.801523][T15778] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2460: invalid indirect mapped block 1819239214 (level 1) [ 1377.822735][T15778] EXT4-fs (loop9): 1 truncate cleaned up [ 1377.828727][T15778] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1378.759538][T15786] loop5: detected capacity change from 0 to 1024 [ 1378.775581][T15786] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1378.821238][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1378.832181][T15786] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1378.846087][T15785] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1378.966557][T15149] EXT4-fs (loop1): unmounting filesystem. [ 1379.883084][T15811] md: couldn't update array info. -22 [ 1379.890351][T15811] md: could not open device unknown-block(1,0). [ 1380.121626][T15815] netlink: 'syz.3.2467': attribute type 10 has an invalid length. [ 1380.133397][T15811] md: md_import_device returned -16 [ 1380.138899][T15813] md: could not open device unknown-block(1,1). [ 1380.145620][T15813] md: md_import_device returned -16 [ 1380.306880][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 1381.644937][T15828] loop3: detected capacity change from 0 to 2048 [ 1381.746264][T15828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1382.024577][T15836] loop9: detected capacity change from 0 to 512 [ 1382.058059][T15836] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.2473: attempt to clear invalid blocks 2 len 1 [ 1382.072855][T15836] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1382.088959][T15836] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2473: invalid indirect mapped block 1819239214 (level 0) [ 1382.106329][T15836] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2473: invalid indirect mapped block 1819239214 (level 1) [ 1382.136734][T15836] EXT4-fs (loop9): 1 truncate cleaned up [ 1382.142992][T15836] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1382.970561][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1383.179140][T15844] loop3: detected capacity change from 0 to 512 [ 1383.220302][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1383.420084][T15844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1383.711353][T15856] netlink: 'syz.3.2474': attribute type 10 has an invalid length. [ 1384.265855][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1384.346886][T15865] loop9: detected capacity change from 0 to 512 [ 1384.496174][T15865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1384.616737][T15865] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1384.667058][T15865] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1384.694081][T15867] loop1: detected capacity change from 0 to 1024 [ 1384.715592][T15867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1384.825530][T15867] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1384.869954][T15867] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1384.923763][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1385.006204][T15865] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5 [ 1385.069864][T15865] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1385.081641][T15865] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.2479: Failed to acquire dquot type 1 [ 1385.126096][T15874] device syzkaller0 entered promiscuous mode [ 1385.134884][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1385.192815][T15865] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #16: comm syz.9.2479: corrupted inode contents [ 1385.220919][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1385.228055][T15865] EXT4-fs error (device loop9): ext4_dirty_inode:6166: inode #16: comm syz.9.2479: mark_inode_dirty error [ 1385.248238][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1385.255804][T15865] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #16: comm syz.9.2479: corrupted inode contents [ 1385.278982][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1385.394021][T15865] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.2479: mark_inode_dirty error [ 1385.440106][T15881] loop8: detected capacity change from 0 to 512 [ 1385.464469][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1385.560437][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1385.567999][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1385.662811][T15882] tcpci: probe of 0-0050 failed with error -5 [ 1385.674241][T15882] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 1385.771783][T15865] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #16: comm syz.9.2479: corrupted inode contents [ 1386.186984][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1386.203791][T15865] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1386.214844][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1386.230650][T15865] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #16: comm syz.9.2479: corrupted inode contents [ 1386.246911][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1386.270857][T15865] EXT4-fs error (device loop9): ext4_truncate:4325: inode #16: comm syz.9.2479: mark_inode_dirty error [ 1386.460687][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1387.363286][T15865] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1387.379205][T15865] EXT4-fs (loop9): Remounting filesystem read-only [ 1387.808717][T15865] EXT4-fs (loop9): 1 truncate cleaned up [ 1387.820326][T15865] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1387.844926][T15149] EXT4-fs (loop1): unmounting filesystem. [ 1388.992977][T11912] EXT4-fs (loop9): unmounting filesystem. [ 1389.348946][T15902] loop1: detected capacity change from 0 to 2048 [ 1389.475773][T15902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1389.779013][T15922] loop8: detected capacity change from 0 to 512 [ 1389.901976][T15922] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1390.480924][T15922] netlink: 'syz.8.2490': attribute type 10 has an invalid length. [ 1390.505151][T15922] team0: Device vxcan0 is of different type [ 1390.566487][T15149] EXT4-fs (loop1): unmounting filesystem. [ 1391.197789][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1391.222066][T15940] loop1: detected capacity change from 0 to 128 [ 1391.301494][ T8343] Bluetooth: hci0: link tx timeout [ 1391.308193][ T8343] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1391.361590][T15940] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1391.366278][ T8343] Bluetooth: hci0: link tx timeout [ 1391.374676][ T8343] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1391.547735][T15940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1391.639245][T15940] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.948316][ T8343] Bluetooth: hci0: link tx timeout [ 1391.953799][ T8343] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1392.728340][T15149] EXT4-fs (loop1): unmounting filesystem. [ 1394.302533][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1394.313725][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1394.324894][T11012] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1394.333431][T11012] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1394.342564][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1394.352055][T11012] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1394.953925][T15987] loop8: detected capacity change from 0 to 1024 [ 1394.980950][T15987] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1395.173734][T15987] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1395.203222][T15987] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1395.840309][T12933] EXT4-fs (loop8): unmounting filesystem. [ 1396.039373][ T7] ------------[ cut here ]------------ [ 1396.045434][ T7] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 1396.080702][ T7] WARNING: CPU: 0 PID: 7 at fs/sysfs/group.c:280 sysfs_remove_group+0x177/0x290 [ 1396.090537][ T7] Modules linked in: [ 1396.094564][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1396.102085][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.112522][ T7] Workqueue: events delete_netdev [ 1396.117812][ T7] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 1396.123731][ T7] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 eb 2b cb ff 49 8b 17 48 c7 c7 a0 70 9c 8a 48 89 de e8 f9 6d 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 03 e7 79 ff [ 1396.143831][ T7] RSP: 0018:ffffc900000c78e0 EFLAGS: 00010246 [ 1396.149967][ T7] RAX: 46f6e0887525ae00 RBX: ffffffff8b8c2f40 RCX: ffff88813fe93c00 [ 1396.158048][ T7] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1396.166300][ T7] RBP: 00000000000000da R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 1396.174623][ T7] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 1ffffffff17184fc [ 1396.182818][ T7] R13: dffffc0000000000 R14: ffff88807f70d000 R15: ffff88805a323820 [ 1396.190999][ T7] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1396.200386][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1396.207137][ T7] CR2: 00007fc44106dff8 CR3: 0000000026e38000 CR4: 00000000003506f0 [ 1396.215958][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1396.224328][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1396.232486][ T7] Call Trace: [ 1396.235900][ T7] [ 1396.239420][ T7] ? netdev_queue_update_kobjects+0x3a2/0x480 [ 1396.245864][ T7] netdev_queue_update_kobjects+0x3dd/0x480 [ 1396.251880][ T7] netdev_unregister_kobject+0x104/0x250 [ 1396.257685][ T7] unregister_netdevice_many_notify+0x14b6/0x1990 [ 1396.264401][ T7] ? unregister_netdevice_many+0x20/0x20 [ 1396.270110][ T7] ? __mutex_lock+0x1ab/0xae0 [ 1396.275157][ T7] unregister_netdevice_queue+0x2e5/0x330 [ 1396.281030][ T7] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1396.287235][ T7] ? list_netdevice+0x640/0x640 [ 1396.292513][ T7] ? read_lock_is_recursive+0x10/0x10 [ 1396.298198][ T7] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1396.304440][ T7] ? _raw_spin_unlock+0x40/0x40 [ 1396.309781][ T7] ? process_one_work+0x7b4/0x1160 [ 1396.315198][ T7] ? process_one_work+0x7b4/0x1160 [ 1396.320474][ T7] lowpan_unregister_netdev+0x18/0x20 [ 1396.326281][ T7] unregister_dev+0x70/0x1a0 [ 1396.331078][ T7] ? process_one_work+0x7b4/0x1160 [ 1396.336349][ T7] process_one_work+0x8ab/0x1160 [ 1396.341513][ T7] ? worker_detach_from_pool+0x240/0x240 [ 1396.347426][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1396.353277][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1396.359023][ T7] ? wq_worker_running+0x97/0x190 [ 1396.364290][ T7] worker_thread+0xaf5/0x12a0 [ 1396.369324][ T7] kthread+0x29d/0x330 [ 1396.373674][ T7] ? worker_clr_flags+0x1a0/0x1a0 [ 1396.379042][ T7] ? kthread_blkcg+0xd0/0xd0 [ 1396.383739][ T7] ret_from_fork+0x1f/0x30 [ 1396.388253][ T7] [ 1396.391354][ T7] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1396.398688][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 1396.406050][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.416561][ T7] Workqueue: events delete_netdev [ 1396.421665][ T7] Call Trace: [ 1396.425167][ T7] [ 1396.428337][ T7] dump_stack_lvl+0x188/0x24e [ 1396.433251][ T7] ? memcpy+0x3c/0x60 [ 1396.437419][ T7] ? show_regs_print_info+0x12/0x12 [ 1396.442763][ T7] ? load_image+0x410/0x410 [ 1396.447386][ T7] panic+0x2d3/0x710 [ 1396.451348][ T7] ? bpf_jit_dump+0xd0/0xd0 [ 1396.455969][ T7] ? ret_from_fork+0x1f/0x30 [ 1396.460816][ T7] __warn+0x2f8/0x4f0 [ 1396.464959][ T7] ? sysfs_remove_group+0x177/0x290 [ 1396.470318][ T7] ? sysfs_remove_group+0x177/0x290 [ 1396.475675][ T7] report_bug+0x2ba/0x4f0 [ 1396.480212][ T7] ? sysfs_remove_group+0x177/0x290 [ 1396.485628][ T7] handle_bug+0x3a/0x70 [ 1396.490107][ T7] exc_invalid_op+0x16/0x40 [ 1396.494684][ T7] asm_exc_invalid_op+0x16/0x20 [ 1396.499860][ T7] RIP: 0010:sysfs_remove_group+0x177/0x290 [ 1396.505828][ T7] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 eb 2b cb ff 49 8b 17 48 c7 c7 a0 70 9c 8a 48 89 de e8 f9 6d 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 03 e7 79 ff [ 1396.526013][ T7] RSP: 0018:ffffc900000c78e0 EFLAGS: 00010246 [ 1396.532139][ T7] RAX: 46f6e0887525ae00 RBX: ffffffff8b8c2f40 RCX: ffff88813fe93c00 [ 1396.540255][ T7] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1396.548376][ T7] RBP: 00000000000000da R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 1396.556845][ T7] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: 1ffffffff17184fc [ 1396.565288][ T7] R13: dffffc0000000000 R14: ffff88807f70d000 R15: ffff88805a323820 [ 1396.573660][ T7] ? netdev_queue_update_kobjects+0x3a2/0x480 [ 1396.580220][ T7] netdev_queue_update_kobjects+0x3dd/0x480 [ 1396.586528][ T7] netdev_unregister_kobject+0x104/0x250 [ 1396.592327][ T7] unregister_netdevice_many_notify+0x14b6/0x1990 [ 1396.598872][ T7] ? unregister_netdevice_many+0x20/0x20 [ 1396.604661][ T7] ? __mutex_lock+0x1ab/0xae0 [ 1396.609823][ T7] unregister_netdevice_queue+0x2e5/0x330 [ 1396.615683][ T7] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1396.621814][ T7] ? list_netdevice+0x640/0x640 [ 1396.626983][ T7] ? read_lock_is_recursive+0x10/0x10 [ 1396.632482][ T7] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1396.638416][ T7] ? _raw_spin_unlock+0x40/0x40 [ 1396.643526][ T7] ? process_one_work+0x7b4/0x1160 [ 1396.648679][ T7] ? process_one_work+0x7b4/0x1160 [ 1396.653833][ T7] lowpan_unregister_netdev+0x18/0x20 [ 1396.659334][ T7] unregister_dev+0x70/0x1a0 [ 1396.664049][ T7] ? process_one_work+0x7b4/0x1160 [ 1396.669188][ T7] process_one_work+0x8ab/0x1160 [ 1396.674174][ T7] ? worker_detach_from_pool+0x240/0x240 [ 1396.680053][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1396.685283][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1396.691164][ T7] ? wq_worker_running+0x97/0x190 [ 1396.696510][ T7] worker_thread+0xaf5/0x12a0 [ 1396.701640][ T7] kthread+0x29d/0x330 [ 1396.705928][ T7] ? worker_clr_flags+0x1a0/0x1a0 [ 1396.711110][ T7] ? kthread_blkcg+0xd0/0xd0 [ 1396.716002][ T7] ret_from_fork+0x1f/0x30 [ 1396.720993][ T7] [ 1396.724794][ T7] Kernel Offset: disabled [ 1396.729332][ T7] Rebooting in 86400 seconds..