last executing test programs: 6m57.003314615s ago: executing program 5 (id=2390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) 6m52.922487417s ago: executing program 5 (id=2407): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, 0x0, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r5 = msgget$private(0x0, 0x84) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000007e0cfd19ed24e8d57540d3bfb23f319c84def25832deaea0319be7c178819400b87695fa58fb4c38212a4bbaff022bf9337a6d9c1509d643d72ceb6151ae05a9886c2a406dff074704d76e3f70c095353c09dae060c3ec4b1eb9514529d5c9979fda179669c0ef50f898b8f2c9ee31fabccdf6bc6218c473956fdc287283e4b97894468b427146ad831a06fd27ac2663ede39c676596180124fe4e0ace886d42504ace659009"], 0xb3, 0x800) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) fdatasync(r6) 6m49.606832388s ago: executing program 5 (id=2415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) 6m46.591344574s ago: executing program 5 (id=2425): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000240)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@dioread_nolock}, {@dax_never}, {@noinit_itable}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x97, 0x4ef, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r0) mount(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x16, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x224) 6m44.480258945s ago: executing program 5 (id=2434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 6m41.988000654s ago: executing program 5 (id=2439): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) unshare(0x22020400) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000002000)=0x1000004) readv(r7, &(0x7f0000000680), 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0xe47, 0x3ff, 0x2080060f, 0xffffbffe, 0x12, "1c6b001000"}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000020008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6m41.496037426s ago: executing program 32 (id=2439): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) unshare(0x22020400) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000002000)=0x1000004) readv(r7, &(0x7f0000000680), 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0xe47, 0x3ff, 0x2080060f, 0xffffbffe, 0x12, "1c6b001000"}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000020008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 5m7.711749968s ago: executing program 2 (id=2821): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xe000}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee0000000000000000", 0x53}], 0x1) 5m6.284525402s ago: executing program 2 (id=2828): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 5m5.441371464s ago: executing program 2 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffffff00000000}, 0x38) 5m4.923946876s ago: executing program 2 (id=2835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000eeff008500000015000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m3.62405113s ago: executing program 2 (id=2839): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x0, 0x37e9, 0x2f92) 5m2.659232509s ago: executing program 2 (id=2842): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 5m2.210455743s ago: executing program 1 (id=2847): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1100}, @fda={0x66646185, 0x2, 0x2, 0x33}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5m2.016503571s ago: executing program 1 (id=2850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 5m1.519334279s ago: executing program 1 (id=2852): mkdirat(0xffffffffffffff9c, 0x0, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x40086604, 0xfffffffffffffffe) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={@empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x43f, 0x6, 0x80c20048}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r6}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) 4m58.245789033s ago: executing program 1 (id=2858): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) io_setup(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m55.188436282s ago: executing program 1 (id=2868): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) sendmsg$inet(r1, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 4m55.048537574s ago: executing program 3 (id=2869): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000791208000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r4, r3, &(0x7f00000000c0)=0xfff, 0x4) unshare(0x6a040000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) 4m52.055158534s ago: executing program 1 (id=2873): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m51.195779673s ago: executing program 33 (id=2873): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m51.175009816s ago: executing program 3 (id=2876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4c014) 4m50.815126965s ago: executing program 3 (id=2878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 4m50.411506119s ago: executing program 3 (id=2880): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='configfs\x00', 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m47.33934183s ago: executing program 34 (id=2842): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 4m43.528315602s ago: executing program 3 (id=2889): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r6 = socket(0x10, 0x803, 0x0) write(r6, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0xffffffffffffffff) listns(&(0x7f0000001140)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0) 4m42.159377257s ago: executing program 3 (id=2892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 4m41.334758209s ago: executing program 35 (id=2892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1m26.541885173s ago: executing program 9 (id=3676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '0123456789012345'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x68}}, 0x0) 1m26.122945007s ago: executing program 9 (id=3677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000180)={0x1ff, 0x1, 0x2, 0x4, 0x3, 0x3152eb0d, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.354997543s ago: executing program 9 (id=3681): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020109"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1m25.145973665s ago: executing program 9 (id=3685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x1100}, @fda={0x66646185, 0x2, 0x2, 0x33}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m24.992626432s ago: executing program 9 (id=3686): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 1m22.521990876s ago: executing program 9 (id=3693): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, 0x0, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r4 = msgget$private(0x0, 0x84) msgsnd(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000007e0cfd19ed24e8d57540d3bfb23f319c84def25832deaea0319be7c178819400b87695fa58fb4c38212a4bbaff022bf9337a6d9c1509d643d72ceb6151ae05a9886c2a406dff074704d76e3f70c095353c09dae060c3ec4b1eb9514529d5c9979fda179669c0ef50f898b8f2c9ee31fabccdf6bc6218c473956fdc287283e4b97894468b427146ad831a06fd27ac2663ede39c676596180124fe4e0ace886d42504ace659009"], 0xb3, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) msgget$private(0x0, 0x82) fdatasync(r5) 1m6.684973s ago: executing program 36 (id=3693): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, 0x0, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r4 = msgget$private(0x0, 0x84) msgsnd(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000007e0cfd19ed24e8d57540d3bfb23f319c84def25832deaea0319be7c178819400b87695fa58fb4c38212a4bbaff022bf9337a6d9c1509d643d72ceb6151ae05a9886c2a406dff074704d76e3f70c095353c09dae060c3ec4b1eb9514529d5c9979fda179669c0ef50f898b8f2c9ee31fabccdf6bc6218c473956fdc287283e4b97894468b427146ad831a06fd27ac2663ede39c676596180124fe4e0ace886d42504ace659009"], 0xb3, 0x800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) msgget$private(0x0, 0x82) fdatasync(r5) 55.805381184s ago: executing program 8 (id=3764): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x9, @f_listen={0xec, 0x3, 0x2, 0x82, 0x80, 0xf, 0x40, {}, 0x8, 0x4, 0x0, 0x7, 0x35, "49d7ae0f8f61739d1480c53c132a7aed0a2111bb1f56992b2c5820274be59412ae0623041ae8d06c5ad472bdab9d9f8df8fad05b86"}}, 0x45) 53.751416945s ago: executing program 8 (id=3769): r0 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) r2 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE64(r2, 0x40104d14, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f000000f4c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a09040000000000000000020000040900010073797a30000000000900020073797a320000000028000480240001800b00010065787468647200001400028005000200830000000800064000000001050007401200000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000d4}, 0x4008040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x1d, 0x43, 0x40, 0xfffff010}]}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r12, 0x4b3a, 0x1) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x158, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x158, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {}, 0x1c, 0x11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) socket(0x18, 0x3, 0x20) r14 = syz_open_dev$loop(0x0, 0x2, 0x103000) sync_file_range(r14, 0x5, 0xd, 0x5) socket$netlink(0x10, 0x3, 0x0) 53.452992765s ago: executing program 8 (id=3770): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0xffffffffffffffff) listns(&(0x7f0000001140)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0) 49.173259401s ago: executing program 8 (id=3777): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000080), 0x3b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 46.503766294s ago: executing program 8 (id=3781): r0 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) r2 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE64(r2, 0x40104d14, &(0x7f0000000000)={0x6, 0x10000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f000000f4c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a09040000000000000000020000040900010073797a30000000000900020073797a320000000028000480240001800b00010065787468647200001400028005000200830000000800064000000001050007401200000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000d4}, 0x4008040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x1d, 0x43, 0x40, 0xfffff010}]}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) ioctl$KDSETMODE(r12, 0x4b3a, 0x1) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x158, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x158, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {}, 0x1c, 0x11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) socket(0x18, 0x3, 0x20) r14 = syz_open_dev$loop(0x0, 0x2, 0x103000) sync_file_range(r14, 0x5, 0xd, 0x5) socket$netlink(0x10, 0x3, 0x0) 45.342311764s ago: executing program 8 (id=3783): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006054}, 0x24004804) 30.090807683s ago: executing program 37 (id=3783): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4006054}, 0x24004804) 12.221150401s ago: executing program 4 (id=3880): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020000000000600000000070e98ed96957ad2b00000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e2300000600802b0000000805"], 0x5c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) 11.891329853s ago: executing program 4 (id=3881): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0058a0c934b1116842c95456a6124e8b62df9c48c54d4d8163efc13ca3a6e27eb7b348e0259a12cb5fafd4f195000000000000a9d5a46f70040f788bb9cacc8d0e61b449aa71d459ac8493fdf304a7f762a07e73925cd978bd1dc9443b687a38b9498c6947a978050d45a6e6838e43f76c3b0eb5f7a76ad1d0ab329ef77f8c1aeec8617fa5e243d4ed850500000046096b51f43b599e844afd4329d7d333b48a97f39e"], 0x1, 0x483, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fdatasync(r1) 10.691643123s ago: executing program 4 (id=3886): setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.308058963s ago: executing program 6 (id=3896): syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) 7.003262649s ago: executing program 4 (id=3898): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000280)='0', 0x5dc, 0x40000, &(0x7f0000000340)={0x11, 0x6, r2, 0x1, 0x2, 0x6, @local}, 0x14) 6.414139465s ago: executing program 6 (id=3899): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1f35, &(0x7f0000000040)={0x0, 0x2096c, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) 5.074978475s ago: executing program 6 (id=3902): io_setup(0x81, &(0x7f0000000400)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}]) 4.946403572s ago: executing program 4 (id=3903): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020000000000600000000070e98ed96957ad2b00000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e2300000600802b0000000805"], 0x5c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) 4.459506081s ago: executing program 4 (id=3906): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) io_setup(0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x1000}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 4.408416129s ago: executing program 6 (id=3907): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 4.021816352s ago: executing program 0 (id=3908): r0 = syz_usb_connect(0x2, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="40098e000000063f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.459562732s ago: executing program 7 (id=3909): syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) 3.198252452s ago: executing program 6 (id=3910): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000c380)=ANY=[@ANYBLOB="583800001800010a000000000000200004000000433818"], 0x3858}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.085539405s ago: executing program 6 (id=3911): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000b00)="cc3aeeaccf96d11507c3f901cfa7dafb3ec49c9bd686e87bbde5871b2694cabde13b5b104bcf442d92733cef238f4f10b74f58efdd6bd87cd453e251fccc5af43ea942a6b53bafb444280ec21f12071de2e40d0551c57949858d20aa") sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.962937408s ago: executing program 7 (id=3912): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1f35, &(0x7f0000000040)={0x0, 0x2096c, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) 1.858718136s ago: executing program 7 (id=3913): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000280)='0', 0x5dc, 0x40000, &(0x7f0000000340)={0x11, 0x6, r2, 0x1, 0x2, 0x6, @local}, 0x14) 1.715176689s ago: executing program 0 (id=3914): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xe, 0xe0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x10, 0xb4, 0x56, {0x7, 0x25, 0x1, 0xc, 0xd9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x10, 0xf2, 0x68, {0x7, 0x25, 0x1, 0xc, 0x7, 0x3aa7}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) 1.060599153s ago: executing program 0 (id=3915): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='ramfs\x00', 0x0, r1) 808.577774ms ago: executing program 7 (id=3916): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020000000000600000000070e98ed96957ad2b00000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e2300000600802b0000000805"], 0x5c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) 623.638131ms ago: executing program 0 (id=3917): umount2(&(0x7f00000000c0)='./file0\x00', 0x8) 435.817792ms ago: executing program 7 (id=3918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7040fedbdf25010000000400018038000280140001800800010003000000080001000700000014000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) 331.137869ms ago: executing program 0 (id=3919): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x1ff, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0xc388, 0x0, 0xffffffffb6375a6b, 0x2000000000001, 0x4, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) 76.957508ms ago: executing program 7 (id=3920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000005c0)={[], [{@uid_eq}, {@subj_role={'subj_role', 0x3d, '/dev/vhost-vsock\x00'}}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x13}}, {@euid_eq}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0xfd, 0x56f, &(0x7f0000003780)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000580)=@chain={'key_or_keyring:', r6}) 0s ago: executing program 0 (id=3921): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @aes128, 0x0, '\x00', @auto="fc06bdcd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) kernel console output (not intermixed with test programs): ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2632" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 649.140321][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.952239][T14930] loop4: detected capacity change from 0 to 2048 [ 651.973705][ T5737] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 652.124318][T14930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.205306][ T5737] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 652.241408][T14930] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.295706][ T5737] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.366840][ T5737] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 653.100297][ T5737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.245302][ T30] audit: type=1800 audit(1786605447.731:17): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2653" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 653.274220][ T5737] usb 7-1: Product: syz [ 653.281808][ T5737] usb 7-1: Manufacturer: syz [ 653.289901][ T5737] usb 7-1: SerialNumber: syz [ 653.309323][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.595733][T14956] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2650'. [ 654.906116][T14972] gtp0: entered promiscuous mode [ 654.937493][T14972] gtp0: entered allmulticast mode [ 654.971886][T14972] team0: Device gtp0 is of different type [ 654.985969][ T5737] usb 7-1: USB disconnect, device number 3 [ 657.337621][T15017] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 657.344702][T15017] overlayfs: failed to set xattr on upper [ 657.350425][T15017] overlayfs: ...falling back to redirect_dir=nofollow. [ 657.357388][T15017] overlayfs: ...falling back to index=off. [ 657.363229][T15017] overlayfs: ...falling back to uuid=null. [ 658.648726][T15026] gtp0: entered promiscuous mode [ 658.702631][T15026] gtp0: entered allmulticast mode [ 658.754222][T15026] team0: Device gtp0 is of different type [ 659.283827][T15041] loop4: detected capacity change from 0 to 8 [ 659.447946][T15041] SQUASHFS error: Unable to read directory block [631:72] [ 659.462273][ T5772] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 659.496344][T15041] SQUASHFS error: Unable to read directory block [631:72] [ 659.508878][T15046] loop6: detected capacity change from 0 to 512 [ 660.261482][ T5772] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 660.327570][ T5772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.369408][ T5772] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 660.382279][T15046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.399030][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.419576][T15046] ext4 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.447656][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.551747][T15060] loop3: detected capacity change from 0 to 256 [ 661.140241][ T5772] usb 2-1: Product: syz [ 661.145538][ T5772] usb 2-1: Manufacturer: syz [ 661.459340][ T5772] usb 2-1: SerialNumber: syz [ 661.772839][T15036] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2681'. [ 662.218838][T14088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.680951][T15083] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 662.687948][T15083] overlayfs: failed to set xattr on upper [ 662.693810][T15083] overlayfs: ...falling back to redirect_dir=nofollow. [ 662.700719][T15083] overlayfs: ...falling back to index=off. [ 662.706539][T15083] overlayfs: ...falling back to uuid=null. [ 663.687370][T15088] loop6: detected capacity change from 0 to 2048 [ 663.804698][ T5772] usb 2-1: USB disconnect, device number 36 [ 663.854663][T15092] pim6reg: entered allmulticast mode [ 663.880336][T15088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.976388][T15088] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.082912][T15105] loop4: detected capacity change from 0 to 512 [ 665.096118][T15105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 665.133162][T15105] EXT4-fs (loop4): 1 truncate cleaned up [ 665.141408][T14088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.143701][T15105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.266335][T15105] EXT4-fs (loop4): shut down requested (1) [ 665.282054][T15113] loop1: detected capacity change from 0 to 256 [ 665.305332][T15113] vfat: Bad value for 'uni_xlate' [ 665.605069][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.689936][T15124] loop6: detected capacity change from 0 to 128 [ 666.175922][T15124] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.238082][T15124] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 666.340969][T15132] loop0: detected capacity change from 0 to 256 [ 666.548156][ T5746] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 667.472576][ T5746] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 667.544643][T15141] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 667.551699][T15141] overlayfs: failed to set xattr on upper [ 667.557633][T15141] overlayfs: ...falling back to redirect_dir=nofollow. [ 667.564554][T15141] overlayfs: ...falling back to index=off. [ 667.570346][T15141] overlayfs: ...falling back to uuid=null. [ 668.169010][T14088] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 668.441575][ T5746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.451927][ T5746] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 668.463207][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.471457][ T5746] usb 4-1: Product: syz [ 668.475649][ T5746] usb 4-1: Manufacturer: syz [ 669.195569][ T5746] usb 4-1: SerialNumber: syz [ 669.261382][T15153] loop2: detected capacity change from 0 to 256 [ 669.335634][T15158] loop1: detected capacity change from 0 to 2048 [ 669.348520][ T5746] usb 4-1: can't set config #1, error -71 [ 669.363997][ T5746] usb 4-1: USB disconnect, device number 31 [ 669.401806][T15158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.417857][T15158] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.466953][ T30] audit: type=1800 audit(1786605465.081:18): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2723" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 670.700430][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.744960][T15185] loop3: detected capacity change from 0 to 512 [ 670.760438][T15186] netlink: 143 bytes leftover after parsing attributes in process `syz.0.2732'. [ 670.831311][T15185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.851288][T15192] loop4: detected capacity change from 0 to 1024 [ 670.858357][T15186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 670.859904][T15192] ext4: Unknown parameter 'fsname' [ 670.892633][ T5623] IPVS: starting estimator thread 0... [ 670.903477][T15186] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 670.940253][T15185] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.010761][T15196] IPVS: using max 25 ests per chain, 60000 per kthread [ 671.124620][T15194] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 671.131650][T15194] overlayfs: failed to set xattr on upper [ 671.137365][T15194] overlayfs: ...falling back to redirect_dir=nofollow. [ 671.144610][T15194] overlayfs: ...falling back to index=off. [ 671.150422][T15194] overlayfs: ...falling back to uuid=null. [ 671.152786][T15186] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 671.162368][T15185] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 671.255955][T15186] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 671.360940][ T5746] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 671.416116][T15203] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 671.552897][ T5746] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 671.605477][ T5746] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.648832][ T5746] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 671.660295][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.728796][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.739017][ T5746] usb 3-1: Product: syz [ 671.748422][ T5746] usb 3-1: Manufacturer: syz [ 671.768441][ T5746] usb 3-1: SerialNumber: syz [ 671.888589][T15222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2741'. [ 672.094453][T15225] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2736'. [ 672.875461][T15227] loop1: detected capacity change from 0 to 2048 [ 673.049311][T15227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.206366][T15227] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.363313][T15256] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 674.368728][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.370299][T15256] overlayfs: failed to set xattr on upper [ 674.385353][T15256] overlayfs: ...falling back to redirect_dir=nofollow. [ 674.392273][T15256] overlayfs: ...falling back to index=off. [ 674.398558][T15256] overlayfs: ...falling back to uuid=null. [ 674.527533][ T5746] usb 3-1: USB disconnect, device number 28 [ 674.608349][T15267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'. [ 675.218567][T15274] loop0: detected capacity change from 0 to 256 [ 678.116797][T15309] loop6: detected capacity change from 0 to 1024 [ 678.124427][T15309] EXT4-fs: Ignoring removed i_version option [ 678.140802][T15309] EXT4-fs (loop6): Test dummy encryption mode enabled [ 678.238956][T15305] loop0: detected capacity change from 0 to 2048 [ 678.272790][T15309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.363971][T15305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.509517][T15305] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.335529][T15323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2773'. [ 679.493431][ T30] audit: type=1800 audit(1786605473.981:19): pid=15317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2767" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 679.683048][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.923475][T14764] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 680.131639][T14764] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 680.184305][T14764] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 680.251466][T14764] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 680.335339][T14764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.388111][T14764] usb 4-1: Product: syz [ 680.422552][T14764] usb 4-1: Manufacturer: syz [ 680.680426][T14764] usb 4-1: SerialNumber: syz [ 681.428423][T14088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.500003][T15351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2774'. [ 681.556324][ T30] audit: type=1800 audit(1786605476.171:20): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2784" name="attr_allow_any_host" dev="configfs" ino=35750 res=0 errno=0 [ 681.582973][T15347] nvmet: adding nsid 1 to subsystem testnqn [ 681.693885][ T30] audit: type=1800 audit(1786605476.311:21): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2784" name="enable" dev="configfs" ino=36908 res=0 errno=0 [ 681.714420][T15347] nvmet: failed to open block device (null): (-22) [ 681.807440][ T30] audit: type=1800 audit(1786605476.421:22): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2784" name="addr_trtype" dev="configfs" ino=36914 res=0 errno=0 [ 681.897989][T15354] loop4: detected capacity change from 0 to 512 [ 681.928571][T15354] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 682.032054][T15367] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2788'. [ 682.093957][T15354] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2784: corrupted in-inode xattr: e_value size too large [ 682.109805][T15354] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 682.111482][ C1] EXT4-fs (loop4): initial error at time 1786605476: ext4_iget_extra_inode:5180: inode 15 [ 682.131405][ C1] EXT4-fs (loop4): last error at time 1786605476: ext4_iget_extra_inode:5180: inode 15 [ 682.145768][T15354] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2784: couldn't read orphan inode 15 (err -117) [ 682.171576][T15354] loop4: lost filesystem error report for type 5 error -117 [ 682.174898][T15373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2789'. [ 682.205105][ T12] nvmet: connect request for invalid subsystem testnqn! [ 682.222556][T15347] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 682.273274][T14764] usb 4-1: USB disconnect, device number 32 [ 682.293780][T15354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.448057][T15393] i2c i2c-0: delete_device: Can't find device in list [ 683.487468][T15389] loop6: detected capacity change from 0 to 2048 [ 683.583048][T15389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.709130][T15389] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.131370][T14088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.394161][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.014163][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.026088][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.193648][T15449] loop3: detected capacity change from 0 to 2048 [ 688.392983][T15449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.603889][T15449] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.826983][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.335009][T15488] loop4: detected capacity change from 0 to 8 [ 690.587927][T15488] unable to read xattr id index table [ 690.908165][T15493] loop1: detected capacity change from 0 to 512 [ 691.021988][T15493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.069213][T15493] ext4 filesystem being mounted at /492/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.534123][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.703105][T15521] loop6: detected capacity change from 0 to 2048 [ 692.768371][T15521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.796506][T15521] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.780193][T14088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.788539][T15567] loop1: detected capacity change from 0 to 512 [ 696.501560][T15567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.830870][T15567] ext4 filesystem being mounted at /497/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.410709][ T5609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.611742][T15592] loop6: detected capacity change from 0 to 2048 [ 698.685288][T15592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.810793][T15592] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.248063][T15615] syzkaller0: entered promiscuous mode [ 700.282458][T14088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.293290][T15615] syzkaller0: entered allmulticast mode [ 701.444778][T15631] loop6: detected capacity change from 0 to 128 [ 702.144923][T15631] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 702.187847][T15631] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 705.098280][ T583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.199635][T15661] loop0: detected capacity change from 0 to 2048 [ 705.243404][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.260209][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.270049][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.280315][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.294246][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.334279][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.339315][T15661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.342057][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.362200][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.371959][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.387845][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.450965][T15661] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.502639][ T583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.784427][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.806974][ T583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.924908][T14088] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 707.196184][ T583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.490851][ T5615] Bluetooth: hci1: command tx timeout [ 708.651761][T15712] syzkaller0: entered promiscuous mode [ 708.686121][T15712] syzkaller0: entered allmulticast mode [ 709.410070][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 709.423037][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 709.435282][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 709.445983][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 709.457537][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 709.572348][ T5633] Bluetooth: hci1: command tx timeout [ 709.790093][T15727] netlink: 'syz.6.2887': attribute type 5 has an invalid length. [ 711.496250][ T5633] Bluetooth: hci6: command tx timeout [ 711.651456][ T5633] Bluetooth: hci1: command tx timeout [ 713.577309][ T5633] Bluetooth: hci6: command tx timeout [ 713.731688][ T5633] Bluetooth: hci1: command tx timeout [ 713.805877][ T13] smbdirect: ib_dev[syz1] removed [ 713.845107][ T5772] syz1: Port: 1 Link DOWN [ 714.026766][T15753] loop4: detected capacity change from 0 to 2048 [ 714.139599][T15753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.167032][T15753] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.430320][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.520346][T15776] loop0: detected capacity change from 0 to 512 [ 715.635243][T15776] EXT4-fs (loop0): orphan cleanup on readonly fs [ 715.648852][T15776] Quota error (device loop0): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 715.660276][T15776] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 715.660689][ T5633] Bluetooth: hci6: command tx timeout [ 715.678320][T15776] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 715.691919][T15776] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #14: comm syz.0.2894: invalid orphan symlink nlink 1 [ 715.704525][T15776] loop0: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 715.705729][T15776] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2894: couldn't read orphan inode 14 (err -117) [ 715.714930][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 715.714957][ C0] EXT4-fs (loop0): last error at time 1786605510: ext4_orphan_get:1399: inode 14 [ 715.743123][T15776] loop0: lost filesystem error report for type 5 error -117 [ 715.754494][T15776] EXT4-fs (loop0): 1 truncate cleaned up [ 715.799481][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2897'. [ 715.811237][T15776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 716.034110][ T583] bridge_slave_1: left allmulticast mode [ 716.060200][ T583] bridge_slave_1: left promiscuous mode [ 716.078647][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.104280][ T583] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.121154][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 716.137957][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.146237][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.172677][ T583] bridge_slave_0: left allmulticast mode [ 716.190787][ T583] bridge_slave_0: left promiscuous mode [ 716.196890][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.206146][ T583] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.214634][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.480976][T15799] loop0: detected capacity change from 0 to 4096 [ 716.527590][T15799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.681311][ T583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.733924][ T583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.742756][ T5615] Bluetooth: hci6: command tx timeout [ 717.778328][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.789870][ T583] bond0 (unregistering): Released all slaves [ 717.824059][ T583] bond1 (unregistering): (slave ): Releasing backup interface [ 717.855843][ T583] bond1 (unregistering): Released all slaves [ 717.922597][ T583] bond2 (unregistering): Released all slaves [ 718.293552][ T5615] Bluetooth: hci2: command tx timeout [ 718.630474][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 718.881642][ T583] tipc: Left network mode [ 719.028452][T15828] loop0: detected capacity change from 0 to 512 [ 719.103777][T15828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.150776][T15828] ext4 filesystem being mounted at /485/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.108007][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.461293][ T5615] Bluetooth: hci2: command tx timeout [ 721.354001][ T583] hsr_slave_0: left promiscuous mode [ 721.360339][ T583] hsr_slave_1: left promiscuous mode [ 721.381447][ T583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.388910][ T583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.412971][ T583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.424172][ T583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.459037][ T583] veth1_macvtap: left promiscuous mode [ 721.471816][ T583] veth0_macvtap: left promiscuous mode [ 721.477499][ T583] veth1_vlan: left promiscuous mode [ 721.485912][ T583] veth0_vlan: left promiscuous mode [ 721.919823][ T583] team0 (unregistering): Port device team_slave_1 removed [ 721.940663][ T583] team0 (unregistering): Port device team_slave_0 removed [ 722.530810][ T5615] Bluetooth: hci2: command tx timeout [ 723.267591][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 724.126454][T15895] loop4: detected capacity change from 0 to 512 [ 724.577620][T15895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.611477][ T5615] Bluetooth: hci2: command tx timeout [ 724.640452][T15895] ext4 filesystem being mounted at /506/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.785156][T15904] loop0: detected capacity change from 0 to 1024 [ 725.750962][T15913] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2916'. [ 725.773097][ T583] IPVS: stop unused estimator thread 0... [ 725.799069][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.854248][T15720] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.871239][T15720] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.888367][T15720] bridge_slave_0: entered allmulticast mode [ 725.910730][T15720] bridge_slave_0: entered promiscuous mode [ 725.934422][T15668] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.946434][T15668] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.963707][T15668] bridge_slave_0: entered allmulticast mode [ 725.978604][T15668] bridge_slave_0: entered promiscuous mode [ 726.002745][T15720] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.021533][T15720] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.039341][T15720] bridge_slave_1: entered allmulticast mode [ 726.054595][T15720] bridge_slave_1: entered promiscuous mode [ 726.134476][T15668] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.163814][T15668] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.188081][T15668] bridge_slave_1: entered allmulticast mode [ 726.207839][T15668] bridge_slave_1: entered promiscuous mode [ 727.372391][ T583] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.424986][T15720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.451130][T15720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.472566][T15668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.485955][T15668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.747262][ T583] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.813713][T15720] team0: Port device team_slave_0 added [ 727.845359][T15720] team0: Port device team_slave_1 added [ 727.916031][T15668] team0: Port device team_slave_0 added [ 727.927478][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 728.010035][T15668] team0: Port device team_slave_1 added [ 728.086989][ T583] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.120514][T15720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.140180][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.195681][T15720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.223381][T15720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.230384][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.257086][T15720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.343798][T15668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.353395][T15668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.391612][T15668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.475471][T15668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.482972][T15668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.510451][T15668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.552658][ T583] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.831105][T15720] hsr_slave_0: entered promiscuous mode [ 728.853501][T15720] hsr_slave_1: entered promiscuous mode [ 729.180480][T15668] hsr_slave_0: entered promiscuous mode [ 729.190435][T15988] loop4: detected capacity change from 0 to 2048 [ 729.230048][T15668] hsr_slave_1: entered promiscuous mode [ 729.263853][T15988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.295054][T15988] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.321893][T15668] debugfs: 'hsr0' already exists in 'hsr' [ 729.340953][T15668] Cannot create hsr debugfs directory [ 729.432410][T15783] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.440472][T15783] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.455725][T15783] bridge_slave_0: entered allmulticast mode [ 729.478891][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.496007][T15783] bridge_slave_0: entered promiscuous mode [ 730.316045][T15783] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.344612][T15783] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.031155][T15783] bridge_slave_1: entered allmulticast mode [ 731.039268][T15783] bridge_slave_1: entered promiscuous mode [ 731.077951][T16014] binder_alloc: 16012: binder_alloc_buf, no vma [ 732.219361][T15783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.247685][T15783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.759178][T16035] loop4: detected capacity change from 0 to 8192 [ 732.970847][T16035] loop4: AHDI p1 p2 p3 p4 [ 732.990429][T16035] loop4: p1 start 2130706432 is beyond EOD, truncated [ 732.998426][T16035] loop4: p3 size 4278190079 extends beyond EOD, truncated [ 733.056749][T15783] team0: Port device team_slave_0 added [ 733.115366][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 733.196976][T15783] team0: Port device team_slave_1 added [ 733.271158][ T6156] udevd[6156]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 733.302695][T16047] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2950'. [ 733.416759][ T583] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.503155][T16050] tmpfs: Unknown parameter 'n' [ 733.713121][T15783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.738016][T15783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.770316][T15783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.783769][T15783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.791927][T15783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.818887][T15783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.636415][ T583] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.064655][T16069] loop4: detected capacity change from 0 to 2048 [ 735.156340][T16069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.174068][T16069] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.184823][T16075] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2960'. [ 735.214389][ T583] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.805256][T15783] hsr_slave_0: entered promiscuous mode [ 735.812518][T15783] hsr_slave_1: entered promiscuous mode [ 735.818984][T15783] debugfs: 'hsr0' already exists in 'hsr' [ 735.838291][T15783] Cannot create hsr debugfs directory [ 735.862068][T16079] loop0: detected capacity change from 0 to 512 [ 735.957860][T16079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 735.973899][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.061518][T16079] EXT4-fs (loop0): 1 truncate cleaned up [ 736.082307][ T583] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.109009][T16079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.359187][T15720] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 738.475619][T15720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.671953][T15720] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 738.707927][T15720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.772826][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.865936][T15720] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 738.927006][T15720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.962092][T15720] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 739.016401][T15720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 739.387714][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 739.588712][T16137] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2972'. [ 740.844690][T15668] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 740.911627][T15668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 741.099218][T15668] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 741.145039][T15668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 741.184194][T15668] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 741.221064][T15668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 741.303871][T15668] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 741.339412][T15668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.368383][ T583] bridge_slave_1: left allmulticast mode [ 741.389844][ T583] bridge_slave_1: left promiscuous mode [ 741.399777][ T583] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.450235][ T583] bridge_slave_0: left allmulticast mode [ 741.463022][ T583] bridge_slave_0: left promiscuous mode [ 741.477707][ T583] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.508670][ T583] pim6reg: left allmulticast mode [ 741.565414][T16174] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2986'. [ 741.792859][ T583] team0: Port device bridge0 removed [ 741.826093][ T583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.837426][ T583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.850266][ T583] bond0 (unregistering): Released all slaves [ 741.864156][ T583] bond1 (unregistering): Released all slaves [ 741.885525][ T583] bond2 (unregistering): Released all slaves [ 742.059805][ T583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.069865][ T583] bond_slave_0: left allmulticast mode [ 742.088341][ T583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.097676][ T583] bond_slave_1: left allmulticast mode [ 742.105100][ T583] bond0 (unregistering): Released all slaves [ 742.694365][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2987'. [ 742.713519][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2987'. [ 743.589886][ T583] ovs-system: left promiscuous mode [ 743.712129][T15783] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 743.964007][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.001496][T15783] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 744.074306][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.126515][ T583] tipc: Left network mode [ 744.131889][T15783] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 744.194379][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.246019][T15783] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 744.312297][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.397592][ T583] tipc: Left network mode [ 744.508585][ T583] IPVS: stopping backup sync thread 12290 ... [ 744.551555][T16223] loop4: detected capacity change from 0 to 1024 [ 744.572780][T16223] EXT4-fs: Ignoring removed i_version option [ 744.668831][T16223] EXT4-fs (loop4): Test dummy encryption mode enabled [ 744.679325][T15720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.790328][T16223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.126974][T15720] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.254865][T16240] EXT4-fs (loop4): shut down requested (2) [ 745.536595][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.543839][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.642829][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.650044][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.956511][T15668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.055031][ T583] hsr_slave_0: left promiscuous mode [ 746.073601][ T583] hsr_slave_1: left promiscuous mode [ 746.085798][ T583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.104010][ T583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.121080][ T583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.139975][ T583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.172617][ T583] hsr_slave_0: left promiscuous mode [ 746.186450][ T583] hsr_slave_1: left promiscuous mode [ 746.205147][ T583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.240013][ T583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.296350][ T583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.328586][ T583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.423933][ T583] veth1_macvtap: left promiscuous mode [ 746.436975][ T583] veth0_macvtap: left promiscuous mode [ 746.454768][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.461587][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.476369][ T583] veth1_vlan: left promiscuous mode [ 746.507174][ T583] veth0_vlan: left promiscuous mode [ 746.559657][ T583] veth1_macvtap: left promiscuous mode [ 746.585688][ T583] veth0_macvtap: left promiscuous mode [ 746.621441][ T583] veth1_vlan: left promiscuous mode [ 746.648225][ T583] veth0_vlan: left promiscuous mode [ 747.066895][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.968519][ T583] team0 (unregistering): Port device team_slave_1 removed [ 748.995000][ T583] team0 (unregistering): Port device team_slave_0 removed [ 749.432769][ T583] team0 (unregistering): Port device team_slave_1 removed [ 749.506362][ T583] team0 (unregistering): Port device team_slave_0 removed [ 750.338027][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 750.468176][T15783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.764059][ T30] audit: type=1800 audit(1786605545.381:23): pid=16280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3006" name="attr_allow_any_host" dev="configfs" ino=40996 res=0 errno=0 [ 750.900145][T15668] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.938965][ T30] audit: type=1800 audit(1786605545.451:24): pid=16280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3006" name="addr_trtype" dev="configfs" ino=40998 res=0 errno=0 [ 751.097939][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.105150][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.249046][T15783] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.370902][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.378140][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.467400][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.474646][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.541950][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.549109][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.904889][ T583] IPVS: stop unused estimator thread 0... [ 754.485286][T15720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.507039][T16351] tmpfs: Bad value for 'nr_blocks' [ 756.765333][T15783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.803668][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 757.003552][T15720] veth0_vlan: entered promiscuous mode [ 757.018537][T15720] veth1_vlan: entered promiscuous mode [ 757.744619][T15720] veth0_macvtap: entered promiscuous mode [ 757.812756][T15720] veth1_macvtap: entered promiscuous mode [ 757.970112][T15720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.045475][T15720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.161474][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.204311][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.259798][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.231105][T15084] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.369007][T15668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.658960][T16428] tmpfs: Bad value for 'nr_blocks' [ 759.675475][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.719677][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.939684][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.967267][T15783] veth0_vlan: entered promiscuous mode [ 759.983437][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.076785][T15783] veth1_vlan: entered promiscuous mode [ 760.231778][T15783] veth0_macvtap: entered promiscuous mode [ 760.276085][T15783] veth1_macvtap: entered promiscuous mode [ 760.587636][T16448] loop0: detected capacity change from 0 to 8 [ 760.598246][T16448] unable to read xattr id index table [ 760.606172][T15783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.651431][T15783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.690834][T16452] loop8: detected capacity change from 0 to 256 [ 760.697276][T16451] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.3034'. [ 760.902204][T16456] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3035'. [ 761.068198][T16458] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3036'. [ 761.086923][ T5928] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.123591][T15668] veth0_vlan: entered promiscuous mode [ 761.185184][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 761.218419][ T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.252020][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.309932][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.359537][T15668] veth1_vlan: entered promiscuous mode [ 761.365727][T16460] loop4: detected capacity change from 0 to 1024 [ 761.433156][T16460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 761.458127][T16472] tmpfs: Bad value for 'nr_blocks' [ 761.490363][T16460] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.562037][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.580228][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.675337][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 761.681256][T15668] veth0_macvtap: entered promiscuous mode [ 761.820133][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.854849][T15668] veth1_macvtap: entered promiscuous mode [ 761.858698][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.937489][T15668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.973629][T15668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.023081][ T71] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.055097][ T71] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.152157][ T71] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.200857][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.225913][T16486] loop9: detected capacity change from 0 to 128 [ 762.252853][T16486] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.267094][T16486] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 762.478338][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.518453][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.566546][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.587153][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.965240][T16501] overlayfs: missing 'workdir' [ 763.024821][T16503] loop4: detected capacity change from 0 to 256 [ 763.359129][T16516] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3050'. [ 763.377151][T16513] gtp0: entered promiscuous mode [ 763.395439][T16513] gtp0: entered allmulticast mode [ 763.845048][T16524] loop4: detected capacity change from 0 to 1024 [ 763.867053][T16519] loop0: detected capacity change from 0 to 32768 [ 763.917706][T16519] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 763.957335][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 763.979434][T16524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 764.024319][T16519] XFS (loop0): Ending clean mount [ 764.028413][T16524] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.103121][T16537] loop7: detected capacity change from 0 to 512 [ 764.236803][T16537] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 764.500293][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 764.554548][T16537] EXT4-fs (loop7): 1 truncate cleaned up [ 764.575632][ T5625] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 764.587705][T16537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.044222][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.281433][T16568] overlayfs: missing 'workdir' [ 765.619772][T15783] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.019216][T16586] gtp0: entered promiscuous mode [ 766.043416][T16590] loop0: detected capacity change from 0 to 1024 [ 766.051347][T16586] gtp0: entered allmulticast mode [ 766.121982][T16590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 766.150509][T16590] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.407508][ T71] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 766.457379][T16322] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 766.472550][ T71] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 766.595697][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 766.797797][ T30] audit: type=1800 audit(1786605561.411:25): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3072" name="attr_allow_any_host" dev="configfs" ino=42344 res=0 errno=0 [ 766.913299][ T30] audit: type=1800 audit(1786605561.451:26): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3072" name="addr_trtype" dev="configfs" ino=42345 res=0 errno=0 [ 767.011765][ T5764] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 767.236301][T16620] overlayfs: missing 'workdir' [ 767.475334][ T5764] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 768.302334][T16641] loop4: detected capacity change from 0 to 8 [ 768.334119][T16641] unable to read xattr id index table [ 768.387119][T16632] overlayfs: failed to clone upperpath [ 768.717394][T16649] loop0: detected capacity change from 0 to 1024 [ 768.825990][T16649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 768.908224][T16649] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.270818][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 770.287992][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 770.624833][T16691] loop0: detected capacity change from 0 to 128 [ 770.633322][T16691] FAT-fs (loop0): bogus number of reserved sectors [ 770.639848][T16691] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 770.649234][T16691] FAT-fs (loop0): Can't find a valid FAT filesystem [ 770.659652][T16691] random: crng reseeded on system resumption [ 770.675755][ T5764] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 770.690846][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.023963][T16692] loop4: detected capacity change from 0 to 32768 [ 771.080685][ T5764] usb 10-1: device descriptor read/64, error -71 [ 771.175669][T16692] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 771.881068][ T5764] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 772.160756][ T5764] usb 10-1: device descriptor read/64, error -71 [ 772.304709][ T5764] usb usb10-port1: attempt power cycle [ 772.394663][T16692] XFS (loop4): Ending clean mount [ 772.485607][T16715] binder: BINDER_SET_CONTEXT_MGR already set [ 772.529817][T16715] binder: 16714:16715 ioctl 4018620d 200000004a80 returned -16 [ 772.579377][ T5618] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 772.807892][ T5764] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 772.873076][ T5764] usb 10-1: device descriptor read/8, error -71 [ 772.944437][T16728] loop0: detected capacity change from 0 to 256 [ 773.143032][ T5764] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 773.251447][ T5764] usb 10-1: device descriptor read/8, error -71 [ 773.376415][ T5764] usb usb10-port1: unable to enumerate USB device [ 775.606572][T16763] loop9: detected capacity change from 0 to 32768 [ 775.620643][T16766] loop8: detected capacity change from 0 to 128 [ 775.743069][T16766] FAT-fs (loop8): bogus number of reserved sectors [ 775.749676][T16766] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 775.759079][T16766] FAT-fs (loop8): Can't find a valid FAT filesystem [ 775.772136][T16766] random: crng reseeded on system resumption [ 775.806734][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 775.832786][T16763] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 776.232028][T16763] XFS (loop9): Ending clean mount [ 777.017973][T15783] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 777.522991][T16800] loop9: detected capacity change from 0 to 256 [ 778.510121][ T30] audit: type=1800 audit(1786605573.121:27): pid=16810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3129" name="addr_trtype" dev="configfs" ino=42647 res=0 errno=0 [ 779.100932][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 780.383150][T16833] binder: BINDER_SET_CONTEXT_MGR already set [ 780.459945][T16833] binder: 16826:16833 ioctl 4018620d 200000004a80 returned -16 [ 780.638690][T16838] loop8: detected capacity change from 0 to 256 [ 781.833937][T16856] loop0: detected capacity change from 0 to 256 [ 781.999982][T16858] loop8: detected capacity change from 0 to 512 [ 782.649829][T16858] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.682844][T16858] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.797433][T16865] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3146'. [ 784.232549][T15720] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.452998][T16890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3149'. [ 784.672567][T16900] syzkaller0: entered promiscuous mode [ 784.683570][T16903] loop9: detected capacity change from 0 to 256 [ 784.700009][T16900] syzkaller0: entered allmulticast mode [ 784.750761][ T5764] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 784.933358][ T5764] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 784.966030][ T5764] usb 1-1: config 1 interface 0 has no altsetting 0 [ 784.994527][ T5764] usb 1-1: string descriptor 0 read error: -22 [ 785.014466][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.144124][ T30] audit: type=1800 audit(1786605579.761:28): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3158" name="addr_trtype" dev="configfs" ino=43210 res=0 errno=0 [ 785.392077][T16927] loop4: detected capacity change from 0 to 1024 [ 785.463872][T16927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 785.497898][T16927] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.518750][ T5764] steelseries 0003:1038:12C2.0015: unknown main item tag 0x5 [ 785.547490][ T5764] steelseries 0003:1038:12C2.0015: unexpected long global item [ 785.556199][ T5764] steelseries 0003:1038:12C2.0015: probe with driver steelseries failed with error -22 [ 785.613200][T16927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3163'. [ 785.755047][ T5764] usb 1-1: USB disconnect, device number 30 [ 785.781659][T16935] loop8: detected capacity change from 0 to 2048 [ 786.248237][T16935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.385476][T16935] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.428727][T16938] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3167'. [ 786.475896][T16867] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 786.916755][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 787.228599][ T30] audit: type=1800 audit(1786605581.821:29): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3166" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 787.363856][T15720] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.856663][T16966] loop4: detected capacity change from 0 to 8 [ 787.880970][T16966] unable to read xattr id index table [ 788.161307][T16982] loop4: detected capacity change from 0 to 1024 [ 788.247308][T16982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 788.267567][T16982] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.414944][T16989] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3182'. [ 788.449305][T16982] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3180'. [ 788.528424][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 789.811150][T16867] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 791.188146][T17007] nvmet: failed to open block device (null): (-22) [ 791.212652][T14764] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 791.220321][ T30] audit: type=1800 audit(1786605585.761:30): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3190" name="attr_allow_any_host" dev="configfs" ino=43316 res=0 errno=0 [ 791.296767][ T30] audit: type=1800 audit(1786605585.801:31): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3190" name="enable" dev="configfs" ino=43317 res=0 errno=0 [ 791.303896][T17009] loop7: detected capacity change from 0 to 512 [ 791.342293][ T30] audit: type=1800 audit(1786605585.831:32): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3190" name="addr_trtype" dev="configfs" ino=43318 res=0 errno=0 [ 791.485566][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 791.647055][ T1106] nvmet: connect request for invalid subsystem testnqn! [ 791.700944][T17007] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 791.761110][T17009] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 791.827151][T17009] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.3190: corrupted in-inode xattr: e_value size too large [ 791.888850][T17009] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 791.890856][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 791.906494][ C0] EXT4-fs (loop7): initial error at time 1786605586: ext4_iget_extra_inode:5180: inode 15 [ 791.916448][ C0] EXT4-fs (loop7): last error at time 1786605586: ext4_iget_extra_inode:5180: inode 15 [ 791.933508][T17009] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3190: couldn't read orphan inode 15 (err -117) [ 791.968869][T17009] loop7: lost filesystem error report for type 5 error -117 [ 791.982217][T17009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.971981][T17048] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3201'. [ 793.084989][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.324906][T17060] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3206'. [ 793.451727][T17064] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3203'. [ 793.770734][ T5623] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 793.945418][ T5623] usb 10-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.40 [ 793.995393][ T5623] usb 10-1: config 1 interface 0 has no altsetting 0 [ 794.022001][ T5623] usb 10-1: string descriptor 0 read error: -22 [ 794.036797][ T5623] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.598322][ T5623] steelseries 0003:1038:12C2.0016: unknown main item tag 0x5 [ 794.654815][ T5623] steelseries 0003:1038:12C2.0016: unexpected long global item [ 794.722955][ T5623] steelseries 0003:1038:12C2.0016: probe with driver steelseries failed with error -22 [ 794.806459][ T5623] usb 10-1: USB disconnect, device number 7 [ 795.751225][T17108] loop8: detected capacity change from 0 to 128 [ 796.105215][T17108] FAT-fs (loop8): bogus number of reserved sectors [ 796.111934][T17108] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 796.121307][T17108] FAT-fs (loop8): Can't find a valid FAT filesystem [ 796.129823][T17108] random: crng reseeded on system resumption [ 797.011037][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 797.759257][T17121] loop9: detected capacity change from 0 to 1024 [ 797.857409][T17121] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 797.947127][T17121] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.978610][T17129] loop4: detected capacity change from 0 to 2048 [ 798.009599][T17121] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3216'. [ 798.031555][T17129] loop4: p2 p3 < > p4 < p5 > [ 798.041164][T17129] loop4: partition table partially beyond EOD, truncated [ 798.045386][T17123] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 798.062484][T17129] loop4: p3 start 4225 is beyond EOD, truncated [ 798.146092][T17133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'. [ 798.167609][T17129] (syz.4.3218,17129,1):ocfs2_get_sector:1705 ERROR: status = -12 [ 798.179534][T15783] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 798.196615][T17129] (syz.4.3218,17129,1):ocfs2_sb_probe:790 ERROR: status = -12 [ 798.263302][T17129] (syz.4.3218,17129,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 798.317036][T17129] (syz.4.3218,17129,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 799.572534][T17156] loop4: detected capacity change from 0 to 1024 [ 799.617165][T17156] EXT4-fs: Ignoring removed i_version option [ 799.684572][T17156] EXT4-fs (loop4): Test dummy encryption mode enabled [ 800.717953][T17156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.000472][T17174] loop8: detected capacity change from 0 to 128 [ 802.742353][T17174] FAT-fs (loop8): bogus number of reserved sectors [ 802.748898][T17174] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 802.758249][T17174] FAT-fs (loop8): Can't find a valid FAT filesystem [ 802.768747][T17174] random: crng reseeded on system resumption [ 804.217875][T17183] loop8: detected capacity change from 0 to 1024 [ 804.229759][T17186] loop0: detected capacity change from 0 to 256 [ 804.261545][T17187] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3237'. [ 804.294565][T17186] vfat: Deprecated parameter 'posix' [ 804.338070][T17186] FAT-fs: "posix" option is obsolete, not supported now [ 804.347866][T17183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 804.431673][T17183] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.448230][T17183] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3235'. [ 804.467326][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.511692][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3235'. [ 804.861560][T17201] netdevsim netdevsim9 netdevsim0: refused to change device tx_queue_len [ 804.863797][T15720] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 804.943239][T17202] gtp0: entered promiscuous mode [ 804.948218][T17202] gtp0: entered allmulticast mode [ 805.063692][T17209] loop7: detected capacity change from 0 to 256 [ 805.119885][T17209] FAT-fs (loop7): data area starts beyond volume (274 > 64) [ 805.180713][T17209] FAT-fs (loop7): Can't find a valid FAT filesystem [ 807.032634][T17238] loop9: detected capacity change from 0 to 128 [ 807.067525][T17238] FAT-fs (loop9): bogus number of reserved sectors [ 807.093422][T17238] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 807.290616][T17238] FAT-fs (loop9): Can't find a valid FAT filesystem [ 807.422286][T17238] random: crng reseeded on system resumption [ 807.573142][T17244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3250'. [ 807.741173][ T30] audit: type=1800 audit(1786605602.361:33): pid=17248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3251" name="enable" dev="configfs" ino=43620 res=0 errno=0 [ 807.746048][T17248] nvmet: failed to open block device (null): (-22) [ 807.871726][T17251] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3252'. [ 807.893813][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.904717][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.181021][T17262] fuse: fd is not a fuse device [ 808.287965][T17266] gtp0: entered promiscuous mode [ 808.306556][T17266] gtp0: entered allmulticast mode [ 809.749171][T17286] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3265'. [ 811.504240][T17334] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3280'. [ 811.968445][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3284'. [ 812.008934][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3284'. [ 813.736049][T17367] loop8: detected capacity change from 0 to 32768 [ 813.826366][T17367] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3291 (17367) [ 814.866511][T17367] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 814.957256][T17367] BTRFS info (device loop8): using sha256 checksum algorithm [ 815.140289][T17372] loop4: detected capacity change from 0 to 40427 [ 815.279806][T17372] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 815.366764][T17372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 815.408216][T17367] BTRFS info (device loop8): rebuilding free space tree [ 815.444399][T17372] F2FS-fs (loop4): Image doesn't support compression [ 815.728760][T17372] F2FS-fs (loop4): invalid crc value [ 815.846057][T17367] BTRFS info (device loop8): checking UUID tree [ 815.866691][T17367] BTRFS error (device loop8): failed to check the UUID tree: -4 [ 816.128102][T17421] loop0: detected capacity change from 0 to 512 [ 816.146186][T17372] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 816.162218][T17367] BTRFS error (device loop8): open_ctree failed: -4 [ 816.184872][T17421] EXT4-fs (loop0): Test dummy encryption mode enabled [ 816.265631][T17372] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 816.313707][T17423] loop7: detected capacity change from 0 to 1024 [ 816.322375][T17372] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 816.377664][T17421] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.3300: inode has both inline data and extents flags [ 816.421331][T17421] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 816.424987][T17421] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3300: couldn't read orphan inode 15 (err -117) [ 816.434241][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 816.434267][ C0] EXT4-fs (loop0): initial error at time 1786605611: ext4_orphan_get:1399: inode 15 [ 816.434305][ C0] EXT4-fs (loop0): last error at time 1786605611: ext4_orphan_get:1399: inode 15 [ 816.436921][T17372] F2FS-fs (loop4): Start checkpoint disabled! [ 816.546339][T17423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 816.567310][T17421] loop0: lost filesystem error report for type 5 error -117 [ 816.575870][T17421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.577887][T17423] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.626671][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3301'. [ 816.686279][T17423] netlink: 'syz.7.3301': attribute type 2 has an invalid length. [ 816.695449][T17372] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 816.747576][T17421] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 816.959548][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 817.003253][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.440948][T17443] loop7: detected capacity change from 0 to 256 [ 821.855375][T17481] binder: 17479:17481 ioctl 4018620d 0 returned -22 [ 822.596401][T17491] loop7: detected capacity change from 0 to 1024 [ 822.757141][T17491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 822.783100][T17492] loop9: detected capacity change from 0 to 8 [ 822.859218][T17492] unable to read xattr id index table [ 822.886984][T17491] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.977050][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3318'. [ 823.015236][T17491] netlink: 'syz.7.3318': attribute type 2 has an invalid length. [ 823.189773][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 824.593074][T17508] loop4: detected capacity change from 0 to 32768 [ 824.656377][T17508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3322 (17508) [ 825.250356][T17508] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 825.330147][T17508] BTRFS info (device loop4): using sha256 checksum algorithm [ 826.314491][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 826.316422][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 826.332517][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 826.464532][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 826.527188][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 826.884260][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 827.605661][T17560] syz.7.3329 (17560): drop_caches: 2 [ 827.851475][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 827.872401][T17508] BTRFS error (device loop4): open_ctree failed: -12 [ 828.237720][T17572] tipc: Started in network mode [ 828.262172][T17572] tipc: Node identity 5aaa997e857e, cluster identity 4711 [ 828.291594][T17572] tipc: Enabled bearer , priority 0 [ 828.323771][T17575] syzkaller0: entered promiscuous mode [ 828.354005][T17575] syzkaller0: entered allmulticast mode [ 828.398402][T17572] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 828.617771][T17582] tipc: Resetting bearer [ 828.675172][T17570] tipc: Resetting bearer [ 828.993950][T17570] tipc: Disabling bearer [ 829.991475][T16201] tipc: Node number set to 3755252094 [ 830.450728][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 830.930869][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 833.947273][T17651] loop8: detected capacity change from 0 to 32768 [ 834.000248][T17651] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 834.360083][T17651] XFS (loop8): Ending clean mount [ 834.623512][T17651] XFS (loop8): Quotacheck needed: Please wait. [ 835.578271][ T5633] Bluetooth: hci6: command 0x0406 tx timeout [ 836.689263][T17651] XFS (loop8): Quotacheck: Done. [ 837.032556][T15720] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 838.044190][T17729] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3376'. [ 839.562418][ T30] audit: type=1800 audit(1786605634.181:34): pid=17764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3387" name="attr_allow_any_host" dev="configfs" ino=44674 res=0 errno=0 [ 839.609643][ T30] audit: type=1800 audit(1786605634.221:35): pid=17764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3387" name="enable" dev="configfs" ino=44675 res=0 errno=0 [ 839.981690][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3388'. [ 840.524825][T17778] binder: 17776:17778 ioctl c0306201 0 returned -14 [ 840.693913][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 841.012920][T17791] loop4: detected capacity change from 0 to 512 [ 841.104297][T17791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 841.383221][T17791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.415383][T17791] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 842.126377][T17820] bridge_slave_1: left allmulticast mode [ 842.166668][T17820] bridge_slave_1: left promiscuous mode [ 842.193922][T17820] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.263120][T17820] vlan2: left promiscuous mode [ 842.276485][T17820] bond0: left promiscuous mode [ 842.293248][T17820] bond_slave_0: left promiscuous mode [ 842.318097][T17820] bond_slave_1: left promiscuous mode [ 842.373972][T17820] bond0: (slave bond_slave_0): Releasing backup interface [ 842.416436][T17820] bond_slave_0: left allmulticast mode [ 842.481635][T17820] bond0: (slave bond_slave_1): Releasing backup interface [ 842.564869][T17820] bond_slave_1: left allmulticast mode [ 842.671895][T17820] team0: Port device team_slave_0 removed [ 842.736638][T17820] team0: Port device team_slave_1 removed [ 842.786073][T17820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.842070][T17820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.962809][T17820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.002745][T17820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.043672][T17820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 843.169019][T17824] team0: Mode changed to "loadbalance" [ 843.218897][ T12] bridge0: port 1(vlan2) entered disabled state [ 845.891924][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.678119][T17916] jffs2: notice: (17916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 848.912935][T17923] fuse: Bad value for 'fd' [ 849.060037][T17931] jffs2: notice: (17931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 851.668169][T17954] fuse: fd is not a fuse device [ 853.421568][ T5772] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 853.666929][T17975] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3453'. [ 854.739199][ T5772] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 854.786725][T17983] loop7: detected capacity change from 0 to 2048 [ 855.125945][T17983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.219230][T17983] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.479234][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 856.495506][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 856.503745][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 856.512601][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 856.520957][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 858.324290][ T5798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.620722][ T5633] Bluetooth: hci3: command tx timeout [ 858.646939][ T5798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.078145][ T5798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.528125][ T5798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.810498][T18081] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3478'. [ 859.868561][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.669835][T18102] loop8: detected capacity change from 0 to 512 [ 860.690656][ T5633] Bluetooth: hci3: command tx timeout [ 860.738794][T18102] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.3486: bad orphan inode 11862016 [ 860.771484][T18102] loop8: lost filesystem error report for type 5 error -117 [ 860.779072][T18102] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 860.800481][T18102] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.842493][ T5798] vlan1: left promiscuous mode [ 860.850909][ T5798] bond0: left promiscuous mode [ 860.856038][ T5798] bond_slave_0: left promiscuous mode [ 860.862339][ T5798] bond_slave_1: left promiscuous mode [ 860.872851][ T5798] bridge0: port 3(vlan1) entered disabled state [ 860.893728][ T5798] bridge_slave_1: left allmulticast mode [ 860.906956][ T5798] bridge_slave_1: left promiscuous mode [ 860.908796][T15720] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 860.919568][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.973049][ T5798] bridge_slave_0: left allmulticast mode [ 860.998937][ T5798] bridge_slave_0: left promiscuous mode [ 861.014495][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.459031][T18124] loop8: detected capacity change from 0 to 2048 [ 861.465257][T18126] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3492'. [ 861.500772][T18124] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.536017][T18124] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.528033][ T5798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.561675][ T5798] bond_slave_0: left allmulticast mode [ 862.712788][ T5798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.753298][ T5798] bond_slave_1: left allmulticast mode [ 862.770629][ T5633] Bluetooth: hci3: command tx timeout [ 862.778034][ T5798] bond0 (unregistering): Released all slaves [ 862.804643][ T5798] bond1 (unregistering): Released all slaves [ 862.997156][T18141] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 863.039476][ T5798] tipc: Left network mode [ 863.100139][T18008] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.127156][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.156332][T18008] bridge_slave_0: entered allmulticast mode [ 863.185495][T18008] bridge_slave_0: entered promiscuous mode [ 863.604240][T18118] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.661016][T15720] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.695571][T18008] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.705274][T18008] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.713251][T18008] bridge_slave_1: entered allmulticast mode [ 864.722015][T18008] bridge_slave_1: entered promiscuous mode [ 864.930732][ T5633] Bluetooth: hci3: command tx timeout [ 865.007397][T18167] loop7: detected capacity change from 0 to 256 [ 866.355348][T18118] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.123022][T18008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.467449][T18008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.642373][T18118] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.868868][ T5798] hsr_slave_0: left promiscuous mode [ 867.886357][ T5798] hsr_slave_1: left promiscuous mode [ 867.908493][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.923884][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 867.932475][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.977691][ T5798] veth1_macvtap: left promiscuous mode [ 867.992550][ T5798] veth0_macvtap: left promiscuous mode [ 868.011309][ T5798] veth1_vlan: left promiscuous mode [ 868.024388][ T5798] veth0_vlan: left promiscuous mode [ 868.601685][ T5798] team0 (unregistering): Port device team_slave_1 removed [ 868.647102][ T5798] team0 (unregistering): Port device team_slave_0 removed [ 869.018310][T18008] team0: Port device team_slave_0 added [ 869.031356][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 869.137354][T18118] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.207765][T18008] team0: Port device team_slave_1 added [ 869.226695][T18214] overlayfs: failed to clone upperpath [ 869.242496][T18214] overlayfs: missing 'workdir' [ 869.311629][T18008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.318818][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.355008][T18008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.355635][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.380875][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.400196][T18008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.429212][T18008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.514128][T18008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.924368][T18008] hsr_slave_0: entered promiscuous mode [ 869.931747][T18008] hsr_slave_1: entered promiscuous mode [ 869.951933][T18008] debugfs: 'hsr0' already exists in 'hsr' [ 869.959188][T18008] Cannot create hsr debugfs directory [ 871.242987][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3520'. [ 871.915903][ T5798] IPVS: stop unused estimator thread 0... [ 871.997393][T15084] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.060858][T15084] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.116134][T15084] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.344137][ T5798] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.872103][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3526'. [ 877.491605][T18008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 877.557624][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 877.594684][T18008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 877.672833][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 877.697600][T18008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 877.753159][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 877.788153][T18008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 877.856687][T18008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.080469][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3544'. [ 879.006151][T18008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.048650][T18008] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.147858][T15084] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.155104][T15084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.224595][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.231793][T15084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.664126][ T30] audit: type=1326 audit(1786605675.271:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18369 comm="syz.7.3550" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aff9e0d9 code=0x7fc00000 [ 883.358547][T18008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.489778][T18433] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 883.497733][T18433] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 883.506178][T18433] veth1_virt_wifi: entered allmulticast mode [ 883.529384][T18433] veth1_virt_wifi: left allmulticast mode [ 884.417584][T18441] MTD: Couldn't look up './dev/mtdblock0': -2 [ 885.453288][T18008] veth0_vlan: entered promiscuous mode [ 885.490433][T18008] veth1_vlan: entered promiscuous mode [ 885.622555][T18008] veth0_macvtap: entered promiscuous mode [ 885.649137][T18465] syz_tun: entered allmulticast mode [ 885.673192][T18008] veth1_macvtap: entered promiscuous mode [ 885.757954][T18465] syz_tun (unregistering): left allmulticast mode [ 885.929121][T18470] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3573'. [ 886.197124][T18008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.291957][T18008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.844157][T15084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.909599][T15084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.968666][T15084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.085811][ T5928] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.150398][T18484] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3578'. [ 887.935062][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.970785][T18495] ip_tables: iptables: counters copy to user failed while replacing table [ 887.989088][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.293134][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.320289][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.783320][T18505] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3585'. [ 889.838940][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 889.851445][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 889.867922][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 889.879647][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 889.887354][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 890.689056][ T3266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.709662][ T3266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.896390][T18536] loop4: detected capacity change from 0 to 256 [ 891.155665][ T3266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.208059][ T3266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.234091][T18541] loop4: detected capacity change from 0 to 256 [ 891.515018][T18545] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3597'. [ 891.594048][ T3266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.618769][T18550] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3599'. [ 891.630356][ T3266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.051723][ T5615] Bluetooth: hci4: command tx timeout [ 892.142892][ T3266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 892.228458][ T3266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.131799][ T5615] Bluetooth: hci4: command tx timeout [ 894.579376][T18604] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3616'. [ 894.979202][T18614] loop4: detected capacity change from 0 to 256 [ 895.122633][ T3266] bridge0: port 1(vlan2) entered disabled state [ 896.210749][ T5615] Bluetooth: hci4: command tx timeout [ 896.285329][ T3266] bond0 (unregistering): Released all slaves [ 896.363513][ T3266] bond1 (unregistering): Released all slaves [ 897.267557][ T3266] bond2 (unregistering): Released all slaves [ 897.314562][ T3266] bond3 (unregistering): Released all slaves [ 897.408134][T18655] loop7: detected capacity change from 0 to 1024 [ 897.538175][T18655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 897.577802][T18655] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.624325][ T3266] tipc: Left network mode [ 897.756612][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 898.301356][ T5615] Bluetooth: hci4: command tx timeout [ 898.767945][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 899.245652][ T3266] hsr_slave_0: left promiscuous mode [ 899.275016][ T3266] hsr_slave_1: left promiscuous mode [ 899.306273][ T3266] veth1_macvtap: left promiscuous mode [ 899.318687][ T3266] veth0_macvtap: left promiscuous mode [ 899.340705][ T5746] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 899.341451][ T3266] veth1_vlan: left promiscuous mode [ 899.381479][ T3266] veth0_vlan: left promiscuous mode [ 899.552691][ T5746] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 899.592890][ T5746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.633572][ T5746] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 899.656504][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.674749][ T5746] usb 5-1: Product: syz [ 899.682569][ T5746] usb 5-1: Manufacturer: syz [ 899.690034][ T5746] usb 5-1: SerialNumber: syz [ 899.996422][T18692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3637'. [ 900.050892][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 902.426078][T18749] MTD: Couldn't look up './dev/mtdblock0': -2 [ 902.554240][T18515] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.586622][T18515] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.626204][T18515] bridge_slave_0: entered allmulticast mode [ 902.651540][T18515] bridge_slave_0: entered promiscuous mode [ 902.674183][T18515] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.691558][T18515] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.708128][T18515] bridge_slave_1: entered allmulticast mode [ 902.749136][T18515] bridge_slave_1: entered promiscuous mode [ 902.837348][ T5746] usb 5-1: USB disconnect, device number 36 [ 903.039517][T18515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.105937][T18515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.348210][T18515] team0: Port device team_slave_0 added [ 903.370333][T18761] loop4: detected capacity change from 0 to 128 [ 903.416746][T18515] team0: Port device team_slave_1 added [ 903.438366][T18761] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 903.461171][T18761] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 904.468179][T18008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 904.507922][T18772] syz_tun: entered allmulticast mode [ 904.658919][T18773] syz_tun (unregistering): left allmulticast mode [ 904.766793][T18515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.806397][T18515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.932245][T18515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.981174][T18515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.022638][T18515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.863982][T18515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.950471][T18515] hsr_slave_0: entered promiscuous mode [ 905.969686][T18515] hsr_slave_1: entered promiscuous mode [ 905.978864][T18515] debugfs: 'hsr0' already exists in 'hsr' [ 905.990638][T18515] Cannot create hsr debugfs directory [ 907.201557][T16196] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 907.227944][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 907.301757][T18814] syzkaller0: entered promiscuous mode [ 907.321546][T18814] syzkaller0: entered allmulticast mode [ 907.561405][T16196] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 907.583089][T16196] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.602173][T16196] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 907.669143][T18828] overlayfs: failed to clone upperpath [ 908.300537][T16196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.312035][T16196] usb 5-1: Product: syz [ 908.316275][T16196] usb 5-1: Manufacturer: syz [ 908.320947][T16196] usb 5-1: SerialNumber: syz [ 908.603729][T18837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3666'. [ 909.849776][T16196] usb 5-1: USB disconnect, device number 37 [ 910.254430][T18515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 910.286091][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.316659][T18515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 910.349479][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 910.398643][T18515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 910.469609][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 910.513152][T18515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 910.579251][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 910.669828][ T30] audit: type=1800 audit(1786605705.281:37): pid=18877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3679" name="addr_trtype" dev="configfs" ino=48709 res=0 errno=0 [ 910.904837][T18886] jffs2: notice: (18886) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 910.960426][T18515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.024023][T18515] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.055357][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.062559][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.106604][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.113782][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.148363][T18897] loop4: detected capacity change from 0 to 256 [ 911.318445][T18901] overlayfs: failed to clone upperpath [ 913.481297][ T5772] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 913.671319][ T5772] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 913.691955][ T5772] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.721042][ T5772] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 913.760559][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.788516][ T5772] usb 5-1: Product: syz [ 913.806341][ T5772] usb 5-1: Manufacturer: syz [ 913.822937][ T5772] usb 5-1: SerialNumber: syz [ 914.282409][T18944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3691'. [ 915.653972][ T5772] usb 5-1: USB disconnect, device number 38 [ 916.378683][T18978] overlayfs: failed to resolve './bus': -2 [ 916.720448][T18515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.028929][T18515] veth0_vlan: entered promiscuous mode [ 917.878973][T18515] veth1_vlan: entered promiscuous mode [ 917.973908][T18515] veth0_macvtap: entered promiscuous mode [ 918.014682][T18515] veth1_macvtap: entered promiscuous mode [ 918.080454][T18515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.132823][T18515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.261361][T18946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.290310][T18946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.354066][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.395722][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.554722][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.582889][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.731253][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.765625][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.940767][T19049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3717'. [ 927.894806][T19096] loop0: detected capacity change from 0 to 64 [ 928.410195][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3733'. [ 930.777099][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.786460][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.457591][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 931.485546][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 932.017678][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 932.037634][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 932.602286][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 934.735535][T19190] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3753'. [ 934.851930][ T5633] Bluetooth: hci5: command tx timeout [ 935.562382][T19204] syz_tun: entered allmulticast mode [ 936.128466][T19204] syz_tun (unregistering): left allmulticast mode [ 937.188394][ T5633] Bluetooth: hci5: command tx timeout [ 939.251356][ T5633] Bluetooth: hci5: command tx timeout [ 939.955534][T19218] jffs2: notice: (19218) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 941.343713][ T5633] Bluetooth: hci5: command tx timeout [ 942.448181][ T5798] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.644896][T19239] loop4: detected capacity change from 0 to 32768 [ 942.803421][T19239] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 942.859328][T19233] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.922326][T19239] XFS (loop4): Ending clean mount [ 943.618918][ T5798] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.494903][T18008] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 945.768686][T19233] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.352301][ T5798] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.445962][T19278] loop7: detected capacity change from 0 to 4096 [ 946.518892][T19233] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.527007][T19278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.601174][T16322] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 946.647723][T19278] EXT4-fs (loop7): shut down requested (2) [ 947.493005][T16322] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 947.519835][T16322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.536895][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.538703][T16322] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 947.599209][T16322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.640676][T16322] usb 5-1: Product: syz [ 947.659917][T16322] usb 5-1: Manufacturer: syz [ 947.680690][T16322] usb 5-1: SerialNumber: syz [ 947.771455][T19290] netlink: 'syz.7.3778': attribute type 10 has an invalid length. [ 947.805011][ T5798] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.861689][T19233] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.158730][T19296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3772'. [ 948.187323][T19290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 948.214393][T19290] team0: Port device netdevsim1 added [ 948.963857][T19138] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.972416][T19138] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.980094][T19138] bridge_slave_0: entered allmulticast mode [ 948.990251][T19138] bridge_slave_0: entered promiscuous mode [ 949.009927][T19138] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.018869][T19138] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.026782][T19138] bridge_slave_1: entered allmulticast mode [ 949.035989][T19138] bridge_slave_1: entered promiscuous mode [ 949.097134][T19138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.122561][T19138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.647319][T19138] team0: Port device team_slave_0 added [ 949.746598][T19138] team0: Port device team_slave_1 added [ 949.847008][T16322] usb 5-1: USB disconnect, device number 39 [ 950.051664][T19138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.073416][T19138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.102680][T19138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.125945][T19138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.141961][T19138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.172599][T19138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.361046][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.465110][T19138] hsr_slave_0: entered promiscuous mode [ 950.482777][T19138] hsr_slave_1: entered promiscuous mode [ 950.515741][T19138] debugfs: 'hsr0' already exists in 'hsr' [ 950.537234][T19138] Cannot create hsr debugfs directory [ 950.588118][T19311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 950.618109][T15084] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.750218][T19322] loop4: detected capacity change from 0 to 2048 [ 950.839095][T19322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.864605][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.881398][T19322] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.004528][ T5798] bridge_slave_1: left allmulticast mode [ 951.038200][ T5798] bridge_slave_1: left promiscuous mode [ 951.289197][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.855518][ T5798] bridge_slave_0: left allmulticast mode [ 951.994151][ T5798] bridge_slave_0: left promiscuous mode [ 952.000006][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.213463][T19336] 9p: Bad value for 'rfdno' [ 952.850941][T19344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3788'. [ 954.716399][ T5798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.855615][T19360] loop7: detected capacity change from 0 to 8 [ 954.937281][T19360] unable to read xattr id index table [ 954.982271][T16201] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 955.121505][ T5798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.142920][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.170986][ T5798] bond0 (unregistering): Released all slaves [ 955.243869][T16201] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 955.264426][T18946] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.304848][T16201] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.373371][T16201] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 955.458829][T16201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.480786][T16201] usb 1-1: Product: syz [ 955.485699][T16201] usb 1-1: Manufacturer: syz [ 955.493045][T16201] usb 1-1: SerialNumber: syz [ 955.801552][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3793'. [ 956.072898][T19326] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.231876][T19365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 956.583046][T16201] usb 1-1: USB disconnect, device number 31 [ 957.161859][T19326] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.328489][ T30] audit: type=1326 audit(1786605751.941:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19403 comm="syz.4.3804" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0f719e0d9 code=0x0 [ 957.728966][T19326] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.751089][T16201] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 957.776959][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 957.824930][ T5798] hsr_slave_0: left promiscuous mode [ 957.868587][ T5798] hsr_slave_1: left promiscuous mode [ 957.898804][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.931401][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.931784][T16201] usb 1-1: Using ep0 maxpacket: 8 [ 957.960073][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.983621][T16201] usb 1-1: unable to get BOS descriptor or descriptor too short [ 957.990842][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.011116][T16201] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 958.034742][ T5798] veth1_macvtap: left promiscuous mode [ 958.044816][ T5798] veth0_macvtap: left promiscuous mode [ 958.057613][ T5798] veth1_vlan: left promiscuous mode [ 958.068207][ T5798] veth0_vlan: left promiscuous mode [ 958.068298][T16201] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 958.095652][T16201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.130982][T16201] usb 1-1: Product: syz [ 958.149265][T16201] usb 1-1: Manufacturer: syz [ 958.186521][T16201] usb 1-1: SerialNumber: syz [ 958.546465][T16201] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 959.092031][T16201] usb 1-1: USB disconnect, device number 32 [ 962.559438][T19446] loop4: detected capacity change from 0 to 8 [ 963.270772][ T5746] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 963.305894][ T5798] team0 (unregistering): Port device team_slave_1 removed [ 963.426031][ T5798] team0 (unregistering): Port device team_slave_0 removed [ 963.443931][ T5746] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 963.489689][ T5746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.523346][ T5746] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 963.557010][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.587205][ T5746] usb 5-1: Product: syz [ 963.608491][ T5746] usb 5-1: Manufacturer: syz [ 963.625143][ T5746] usb 5-1: SerialNumber: syz [ 963.838047][T19393] udevd[19393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.402875][T19464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3816'. [ 964.812255][T19326] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.041010][ T5746] usb 5-1: USB disconnect, device number 40 [ 966.761063][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 966.777557][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 966.787012][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 966.798624][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 966.811043][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 967.569869][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 967.721550][T18946] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.461450][T18946] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.498530][T18946] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.559094][T18946] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.850901][ T5633] Bluetooth: hci2: command tx timeout [ 969.895153][T19138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 969.975495][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.141140][T19138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 970.201854][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.262979][T19555] usb usb8: usbfs: process 19555 (syz.7.3840) did not claim interface 0 before use [ 970.335700][T18946] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.643393][T19138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 970.702886][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.735349][T19138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 970.782044][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 970.930989][ T5633] Bluetooth: hci2: command tx timeout [ 971.390404][T18946] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.590848][ T5267] 8021q: adding VLAN 0 to HW filter on device eth19 [ 971.767244][T18946] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.047581][T18946] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.598306][T19594] loop7: detected capacity change from 0 to 8 [ 972.615306][T19594] unable to read xattr id index table [ 973.030696][ T5633] Bluetooth: hci2: command tx timeout [ 973.640330][T19138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.753164][T19138] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.851056][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.858289][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.167957][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.176248][T15084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.162686][ T5633] Bluetooth: hci2: command tx timeout [ 975.237284][T19504] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.267248][T19504] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.296311][T19504] bridge_slave_0: entered allmulticast mode [ 975.334299][T19504] bridge_slave_0: entered promiscuous mode [ 975.448315][T19504] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.464054][T19504] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.480462][T19504] bridge_slave_1: entered allmulticast mode [ 975.497190][T19504] bridge_slave_1: entered promiscuous mode [ 975.912959][T19504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.969223][T19504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.337815][T19621] loop4: detected capacity change from 0 to 2048 [ 976.366632][T18946] bridge_slave_1: left allmulticast mode [ 976.400954][T18946] bridge_slave_1: left promiscuous mode [ 976.420415][T19621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 976.441514][T18946] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.496885][T18946] bridge_slave_0: left allmulticast mode [ 976.511780][T19621] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.541741][T18946] bridge_slave_0: left promiscuous mode [ 976.584554][T18946] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.073868][T19634] 9p: Bad value for 'rfdno' [ 977.515218][T18946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.558805][T18946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.594535][T18946] bond0 (unregistering): Released all slaves [ 977.643114][T19504] team0: Port device team_slave_0 added [ 977.872500][T19504] team0: Port device team_slave_1 added [ 978.103299][T19504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.153913][T19504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.268591][T19504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.422797][T19504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.504289][T19504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.694523][T19504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.930681][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 979.504105][T18946] hsr_slave_0: left promiscuous mode [ 979.528652][T18946] hsr_slave_1: left promiscuous mode [ 979.566136][T18946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.592324][T18946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.629053][T18946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.697479][T18946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.623628][T18946] veth1_macvtap: left promiscuous mode [ 980.643291][T18946] veth0_macvtap: left promiscuous mode [ 980.649739][T18946] veth1_vlan: left promiscuous mode [ 980.670066][T19671] loop7: detected capacity change from 0 to 128 [ 980.689363][T18946] veth0_vlan: left promiscuous mode [ 980.699940][T19671] EXT4-fs (loop7): Test dummy encryption mode enabled [ 980.754272][T19671] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 980.796776][T19671] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 980.963465][ T30] audit: type=1800 audit(1786605775.571:39): pid=19674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3864" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 981.061938][ T30] audit: type=1800 audit(1786605775.621:40): pid=19671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3864" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 981.164150][T15668] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 981.244278][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.757679][T19689] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 982.079563][T19692] loop7: detected capacity change from 0 to 512 [ 982.107663][T19692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 982.134385][T19692] System zones: 1-12 [ 982.151577][T19692] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3872: corrupted inode contents [ 982.164964][T19692] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 982.170615][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 982.186262][ C1] EXT4-fs (loop7): initial error at time 1786605776: ext4_do_update_inode:5742: inode 15 [ 982.196163][ C1] EXT4-fs (loop7): last error at time 1786605776: ext4_do_update_inode:5742: inode 15 [ 982.251588][T19692] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 982.350812][T19692] loop7: lost filesystem error report for type 5 error -117 [ 982.353564][T19692] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3872: corrupted inode contents [ 982.388955][T19692] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 982.390039][T19692] EXT4-fs error (device loop7): ext4_evict_inode:315: inode #15: comm syz.7.3872: mark_inode_dirty error [ 982.434178][T19692] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 982.435747][T19692] EXT4-fs (loop7): 1 orphan inode deleted [ 982.505323][T19692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.864430][T18946] team0 (unregistering): Port device team_slave_1 removed [ 982.920015][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.979991][T18946] team0 (unregistering): Port device team_slave_0 removed [ 984.495050][ T5267] 8021q: adding VLAN 0 to HW filter on device eth20 [ 984.603589][T19504] hsr_slave_0: entered promiscuous mode [ 984.653856][T19504] hsr_slave_1: entered promiscuous mode [ 984.665619][T19719] loop4: detected capacity change from 0 to 4096 [ 984.784071][T19719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.535207][T18008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.758367][T19138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.580917][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3892'. [ 988.217451][T19789] loop7: detected capacity change from 0 to 512 [ 988.285846][T19789] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002] [ 988.312785][T19789] System zones: 1-12 [ 988.325275][T19789] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3895: corrupted inode contents [ 988.357746][T19789] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 988.358690][T19789] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 988.367949][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 988.367979][ C1] EXT4-fs (loop7): initial error at time 1786605782: ext4_do_update_inode:5742: inode 15 [ 988.368045][ C1] EXT4-fs (loop7): last error at time 1786605782: ext4_do_update_inode:5742: inode 15 [ 988.410440][T19789] loop7: lost filesystem error report for type 5 error -117 [ 988.413337][T19789] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.3895: corrupted inode contents [ 988.483250][T19789] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 988.483715][T19789] EXT4-fs error (device loop7): ext4_evict_inode:315: inode #15: comm syz.7.3895: mark_inode_dirty error [ 988.578893][T19789] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 988.579490][T19789] EXT4-fs (loop7): 1 orphan inode deleted [ 988.634192][T19789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.858408][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.098703][ T1106] wlan1: Trigger new scan to find an IBSS to join [ 989.263765][T19804] loop7: detected capacity change from 0 to 512 [ 989.322810][T19804] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 989.422916][T19804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.509382][T19804] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 989.886031][T15668] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.973685][T19504] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 991.119533][T19504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 991.172833][T19504] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 991.215421][ T5615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 991.229646][ T5615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 991.239216][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 991.257317][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 991.269473][ T5615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 991.408425][T19504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 991.483922][T19504] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 991.588035][T19504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 991.628961][T19504] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 991.629643][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3904'. [ 991.714313][T19844] loop7: detected capacity change from 0 to 256 [ 991.743225][T19504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 991.765779][T19844] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0x0008ffff) [ 991.942955][T19844] exFAT-fs (loop7): failed to count the number of clusters in root [ 992.054481][T19844] exFAT-fs (loop7): failed to recognize exfat type [ 992.215106][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.270314][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.546330][ T5633] Bluetooth: hci6: command tx timeout [ 994.051210][ T3266] wlan1: Trigger new scan to find an IBSS to join [ 995.571119][ T5633] Bluetooth: hci6: command tx timeout [ 995.869997][T19902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3918'. [ 995.951341][T18949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.292243][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1100.990532][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1100.997546][ C1] rcu: 0-...!: (1 ticks this GP) idle=8a5c/1/0x4000000000000000 softirq=112298/112298 fqs=3 [ 1101.009017][ C1] rcu: (detected by 1, t=10503 jiffies, g=127473, q=677 ncpus=2) [ 1101.016815][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1101.016845][ C0] NMI backtrace for cpu 0 [ 1101.016861][ C0] CPU: 0 UID: 0 PID: 19851 Comm: syz.4.3906 Not tainted syzkaller #0 PREEMPT(full) [ 1101.016885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1101.016899][ C0] RIP: 0010:__netif_schedule+0x5/0x200 [ 1101.016928][ C0] Code: 41 d3 26 f8 eb bd e8 3a d3 26 f8 bb 01 00 00 00 eb db 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 50 48 89 fb 49 bd 00 00 00 00 00 fc ff [ 1101.016947][ C0] RSP: 0018:ffffc90000007d00 EFLAGS: 00000006 [ 1101.016966][ C0] RAX: ffffffff89dc2f0a RBX: ffffffff89dc2ec8 RCX: ffff888034a7dd00 [ 1101.016983][ C0] RDX: 0000000000010000 RSI: ffffffff8c4bbf60 RDI: ffff888028cc7000 [ 1101.017000][ C0] RBP: 0000000000000001 R08: ffffffff89dc2ec8 R09: 0000000000080000 [ 1101.017014][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffff888069e24400 [ 1101.017030][ C0] R13: ffff888028cc7000 R14: dffffc0000000000 R15: ffff888028cc7340 [ 1101.017049][ C0] FS: 00007fe0f80846c0(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 1101.017069][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1101.017084][ C0] CR2: 0000200000d1d030 CR3: 0000000074e61000 CR4: 0000000000350ef0 [ 1101.017103][ C0] Call Trace: [ 1101.017111][ C0] [ 1101.017121][ C0] advance_sched+0xa8a/0xc80 [ 1101.017157][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1101.017187][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1101.017215][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1101.017245][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1101.017282][ C0] hrtimer_interrupt+0x448/0x910 [ 1101.017326][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1101.017367][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1101.017398][ C0] [ 1101.017405][ C0] [ 1101.017414][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1101.017439][ C0] RIP: 0010:skb_free_datagram+0x10/0x20 [ 1101.017467][ C0] Code: e8 25 16 34 02 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 13 63 2a f8 48 89 df <5b> e9 5a 20 fc ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 1101.017485][ C0] RSP: 0018:ffffc90006247710 EFLAGS: 00000246 [ 1101.017504][ C0] RAX: ffffffff899c9e4d RBX: ffff88807b88c640 RCX: 0000000000080000 [ 1101.017520][ C0] RDX: ffffc90014dc4000 RSI: 000000000007ffff RDI: ffff88807b88c640 [ 1101.017536][ C0] RBP: ffffc90006247898 R08: ffffc900062477bf R09: ffffc900062477a0 [ 1101.017553][ C0] R10: dffffc0000000000 R11: fffff52000c48ef8 R12: ffff88807b88c640 [ 1101.017570][ C0] R13: dffffc0000000000 R14: 1ffff92000c48ef0 R15: ffff88807fdbe600 [ 1101.017593][ C0] ? skb_free_datagram+0xd/0x20 [ 1101.017624][ C0] __unix_dgram_recvmsg+0x9e1/0xd70 [ 1101.017660][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1101.017689][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1101.017718][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.017745][ C0] ? irqentry_exit+0x218/0x8f0 [ 1101.017778][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.017811][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1101.017845][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.017871][ C0] ? unix_dgram_recvmsg+0xae/0xd0 [ 1101.017903][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1101.017937][ C0] sock_recvmsg_nosec+0x130/0x170 [ 1101.017973][ C0] ____sys_recvmsg+0x3e3/0x4a0 [ 1101.018006][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1101.018043][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.018070][ C0] ? import_iovec+0x73/0xa0 [ 1101.018107][ C0] ___sys_recvmsg+0x213/0x5a0 [ 1101.018138][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1101.018167][ C0] ? irqentry_exit+0x218/0x8f0 [ 1101.018197][ C0] ? trace_irq_disable+0x3b/0x140 [ 1101.018242][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.018275][ C0] do_recvmmsg+0x31a/0x7f0 [ 1101.018308][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1101.018333][ C0] ? taprio_dequeue+0x250/0x540 [ 1101.018368][ C0] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 1101.018406][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1101.018445][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1101.018472][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1101.018498][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1101.018524][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.018558][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.018583][ C0] do_syscall_64+0x174/0x580 [ 1101.018620][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.018643][ C0] RIP: 0033:0x7fe0f719e0d9 [ 1101.018663][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.018681][ C0] RSP: 002b:00007fe0f8084028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1101.018702][ C0] RAX: ffffffffffffffda RBX: 00007fe0f7426090 RCX: 00007fe0f719e0d9 [ 1101.018719][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000004 [ 1101.018734][ C0] RBP: 00007fe0f7235024 R08: 0000000000000000 R09: 0000000000000000 [ 1101.018748][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1101.018761][ C0] R13: 00007fe0f7426128 R14: 00007fe0f7426090 R15: 00007fff3b082678 [ 1101.018796][ C0] [ 1101.018838][ C1] rcu: rcu_preempt kthread starved for 10490 jiffies! g127473 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1101.528231][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1101.538276][ C1] rcu: RCU grace-period kthread stack dump: [ 1101.544151][ C1] task:rcu_preempt state:R running task stack:27896 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1101.557747][ C1] Call Trace: [ 1101.561015][ C1] [ 1101.563941][ C1] __schedule+0x17d9/0x56c0 [ 1101.568452][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.574084][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1101.579039][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.584693][ C1] ? __pfx___schedule+0x10/0x10 [ 1101.589552][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.595188][ C1] ? schedule+0x90/0x2b0 [ 1101.599435][ C1] schedule+0x164/0x2b0 [ 1101.603594][ C1] schedule_timeout+0x152/0x2c0 [ 1101.608442][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1101.613811][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1101.619100][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.624732][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1101.630540][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.636170][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1101.641733][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1101.646604][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1101.652765][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1101.658051][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1101.663263][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1101.667867][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1101.673071][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1101.678012][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.683642][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1101.688673][ C1] kthread+0x388/0x470 [ 1101.692747][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1101.697947][ C1] ? __pfx_kthread+0x10/0x10 [ 1101.702544][ C1] ret_from_fork+0x514/0xb70 [ 1101.707143][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1101.712259][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.717894][ C1] ? __switch_to+0xc89/0x1420 [ 1101.722574][ C1] ? __pfx_kthread+0x10/0x10 [ 1101.727170][ C1] ret_from_fork_asm+0x1a/0x30 [ 1101.731963][ C1] [ 1101.734970][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1101.741279][ C1] CPU: 1 UID: 0 PID: 3266 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 1101.750731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1101.760778][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1101.767295][ C1] RIP: 0010:smp_call_function_many_cond+0x11e4/0x15f0 [ 1101.774061][ C1] Code: 1c 84 c0 75 7a 41 8b 1e 89 de 83 e6 01 31 ff e8 e2 1e 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 8e 1a 0c 00 eb 37 90 41 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 73 [ 1101.793662][ C1] RSP: 0018:ffffc9000e0df700 EFLAGS: 00000293 [ 1101.799726][ C1] RAX: ffffffff81bae6ed RBX: dffffc0000000000 RCX: ffff888032738000 [ 1101.807689][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1101.815650][ C1] RBP: ffffc9000e0df860 R08: ffffffff90574837 R09: 1ffffffff20ae906 [ 1101.823614][ C1] R10: dffffc0000000000 R11: fffffbfff20ae907 R12: 1ffff110170c85fd [ 1101.831577][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 1101.839540][ C1] FS: 0000000000000000(0000) GS:ffff888125055000(0000) knlGS:0000000000000000 [ 1101.848460][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1101.855034][ C1] CR2: 00007fb3f94186c8 CR3: 000000000e946000 CR4: 0000000000350ef0 [ 1101.862999][ C1] Call Trace: [ 1101.866266][ C1] [ 1101.869190][ C1] ? smp_call_function_many_cond+0x911/0x15f0 [ 1101.875265][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1101.880310][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1101.886641][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1101.892013][ C1] ? kmem_cache_alloc_bulk_noprof+0xb7/0x7b0 [ 1101.898000][ C1] ? __pfx___text_poke+0x10/0x10 [ 1101.902941][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1101.907963][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1101.913080][ C1] smp_text_poke_batch_finish+0x5fd/0x1110 [ 1101.918888][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1101.924880][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1101.929909][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1101.936153][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.941793][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1101.948039][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.953670][ C1] ? __jump_label_update+0x347/0x370 [ 1101.958968][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1101.964950][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 1101.970850][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1101.976567][ C1] static_key_enable+0x1a/0x20 [ 1101.981338][ C1] toggle_allocation_gate+0xab/0x290 [ 1101.986634][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1101.992535][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.998175][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.003808][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.009438][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 1102.015524][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1102.021247][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1102.026827][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1102.032813][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.038443][ C1] ? assign_work+0x3cf/0x5d0 [ 1102.043038][ C1] worker_thread+0xa47/0xfb0 [ 1102.047632][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.053275][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.058914][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1102.063864][ C1] kthread+0x388/0x470 [ 1102.067940][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1102.073049][ C1] ? __pfx_kthread+0x10/0x10 [ 1102.077644][ C1] ret_from_fork+0x514/0xb70 [ 1102.082244][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.087367][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1102.092998][ C1] ? __switch_to+0xc89/0x1420 [ 1102.097678][ C1] ? __pfx_kthread+0x10/0x10 [ 1102.102274][ C1] ret_from_fork_asm+0x1a/0x30 [ 1102.107072][ C1]