last executing test programs: 5m25.94748023s ago: executing program 5 (id=325): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) setsockopt(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) 5m23.724653152s ago: executing program 5 (id=332): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x2, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f0000000380)="b461802305624431ed3373010000003d2600906919d5d5fe00c6fc7ef8eee727c4647dffc9c2e4b38a8f3cbbe5058067755b555893aed85da8bc42335cf8f1372013b4c218ebff81ca6cd0ff91d73250bcaffe0328c570102062d54a77a51e73c4ddd6cefc82d687d0bc843069909fd654afca47c783901b85988207ca87addd70139048527d2e56734be693d393b9f83723810d4710aa39e1d938b425d09653656dce", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x48903) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x89) 5m23.437360305s ago: executing program 5 (id=334): syz_usb_connect(0x5, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000a40), 0x4bb, 0x800) fsopen(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002080)={0x0, &(0x7f00000020c0)}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000e80)=""/4112) 5m21.407977589s ago: executing program 5 (id=341): socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000005800)='./file0\x00', 0x2048c4, &(0x7f0000005840)={[{@shortname_win95}, {@uni_xlateno}, {@fat=@nfs}, {@utf8}, {@fat=@usefree}, {@utf8no}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@shortname_win95}, {@fat=@quiet}, {@rodir}, {@fat=@flush}]}, 0x0, 0x2c7, &(0x7f0000005900)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000005c00)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000005c40)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000005c80)='./file0\x00', &(0x7f0000005cc0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000005d00)='./file0\x00', &(0x7f0000007d40)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f0000007d80)='.\x00', &(0x7f0000007dc0)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000007e00)={0x2020}, 0x2020) 5m20.977830417s ago: executing program 5 (id=344): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) setsockopt(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) 5m19.80191828s ago: executing program 5 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800", @ANYRESHEX], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) 5m19.041964129s ago: executing program 32 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800", @ANYRESHEX], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) 2m36.859110261s ago: executing program 0 (id=651): r0 = getpgrp(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000380)='mounts\x00') socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc1}, &(0x7f00000004c0)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000700), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) readv(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x37, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000780)={@rand_addr=0x64010101, @multicast2, 0x0, "7beb38c70d477344b583060000000000000000000000004685226700", 0x1, 0x10, 0x1, 0x4ea85437}, 0x3c) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000007c0)=""/69) pread64(0xffffffffffffffff, &(0x7f0000000880)=""/253, 0xfd, 0x1) 2m33.925749382s ago: executing program 0 (id=659): fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 2m32.597908765s ago: executing program 0 (id=663): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {@nombcache}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@inlinecrypt}, {@grpid}, {@nobarrier}, {@nouid32}]}, 0x3, 0x56f, &(0x7f00000004c0)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x3c, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000300180000000000000000000000009500000000000000bfa0000000000000950000000000a850a8ac23a14512a87ec699f31b6074bacc"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x94) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3800000010002ba99979f4474eec0000000e0000c045775f6fdbc5ee6f3f14a6a40a7fc5803974b5263829356b93225c9665d067ec4c0df36f4f8c139966810fa9404439efa536c3a3c84800"/87, @ANYRES32, @ANYBLOB="1100030000000000180012800b00010069703667726500000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001180)) syz_mount_image$ext4(&(0x7f00000011c0)='ext4\x00', &(0x7f0000001200)='./file0\x00', 0x217, &(0x7f0000001240), 0x1, 0x586, &(0x7f0000001280)="$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") r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001840)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001880)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="400e7b53b8aee61ae8f569a9ca6202000000325f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000019c0), 0x8) syz_genetlink_get_family_id$nl80211(0x0, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001a40)='./trace\x00', &(0x7f0000001a80)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001ac0)='./trace/set_event\x00', 0x121302, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000001b40)={0x2c, &(0x7f0000001b80)=ANY=[@ANYBLOB="4000d4"], 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001bc0)={0x1, &(0x7f0000001c00)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_clone3(&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001cc0), 0x2}, 0xa0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1e000000000000000ea6100003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c80)={r4, 0x0, &(0x7f0000000cc0)=""/53}, 0x20) 2m27.636143464s ago: executing program 0 (id=682): pipe2(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000740)='./file1\x00', 0x10848, &(0x7f0000001980)=ANY=[], 0x67, 0xc54, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000001440)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001500)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x2f) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r0 = fsopen(&(0x7f00000019c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m26.004426016s ago: executing program 0 (id=688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0xfe86}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x3) 2m24.930827245s ago: executing program 0 (id=691): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000e40)=[{0xfffffffffffffffd}], 0x1}, 0x24040000) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./nfsd\x00', &(0x7f0000000500)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='1', 0x1) 2m9.079412042s ago: executing program 33 (id=691): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000e40)=[{0xfffffffffffffffd}], 0x1}, 0x24040000) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./nfsd\x00', &(0x7f0000000500)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='tcp 2', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='1', 0x1) 1m48.109282481s ago: executing program 4 (id=805): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x1c8) r0 = syz_io_uring_setup(0xf08, &(0x7f00000002c0)={0x0, 0xfefffffe, 0x80, 0x3, 0x3ca}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000002600)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1m47.886005658s ago: executing program 4 (id=808): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000880)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000940)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000a80)='1024\n', 0x5) symlinkat(&(0x7f0000000ac0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m47.665896288s ago: executing program 4 (id=811): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x2d72, 0x0, 0xfffffffd, 0x1ef}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x200004, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2000, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8801, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x630, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) 1m47.434694099s ago: executing program 4 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000dc0)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) 1m47.234268814s ago: executing program 4 (id=814): openat$urandom(0xffffffffffffff9c, 0x0, 0x40081, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = inotify_init1(0x800) fcntl$setsig(r0, 0xa, 0xe) 1m46.352443055s ago: executing program 4 (id=816): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1m30.529339083s ago: executing program 34 (id=816): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1m5.208360336s ago: executing program 2 (id=907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002a00)=ANY=[@ANYBLOB], 0x374}}, 0x0) 1m4.748678057s ago: executing program 2 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000c40)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1m0.345423282s ago: executing program 7 (id=921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x155081) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, 0x0) mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f00000003c0), &(0x7f0000000400)=""/86}, 0x20) openat(0xffffffffffffffff, 0x0, 0x101800, 0x2) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000002500)=@assoc_value, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 58.031896537s ago: executing program 2 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002a00)=ANY=[@ANYBLOB], 0x374}}, 0x0) 57.838464422s ago: executing program 7 (id=923): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000480)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) 57.501101416s ago: executing program 2 (id=924): syz_io_uring_setup(0xd3a, &(0x7f00000002c0)={0x0, 0x2, 0x3010, 0x3, 0xe3}, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x840, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000380)={0x1f}, 0x0, 0x0) 56.47172203s ago: executing program 7 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000340)='net/packet\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000780)='./file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) rename(&(0x7f0000002800)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0xfffff6d3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x24, 0x8, 0x0, 0x0, 0xb001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe966}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) 55.212686223s ago: executing program 7 (id=927): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000540)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r1, &(0x7f0000000880)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='4420', 0x4) symlinkat(&(0x7f0000000ac0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 55.057086833s ago: executing program 2 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000002a00)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f000001ba00)=0x40003) r5 = openat$dir(0xffffffffffffff9c, &(0x7f000001ba40)='./file0\x00', 0x1c0, 0x110) mknodat$null(r5, &(0x7f000001ba80)='./file0\x00', 0x1d4e, 0x103) ptrace$peek(0x4, r1, &(0x7f000001bac0)) bpf$MAP_CREATE(0x0, &(0x7f000001bb00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040010) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r8, @ANYBLOB="140004006e69637666300000000000000000000008000500060000001400178004"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) listen(r6, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001bb40)={0x10, 0x4, &(0x7f000001bc00)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f000001bc40)='GPL\x00', 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f000001bc80)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f000001bd00)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 53.535176126s ago: executing program 2 (id=929): openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0xd02) acct(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x814c18, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="6aa72cbeb2006781eb3567179d2c26ed8e5689107b00732d5706fd350202638c8722dcbdba3055e5a68dd8f5b179f702a0603da13b40bd2499a35e00356b244e8b5880165e76b5d10cc9403d12761b0a6fbc7a1a0f54d0ad0be23fc53b80ba3eb2bd4ca83f94974ecc351e2db97444040a198176b5cb", @ANYRESHEX], 0x63, 0x7ea, &(0x7f0000000940)="$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") r2 = open(&(0x7f0000001140)='./file1\x00', 0x1cd142, 0x4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001180)={0x0, 0xfb7e, 0x800, 0x2, 0x3cf}, &(0x7f0000001200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x0, 0x1, 0x3de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x20, 0xfffffffe, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdad8, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x40003, 0x289}}], 0x4, &(0x7f0000001480)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='rdma.current\x00', 0x26e1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x80400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000007c0)={0xc}) 53.106804447s ago: executing program 7 (id=930): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002400048013000100050000000000000074e9e6676e6b00000c0007800800040001000100"], 0x38}}, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='1', 0x1) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) 49.356135894s ago: executing program 7 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000c40)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 38.402875014s ago: executing program 35 (id=929): openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0xd02) acct(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x814c18, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="6aa72cbeb2006781eb3567179d2c26ed8e5689107b00732d5706fd350202638c8722dcbdba3055e5a68dd8f5b179f702a0603da13b40bd2499a35e00356b244e8b5880165e76b5d10cc9403d12761b0a6fbc7a1a0f54d0ad0be23fc53b80ba3eb2bd4ca83f94974ecc351e2db97444040a198176b5cb", @ANYRESHEX], 0x63, 0x7ea, &(0x7f0000000940)="$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") r2 = open(&(0x7f0000001140)='./file1\x00', 0x1cd142, 0x4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001180)={0x0, 0xfb7e, 0x800, 0x2, 0x3cf}, &(0x7f0000001200)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x0, 0x1, 0x3de}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x20, 0xfffffffe, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdad8, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x40003, 0x289}}], 0x4, &(0x7f0000001480)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001500)='rdma.current\x00', 0x26e1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x80400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000007c0)={0xc}) 34.06562961s ago: executing program 36 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000c40)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 18.674189133s ago: executing program 3 (id=988): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000003c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", 0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000400)={0x5, "154897bf2950225203d11c9c47d03ac2b0accda95f410ae2b6cc28c2cd0e3db2"}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x0, 0x2e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000580)={0x800000, 0x80, 0x4f, 0x408, 0x3, 0x5}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netfilter\x00') getdents(r7, 0xffffffffffffffff, 0x7a) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000640)=[{&(0x7f0000001480)=""/4080, 0x1044}], 0x1, 0x1, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000002480)) bpf$MAP_CREATE(0x0, &(0x7f0000002500)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 18.671942783s ago: executing program 6 (id=989): socket$packet(0x11, 0x2, 0x300) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000a00)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000a40)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000a80)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3ff}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0), 0x5, 0x50c, &(0x7f0000000340)="$eJzs3U9sG1kZAPDPdpJN2izdXRDaXSS20iKVP2qcP0KbABLiBBwqISpxAamExA0lTh3FTmmiSqRw64EDAoGEOHDnwpULPVFVQpxBXDmhVlCCVFCRBnnsSZ3ETlya2Gzm95Ncz/i5/t5z8r08v3njCSC3Ljb/KURMRsQfIuJCa3f/Ey627naf3Flq3gqRJFf/Vkif19zPnpr9v/MRsRMR4xHx1S9GfKtwOG59a3t1sVqtbLT3y4219XJ9a/vyjbXFlcpK5ebM/HsLC/PTc7MLJ9bWez/8zr0rv/ny2K+e/uDRgx/97rfNak22yzrbcZJaTR+N1zseG4mIz51GsCEotdszMeyK8D9p/vw+GBHvpvl/IUrpT7M/z061ZsBpS5Ik+U/ySq/inQQ4s4rpGLhQnIqI1naxODXVGsN/KM4Vq7V641PXa5s3l1tj5dditHj9RrUy3f6s8FqMFpr7M+n28/3ZA/tzEekY+MeliXR/aqlWXR5sVwcccP5A/v+z1Mp/ICf6/8gPnDXyH/JL/kN+yX/IL/kP+SX/Ib/kP+SX/If8kv+QX535n53I9eqQ6gIM1lF//8cGWA9goL5y5UrzlmTnvy/f2tpcrd26vFypr06tbS5NLdU21qdWarWV9JydteNer1qrrc98OjZvlxuVeqNc39q+tlbbvNm4lp7Xf60yOpBWAf14/Z37fypExM5nJtJbdPzJl6twtiVJIYZ9DjIwHKVhd0DA0Dj0B/n1Ap/xe35JGPD+1uUreveMn+9Z9PlYP/aVdn/9EvUCTk/xqMJnDwdXEWDgLr3l+B/klfl/yC/z/5Bfx4zxDQ8gB46a/4/2tfy6OjT/38PTF6sPcPqOnP8HzrTJLtf/SpLke692XLtrOiI+EBF/LI2+kl3rCzgLin8ttMf/ly58bPJg6VjhX+kcwFhEfPfnV396e7HR2JhpPv73vccbP2s/PjuM+gO97Z/hy/I0y2MAIL92n9xZym6DjPv4C61FCIfjj7TnJsfTEcy53cK+tQqFE1q7sHM3It7sFr/Qvt5568jHud3SofhvtO8LrZdI6zuSXjd9MPHf6oj/0Y74b7/0uwL5cL/Z/0x3y79imtOxl3/7+5/JE1ofnfV/2ZrrzvhZ/1fq0f+902eMb//i+90O76aLvR/fjXi7a/+bxRtPYx2M36zbpT7jP/rG1z7cqyz5Zet1usXPNLfKjbX1cn1r+/KNrBbz7y0szE/PzS6U0znqcjZTfdhn3/z9g17xm+1v69H+Px9q/0S7Tp/os/3//sjDr188Iv7H3+3++/dGen/g/U+SvTp8ss/4/5j9yzd7lTXjL/d4/4vd4kdWGjHXZ/z6T77k3GEA+D9S39peXaxWKxtdNkZ7F9mwYWPQGyMxwKDH9Rw7g+mggFPzPOmHXRMAAAAAAAAAAACgX71W/94/weXEw24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8N8AAAD//6rz1eo=") syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f0000000900)) unlinkat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) userfaultfd(0x80800) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20065054, &(0x7f0000000300)={0x11, 0x4, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) 16.922482303s ago: executing program 6 (id=991): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x3, &(0x7f0000000340)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) syz_mount_image$ocfs2(&(0x7f0000000180), &(0x7f0000000800)='./file1\x00', 0x8c8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005280)='./file1\x00', 0xc4042, 0x17f) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000052c0), 0x48840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000001b840)='./file1\x00', 0xc4842, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f000001b880), 0x6200, 0x0) sendfile(r2, r3, 0x0, 0x18ad414) symlink(&(0x7f000001b8c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f000001ba00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f000001bbc0)='./file1\x00', 0x1) sendfile(r0, r1, 0x0, 0x20fffe82) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20fffe82) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 14.975884334s ago: executing program 8 (id=993): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000002a00)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f000001ba00)=0x40003) r5 = openat$dir(0xffffffffffffff9c, &(0x7f000001ba40)='./file0\x00', 0x1c0, 0x110) mknodat$null(r5, &(0x7f000001ba80)='./file0\x00', 0x1d4e, 0x103) ptrace$peek(0x4, r1, &(0x7f000001bac0)) bpf$MAP_CREATE(0x0, &(0x7f000001bb00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001"], 0xdc}}, 0x4040010) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32, @ANYBLOB="140004006e69637666300000000000000000000008000500060000001400178004"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) listen(r6, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001bb40)={0x10, 0x4, &(0x7f000001bc00)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f000001bc40)='GPL\x00', 0x1}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f000001bc80)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f000001bd00)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12.717490678s ago: executing program 8 (id=995): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000040)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000400)="29000000010001", 0x7) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x90) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000054efc1535a7d70eb0000000000000000711201000000000195000000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000380)="8907040400", 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000500)={'veth0_vlan', 0x32, 0x34}, 0xd) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000640)={0x84, @loopback, 0x4e22, 0x3, 'lblcr\x00', 0x34, 0x80001, 0x70}, 0x2c) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000980)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 12.236085203s ago: executing program 6 (id=996): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000007600), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000076c0)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000007740)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000007780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000077c0)='3', 0x4e) writev(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c000180050001000300000006000400"], 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007880)={&(0x7f00000078c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800b000100736f636b657400001c000280080002400000000c0800014000000089"], 0xcc}}, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x1000) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000002000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@rescan_uuid_tree}, {@compress}, {@discard}]}, 0xfc, 0x55a6, &(0x7f0000002040)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000500)='GPL\x00', 0xc}, 0x94) r5 = syz_usb_connect(0x3, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000019c0)={0x1, &(0x7f0000001e00)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0xc0105702, 0x0) 11.417911481s ago: executing program 1 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)=""/96, 0x60}, {&(0x7f0000000d00)=""/4102, 0x1006}, {&(0x7f0000001d40)=""/195, 0xc3}, {&(0x7f0000001e40)=""/162, 0xa2}, {&(0x7f0000001f00)=""/4093, 0xffd}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/20, 0x14}, {0x0}], 0x8}, 0x7}], 0x1, 0x0, 0x0) 10.446722385s ago: executing program 3 (id=998): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dd4603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa89f69c47a63133708cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa84fcd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfde5f05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c96d64539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de1594b75e5371a81c2c32d0c4a028a5aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4d0948a6e219b5769480e6d0a9bf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a0104", 0x273}, {&(0x7f0000000a00)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188902c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d", 0xe9}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 10.104170439s ago: executing program 8 (id=999): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x155081) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, 0x0) mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) openat(0xffffffffffffffff, 0x0, 0x101800, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f00007b3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001500)=""/4096, 0x1000}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000002500)=@assoc_value, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9.738091691s ago: executing program 1 (id=1000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYRESHEX], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2712, 0x0, &(0x7f0000000000)) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000dc0)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f40)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x68}}, 0x4000080) bind$rds(r6, &(0x7f0000000e00)={0x2, 0x4e23, @local}, 0x10) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2713, &(0x7f0000000ec0)=""/1, &(0x7f0000000f00)=0x1) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000808, &(0x7f0000000280)=ANY=[@ANYBLOB='nls=euc-jp,part=0x000000000000000000000000001,part=0x0000000000000105,\x00'/84], 0x21, 0x5f9, &(0x7f0000000640)="$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") r9 = open(&(0x7f0000000c80)='.\x00', 0x20000, 0x0) getdents64(r9, &(0x7f0000000cc0)=""/224, 0xe0) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000140)=0x4, 0xfffffe5c) 9.711713643s ago: executing program 3 (id=1001): socket$packet(0x11, 0x2, 0x300) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000a00)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000a40)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000a80)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3ff}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0), 0x5, 0x50c, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f0000000900)) unlinkat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) userfaultfd(0x80800) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20065054, &(0x7f0000000300)={0x11, 0x4, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) 8.103259595s ago: executing program 1 (id=1002): mount(0x0, 0x0, 0x0, 0x4000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007880)={&(0x7f00000078c0)=ANY=[@ANYBLOB], 0xcc}}, 0x0) 7.815715369s ago: executing program 3 (id=1003): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x155081) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, 0x0) mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24004045) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) openat(0xffffffffffffffff, 0x0, 0x101800, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f00007b3000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001500)=""/4096, 0x1000}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000002500)=@assoc_value, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7.811244545s ago: executing program 8 (id=1004): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0xd02) acct(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x814c18, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="6aa72cbeb2006781eb3567179d2c26ed8e5689107b00732d5706fd350202638c8722dcbdba3055e5a68dd8f5b179f702a0603da13b40bd2499a35e00356b244e8b5880165e76b5d10cc9403d12761b0a6fbc7a1a0f54d0ad0be23fc53b80ba3eb2bd4ca83f94974ecc351e2db97444040a198176b5cb", @ANYRESHEX], 0x63, 0x7ea, &(0x7f0000000940)="$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") open(&(0x7f0000001140)='./file1\x00', 0x1cd142, 0x4) 7.30880402s ago: executing program 1 (id=1005): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}, @func={0x4, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0]}}, &(0x7f0000000440)=""/257, 0x39, 0x101, 0x6}, 0x28) 6.790907898s ago: executing program 8 (id=1006): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000340)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x5}]}, 0x0, 0x5, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) syz_mount_image$ocfs2(&(0x7f0000000180), &(0x7f0000000800)='./file1\x00', 0x8c8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000000e00)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000005280)='./file1\x00', 0xc4042, 0x17f) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000052c0), 0x48840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000001b840)='./file1\x00', 0xc4842, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f000001b880), 0x6200, 0x0) sendfile(r2, r3, 0x0, 0x18ad414) symlink(&(0x7f000001b8c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f000001ba00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f000001bbc0)='./file1\x00', 0x1) sendfile(r0, r1, 0x0, 0x20fffe82) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20fffe82) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 6.758554927s ago: executing program 1 (id=1007): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040), 0x0) setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 5.710854325s ago: executing program 3 (id=1008): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x0, 0x0, 0xc0880df76954da74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000300)=0x1) 4.961186608s ago: executing program 1 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x3f2ad, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x40, 0x4}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c5}, 0x48880) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000019ac0)={0x28, 0x0, 0x0, @host}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000002c0)={0x6, 0x8001, 0x9, 0xe, 0x2, "10e155e100008000"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000003c0)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000480), 0x1a3200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="000000e9000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_usb_connect$cdc_ecm(0x4, 0x78, &(0x7f0000019900)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x0, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "64df8334"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x100, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @country_functional={0xc, 0x24, 0x7, 0xf8, 0x10, [0xd18, 0xfff8, 0x2]}, @ncm={0x6, 0x24, 0x1a, 0xfffc, 0x24}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xa9, 0xe0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x9, 0x62}}}}}]}}]}}, &(0x7f0000019a80)={0xa, &(0x7f0000019980)={0xa, 0x6, 0x110, 0xa3, 0x6, 0x2, 0xff, 0x3}, 0x3c, &(0x7f00000199c0)=ANY=[@ANYBLOB="050f3c00050710020cc706001410030090fc541e219469329d3bce2b838c72c10b100102010000060800090a10030201001007060007100210e2ff0f"], 0x1, [{0x0, 0x0}]}) 4.613575048s ago: executing program 6 (id=1010): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x40, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f00000003c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x1cb) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000001540)='sysfs\x00', 0x1214040, 0x0) inotify_init1(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001740)='fdinfo/3\x00') pread64(r3, &(0x7f0000001780)=""/210, 0xd2, 0x57) syz_open_dev$sndmidi(&(0x7f0000001400), 0x9, 0x6000) write$binfmt_script(r2, &(0x7f0000001440), 0xfea7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000014c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001540), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x6) copy_file_range(r2, &(0x7f0000001600), 0xffffffffffffffff, 0x0, 0xa003e458, 0x700000000000000) ftruncate(0xffffffffffffffff, 0xc) 2.076756883s ago: executing program 3 (id=1011): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.076315116s ago: executing program 6 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYRESHEX], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000540), 0x651, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2712, 0x0, &(0x7f0000000000)) recvmmsg(r3, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000dc0)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f40)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff7}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x68}}, 0x4000080) bind$rds(r6, &(0x7f0000000e00)={0x2, 0x4e23, @local}, 0x10) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2713, &(0x7f0000000ec0)=""/1, &(0x7f0000000f00)=0x1) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000808, &(0x7f0000000280)=ANY=[@ANYBLOB='nls=euc-jp,part=0x000000000000000000000000001,part=0x0000000000000105,\x00'/84], 0x21, 0x5f9, &(0x7f0000000640)="$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") r9 = open(&(0x7f0000000c80)='.\x00', 0x20000, 0x0) getdents64(r9, &(0x7f0000000cc0)=""/224, 0xe0) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000140)=0x4, 0xfffffe5c) 1.934660887s ago: executing program 8 (id=1013): socket$packet(0x11, 0x2, 0x300) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000a00)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000a40)={0xc, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000a80)={0x28, 0x2, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3ff}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0), 0x5, 0x50c, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000880), &(0x7f00000008c0)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f0000000900)) unlinkat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) userfaultfd(0x80800) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20065054, &(0x7f0000000300)={0x11, 0x4, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) 0s ago: executing program 6 (id=1014): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000080)={0x20, 0x6, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) writev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)="2abc", 0x2}], 0x2) kernel console output (not intermixed with test programs): rintk_skb: 2 callbacks suppressed [ 247.819847][ T30] audit: type=1800 audit(1792524568.375:289): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.466" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 247.820907][ T30] audit: type=1800 audit(1792524568.375:290): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.466" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 248.590794][ T5765] lo speed is unknown, defaulting to 1000 [ 248.595753][ T5765] sz1: Port: 1 Link ACTIVE [ 248.711604][ T7579] loop0: detected capacity change from 0 to 2048 [ 248.909034][ T7579] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 248.909545][ T7579] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 248.909579][ T7579] UDF-fs: Scanning with blocksize 512 failed [ 249.008476][ T7579] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 249.008502][ T7579] UDF-fs: Scanning with blocksize 1024 failed [ 249.116958][ T5735] lo speed is unknown, defaulting to 1000 [ 249.121799][ T7579] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 249.121828][ T7579] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 249.121845][ T7579] UDF-fs: Scanning with blocksize 2048 failed [ 249.182900][ T5625] ocfs2: Unmounting device (7,2) on (node local) [ 249.232443][ T7579] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 249.250519][ T7579] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 249.250548][ T7579] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 249.250564][ T7579] UDF-fs: Scanning with blocksize 4096 failed [ 249.250577][ T7579] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 249.289126][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.720934][ T7594] netlink: 64 bytes leftover after parsing attributes in process `syz.0.472'. [ 249.725314][ T7594] netlink: 64 bytes leftover after parsing attributes in process `syz.0.472'. [ 249.795543][ T7588] 9p: Could not find request transport: [ 250.056341][ T7596] loop0: detected capacity change from 0 to 512 [ 250.074332][ T7596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 250.171959][ T7596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.178116][ T7596] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.575123][ T7586] loop4: detected capacity change from 0 to 131072 [ 250.860647][ T7586] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 250.892009][ T7586] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.186304][ T7631] binder: 7630:7631 ioctl c0306201 0 returned -14 [ 252.267986][ T7627] loop2: detected capacity change from 0 to 32768 [ 253.443552][ T7627] JBD2: Ignoring recovery information on journal [ 253.692525][ T7627] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 253.794324][ T30] audit: type=1800 audit(1792524574.345:291): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.480" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 255.048722][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.048788][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.198749][ T5625] ocfs2: Unmounting device (7,2) on (node local) [ 255.328364][ T7658] 9p: Could not find request transport: [ 258.663667][ T30] audit: type=1326 audit(1792524579.215:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.692003][ T30] audit: type=1326 audit(1792524579.245:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.750407][ T30] audit: type=1326 audit(1792524579.305:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.750545][ T30] audit: type=1326 audit(1792524579.305:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.766497][ T7685] loop2: detected capacity change from 0 to 2048 [ 258.779936][ T30] audit: type=1326 audit(1792524579.325:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.779990][ T30] audit: type=1326 audit(1792524579.325:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.780043][ T30] audit: type=1326 audit(1792524579.335:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.780102][ T30] audit: type=1326 audit(1792524579.335:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.784599][ T30] audit: type=1326 audit(1792524579.335:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.818319][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 258.818336][ T30] audit: type=1326 audit(1792524579.365:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.818391][ T30] audit: type=1326 audit(1792524579.365:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.834333][ T30] audit: type=1326 audit(1792524579.385:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.847127][ T30] audit: type=1326 audit(1792524579.405:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.847184][ T30] audit: type=1326 audit(1792524579.405:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.852748][ T30] audit: type=1326 audit(1792524579.405:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 258.852805][ T30] audit: type=1326 audit(1792524579.405:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.495" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f536bf9f559 code=0x7ffc0000 [ 259.112451][ T7685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.336998][ T7696] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 259.390137][ T7696] EXT4-fs (loop2): Remounting filesystem read-only [ 260.242657][ T30] audit: type=1800 audit(1792524580.445:310): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.488" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 260.398478][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.897568][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.503'. [ 260.900024][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.940132][ T7714] bond0: (slave bond_slave_0): Releasing backup interface [ 262.467236][ T7721] 9p: Could not find request transport: [ 262.485224][ T7714] bond_slave_0: entered promiscuous mode [ 262.485251][ T7714] bond_slave_0: entered allmulticast mode [ 262.772373][ T7731] loop2: detected capacity change from 0 to 512 [ 262.825829][ T7731] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 262.848934][ T7731] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 262.848965][ T7731] loop2: lost filesystem error report for type 5 error -12 [ 262.854496][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 262.854520][ C0] EXT4-fs (loop2): initial error at time 1792524583: ext4_process_orphan:346 [ 262.854548][ C0] EXT4-fs (loop2): last error at time 1792524583: ext4_process_orphan:346 [ 262.873017][ T7731] EXT4-fs (loop2): 1 truncate cleaned up [ 262.909544][ T7731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.110821][ T7741] loop4: detected capacity change from 0 to 512 [ 263.297283][ T7739] loop1: detected capacity change from 0 to 32768 [ 263.437206][ T7739] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 263.437233][ T7739] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 263.500904][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.507'. [ 263.505206][ T7751] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.507: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 264.292233][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 264.342196][ T7739] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 264.365108][ T5735] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 264.365132][ T5735] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 264.514385][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 264.542190][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 264.554612][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.556884][ T7741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.557019][ T7741] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.633849][ T7745] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 264.633897][ T7745] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 264.633948][ T7745] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 264.649181][ T7753] smc: removing ib device rxe0 [ 264.788397][ T5735] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 423ms [ 264.788702][ T5735] gfs2: fsid=syz:syz.0: jid=0: Done [ 264.788752][ T7739] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 264.871220][ T7745] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 264.982448][ T7745] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 265.344184][ T7753] smbdirect: ib_dev[rxe0] removed [ 265.349399][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.361604][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 265.400140][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 265.429248][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 265.440361][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 265.479704][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 265.502020][ T7745] dummy0 speed is unknown, defaulting to 1000 [ 266.899798][ T7791] lo: entered promiscuous mode [ 266.900112][ T7791] tunl0: entered promiscuous mode [ 266.919187][ T7791] gre0: entered promiscuous mode [ 266.960037][ T7788] loop6: detected capacity change from 0 to 2048 [ 267.012366][ T7788] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 267.016657][ T7788] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 267.016698][ T7788] UDF-fs: Scanning with blocksize 512 failed [ 267.067172][ T7791] gretap0: entered promiscuous mode [ 267.081681][ T7788] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 267.081705][ T7788] UDF-fs: Scanning with blocksize 1024 failed [ 267.141946][ T7791] erspan0: entered promiscuous mode [ 267.159625][ T7792] 9p: Could not find request transport: [ 267.171576][ T7791] ip_vti0: entered promiscuous mode [ 267.172358][ T7788] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 267.172384][ T7788] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 267.172400][ T7788] UDF-fs: Scanning with blocksize 2048 failed [ 267.191303][ T7788] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 267.199536][ T7791] ip6_vti0: entered promiscuous mode [ 267.215197][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.230315][ T7788] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 267.230343][ T7788] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 267.230358][ T7788] UDF-fs: Scanning with blocksize 4096 failed [ 267.230371][ T7788] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 267.268724][ T7791] sit0: entered promiscuous mode [ 267.280929][ T7791] ip6tnl0: entered promiscuous mode [ 267.284258][ T7791] ip6gre0: entered promiscuous mode [ 267.333241][ T7791] syz_tun: entered promiscuous mode [ 267.365816][ T7791] ip6gretap0: entered promiscuous mode [ 267.374566][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.375720][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.399532][ T7791] bridge0: entered promiscuous mode [ 267.404245][ T7791] vcan0: entered promiscuous mode [ 267.439995][ T7791] bond0: entered promiscuous mode [ 267.440027][ T7791] bond_slave_0: entered promiscuous mode [ 267.440257][ T7791] bond_slave_1: entered promiscuous mode [ 267.466226][ T7791] team0: entered promiscuous mode [ 267.466272][ T7791] team_slave_0: entered promiscuous mode [ 267.466510][ T7791] team_slave_1: entered promiscuous mode [ 267.501827][ T7791] dummy0: entered promiscuous mode [ 267.534761][ T7791] nlmon0: entered promiscuous mode [ 267.572940][ T7791] batadv0: entered promiscuous mode [ 267.596054][ T7791] vxcan0: entered promiscuous mode [ 267.597130][ T7791] vxcan1: entered promiscuous mode [ 267.598212][ T7791] veth0: entered promiscuous mode [ 267.601038][ T7791] veth1: entered promiscuous mode [ 267.656259][ T7791] wg0: entered promiscuous mode [ 267.675958][ T7791] wg1: entered promiscuous mode [ 267.700037][ T7791] wg2: entered promiscuous mode [ 267.718517][ T7791] veth0_to_bridge: entered promiscuous mode [ 267.780825][ T7791] veth1_to_bridge: entered promiscuous mode [ 267.830069][ T7791] veth0_to_bond: entered promiscuous mode [ 267.833699][ T7791] veth1_to_bond: entered promiscuous mode [ 267.869486][ T7791] veth0_to_team: entered promiscuous mode [ 267.920194][ T7791] veth1_to_team: entered promiscuous mode [ 267.932064][ T7791] veth0_to_batadv: entered promiscuous mode [ 267.941094][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.941153][ T7791] batadv_slave_0: entered promiscuous mode [ 267.944082][ T7791] veth1_to_batadv: entered promiscuous mode [ 267.968802][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.968867][ T7791] batadv_slave_1: entered promiscuous mode [ 267.971740][ T7791] xfrm0: entered promiscuous mode [ 267.995114][ T7791] veth0_to_hsr: entered promiscuous mode [ 268.000497][ T7791] veth1_to_hsr: entered promiscuous mode [ 268.020753][ T7791] hsr0: entered promiscuous mode [ 268.023671][ T7791] veth1_virt_wifi: entered promiscuous mode [ 268.046119][ T7791] veth0_virt_wifi: entered promiscuous mode [ 268.051014][ T7791] virt_wifi0: entered promiscuous mode [ 268.077763][ T7791] vlan0: entered promiscuous mode [ 268.100385][ T7791] vlan1: entered promiscuous mode [ 268.122369][ T7791] macvlan0: entered promiscuous mode [ 268.143805][ T7791] macvlan1: entered promiscuous mode [ 268.155069][ T7791] ipvlan0: entered promiscuous mode [ 268.161620][ T7791] ipvlan1: entered promiscuous mode [ 268.230877][ T7791] macvtap0: entered promiscuous mode [ 268.238323][ T7791] macsec0: entered promiscuous mode [ 268.252670][ T7791] geneve0: entered promiscuous mode [ 268.270445][ T7791] geneve1: entered promiscuous mode [ 268.295351][ T7791] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 268.330882][ T7791] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 268.344324][ T7791] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 268.358226][ T7791] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 268.483875][ T7791] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 268.555899][ T7791] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 268.578314][ T3358] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.586833][ T3278] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.586895][ T3278] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.586940][ T3278] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.865781][ T30] audit: type=1326 audit(1792524589.425:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 268.865847][ T30] audit: type=1326 audit(1792524589.425:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 268.910815][ T7814] binder: 7812:7814 ioctl c0306201 0 returned -14 [ 269.111197][ T30] audit: type=1326 audit(1792524589.485:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 269.111513][ T30] audit: type=1326 audit(1792524589.665:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 269.111752][ T30] audit: type=1326 audit(1792524589.665:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 269.112008][ T30] audit: type=1326 audit(1792524589.665:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 269.112499][ T30] audit: type=1326 audit(1792524589.665:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 269.112888][ T30] audit: type=1326 audit(1792524589.665:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 269.113127][ T30] audit: type=1326 audit(1792524589.665:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 269.113400][ T30] audit: type=1326 audit(1792524589.665:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.6.525" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542c99f559 code=0x7ffc0000 [ 270.466403][ T7833] loop3: detected capacity change from 0 to 512 [ 270.687324][ T7833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.687448][ T7833] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.790095][ T7848] lo: left promiscuous mode [ 270.812518][ T7848] tunl0: left promiscuous mode [ 270.843754][ T7848] gre0: left promiscuous mode [ 270.915659][ T7848] gretap0: left promiscuous mode [ 270.927489][ T7848] erspan0: left promiscuous mode [ 270.957827][ T7848] ip_vti0: left promiscuous mode [ 270.971358][ T7848] ip6_vti0: left promiscuous mode [ 270.974857][ T7843] loop2: detected capacity change from 0 to 2048 [ 271.001265][ T7848] sit0: left promiscuous mode [ 271.009786][ T7843] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 271.011403][ T7843] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 271.011444][ T7843] UDF-fs: Scanning with blocksize 512 failed [ 271.050137][ T7848] ip6tnl0: left promiscuous mode [ 271.052005][ T7848] ip6gre0: left promiscuous mode [ 271.053744][ T7848] syz_tun: left promiscuous mode [ 271.071401][ T7848] ip6gretap0: left promiscuous mode [ 271.073916][ T7848] bridge0: left promiscuous mode [ 271.086608][ T7848] vcan0: left promiscuous mode [ 271.089426][ T7848] bond0: left promiscuous mode [ 271.091331][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.092352][ T7848] team0: left promiscuous mode [ 271.093535][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.105795][ T7843] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 271.105821][ T7843] UDF-fs: Scanning with blocksize 1024 failed [ 271.147343][ T7848] dummy0: left promiscuous mode [ 271.150003][ T7848] nlmon0: left promiscuous mode [ 271.151255][ T7848] batadv0: left promiscuous mode [ 271.152820][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.153616][ T7848] vxcan0: left promiscuous mode [ 271.159926][ T7848] vxcan1: left promiscuous mode [ 271.192322][ T7848] veth0: left promiscuous mode [ 271.193792][ T7848] veth1: left promiscuous mode [ 271.207617][ T7843] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 271.207650][ T7843] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 271.207667][ T7843] UDF-fs: Scanning with blocksize 2048 failed [ 271.209711][ T7843] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 271.210911][ T7843] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 271.210937][ T7843] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 271.210953][ T7843] UDF-fs: Scanning with blocksize 4096 failed [ 271.210966][ T7843] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 271.224102][ T7844] 9p: Could not find request transport: [ 271.224710][ T7848] wg0: left promiscuous mode [ 271.316794][ T7848] wg1: left promiscuous mode [ 271.341764][ T7848] wg2: left promiscuous mode [ 271.354876][ T7848] veth0_to_bridge: left promiscuous mode [ 271.357458][ T7848] veth1_to_bridge: left promiscuous mode [ 271.360776][ T7848] veth0_to_bond: left promiscuous mode [ 271.361898][ T7848] bond_slave_0: left promiscuous mode [ 271.362915][ T7848] veth1_to_bond: left promiscuous mode [ 271.364074][ T7848] bond_slave_1: left promiscuous mode [ 271.386051][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.431547][ T7848] veth0_to_team: left promiscuous mode [ 271.443777][ T7848] team_slave_0: left promiscuous mode [ 271.467633][ T7848] veth1_to_team: left promiscuous mode [ 271.478297][ T7848] team_slave_1: left promiscuous mode [ 271.489908][ T7848] veth0_to_batadv: left promiscuous mode [ 271.514689][ T7848] batadv_slave_0: left promiscuous mode [ 271.515545][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.529457][ T7848] veth1_to_batadv: left promiscuous mode [ 271.544079][ T7848] batadv_slave_1: left promiscuous mode [ 271.564073][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.570149][ T7848] xfrm0: left promiscuous mode [ 271.965126][ T7854] loop1: detected capacity change from 0 to 32768 [ 271.973683][ T7848] veth0_to_hsr: left promiscuous mode [ 271.976096][ T7854] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 271.976116][ T7854] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 271.985546][ T7848] veth1_to_hsr: left promiscuous mode [ 271.989075][ T7848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.989101][ T7848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.989160][ T7848] hsr0: left promiscuous mode [ 271.992222][ T7848] veth1_virt_wifi: left promiscuous mode [ 271.995055][ T7848] veth0_virt_wifi: left promiscuous mode [ 271.997814][ T7848] virt_wifi0: left promiscuous mode [ 272.000717][ T7848] veth1_vlan: left promiscuous mode [ 272.024677][ T7848] vlan0: left promiscuous mode [ 272.027863][ T7848] vlan1: left promiscuous mode [ 272.030328][ T7848] veth1_vlan: entered promiscuous mode [ 272.030574][ T7848] macvlan0: left promiscuous mode [ 272.041155][ T7848] macvlan1: left promiscuous mode [ 272.053788][ T7848] ipvlan0: left promiscuous mode [ 272.067226][ T7848] ipvlan1: left promiscuous mode [ 272.076278][ T7848] veth1_macvtap: left promiscuous mode [ 272.118404][ T7848] veth0_macvtap: left promiscuous mode [ 272.130901][ T7854] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 272.133290][ T5924] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 272.133309][ T5924] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 272.140341][ T7848] veth0_macvtap: entered promiscuous mode [ 272.140576][ T7848] macvtap0: left promiscuous mode [ 272.149141][ T7848] veth1_macvtap: entered promiscuous mode [ 272.149451][ T7848] macsec0: left promiscuous mode [ 272.188335][ T7848] geneve0: left promiscuous mode [ 272.206873][ T7848] geneve1: left promiscuous mode [ 272.234919][ T7848] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 272.235359][ T7848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.244268][ T7848] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 272.258626][ T7848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.260228][ T7848] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 272.268941][ T7848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.272897][ T7848] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 272.280777][ T7848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.288141][ T7848] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 272.296833][ T7848] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 272.326934][ T6116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.327399][ T6116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.328694][ T3358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.379937][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.380092][ T3253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.411439][ T3253] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.411555][ T3253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.755681][ T3358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.768416][ T5924] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 635ms [ 272.768624][ T5924] gfs2: fsid=syz:syz.0: jid=0: Done [ 272.768669][ T7854] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 273.197802][ T7878] loop6: detected capacity change from 0 to 512 [ 273.250421][ T7878] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 273.253665][ T7878] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 273.253693][ T7878] loop6: lost filesystem error report for type 5 error -12 [ 273.254504][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 273.254526][ C0] EXT4-fs (loop6): initial error at time 1792524593: ext4_process_orphan:346 [ 273.254554][ C0] EXT4-fs (loop6): last error at time 1792524593: ext4_process_orphan:346 [ 273.313666][ T7878] EXT4-fs (loop6): 1 truncate cleaned up [ 273.418874][ T7878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.658589][ T7884] binder: 7883:7884 ioctl c0306201 0 returned -14 [ 273.785230][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.6.540'. [ 273.786279][ T7878] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.540: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 274.049107][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.557339][ T7897] loop2: detected capacity change from 0 to 32768 [ 274.624105][ T7897] JBD2: Ignoring recovery information on journal [ 274.698511][ T7897] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 274.741568][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 274.741592][ T30] audit: type=1800 audit(1792524595.295:330): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.544" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 275.141507][ T7915] loop4: detected capacity change from 0 to 512 [ 275.267686][ T7915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.269694][ T7915] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.513662][ T5625] ocfs2: Unmounting device (7,2) on (node local) [ 275.836951][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.265381][ T7938] loop2: detected capacity change from 0 to 2048 [ 276.341016][ T7938] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 276.343538][ T7938] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 276.343578][ T7938] UDF-fs: Scanning with blocksize 512 failed [ 276.392329][ T7938] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 276.392357][ T7938] UDF-fs: Scanning with blocksize 1024 failed [ 276.422259][ T7938] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 276.422299][ T7938] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 276.422317][ T7938] UDF-fs: Scanning with blocksize 2048 failed [ 276.436010][ T7938] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 276.450573][ T7938] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 276.450604][ T7938] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 276.450621][ T7938] UDF-fs: Scanning with blocksize 4096 failed [ 276.450634][ T7938] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 276.639947][ T7945] loop3: detected capacity change from 0 to 512 [ 276.679704][ T7945] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 276.680214][ T7945] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 276.680240][ T7945] loop3: lost filesystem error report for type 5 error -12 [ 276.684499][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 276.684525][ C0] EXT4-fs (loop3): initial error at time 1792524597: ext4_process_orphan:346 [ 276.684552][ C0] EXT4-fs (loop3): last error at time 1792524597: ext4_process_orphan:346 [ 276.763483][ T7945] EXT4-fs (loop3): 1 truncate cleaned up [ 276.808083][ T7945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.089010][ T7957] binder: 7954:7957 ioctl c0306201 0 returned -14 [ 277.128481][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'. [ 277.130308][ T7945] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.554: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 278.086379][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.653218][ T7979] loop1: detected capacity change from 0 to 32768 [ 278.725003][ T7979] JBD2: Ignoring recovery information on journal [ 278.754857][ T7987] loop6: detected capacity change from 0 to 764 [ 278.808871][ T7979] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 278.897588][ T30] audit: type=1800 audit(1792524599.395:331): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.562" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 279.952856][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 282.042779][ T8010] loop6: detected capacity change from 0 to 2048 [ 282.054217][ T8010] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 282.060989][ T8010] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 282.061031][ T8010] UDF-fs: Scanning with blocksize 512 failed [ 282.092101][ T8010] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 282.092127][ T8010] UDF-fs: Scanning with blocksize 1024 failed [ 282.132686][ T8010] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 282.132721][ T8010] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 282.132739][ T8010] UDF-fs: Scanning with blocksize 2048 failed [ 282.171934][ T8010] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 282.187752][ T8010] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 282.187775][ T8010] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 282.187788][ T8010] UDF-fs: Scanning with blocksize 4096 failed [ 282.187798][ T8010] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 282.494060][ T8015] loop4: detected capacity change from 0 to 512 [ 282.517901][ T8015] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 282.518691][ T8015] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 282.518719][ T8015] loop4: lost filesystem error report for type 5 error -12 [ 282.520985][ T8015] EXT4-fs (loop4): 1 truncate cleaned up [ 282.538453][ T8018] binder: 8017:8018 ioctl c0306201 0 returned -14 [ 282.759342][ T8015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.518170][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.573'. [ 283.518921][ T8015] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.573: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 283.601497][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.276608][ T8037] loop6: detected capacity change from 0 to 32768 [ 284.333042][ T8037] JBD2: Ignoring recovery information on journal [ 284.374920][ T8037] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 284.396309][ T30] audit: type=1800 audit(1792524604.955:332): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.579" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 284.977473][ T7085] ocfs2: Unmounting device (7,6) on (node local) [ 304.325755][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.487474][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.487539][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.763707][ T8096] loop1: detected capacity change from 0 to 512 [ 349.767265][ T8096] EXT4-fs (loop1): invalid inodes per group: 0 [ 350.762563][ T8106] loop6: detected capacity change from 0 to 512 [ 351.440609][ T8114] loop1: detected capacity change from 0 to 1024 [ 351.441531][ T8114] ext4: Unknown parameter 'noacl' [ 351.442453][ T8106] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 351.477856][ T8106] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 351.477888][ T8106] loop6: lost filesystem error report for type 5 error -12 [ 351.479822][ T8106] EXT4-fs (loop6): 1 truncate cleaned up [ 351.481692][ T8106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.540929][ T30] audit: type=1326 audit(1792524672.095:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea899f559 code=0x7ffc0000 [ 351.541074][ T30] audit: type=1326 audit(1792524672.095:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea899f559 code=0x7ffc0000 [ 351.764708][ T30] audit: type=1326 audit(1792524672.315:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea899f559 code=0x7ffc0000 [ 351.884692][ T30] audit: type=1326 audit(1792524672.415:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdea899f559 code=0x7ffc0000 [ 351.935953][ T8115] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 351.992552][ T8115] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 352.148880][ T8124] loop1: detected capacity change from 0 to 2048 [ 352.296043][ T30] audit: type=1326 audit(1792524672.315:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea899f559 code=0x7ffc0000 [ 352.296726][ T30] audit: type=1326 audit(1792524672.855:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea899f559 code=0x7ffc0000 [ 352.297282][ T30] audit: type=1326 audit(1792524672.855:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea899f559 code=0x7ffc0000 [ 352.365803][ T30] audit: type=1326 audit(1792524672.915:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea899f559 code=0x7ffc0000 [ 352.429949][ T30] audit: type=1326 audit(1792524672.975:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdea899f2c2 code=0x7ffc0000 [ 352.432794][ T30] audit: type=1326 audit(1792524672.985:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.590" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdea899f357 code=0x7ffc0000 [ 352.433436][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.589'. [ 352.434281][ T8106] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.589: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 352.495214][ T8124] loop1: p1 p2 p3 p4 [ 352.495214][ T8124] p1: [ 352.498111][ T8124] loop1: p1 size 67110656 extends beyond EOD, truncated [ 352.542929][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.549585][ T8124] loop1: p3 size 134217728 extends beyond EOD, truncated [ 352.564879][ T8124] loop1: p4 size 4278190080 extends beyond EOD, truncated [ 352.573369][ T8124] loop1: p5 size 67110656 extends beyond EOD, truncated [ 352.609074][ T8124] loop1: p6 size 134217728 extends beyond EOD, truncated [ 352.957108][ T8134] loop6: detected capacity change from 0 to 32768 [ 352.962596][ T8140] batadv0: entered allmulticast mode [ 353.001278][ T8134] JBD2: Ignoring recovery information on journal [ 354.134556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 354.544619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 354.731545][ T8134] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 355.109889][ T8113] udevd[8113]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 355.111616][ T8157] udevd[8157]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 355.145609][ T8158] udevd[8158]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 355.205677][ T8162] loop1: detected capacity change from 0 to 2048 [ 355.232497][ T7085] ocfs2: Unmounting device (7,6) on (node local) [ 355.246171][ T8158] udevd[8158]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 355.248963][ T8157] udevd[8157]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 355.253823][ T8162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.257482][ T8113] udevd[8113]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 355.966547][ T8170] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 356.848026][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.212687][ T8158] udevd[8158]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 357.225246][ T8157] udevd[8157]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 357.318182][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 357.318205][ T30] audit: type=1326 audit(1792524677.875:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 357.318464][ T30] audit: type=1326 audit(1792524677.875:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 357.381741][ T30] audit: type=1326 audit(1792524677.935:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 357.382666][ T30] audit: type=1326 audit(1792524677.935:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 357.384132][ T30] audit: type=1326 audit(1792524677.935:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 357.903977][ T30] audit: type=1326 audit(1792524678.445:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 357.953860][ T30] audit: type=1326 audit(1792524678.495:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 358.058697][ T30] audit: type=1326 audit(1792524678.595:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 358.105221][ T30] audit: type=1326 audit(1792524678.615:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe21199f2c2 code=0x7ffc0000 [ 358.112713][ T30] audit: type=1326 audit(1792524678.665:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.3.611" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe21199f357 code=0x7ffc0000 [ 358.476607][ T8192] loop6: detected capacity change from 0 to 512 [ 358.605823][ T8192] EXT4-fs (loop6): invalid inodes per group: 0 [ 359.687409][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 361.072709][ T8204] vivid-003: kernel_thread() failed [ 361.404930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 362.512949][ T8215] loop4: detected capacity change from 0 to 32768 [ 362.523323][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 362.523342][ T30] audit: type=1326 audit(1792524683.075:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.616" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe21195fd8e code=0x7ffc0000 [ 362.581985][ T8215] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 362.582010][ T8215] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 362.627882][ T30] audit: type=1326 audit(1792524683.185:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.616" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe21195fd8e code=0x7ffc0000 [ 362.655331][ T8215] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 362.657677][ T5752] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 362.657696][ T5752] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 362.731842][ T30] audit: type=1326 audit(1792524683.285:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.616" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe21195fd8e code=0x7ffc0000 [ 362.821651][ T8220] loop6: detected capacity change from 0 to 2048 [ 362.851378][ T30] audit: type=1326 audit(1792524683.385:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8198 comm="syz.3.616" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe21199f559 code=0x7ffc0000 [ 362.869448][ T8220] loop6: p1 p2 p3 p4 [ 362.869448][ T8220] p1: [ 362.869673][ T8220] loop6: p1 size 67110656 extends beyond EOD, truncated [ 362.910351][ T8220] loop6: p3 size 134217728 extends beyond EOD, truncated [ 362.918877][ T8220] loop6: p4 size 4278190080 extends beyond EOD, truncated [ 362.930460][ T8220] loop6: p5 size 67110656 extends beyond EOD, truncated [ 362.957907][ T5752] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 300ms [ 362.958120][ T5752] gfs2: fsid=syz:syz.0: jid=0: Done [ 362.958190][ T8215] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 362.968768][ T8220] loop6: p6 size 134217728 extends beyond EOD, truncated [ 364.719363][ T8249] loop6: detected capacity change from 0 to 512 [ 364.762767][ T8249] EXT4-fs (loop6): invalid inodes per group: 0 [ 364.828631][ T8237] netlink: 'syz.2.628': attribute type 2 has an invalid length. [ 364.828665][ T8237] netlink: 'syz.2.628': attribute type 7 has an invalid length. [ 364.893349][ T8239] udevd[8239]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 364.904727][ T8232] udevd[8232]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 365.121958][ T8113] udevd[8113]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 365.123661][ T8233] udevd[8233]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 365.124303][ T8236] udevd[8236]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 365.167695][ T8158] udevd[8158]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 365.828182][ T8258] loop0: detected capacity change from 0 to 1024 [ 365.929721][ T8258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.113244][ T8263] loop6: detected capacity change from 0 to 2048 [ 366.176656][ T8263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.389822][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.393467][ T5752] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 367.600686][ T5752] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 367.601731][ T5752] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.601757][ T5752] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 367.601819][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.656563][ T5752] usb 1-1: config 0 descriptor?? [ 367.707497][ T8277] loop6: detected capacity change from 0 to 1024 [ 367.720401][ T8277] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.742014][ T8277] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.637: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 367.742231][ T8277] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 367.744917][ T8277] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.637: couldn't read orphan inode 11 (err -117) [ 367.744950][ T8277] loop6: lost filesystem error report for type 5 error -117 [ 367.760241][ T8277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.870691][ T5752] Bluetooth: Can't get state to change to load ram patch err [ 367.870712][ T5752] Bluetooth: Loading patch file failed [ 367.870741][ T5752] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 367.976341][ T8283] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 368.647825][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.592236][ T8297] loop6: detected capacity change from 0 to 512 [ 369.611584][ T8297] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 369.623402][ T8297] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 369.623428][ T8297] loop6: lost filesystem error report for type 5 error -12 [ 369.624484][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 369.624507][ C1] EXT4-fs (loop6): initial error at time 1792524690: ext4_process_orphan:346 [ 369.624535][ C1] EXT4-fs (loop6): last error at time 1792524690: ext4_process_orphan:346 [ 369.639013][ T8297] EXT4-fs (loop6): 1 truncate cleaned up [ 369.647366][ T8297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.670343][ T8302] binder: 8299:8302 ioctl c0306201 0 returned -14 [ 370.683043][ T8261] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 370.703608][ T8261] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 371.161803][ T5752] usb 1-1: USB disconnect, device number 3 [ 371.300473][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.6.641'. [ 371.302932][ T8317] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.641: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 371.405919][ T8319] netlink: 'syz.2.647': attribute type 2 has an invalid length. [ 371.405997][ T8319] netlink: 'syz.2.647': attribute type 7 has an invalid length. [ 372.169731][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.341989][ T8338] loop4: detected capacity change from 0 to 512 [ 374.377744][ T8338] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 374.377981][ T8338] EXT4-fs (loop4): orphan cleanup on readonly fs [ 374.378006][ T8338] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.657: bad orphan inode 15 [ 374.378034][ T8338] loop4: lost filesystem error report for type 5 error -117 [ 374.383073][ T8338] ext4_test_bit(bit=14, block=5) = 0 [ 374.395070][ T8338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 374.750309][ T8350] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 375.413874][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.805213][ T8355] loop1: detected capacity change from 0 to 764 [ 375.872836][ T8355] Symlink component flag not implemented [ 375.872890][ T8355] Symlink component flag not implemented [ 375.873290][ T8355] Symlink component flag not implemented (129) [ 375.873346][ T8355] Symlink component flag not implemented (6) [ 376.598658][ T8359] loop0: detected capacity change from 0 to 1024 [ 376.645502][ T8359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.992929][ T8374] loop1: detected capacity change from 0 to 2048 [ 377.000369][ T8374] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 377.000851][ T8374] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 377.000887][ T8374] UDF-fs: Scanning with blocksize 512 failed [ 377.017756][ T8374] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 377.017780][ T8374] UDF-fs: Scanning with blocksize 1024 failed [ 377.047188][ T8374] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 377.047220][ T8374] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 377.047237][ T8374] UDF-fs: Scanning with blocksize 2048 failed [ 377.053057][ T8374] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 377.064236][ T8374] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 377.064270][ T8374] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 377.064287][ T8374] UDF-fs: Scanning with blocksize 4096 failed [ 377.064300][ T8374] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 377.144954][ T5752] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 377.152352][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.306800][ T5752] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 377.312140][ T5752] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.312168][ T5752] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 377.312235][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.350633][ T5752] usb 1-1: config 0 descriptor?? [ 377.603948][ T5752] Bluetooth: Can't get state to change to load ram patch err [ 377.603966][ T5752] Bluetooth: Loading patch file failed [ 377.603990][ T5752] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 377.926772][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 377.929574][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.929679][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.514713][ T8390] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 380.350627][ T8392] netlink: 'syz.4.674': attribute type 2 has an invalid length. [ 380.350655][ T8392] netlink: 'syz.4.674': attribute type 7 has an invalid length. [ 380.469562][ T5752] usb 1-1: USB disconnect, device number 4 [ 380.581838][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.953683][ T8416] loop6: detected capacity change from 0 to 764 [ 381.025622][ T8416] Symlink component flag not implemented [ 381.025692][ T8416] Symlink component flag not implemented [ 381.025993][ T8416] Symlink component flag not implemented (129) [ 381.026051][ T8416] Symlink component flag not implemented (6) [ 381.329781][ T8417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.681'. [ 381.728688][ T8419] loop0: detected capacity change from 0 to 2048 [ 381.800440][ T8419] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 381.818863][ T8419] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 381.818901][ T8419] UDF-fs: Scanning with blocksize 512 failed [ 381.871496][ T8419] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 381.871521][ T8419] UDF-fs: Scanning with blocksize 1024 failed [ 381.936625][ T8419] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 381.936665][ T8419] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 381.936682][ T8419] UDF-fs: Scanning with blocksize 2048 failed [ 381.951535][ T8419] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 381.962562][ T8419] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 381.962590][ T8419] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 381.962606][ T8419] UDF-fs: Scanning with blocksize 4096 failed [ 381.962620][ T8419] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 382.205609][ T5925] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 382.365316][ T5925] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 382.366977][ T5925] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.367013][ T5925] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 382.367043][ T5925] usb 7-1: config 0 interface 0 has no altsetting 0 [ 382.371858][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 382.371886][ T5925] usb 7-1: Product: syz [ 382.371905][ T5925] usb 7-1: Manufacturer: syz [ 382.371923][ T5925] usb 7-1: SerialNumber: syz [ 382.452251][ T5925] usb 7-1: config 0 descriptor?? [ 383.230844][ T5925] usb 7-1: selecting invalid altsetting 0 [ 383.314360][ T5925] usb 7-1: USB disconnect, device number 2 [ 383.349568][ T8435] loop1: detected capacity change from 0 to 512 [ 383.384093][ T8435] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 383.384323][ T8435] EXT4-fs (loop1): orphan cleanup on readonly fs [ 383.384347][ T8435] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.689: bad orphan inode 15 [ 383.384372][ T8435] loop1: lost filesystem error report for type 5 error -117 [ 383.384585][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 383.384606][ C0] EXT4-fs (loop1): initial error at time 1792524703: ext4_orphan_get:1429 [ 383.384639][ C0] EXT4-fs (loop1): last error at time 1792524703: ext4_orphan_get:1429 [ 383.387659][ T8435] ext4_test_bit(bit=14, block=5) = 0 [ 383.399017][ T8435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 383.578559][ T8445] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 384.482316][ T8232] udevd[8232]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.757403][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.931951][ T8453] loop4: detected capacity change from 0 to 1024 [ 384.975203][ T8457] loop1: detected capacity change from 0 to 16 [ 384.984358][ T8453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.102871][ T8457] erofs (device loop1): mounted with root inode @ nid 36. [ 385.564301][ T5924] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 385.607266][ T8472] loop1: detected capacity change from 0 to 2048 [ 385.620095][ T8472] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 385.621397][ T8472] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 385.621433][ T8472] UDF-fs: Scanning with blocksize 512 failed [ 385.688210][ T8473] netlink: 'syz.3.699': attribute type 2 has an invalid length. [ 385.688285][ T8473] netlink: 'syz.3.699': attribute type 7 has an invalid length. [ 385.848869][ T5924] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 386.046091][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.046467][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 386.051093][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.231988][ T8472] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 386.232016][ T8472] UDF-fs: Scanning with blocksize 1024 failed [ 386.263941][ T8472] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 386.263971][ T8472] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 386.263987][ T8472] UDF-fs: Scanning with blocksize 2048 failed [ 386.295121][ T8472] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 386.298100][ T8472] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 386.298126][ T8472] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 386.298153][ T8472] UDF-fs: Scanning with blocksize 4096 failed [ 386.298166][ T8472] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 386.378705][ T5924] usb 5-1: config 0 descriptor?? [ 386.617955][ T5924] Bluetooth: Can't get state to change to load ram patch err [ 386.617977][ T5924] Bluetooth: Loading patch file failed [ 386.618006][ T5924] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 386.631357][ T8454] loop6: detected capacity change from 0 to 32768 [ 386.786498][ T8454] JBD2: Ignoring recovery information on journal [ 386.910269][ T8454] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 386.962563][ T8481] loop1: detected capacity change from 0 to 512 [ 387.026501][ T8481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.026614][ T8481] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.038706][ T30] audit: type=1800 audit(1792524707.575:573): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.696" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 387.050909][ T30] audit: type=1800 audit(1792524707.605:574): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.696" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 387.397201][ T7085] ocfs2: Unmounting device (7,6) on (node local) [ 388.308740][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.453623][ T5925] usb 5-1: USB disconnect, device number 10 [ 388.549389][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.549742][ T8501] binder: 8500:8501 ioctl c0306201 0 returned -14 [ 389.481248][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.711'. [ 389.615329][ T8505] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 390.509101][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 391.696038][ T8533] netlink: 'syz.6.717': attribute type 2 has an invalid length. [ 391.696066][ T8533] netlink: 'syz.6.717': attribute type 7 has an invalid length. [ 391.702440][ T8533] Uż: entered promiscuous mode [ 392.341297][ T8537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.718'. [ 392.778093][ T8541] loop6: detected capacity change from 0 to 2048 [ 392.820228][ T8541] loop6: p1 < > p4 [ 392.830763][ T8541] loop6: p4 size 8388608 extends beyond EOD, truncated [ 393.745288][ T8547] loop1: detected capacity change from 0 to 512 [ 393.812384][ T8547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.819942][ T8547] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.133199][ T8553] udevd[8553]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 394.309725][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.333086][ T8563] loop4: detected capacity change from 0 to 1024 [ 394.395085][ T8563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.934916][ T5853] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 394.995928][ T8574] loop1: detected capacity change from 0 to 512 [ 395.012045][ T8574] ext4: Unknown parameter 'nomblk_io_submit.nouid32' [ 395.049455][ T8571] loop6: detected capacity change from 0 to 764 [ 395.093226][ T8571] Symlink component flag not implemented [ 395.093236][ T8571] Symlink component flag not implemented [ 395.093299][ T8571] Symlink component flag not implemented (129) [ 395.093314][ T8571] Symlink component flag not implemented (6) [ 395.106905][ T5853] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 395.115734][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.115761][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 395.115816][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.161468][ T5853] usb 5-1: config 0 descriptor?? [ 395.399206][ T5853] Bluetooth: Can't get state to change to load ram patch err [ 395.399228][ T5853] Bluetooth: Loading patch file failed [ 395.399257][ T5853] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 396.962508][ T8590] netlink: 'syz.6.732': attribute type 2 has an invalid length. [ 396.962578][ T8590] netlink: 'syz.6.732': attribute type 7 has an invalid length. [ 397.732489][ T5745] usb 5-1: USB disconnect, device number 11 [ 397.868264][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.494343][ T8608] loop6: detected capacity change from 0 to 764 [ 399.586826][ T8608] Symlink component flag not implemented [ 399.586885][ T8608] Symlink component flag not implemented [ 399.587240][ T8608] Symlink component flag not implemented (129) [ 399.587301][ T8608] Symlink component flag not implemented (6) [ 400.059711][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 400.061747][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 400.068140][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 400.086717][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 400.087815][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 400.222877][ T8618] loop6: detected capacity change from 0 to 512 [ 400.279764][ T8618] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 400.280264][ T8618] EXT4-fs error (device loop6) in ext4_process_orphan:346: Out of memory [ 400.280288][ T8618] loop6: lost filesystem error report for type 5 error -12 [ 400.284508][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 400.284531][ C1] EXT4-fs (loop6): initial error at time 1792524720: ext4_process_orphan:346 [ 400.284560][ C1] EXT4-fs (loop6): last error at time 1792524720: ext4_process_orphan:346 [ 400.329444][ T8618] EXT4-fs (loop6): 1 truncate cleaned up [ 400.693714][ T8618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.164535][ T5623] Bluetooth: hci6: command tx timeout [ 402.230914][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.6.740'. [ 402.231662][ T8639] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.740: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 403.417642][ T8613] lo speed is unknown, defaulting to 1000 [ 403.964572][ T8622] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 404.254578][ T5623] Bluetooth: hci6: command tx timeout [ 404.522881][ T8622] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 405.790531][ T8613] dummy0 speed is unknown, defaulting to 1000 [ 405.978283][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.327577][ T5623] Bluetooth: hci6: command tx timeout [ 409.880702][ T5623] Bluetooth: hci6: command tx timeout [ 410.084798][ T5925] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 410.245695][ T5925] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 410.246742][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.253595][ T5925] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 410.253627][ T5925] usb 5-1: Product: syz [ 410.253646][ T5925] usb 5-1: Manufacturer: syz [ 410.253665][ T5925] usb 5-1: SerialNumber: syz [ 410.314990][ T5925] usb 5-1: config 0 descriptor?? [ 410.333307][ T5925] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 410.333648][ T5925] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 410.333731][ T5925] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 410.363738][ T5925] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 410.377659][ T5925] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 410.382261][ T5925] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 410.420600][ T5925] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 410.425369][ T5925] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 410.450665][ T5925] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 410.470084][ T5925] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 410.482318][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 410.493660][ T5925] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 411.509792][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.509940][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.510184][ T8613] bridge_slave_0: entered allmulticast mode [ 411.519401][ T8613] bridge_slave_0: entered promiscuous mode [ 411.540301][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.540448][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.542366][ T8613] bridge_slave_1: entered allmulticast mode [ 411.551983][ T8613] bridge_slave_1: entered promiscuous mode [ 411.764643][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 411.766712][ T24] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 411.766749][ T24] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64 [ 411.766791][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 411.808662][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 411.808697][ T24] usb 7-1: Product: syz [ 411.808716][ T24] usb 7-1: Manufacturer: syz [ 411.808735][ T24] usb 7-1: SerialNumber: syz [ 411.851135][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.875968][ T5925] usb 5-1: USB disconnect, device number 12 [ 411.881946][ T24] usb 7-1: config 0 descriptor?? [ 411.884028][ T8709] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 411.884317][ T5925] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 411.899658][ T5925] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 411.900362][ T24] usb 7-1: selecting invalid altsetting 0 [ 411.907291][ T5925] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 411.931850][ T5925] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 411.954674][ T5925] keyspan 5-1:0.0: device disconnected [ 412.017858][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.191252][ T8613] team0: Port device team_slave_0 added [ 412.194279][ T8613] team0: Port device team_slave_1 added [ 412.228610][ T8709] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 412.248051][ T8709] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 412.251803][ T24] usb 7-1: USB disconnect, device number 3 [ 412.472926][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.472948][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.472982][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.486031][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.486049][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.486082][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.498861][ T8716] udevd[8716]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.785128][ T8613] hsr_slave_0: entered promiscuous mode [ 412.792455][ T8613] hsr_slave_1: entered promiscuous mode [ 412.796843][ T8613] debugfs: 'hsr0' already exists in 'hsr' [ 412.796866][ T8613] Cannot create hsr debugfs directory [ 413.765579][ T8736] loop6: detected capacity change from 0 to 512 [ 414.088673][ T8736] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 414.143601][ T8736] EXT4-fs (loop6): 1 truncate cleaned up [ 414.176892][ T8736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.317738][ T8741] loop1: detected capacity change from 0 to 1024 [ 414.369869][ T8741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.437909][ T8613] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.461192][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.472640][ T8613] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 414.511103][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.513677][ T8613] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 414.584952][ T8749] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.792738][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.828444][ T8613] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 414.942572][ T8613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.144765][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 415.187534][ T8613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.188680][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.263384][ T8613] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.295275][ T24] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 415.297143][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.297172][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 415.297234][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.302582][ T24] usb 2-1: config 0 descriptor?? [ 415.308945][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.309059][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.599685][ T24] Bluetooth: Can't get state to change to load ram patch err [ 415.599791][ T24] Bluetooth: Loading patch file failed [ 415.599957][ T24] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 415.968028][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.968176][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.311995][ T8769] overlayfs: overlapping lowerdir path [ 416.544120][ T8778] syzkaller0: entered promiscuous mode [ 416.544148][ T8778] syzkaller0: entered allmulticast mode [ 416.994100][ T8794] PKCS7: Unsupported SignerInfo version [ 417.378848][ T8804] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 418.112148][ T5765] usb 2-1: USB disconnect, device number 5 [ 418.297684][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.723901][ T8831] syzkaller0: entered promiscuous mode [ 419.723928][ T8831] syzkaller0: entered allmulticast mode [ 419.894036][ T8613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.695018][ T5765] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 420.753766][ T8613] veth0_vlan: entered promiscuous mode [ 420.779021][ T8613] veth1_vlan: entered promiscuous mode [ 420.853908][ T5765] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 420.865108][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.867339][ T5765] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 420.867368][ T5765] usb 2-1: Product: syz [ 420.867386][ T5765] usb 2-1: Manufacturer: syz [ 420.867405][ T5765] usb 2-1: SerialNumber: syz [ 420.908085][ T5765] usb 2-1: config 0 descriptor?? [ 420.909285][ T8613] veth0_macvtap: entered promiscuous mode [ 420.911773][ T5765] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 420.912091][ T5765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 420.912167][ T5765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88 [ 420.920488][ T5765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 420.937314][ T8613] veth1_macvtap: entered promiscuous mode [ 420.971942][ T5765] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 420.985155][ T5765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 420.989517][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.990840][ T5765] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 420.993701][ T5765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 421.023114][ T8613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.036613][ T5765] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 421.041670][ T5765] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 421.061091][ T5765] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 421.086986][ T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.087042][ T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.087085][ T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.087126][ T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.690740][ T8868] loop6: detected capacity change from 0 to 32768 [ 421.792094][ T5752] usb 2-1: USB disconnect, device number 6 [ 421.826666][ T8868] JBD2: Ignoring recovery information on journal [ 421.886410][ T6116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.886431][ T6116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.930464][ T8868] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 421.931990][ T5752] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 421.960886][ T5752] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 421.985227][ T5752] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 421.989602][ T30] audit: type=1800 audit(1792524742.545:575): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.815" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 422.027950][ T30] audit: type=1800 audit(1792524742.585:576): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.815" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 422.051524][ T5752] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 422.053631][ T3278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.053658][ T3278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.083242][ T5752] keyspan 2-1:0.0: device disconnected [ 422.845058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 423.254793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 424.374663][ T7085] ocfs2: Unmounting device (7,6) on (node local) [ 424.663620][ T8894] loop1: detected capacity change from 0 to 32768 [ 424.707545][ T8894] JBD2: Ignoring recovery information on journal [ 424.729231][ T8898] fuse: Bad value for 'fd' [ 424.753759][ T8894] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 424.773907][ T8897] FAULT_INJECTION: forcing a failure. [ 424.773907][ T8897] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 424.773951][ T8897] CPU: 1 UID: 0 PID: 8897 Comm: syz.7.823 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.773988][ T8897] Tainted: [L]=SOFTLOCKUP [ 424.773999][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 424.774015][ T8897] Call Trace: [ 424.774025][ T8897] [ 424.774036][ T8897] dump_stack_lvl+0xe8/0x150 [ 424.774082][ T8897] should_fail_ex+0x410/0x560 [ 424.774130][ T8897] strncpy_from_user+0x36/0x2c0 [ 424.774176][ T8897] __se_sys_request_key+0xb8/0x350 [ 424.774216][ T8897] ? __pfx___se_sys_request_key+0x10/0x10 [ 424.774254][ T8897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 424.774295][ T8897] ? srso_alias_return_thunk+0x5/0xfbef5 [ 424.774332][ T8897] do_syscall_64+0x166/0x520 [ 424.774367][ T8897] ? trace_irq_disable+0x3b/0x140 [ 424.774398][ T8897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.774432][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.774465][ T8897] RIP: 0033:0x7effb919f559 [ 424.774490][ T8897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.774513][ T8897] RSP: 002b:00007effba03c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 424.774541][ T8897] RAX: ffffffffffffffda RBX: 00007effb9425fa0 RCX: 00007effb919f559 [ 424.774562][ T8897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.774579][ T8897] RBP: 00007effb9236b20 R08: 0000000000000000 R09: 0000000000000000 [ 424.774597][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.774614][ T8897] R13: 00007effb9426038 R14: 00007effb9425fa0 R15: 00007fff9503aa38 [ 424.774662][ T8897] [ 426.745968][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 427.847168][ T29] libceph: connect (1)[c::]:6789 error -101 [ 427.880188][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 429.275902][ T8926] process 'syz.3.832' launched './file2' with NULL argv: empty string added [ 429.281518][ T29] libceph: connect (1)[c::]:6789 error -101 [ 429.281694][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 429.312309][ T8916] ceph: No mds server is up or the cluster is laggy [ 429.414657][ T5853] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 430.505159][ T5853] usb 8-1: device descriptor read/all, error -71 [ 430.851627][ T8944] trusted_key: encrypted_key: key user:syz not found [ 431.845792][ T8948] loop1: detected capacity change from 0 to 512 [ 432.043416][ T8948] EXT4-fs (loop1): invalid inodes per group: 0 [ 432.444227][ T8950] batadv0: entered allmulticast mode [ 437.734561][ T5765] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 437.763077][ T8976] nvmet_tcp: address family 255 not supported [ 437.887291][ T5765] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 437.891152][ T5765] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 437.891182][ T5765] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 437.891245][ T5765] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 437.891273][ T5765] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 437.891307][ T5765] usb 2-1: config 220 interface 0 has no altsetting 0 [ 437.891330][ T5765] usb 2-1: config 220 interface 1 has no altsetting 0 [ 437.894185][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.894213][ T5765] usb 2-1: Product: syz [ 437.894231][ T5765] usb 2-1: Manufacturer: syz [ 437.894250][ T5765] usb 2-1: SerialNumber: syz [ 438.425334][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 438.426293][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 438.647324][ T1016] rpcbind: server 127.0.0.1 not responding, timed out [ 438.801275][ T24] libceph: connect (1)[c::]:6789 error -101 [ 438.801952][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 439.080626][ T8985] ceph: No mds server is up or the cluster is laggy [ 439.128246][ T5765] usb 2-1: selecting invalid altsetting 0 [ 439.129668][ T5765] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22 [ 439.143081][ T5765] usb 2-1: selecting invalid altsetting 0 [ 439.143112][ T5765] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 439.153733][ T5765] usb 2-1: USB disconnect, device number 7 [ 439.182665][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 439.198950][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 439.201771][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 439.202726][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 439.209353][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 439.305150][ T24] libceph: connect (1)[c::]:6789 error -101 [ 439.305279][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 439.367836][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.367902][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.896777][ T8999] loop7: detected capacity change from 0 to 512 [ 440.925882][ T8999] EXT4-fs (loop7): invalid inodes per group: 0 [ 441.606665][ T52] Bluetooth: hci7: command tx timeout [ 441.882891][ T9004] comedi comedi3: board detection failed [ 443.483472][ T9022] nvmet_tcp: address family 255 not supported [ 443.684583][ T52] Bluetooth: hci7: command tx timeout [ 443.730916][ T6320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.070959][ T52] Bluetooth: hci7: command tx timeout [ 446.158593][ T9034] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 446.496042][ T6320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.545920][ T5745] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 447.404382][ T6320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.429296][ T5745] usb 7-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 447.430738][ T5745] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 447.430770][ T5745] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 447.430845][ T5745] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 447.430860][ T8989] lo speed is unknown, defaulting to 1000 [ 447.430877][ T5745] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 447.430913][ T5745] usb 7-1: config 220 interface 0 has no altsetting 0 [ 447.430939][ T5745] usb 7-1: config 220 interface 1 has no altsetting 0 [ 447.431478][ T9053] batadv0: entered allmulticast mode [ 447.433872][ T5745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.433899][ T5745] usb 7-1: Product: syz [ 447.433918][ T5745] usb 7-1: Manufacturer: syz [ 447.433936][ T5745] usb 7-1: SerialNumber: syz [ 449.113868][ T52] Bluetooth: hci7: command tx timeout [ 449.325074][ T9061] loop1: detected capacity change from 0 to 32768 [ 449.449805][ T9061] JBD2: Ignoring recovery information on journal [ 449.611711][ T9061] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 449.634261][ T5745] usb 7-1: selecting invalid altsetting 0 [ 449.643528][ T5745] uvcvideo 7-1:220.0: probe with driver uvcvideo failed with error -22 [ 449.654522][ T5745] usb 7-1: selecting invalid altsetting 0 [ 449.654551][ T5745] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 449.681306][ T5745] usb 7-1: USB disconnect, device number 4 [ 449.994744][ T30] audit: type=1800 audit(1792524770.525:577): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.871" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 450.356500][ T6320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.358939][ T30] audit: type=1800 audit(1792524770.915:578): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.871" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 451.101532][ T6320] bridge_slave_1: left allmulticast mode [ 451.101563][ T6320] bridge_slave_1: left promiscuous mode [ 451.101805][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.140367][ T6320] bridge_slave_0: left allmulticast mode [ 451.140398][ T6320] bridge_slave_0: left promiscuous mode [ 451.142288][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.168709][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 452.033925][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.069054][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.098933][ T6320] bond0 (unregistering): Released all slaves [ 452.181150][ T8989] dummy0 speed is unknown, defaulting to 1000 [ 452.353363][ T6320] Uż: left promiscuous mode [ 452.463762][ T9096] loop1: detected capacity change from 0 to 1024 [ 452.634925][ T9096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.164668][ T5925] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 454.426268][ T5925] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 454.429166][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.429195][ T5925] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 454.429248][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.506494][ T5925] usb 2-1: config 0 descriptor?? [ 454.628352][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 455.599225][ T5925] Bluetooth: Can't get state to change to load ram patch err [ 455.599248][ T5925] Bluetooth: Loading patch file failed [ 455.599278][ T5925] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 456.153027][ T9130] loop7: detected capacity change from 0 to 32768 [ 456.201047][ T9130] JBD2: Ignoring recovery information on journal [ 456.260250][ T9130] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 456.299227][ T30] audit: type=1800 audit(1792524776.855:579): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.886" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 456.304250][ T30] audit: type=1800 audit(1792524776.855:580): pid=9130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.886" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 456.335058][ T9134] nvmet_tcp: address family 255 not supported [ 456.671865][ T6320] hsr_slave_0: left promiscuous mode [ 456.684575][ T6320] hsr_slave_1: left promiscuous mode [ 456.685665][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.685688][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.694046][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.694072][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.851912][ T6320] veth1_macvtap: left promiscuous mode [ 456.851955][ T6320] veth0_macvtap: left promiscuous mode [ 456.852102][ T6320] veth1_vlan: left promiscuous mode [ 456.852176][ T6320] veth0_vlan: left promiscuous mode [ 456.991631][ T8613] ocfs2: Unmounting device (7,7) on (node local) [ 457.183961][ T9154] loop7: detected capacity change from 0 to 128 [ 457.267289][ T9154] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.268918][ T9154] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 457.511794][ T5745] usb 2-1: USB disconnect, device number 8 [ 457.727368][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.251253][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 459.293706][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 461.090324][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 461.416551][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.416677][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.416841][ T8989] bridge_slave_0: entered allmulticast mode [ 461.431236][ T8989] bridge_slave_0: entered promiscuous mode [ 461.464121][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.464234][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.464369][ T8989] bridge_slave_1: entered allmulticast mode [ 461.485270][ T8989] bridge_slave_1: entered promiscuous mode [ 461.852263][ T8989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.887205][ T8989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.165539][ T9208] loop6: detected capacity change from 0 to 1024 [ 462.174158][ T9208] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 462.203540][ T9208] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.903: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 462.203602][ T9208] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 462.204083][ T9208] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.903: couldn't read orphan inode 11 (err -117) [ 462.204117][ T9208] loop6: lost filesystem error report for type 5 error -117 [ 462.204507][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 462.204529][ C0] EXT4-fs (loop6): initial error at time 1792524782: ext4_ext_check_inode:521: inode 11 [ 462.204566][ C0] EXT4-fs (loop6): last error at time 1792524782: ext4_orphan_get:1408 [ 462.298675][ T9208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.501517][ T8989] team0: Port device team_slave_0 added [ 462.540795][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.590006][ T8989] team0: Port device team_slave_1 added [ 462.790407][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.790429][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.790459][ T8989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.852736][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.852757][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.852791][ T8989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.239616][ T8989] hsr_slave_0: entered promiscuous mode [ 463.256524][ T8989] hsr_slave_1: entered promiscuous mode [ 463.272096][ T8989] debugfs: 'hsr0' already exists in 'hsr' [ 463.272122][ T8989] Cannot create hsr debugfs directory [ 463.272976][ T9219] loop6: detected capacity change from 0 to 32768 [ 463.322161][ T9219] JBD2: Ignoring recovery information on journal [ 463.358459][ T8613] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.396307][ T9219] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 463.451388][ T30] audit: type=1800 audit(1792524784.005:581): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.905" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 463.475762][ T30] audit: type=1800 audit(1792524784.015:582): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.905" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 465.813630][ T9248] nvmet_tcp: address family 255 not supported [ 465.872366][ T7085] ocfs2: Unmounting device (7,6) on (node local) [ 466.213082][ T9254] loop1: detected capacity change from 0 to 512 [ 466.277145][ T9254] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 466.280179][ T9254] EXT4-fs error (device loop1) in ext4_process_orphan:346: Out of memory [ 466.280205][ T9254] loop1: lost filesystem error report for type 5 error -12 [ 466.301169][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 466.301196][ C1] EXT4-fs (loop1): initial error at time 1792524786: ext4_process_orphan:346 [ 466.301223][ C1] EXT4-fs (loop1): last error at time 1792524786: ext4_process_orphan:346 [ 466.304682][ T9254] EXT4-fs (loop1): 1 truncate cleaned up [ 466.318121][ T9254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.449301][ T8989] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 466.543120][ T8989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.550948][ T8989] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 466.609182][ T8989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.621165][ T8989] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 466.650166][ T8989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.651105][ T8989] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 466.733063][ T8989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.898675][ T9267] loop7: detected capacity change from 0 to 32768 [ 466.959953][ T9267] JBD2: Ignoring recovery information on journal [ 467.041455][ T9267] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 467.091368][ T30] audit: type=1800 audit(1792524787.645:583): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.917" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 467.105979][ T30] audit: type=1800 audit(1792524787.655:584): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.917" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 467.140250][ T9211] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 467.141991][ T9211] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 467.426220][ T8989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.525951][ T8989] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.570350][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.570462][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.719174][ T3358] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.719293][ T3358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.020129][ T8613] ocfs2: Unmounting device (7,7) on (node local) [ 468.364855][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 468.585758][ T9296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.916'. [ 468.592076][ T9296] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.916: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 469.778469][ T9290] loop6: detected capacity change from 0 to 32768 [ 469.966046][ T9290] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 469.966065][ T9290] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 470.206266][ T9290] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 470.249969][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 470.249989][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 470.379964][ T8989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.967246][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 717ms [ 470.969685][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 470.970882][ T9290] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 471.331631][ T9290] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 474.668574][ T9344] nvmet_tcp: address family 255 not supported [ 475.038801][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 475.178899][ T8989] veth0_vlan: entered promiscuous mode [ 475.189162][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.261231][ T8989] veth1_vlan: entered promiscuous mode [ 478.823793][ T8989] veth0_macvtap: entered promiscuous mode [ 478.939452][ T8989] veth1_macvtap: entered promiscuous mode [ 479.112574][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.162294][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.425109][ T334] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.617263][ T9374] loop6: detected capacity change from 0 to 32768 [ 479.635926][ T1016] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.687921][ T9374] JBD2: Ignoring recovery information on journal [ 479.707800][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.707842][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.740371][ T9374] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 479.804240][ T30] audit: type=1800 audit(1792524800.355:585): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.932" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 479.837066][ T30] audit: type=1800 audit(1792524800.395:586): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.932" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 480.441354][ T3278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.441380][ T3278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.748812][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.748838][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.930131][ T7085] ocfs2: Unmounting device (7,6) on (node local) [ 482.071138][ T5623] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 482.296119][ T9404] trusted_key: encrypted_key: key user:syz not found [ 484.963843][ T9408] loop8: detected capacity change from 0 to 4096 [ 485.076016][ T9411] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.118921][ T8989] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 488.118954][ T8989] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 488.246178][ T8989] Remounting filesystem read-only [ 488.246194][ T8989] NILFS (loop8): error -5 truncating bmap (ino=12) [ 488.363608][ T9422] nvmet_tcp: address family 255 not supported [ 488.388801][ T8989] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 489.669480][ T9435] netlink: 116 bytes leftover after parsing attributes in process `syz.6.947'. [ 490.193277][ T9439] loop8: detected capacity change from 0 to 32768 [ 490.271577][ T9439] JBD2: Ignoring recovery information on journal [ 490.357062][ T9439] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 490.368918][ T30] audit: type=1800 audit(1792524810.925:587): pid=9439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.949" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 490.409079][ T30] audit: type=1800 audit(1792524810.965:588): pid=9439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.949" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 492.758339][ T9456] syzkaller0: entered promiscuous mode [ 492.758367][ T9456] syzkaller0: entered allmulticast mode [ 492.834873][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 492.838687][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.840038][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.842800][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.873360][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.302942][ T8989] ocfs2: Unmounting device (7,8) on (node local) [ 493.744842][ T9475] loop6: detected capacity change from 0 to 764 [ 493.765960][ T9475] Symlink component flag not implemented [ 493.765971][ T9475] Symlink component flag not implemented [ 493.766036][ T9475] Symlink component flag not implemented (129) [ 493.766047][ T9475] Symlink component flag not implemented (6) [ 494.733906][ T5924] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 495.010267][ T5623] Bluetooth: hci5: command tx timeout [ 495.204404][ T5924] usb 7-1: Using ep0 maxpacket: 16 [ 495.229025][ T5924] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 495.253419][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 495.253476][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.281678][ T5924] usb 7-1: config 0 descriptor?? [ 495.283708][ T9485] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 495.422042][ T9490] loop8: detected capacity change from 0 to 4096 [ 495.463294][ T9493] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 496.530460][ T8989] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 496.530494][ T8989] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 496.534165][ T8989] Remounting filesystem read-only [ 496.534180][ T8989] NILFS (loop8): error -5 truncating bmap (ino=12) [ 496.597723][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.727600][ T8989] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 496.925517][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.004847][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.008310][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.047791][ T52] Bluetooth: hci5: command tx timeout [ 497.062451][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.073165][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.096041][ T5924] usbhid 7-1:0.0: can't add hid device: -71 [ 497.096138][ T5924] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 497.103348][ T5924] usb 7-1: USB disconnect, device number 5 [ 498.695804][ T9515] netlink: 116 bytes leftover after parsing attributes in process `syz.8.962'. [ 498.893697][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.125256][ T5623] Bluetooth: hci5: command tx timeout [ 499.127477][ T9458] lo speed is unknown, defaulting to 1000 [ 499.626101][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.435303][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.435366][ T52] Bluetooth: hci5: command tx timeout [ 501.435371][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.435441][ T5623] Bluetooth: hci2: command tx timeout [ 501.523104][ T9525] comedi comedi3: board detection failed [ 501.830998][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.026680][ T9535] loop8: detected capacity change from 0 to 256 [ 502.560595][ T9544] loop1: detected capacity change from 0 to 512 [ 502.581488][ T9544] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 502.647034][ T9544] EXT4-fs (loop1): 1 truncate cleaned up [ 502.678696][ T9544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.087290][ T9553] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.452384][ T5623] Bluetooth: hci2: command tx timeout [ 503.785065][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.954367][ T50] bridge_slave_1: left allmulticast mode [ 503.954402][ T50] bridge_slave_1: left promiscuous mode [ 503.965904][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.093722][ T50] bridge_slave_0: left allmulticast mode [ 504.093747][ T50] bridge_slave_0: left promiscuous mode [ 504.093932][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.559706][ T5623] Bluetooth: hci2: command tx timeout [ 505.657592][ T9577] netlink: 116 bytes leftover after parsing attributes in process `syz.3.978'. [ 506.344875][ T5924] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 506.595842][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 506.599415][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 506.599467][ T5924] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 506.600537][ T5924] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 506.600566][ T5924] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 506.600592][ T5924] usb 2-1: config 14 has no interface number 0 [ 506.600613][ T5924] usb 2-1: config 14 has no interface number 1 [ 506.600685][ T5924] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 506.600715][ T5924] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 506.600747][ T5924] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 506.600782][ T5924] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 506.600817][ T5924] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 506.600851][ T5924] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 506.600885][ T5924] usb 2-1: config 14 interface 57 has no altsetting 0 [ 506.600909][ T5924] usb 2-1: config 14 interface 228 has no altsetting 0 [ 506.747669][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.747703][ T5924] usb 2-1: Product: syz [ 506.747722][ T5924] usb 2-1: Manufacturer: syz [ 506.747742][ T5924] usb 2-1: SerialNumber: syz [ 506.752444][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.793952][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.805706][ T50] bond0 (unregistering): Released all slaves [ 507.031722][ T9458] dummy0 speed is unknown, defaulting to 1000 [ 507.105394][ T9589] loop6: detected capacity change from 0 to 764 [ 507.111271][ T9589] Symlink component flag not implemented [ 507.111279][ T9589] Symlink component flag not implemented [ 507.111328][ T9589] Symlink component flag not implemented (129) [ 507.111338][ T9589] Symlink component flag not implemented (6) [ 507.292942][ T50] Uż: left promiscuous mode [ 507.331488][ T5924] legousbtower 2-1:14.57: interrupt endpoints not found [ 507.447402][ T9499] lo speed is unknown, defaulting to 1000 [ 507.724958][ T5623] Bluetooth: hci2: command tx timeout [ 508.574153][ T6320] rpcbind: server 127.0.0.1 not responding, timed out [ 508.575445][ T5924] legousbtower 2-1:14.228: get version request failed: -71 [ 508.575619][ T5924] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 508.610186][ T5924] usb 2-1: USB disconnect, device number 9 [ 508.843117][ T9602] loop6: detected capacity change from 0 to 128 [ 508.907412][ T9602] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 508.988115][ T9602] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 509.014359][ T9602] ext2 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 509.179421][ T9602] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 33: comm syz.6.984: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 509.206875][ T9602] EXT4-fs error (device loop6) in do_split:2029: Corrupt filesystem [ 509.691902][ T7085] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 509.858317][ T9621] loop8: detected capacity change from 0 to 1024 [ 510.700923][ T9624] loop1: detected capacity change from 0 to 512 [ 510.717982][ T9624] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 510.719737][ T9626] loop6: detected capacity change from 0 to 512 [ 510.778722][ T9626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.778838][ T9626] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.926248][ T9624] EXT4-fs (loop1): 1 truncate cleaned up [ 510.975493][ T9624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.462552][ T9635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 511.995189][ T7085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.248714][ T9499] dummy0 speed is unknown, defaulting to 1000 [ 512.560551][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.181953][ T9646] loop6: detected capacity change from 0 to 32768 [ 513.223688][ T9646] JBD2: Ignoring recovery information on journal [ 513.379263][ T9646] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 513.412392][ T30] audit: type=1800 audit(1792524833.965:589): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.991" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 513.413625][ T30] audit: type=1800 audit(1792524833.965:590): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.991" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 513.595183][ T9652] loop1: detected capacity change from 0 to 764 [ 513.621577][ T9652] Symlink component flag not implemented [ 513.621589][ T9652] Symlink component flag not implemented [ 513.621662][ T9652] Symlink component flag not implemented (129) [ 513.621677][ T9652] Symlink component flag not implemented (6) [ 516.784843][ T7085] ocfs2: Unmounting device (7,6) on (node local) [ 516.921564][ T50] hsr_slave_0: left promiscuous mode [ 516.931596][ T50] hsr_slave_1: left promiscuous mode [ 516.932506][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.932529][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.937417][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.937437][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.016562][ T50] veth1_macvtap: left promiscuous mode [ 517.016613][ T50] veth0_macvtap: left promiscuous mode [ 517.016903][ T50] veth1_vlan: left promiscuous mode [ 517.016980][ T50] veth0_vlan: left promiscuous mode [ 517.549691][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.996'. [ 517.555928][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.996'. [ 517.820388][ T50] team0 (unregistering): Port device team_slave_1 removed [ 517.851858][ T50] team0 (unregistering): Port device team_slave_0 removed [ 517.999755][ T9689] Bluetooth: MGMT ver 1.23 [ 518.013407][ T3253] IPVS: starting estimator thread 0... [ 518.107297][ T9690] IPVS: using max 33 ests per chain, 79200 per kthread [ 518.476218][ T9681] loop6: detected capacity change from 0 to 32768 [ 518.512372][ T9681] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.996 (9681) [ 518.592778][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.595929][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.596121][ T9458] bridge_slave_0: entered allmulticast mode [ 518.599344][ T9681] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 518.599377][ T9681] BTRFS info (device loop6): using sha256 checksum algorithm [ 518.602142][ T9458] bridge_slave_0: entered promiscuous mode [ 518.842217][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.842339][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.842476][ T9458] bridge_slave_1: entered allmulticast mode [ 519.721943][ T9713] loop1: detected capacity change from 0 to 1024 [ 519.723888][ T9458] bridge_slave_1: entered promiscuous mode [ 519.891972][ T1016] BTRFS warning (device loop6): checksum verify failed on logical 5292032 mirror 1 wanted 0x71e9986adce26f47d358c48a094a2713636d7db020873728b415408513a1db55 found 0x5a6bfb1ef662a8f2bf73794a0680460d6d280958cfe960988eab610083d28065 level 0 [ 520.058227][ T9681] BTRFS warning (device loop6): failed to read root (objectid=9): -EIO [ 520.105916][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.136516][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.142827][ T9681] BTRFS error (device loop6): open_ctree failed: -EIO [ 520.390783][ T9458] team0: Port device team_slave_0 added [ 520.419577][ T9458] team0: Port device team_slave_1 added [ 520.596689][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.596708][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.596731][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.609933][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.611026][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.611051][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.705068][ T5745] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 520.860552][ T9727] loop8: detected capacity change from 0 to 764 [ 520.870604][ T5745] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 520.894243][ T5745] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.894301][ T5745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.940530][ T9727] Symlink component flag not implemented [ 520.940538][ T9727] Symlink component flag not implemented [ 520.940588][ T9727] Symlink component flag not implemented (129) [ 520.940598][ T9727] Symlink component flag not implemented (6) [ 521.519253][ T5745] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device [ 521.648767][ T5745] wwan wwan0: port wwan0qmi0 attached [ 521.768128][ T9458] hsr_slave_0: entered promiscuous mode [ 521.784393][ T9458] hsr_slave_1: entered promiscuous mode [ 521.785125][ T9458] debugfs: 'hsr0' already exists in 'hsr' [ 521.785143][ T9458] Cannot create hsr debugfs directory [ 521.822877][ T9738] loop1: detected capacity change from 0 to 128 [ 522.177063][ T9742] loop8: detected capacity change from 0 to 32768 [ 522.322589][ T9742] JBD2: Ignoring recovery information on journal [ 522.386162][ T9742] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 522.387130][ T9738] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.390844][ T9738] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 522.589603][ T30] audit: type=1800 audit(1792524843.145:591): pid=9742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1006" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 522.590263][ T30] audit: type=1800 audit(1792524843.145:592): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1006" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 522.674610][ T1016] rpcbind: server 127.0.0.1 not responding, timed out [ 523.220642][ T5745] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 62:74:1b:85:40:c2 [ 523.222913][ T5745] usb 7-1: USB disconnect, device number 6 [ 523.493903][ T5615] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 523.514979][ T5745] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 524.022431][ T9761] loop6: detected capacity change from 0 to 4096 [ 524.080071][ T9763] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 526.183005][ T7085] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 526.183033][ T7085] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=12) [ 526.225905][ T7085] Remounting filesystem read-only [ 526.225926][ T7085] NILFS (loop6): error -5 truncating bmap (ino=12) [ 526.276171][ T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.299604][ T7085] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 526.776710][ T8989] ocfs2: Unmounting device (7,8) on (node local) [ 527.213290][ T9776] loop6: detected capacity change from 0 to 1024 [ 527.999266][ T9760] batadv0: entered allmulticast mode [ 528.168285][ T5745] wwan wwan0: port wwan0qmi0 disconnected [ 528.328356][ T33] INFO: task syz.0.691:8448 blocked for more than 143 seconds. [ 528.328391][ T33] Tainted: G L syzkaller #0 [ 528.328407][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 528.328419][ T33] task:syz.0.691 state:D stack:26056 pid:8448 tgid:8437 ppid:5631 task_flags:0x400040 flags:0x00080002 [ 528.328502][ T33] Call Trace: [ 528.328513][ T33] [ 528.328530][ T33] __schedule+0x17dd/0x5940 [ 528.328625][ T33] ? __pfx___schedule+0x10/0x10 [ 528.328671][ T33] ? schedule+0x90/0x2b0 [ 528.328705][ T33] schedule+0x164/0x2b0 [ 528.328740][ T33] schedule_preempt_disabled+0x13/0x30 [ 528.328771][ T33] __mutex_lock+0x7c9/0x15a0 [ 528.328812][ T33] ? __mutex_lock+0x5d2/0x15a0 [ 528.328852][ T33] ? write_threads+0x3b1/0x610 [ 528.328898][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 528.328932][ T33] ? simple_strntoull+0x114/0x190 [ 528.328987][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.329021][ T33] ? qword_get+0x5ad/0x650 [ 528.329075][ T33] write_threads+0x3b1/0x610 [ 528.329124][ T33] ? __pfx_write_threads+0x10/0x10 [ 528.329187][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.329232][ T33] ? _copy_from_user+0x94/0xb0 [ 528.329260][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.329293][ T33] ? simple_transaction_get+0x12d/0x160 [ 528.329343][ T33] nfsctl_transaction_write+0x10f/0x160 [ 528.329389][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 528.329433][ T33] vfs_write+0x296/0xba0 [ 528.329475][ T33] ? __pfx_vfs_write+0x10/0x10 [ 528.329507][ T33] ? __fget_files+0x2a/0x420 [ 528.329537][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.329569][ T33] ? __fget_files+0x3a2/0x420 [ 528.329598][ T33] ? __fget_files+0x2a/0x420 [ 528.329633][ T33] ? srso_alias_return_thun ** replaying previous printk message ** [ 528.329633][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.329697][ T33] ? fdget+0x1ac/0x250 [ 528.329728][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.329766][ T33] ksys_write+0x150/0x270 [ 528.329800][ T33] ? __pfx_ksys_write+0x10/0x10 [ 528.329844][ T33] do_syscall_64+0x166/0x520 [ 528.329880][ T33] ? trace_irq_disable+0x3b/0x140 [ 528.329911][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.329947][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.329975][ T33] RIP: 0033:0x7fdea899f559 [ 528.329999][ T33] RSP: 002b:00007fdea9853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 528.330027][ T33] RAX: ffffffffffffffda RBX: 00007fdea8c26090 RCX: 00007fdea899f559 [ 528.330049][ T33] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000006 [ 528.330067][ T33] RBP: 00007fdea8a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 528.330085][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.330102][ T33] R13: 00007fdea8c26128 R14: 00007fdea8c26090 R15: 00007fff09907228 [ 528.330146][ T33] [ 528.330207][ T33] [ 528.330207][ T33] Showing all locks held in the system: [ 528.330222][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 528.330242][ T33] #0: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 528.330315][ T33] locks held by kworker/u8:3/50: 6, on CPU#1: [ 528.330333][ T33] #0: ffff88801d2ce140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 528.330411][ T33] #1: ffffc90000bb7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 528.330488][ T33] #2: ffffffff91248488 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 528.330571][ T33] #3: ffff888013406128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 528.330645][ T33] #4: ffff888013403258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 528.330725][ T33] #5: ffffffff8fd62d28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 528.330836][ T33] locks held by kworker/u8:14/3339: 3, on CPU#1: [ 528.330856][ T33] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 528.330936][ T33] #1: ffffc9000e097c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 528.331014][ T33] #2: ffffffff91256cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 528.331095][ T33] locks held by getty/5373: 2, on CPU#0: [ 528.331114][ T33] #0: ffff8880362da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 528.331198][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 528.331270][ T33] locks held by kworker/0:4/5745: 7, last CPU#0: [ 528.331289][ T33] #0: ffff8880202d5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 528.331367][ T33] #1: ffffc90003ccfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 528.331445][ T33] #2: ffff88802ad191d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 528.331509][ T33] #3: ffff88805121d1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 528.331593][ T33] #4: ffff888050ac31a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 528.331678][ T33] #5: ffffffff90b95400 (wdm_mutex){+.+.}-{4:4}, at: wdm_disconnect+0xc4/0x520 [ 528.331760][ T33] #6: ffffffff90a98540 (wwan_register_lock){+.+.}-{4:4}, at: wwan_remove_dev+0x28/0x100 [ 528.331838][ T33] locks held by syz-executor/7085: 4, last CPU#0: [ 528.331858][ T33] #0: ffffffff8fe36530 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 528.331935][ T33] #1: ffff88807c992800 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 528.332003][ T33] #2: ffff8880776b9bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 528.332077][ T33] #3: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 528.332161][ T33] locks held by syz.0.691/8442: 3, on CPU#0: [ 528.332188][ T33] #0: ffff88802ae0ed30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 528.332254][ T33] #1: ffff88802caf2460 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 528.332330][ T33] #2: ffffffff9009f0a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 528.332410][ T33] locks held by syz.0.691/8448: 3, on CPU#1: [ 528.332429][ T33] #0: ffff888079817cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 528.332494][ T33] #1: ffff88802caf2460 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 528.332567][ T33] #2: ffffffff9009f0a0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 528.332653][ T33] locks held by syz-executor/8989: 1, last CPU#0: [ 528.332672][ T33] #0: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 528.332752][ T33] locks held by syz-executor/9458: 2, last CPU#0: [ 528.332771][ T33] #0: ffffffff909bda68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 528.332851][ T33] #1: ffffffff91256cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 528.332920][ T33] locks held by syz-executor/9499: 2, on CPU#1: [ 528.332940][ T33] #0: ffffffff917ac070 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 528.333017][ T33] #1: ffffffff91256cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 528.333086][ T33] locks held by syz.8.999/9695: 3, last CPU#0: [ 528.333105][ T33] #0: ffff8880262b2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xae7/0x10e0 [ 528.333199][ T33] #1: ffff88802be00f80 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1be/0xca0 [ 528.333278][ T33] #2: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: mt_find+0x186/0x630 [ 528.333357][ T33] locks held by syz.8.999/9700: 2, last CPU#0: [ 528.333377][ T33] #0: ffff8880262b2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xae7/0x10e0 [ 528.333460][ T33] #1: ffff888077bd0890 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 528.333551][ T33] locks held by syz.3.1003/9730: 2, last CPU#0: [ 528.333570][ T33] #0: ffff8880506ec460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xae7/0x10e0 [ 528.333656][ T33] #1: ffff888047578e98 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 528.333747][ T33] locks held by syz.3.1003/9735: 2, last CPU#0: [ 528.333766][ T33] #0: ffff8880506ec460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xae7/0x10e0 [ 528.333850][ T33] #1: ffff88804757cae8 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 528.333941][ T33] locks held by syz.1.1009/9760: 2, last CPU#0: [ 528.333960][ T33] #0: ffff88802c470340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 528.334025][ T33] #1: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 528.334106][ T33] locks held by syz.3.1011/9771: 1, last CPU#0: [ 528.334125][ T33] #0: ffff888032b81bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 528.334198][ T33] locks held by rm/9777: 1, last CPU#0: [ 528.334217][ T33] #0: ffff88807eab6540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 528.334292][ T33] [ 528.334300][ T33] ============================================= [ 528.334300][ T33] [ 528.334311][ T33] NMI backtrace for cpu 1 [ 528.334331][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 528.334365][ T33] Tainted: [L]=SOFTLOCKUP [ 528.334375][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 528.334391][ T33] Call Trace: [ 528.334400][ T33] [ 528.334412][ T33] dump_stack_lvl+0xe8/0x150 [ 528.334456][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 528.334484][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 528.334532][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 528.334563][ T33] sys_info+0x135/0x170 [ 528.334602][ T33] watchdog+0xfd7/0x1030 [ 528.334640][ T33] ? watchdog+0x1c7/0x1030 [ 528.334680][ T33] kthread+0x38b/0x480 [ 528.334708][ T33] ? __pfx_watchdog+0x10/0x10 [ 528.334734][ T33] ? __pfx_kthread+0x10/0x10 [ 528.334762][ T33] ret_from_fork+0x514/0xb70 [ 528.334792][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 528.334817][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.334848][ T33] ? __switch_to+0xc89/0x1420 [ 528.334890][ T33] ? __pfx_kthread+0x10/0x10 [ 528.334919][ T33] ret_from_fork_asm+0x1a/0x30 [ 528.334964][ T33] [ 528.335093][ T33] Sending NMI from CPU 1 to CPUs 0: [ 528.335122][ C0] NMI backtrace for cpu 0 [ 528.335139][ C0] CPU: 0 UID: 0 PID: 9458 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 528.335170][ C0] Tainted: [L]=SOFTLOCKUP [ 528.335178][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 528.335198][ C0] RIP: 0010:rcu_is_watching+0x5b/0xb0 [ 528.335235][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 db 5c 8c 00 48 c7 c3 18 8a 97 94 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 35 8b 03 65 48 ff 0d 77 a7 e9 12 74 11 83 e0 04 c1 e8 02 [ 528.335255][ C0] RSP: 0018:ffffc900046663f8 EFLAGS: 00000212 [ 528.335276][ C0] RAX: 0000000000000000 RBX: ffff8880b8433a18 RCX: 8000000000000001 [ 528.335293][ C0] RDX: ffffffff92095e00 RSI: ffffffff8c6dcf60 RDI: ffffffff8c6dcf20 [ 528.335311][ C0] RBP: 1ffffffff2412b01 R08: ffffc90004667f48 R09: 0000000000000000 [ 528.335328][ C0] R10: dffffc0000000000 R11: ffffffff81b2d110 R12: ffffc90004660000 [ 528.335346][ C0] R13: ffffffff817811df R14: ffffffff8e73c7d0 R15: dffffc0000000000 [ 528.335367][ C0] FS: 0000555558b8d500(0000) GS:ffff888123abb000(0000) knlGS:0000000000000000 [ 528.335388][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.335404][ C0] CR2: 00007fea71f62eb8 CR3: 000000007496b000 CR4: 0000000000350ef0 [ 528.335424][ C0] Call Trace: [ 528.335432][ C0] [ 528.335443][ C0] lock_release+0x4b/0x3c0 [ 528.335471][ C0] ? unwind_next_frame+0x8f/0x2550 [ 528.335505][ C0] ? unwind_next_frame+0x8f/0x2550 [ 528.335534][ C0] unwind_next_frame+0x1baa/0x2550 [ 528.335567][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.335591][ C0] ? unwind_next_frame+0x8f/0x2550 [ 528.335624][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 528.335649][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 528.335680][ C0] arch_stack_walk+0x11b/0x150 [ 528.335715][ C0] ? security_inode_alloc+0x39/0x310 [ 528.335740][ C0] stack_trace_save+0xa9/0x100 [ 528.335764][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 528.335794][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.335825][ C0] kasan_save_track+0x3e/0x80 [ 528.335853][ C0] ? kasan_save_track+0x3e/0x80 [ 528.335881][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 528.335910][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 528.335934][ C0] ? security_inode_alloc+0x39/0x310 [ 528.335956][ C0] ? inode_init_always_gfp+0x97e/0xd30 [ 528.335992][ C0] ? alloc_inode+0x82/0x1b0 [ 528.336025][ C0] ? new_inode+0x1f/0x170 [ 528.336044][ C0] ? __debugfs_create_file+0xb8/0x400 [ 528.336074][ C0] ? debugfs_create_file_full+0x3f/0x60 [ 528.336102][ C0] ? ref_tracker_dir_debugfs+0x197/0x360 [ 528.336140][ C0] ? alloc_netdev_mqs+0x275/0x12a0 [ 528.336172][ C0] ? rtnl_create_link+0x321/0xd70 [ 528.336205][ C0] ? veth_newlink+0x277/0xdd0 [ 528.336234][ C0] ? rtnl_newlink_create+0x305/0x7b0 [ 528.336261][ C0] ? rtnl_newlink+0x166d/0x1c30 [ 528.336285][ C0] ? rtnetlink_rcv_msg+0x802/0xc00 [ 528.336311][ C0] ? netlink_rcv_skb+0x226/0x4a0 [ 528.336341][ C0] ? netlink_unicast+0x8ef/0xa80 [ 528.336368][ C0] ? netlink_sendmsg+0x884/0xba0 [ 528.336399][ C0] ? sock_sendmsg_nosec+0x13a/0x180 [ 528.336432][ C0] ? __sys_sendto+0x408/0x5a0 [ 528.336455][ C0] ? __x64_sys_sendto+0xde/0x100 [ 528.336477][ C0] ? do_syscall_64+0x166/0x520 [ 528.336507][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.336555][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.336591][ C0] __kasan_slab_alloc+0x6c/0x80 [ 528.336624][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 528.336649][ C0] ? security_inode_alloc+0x39/0x310 [ 528.336672][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 528.336704][ C0] ? security_inode_alloc+0x39/0x310 [ 528.336733][ C0] security_inode_alloc+0x39/0x310 [ 528.336759][ C0] inode_init_always_gfp+0x97e/0xd30 [ 528.336799][ C0] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 528.336829][ C0] alloc_inode+0x82/0x1b0 [ 528.336865][ C0] new_inode+0x1f/0x170 [ 528.336889][ C0] __debugfs_create_file+0xb8/0x400 [ 528.336921][ C0] debugfs_create_file_full+0x3f/0x60 [ 528.336954][ C0] ref_tracker_dir_debugfs+0x197/0x360 [ 528.336992][ C0] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 528.337049][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.337076][ C0] ? __kvmalloc_node_noprof+0x52f/0x820 [ 528.337107][ C0] ? __kvmalloc_node_noprof+0x345/0x820 [ 528.337140][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.337167][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 528.337206][ C0] alloc_netdev_mqs+0x275/0x12a0 [ 528.337238][ C0] ? __pfx_veth_setup+0x10/0x10 [ 528.337270][ C0] rtnl_create_link+0x321/0xd70 [ 528.337308][ C0] veth_newlink+0x277/0xdd0 [ 528.337336][ C0] ? stack_depot_init+0x171/0x1b0 [ 528.337374][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.337401][ C0] ? kasan_save_track+0x4f/0x80 [ 528.337429][ C0] ? kasan_save_track+0x3e/0x80 [ 528.337458][ C0] ? __pfx_veth_newlink+0x10/0x10 [ 528.337485][ C0] ? rtnl_newlink_create+0x258/0x7b0 [ 528.337513][ C0] ? rtnl_newlink+0x166d/0x1c30 [ 528.337536][ C0] ? rtnetlink_rcv_msg+0x802/0xc00 [ 528.337559][ C0] ? netlink_rcv_skb+0x226/0x4a0 [ 528.337589][ C0] ? netlink_unicast+0x8ef/0xa80 [ 528.337615][ C0] ? netlink_sendmsg+0x884/0xba0 [ 528.337646][ C0] ? sock_sendmsg_nosec+0x13a/0x180 [ 528.337684][ C0] ? __sys_sendto+0x408/0x5a0 [ 528.337705][ C0] ? __x64_sys_sendto+0xde/0x100 [ 528.337776][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.337803][ C0] ? validate_linkmsg+0x765/0x950 [ 528.337849][ C0] ? rtnl_create_link+0xa04/0xd70 [ 528.337889][ C0] ? __pfx_veth_newlink+0x10/0x10 [ 528.337920][ C0] rtnl_newlink_create+0x305/0x7b0 [ 528.337954][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 528.337985][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 528.338015][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.338050][ C0] ? full_name_hash+0x92/0xe0 [ 528.338091][ C0] rtnl_newlink+0x166d/0x1c30 [ 528.338127][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 528.338151][ C0] ? __lock_acquire+0x747/0x2de0 [ 528.338232][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.338261][ C0] ? kernel_text_address+0xa5/0xe0 [ 528.338289][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.338317][ C0] ? __kernel_text_address+0xd/0x30 [ 528.338343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.338370][ C0] ? unwind_get_return_address+0x4d/0x90 [ 528.338399][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 528.338424][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.338451][ C0] ? arch_stack_walk+0xfb/0x150 [ 528.338481][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.338509][ C0] ? lock_acquire+0x115/0x350 [ 528.338538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.338573][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 528.338597][ C0] rtnetlink_rcv_msg+0x802/0xc00 [ 528.338625][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 528.338649][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 528.338679][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.338706][ C0] ? __lock_acquire+0x747/0x2de0 [ 528.338742][ C0] netlink_rcv_skb+0x226/0x4a0 [ 528.338775][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 528.338801][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 528.338844][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.338875][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 528.338912][ C0] netlink_unicast+0x8ef/0xa80 [ 528.338954][ C0] netlink_sendmsg+0x884/0xba0 [ 528.338994][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.339029][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.339056][ C0] ? aa_sock_msg_perm+0x144/0x210 [ 528.339103][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.339130][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 528.339164][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.339194][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.339226][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 528.339263][ C0] __sys_sendto+0x408/0x5a0 [ 528.339287][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 528.339325][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 528.339348][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.339385][ C0] ? trace_irq_disable+0x3b/0x140 [ 528.339424][ C0] ? rcu_is_watching+0x16/0xb0 [ 528.339454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 528.339486][ C0] __x64_sys_sendto+0xde/0x100 [ 528.339513][ C0] do_syscall_64+0x166/0x520 [ 528.339543][ C0] ? trace_irq_disable+0x3b/0x140 [ 528.339569][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.339597][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.339621][ C0] RIP: 0033:0x7f4976b5fd8e [ 528.339642][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 528.339663][ C0] RSP: 002b:00007ffe1b71b738 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 528.339692][ C0] RAX: ffffffffffffffda RBX: 0000555558b8d500 RCX: 00007f4976b5fd8e [ 528.339709][ C0] RDX: 0000000000000084 RSI: 00007f4977954670 RDI: 0000000000000003 [ 528.339725][ C0] RBP: 0000000000000001 R08: 00007ffe1b71b7b4 R09: 000000000000000c [ 528.339740][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 528.339754][ C0] R13: 0000000000000000 R14: 00007f4977954670 R15: 0000000000000000 [ 528.339783][ C0] [ 528.531182][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 530.239871][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 530.250546][ T33] Tainted: [L]=SOFTLOCKUP [ 530.254856][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 530.264907][ T33] Call Trace: [ 530.268185][ T33] [ 530.271106][ T33] vpanic+0x56d/0xa60 [ 530.275100][ T33] ? __pfx___schedule+0x10/0x10 [ 530.279952][ T33] ? __pfx_vpanic+0x10/0x10 [ 530.284459][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 530.290112][ T33] panic+0xc5/0xd0 [ 530.293846][ T33] ? __pfx_panic+0x10/0x10 [ 530.298270][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 530.303731][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 530.309108][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 530.315265][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 530.321418][ T33] watchdog+0x1030/0x1030 [ 530.325754][ T33] ? watchdog+0x1c7/0x1030 [ 530.330185][ T33] kthread+0x38b/0x480 [ 530.334249][ T33] ? __pfx_watchdog+0x10/0x10 [ 530.338919][ T33] ? __pfx_kthread+0x10/0x10 [ 530.343511][ T33] ret_from_fork+0x514/0xb70 [ 530.348106][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 530.353212][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 530.358840][ T33] ? __switch_to+0xc89/0x1420 [ 530.363527][ T33] ? __pfx_kthread+0x10/0x10 [ 530.368113][ T33] ret_from_fork_asm+0x1a/0x30 [ 530.372887][ T33] [ 530.376124][ T33] Kernel Offset: disabled [ 530.380435][ T33] Rebooting in 86400 seconds..