last executing test programs: 25m9.749753661s ago: executing program 0 (id=103): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000440)=@chain={'key_or_keyring:', r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) 25m8.267516873s ago: executing program 0 (id=105): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a800, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x134e8c}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$netlink(0x10, 0x3, 0x4) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x17) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c9000c000800050016030400"], 0x11) 25m4.409988057s ago: executing program 0 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) fadvise64(0xffffffffffffffff, 0x1000, 0x7d93, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4800, &(0x7f00000004c0)=@rc={0x1f, @none, 0xf7}, 0x80) 25m0.743201399s ago: executing program 0 (id=115): setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) listns(0x0, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40}, 0x20048844) syz_open_dev$evdev(&(0x7f0000000340), 0x6, 0x391083) 24m52.213185481s ago: executing program 0 (id=126): socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 24m50.306829457s ago: executing program 0 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10141) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1255,errors=continue,\x00'/49], 0x1, 0x1535, &(0x7f00000001c0)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000001940)={0x5660, 0x9, [{0x8, 0x1}, {0x3}, {0xe}, {0xf, 0x1}, {0xa}, {0xc}, {0x6}, {0xa, 0x1}, {0xe}]}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xd1, &(0x7f0000001800)={@local, @multicast, @val={@val={0x88a8, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xbb, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x4, 0x1, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x5, 0x0, 0x20}, {"7f8ac5ecbeb91f5b42b2287f27bd7556e6de17fac177089fd1223358b0b4276e01e88cdf0f0c2078b053af5e05e79b94b0f7485ac2a88f292d833b4f06adfc2559911addfd083956455ee9a1b7702fa640371d6c261d23de5fae2e648b656c4397d0b97a251c0d8b4b30df7f42e8dcb2b790850f183a9c6cfe0f0d92d8d0abc2280118f744de3e435dc8ccffc3310000000000"}}}}}}, 0x0) io_uring_setup(0x1b7b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 24m35.145575879s ago: executing program 32 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x10141) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1255,errors=continue,\x00'/49], 0x1, 0x1535, &(0x7f00000001c0)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000001940)={0x5660, 0x9, [{0x8, 0x1}, {0x3}, {0xe}, {0xf, 0x1}, {0xa}, {0xc}, {0x6}, {0xa, 0x1}, {0xe}]}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0xd1, &(0x7f0000001800)={@local, @multicast, @val={@val={0x88a8, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xbb, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x4, 0x1, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x5, 0x0, 0x20}, {"7f8ac5ecbeb91f5b42b2287f27bd7556e6de17fac177089fd1223358b0b4276e01e88cdf0f0c2078b053af5e05e79b94b0f7485ac2a88f292d833b4f06adfc2559911addfd083956455ee9a1b7702fa640371d6c261d23de5fae2e648b656c4397d0b97a251c0d8b4b30df7f42e8dcb2b790850f183a9c6cfe0f0d92d8d0abc2280118f744de3e435dc8ccffc3310000000000"}}}}}}, 0x0) io_uring_setup(0x1b7b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 24m27.564158875s ago: executing program 1 (id=152): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x4208, r0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf25000000000000000000000000000000000a0101010000000000000000000000004e2300004e2400000a0080205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b5070000000000000000000000000000060000000000000009000000000044000000000000000000ffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd70000000"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 24m23.77766595s ago: executing program 1 (id=157): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x3, @sliced={0xfffa, [0x1, 0x7, 0x80, 0x6, 0x8, 0x7, 0x6, 0x200, 0x8d7, 0x8, 0x2, 0x5, 0x1, 0xfffa, 0x13ac, 0x6, 0x8, 0x43, 0x1000, 0x8001, 0x31eb, 0xba, 0x7fff, 0x1cd, 0x1, 0x7, 0x0, 0x4, 0xad9, 0x9797, 0x2, 0xef42, 0x100, 0xfffa, 0xd, 0x89c, 0xed, 0x8, 0x7, 0x3ff, 0x0, 0xfffa, 0x2, 0x7, 0x499, 0x69ac, 0xfff, 0xd1d], 0x9}}) 24m23.577346729s ago: executing program 1 (id=158): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0xdafbe5d6891b6e4) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x2, 0x6, 0x0, r3}) bpf$MAP_CREATE(0x0, 0x0, 0x50) symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000002000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000001fc0)) 24m20.185463654s ago: executing program 1 (id=161): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r1, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x40040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8008804}, 0x20008840) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) readv(r5, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}], 0x3) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8000, &(0x7f0000000280)=ANY=[], 0x1, 0x28d, &(0x7f0000000cc0)="$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") sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 24m13.575819054s ago: executing program 1 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) sched_setaffinity(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r4, &(0x7f0000000080), 0x0) 24m11.534097503s ago: executing program 1 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200814, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0xa, 0x513, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000), 0x0) unshare(0x6a040000) 23m55.734191849s ago: executing program 33 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200814, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0xa, 0x513, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000), 0x0) unshare(0x6a040000) 21m44.595599752s ago: executing program 4 (id=323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="ac010000140008002cbd7000fbdbdf250c00568004006680"], 0x1ac}], 0x1, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21m43.025770153s ago: executing program 4 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) memfd_create(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioperm(0x0, 0x7c9, 0x1) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000600), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 21m39.980205019s ago: executing program 4 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r3, &(0x7f0000000180), 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='4\n', 0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000180), 0x0) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) 21m34.035445166s ago: executing program 4 (id=342): syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0xc5f, &(0x7f0000004800)="$eJzs3U9sHNd5APDvDXfFldzGTJwqThoHm7ZIZcVy9S+iYhXuqqbZFpBlIRR7C8CVSKkLUyRBUo1spC3TSw89BCiKHnIi0BoFEjQw2iLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FFkRYjUhIl/342+e3MvDfz3rzhjCTwmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMRvv3r++Im0xYaBR9AYAOChuDj2leMnt3r+AwBPrMvb/f0fAAAAAAAAAAAAAADYL1IU8UykmLu4liaq5a7GhU795q3xkdGtqx1MVc2Bqnz51Thx8tTpL50ZPtuLFzozH1J/r30mXh+7fL75yuyNufmphYWpyeb4TOfq7OTUjvew2/qbHa1OQPPGGzcnr11baJ588dQdm28NfTD41OGhc8PPH3uuV3Z8ZHR0bKNIo7987b4b0rVdhseBKOJYpHjhuz9O7YgoYvfnovFwx36zg1UnjladGB8ZrToy3WnPLJYbL/VORBHR7KvU6p2jrcciavWH2ofttSKWyuaXDT5adm9srj3fvjI91bzUnl/sLHZmZy6lbmvL/jSjiLMpYjkiVgfv3l09iqhFim89vZau5Ld+VOfhi1Vi8PbtKB5gH3egbGezHrFcPAZjto8NRhGvRYqfvHskrub7THWv+ULEa2X8XsTbZXw5IpUXxumI97e4jng81aKIPy/H/9xamqzuB737yoXfb/7ezLXZvrK9+8rP+Xy4607xiJ4PBzfFh2Of35saUUS7uuOvpfv/ww4AAAAAAAAAAAAAAAAAe+1gFPHpSPHqv/1hlVccVV760+eGf2foF/tzxp+9x37Ksi9GxFKxs5zcAzkx8FK6lNIjziX+KGtEEX+U8/++8agbAwAAAAAAAAAAAAAAAAAA8JFWxI8ixUvvHUnL0T+neGfmevNy+8p0d1bY3ty/vTnT19fX15upijGUlye6y+tLOS7nuP4n3bia8vzCvfpFN7ZynMhxKcflHFdyXM0xBnL9HFsDUS8/TOTlpRyXc1zJcTXHqOX6ObZynMhxKcflHFdyXM0x9sncvQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5IiivhZpPjm19ZSpIhoRUxEN64MPurWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClwVTEP0SK5u+2bq+rRUSq/u86Un47Ha0DZfxEtIbL+HK0zufYrmKt9Y1H0H52p56K+GGkGGy8c3vA8/jXu0u3L4N4++sbS5+pdeNAb+PQB4NPHX763PDo557d7nPaqgFHL3Rmbt5qjo+Mjo71ra7lo3+ib91QPm6xN10nIhbefOuN9vT01Pz9fygvgfus3hvJXRz9YX5ItT1s6uD+73vU9kUzHt2HqO2LZjyavt+W7ngK8CQpn//vR4rfeO/few/87vO/Eb/QXbr9hI+f/vHGdfDS5h3t8Plf21wvP//LJ8FWz/9n+ta9lK/Dei2isXhjrn44orHw5lvHOjfa16euT82cPn78y8PDXz51vH4gonGtMz3V92lPThcAAAAAAAAAAAAAAADAw5OK+K1I0f7hWmpGxK0qX2vo3PDzx54biIG7c/9eH7t8vvnK7I25+amFhanJ5vhM5+rs5NROD9eo0r3GR0YfSGfu6eADbv/Bxiuzc2/Od67/weKW2w81zl9ZWJxvX916cxyMIqLVv+Zo1eDxkdGq0dOd9kxV9dIeJWTWUxH/ESmunm6mz+d1Of9/c4b/Hfn/S5t3tIf5/587tJH/9/FuKHrHTKmIn0aKX/+LZ+PzVTsPxV3nLJf7m0hx9Oxnc7k4UJbrtaH7XoFuZmBZ9n8ixd//7M6yvXzIZzbKnvi5T/A+V47/05Fe+86ffTt+Ja+78/0PW4//oc07ekDvf/hk37pDd7yvYNddJ4//sUjx8jPvxK9Wa/7vQ9//0Xtjw5Fu4Y33czyg8f+lvnVD+bi/tledBwAAAAAAAAAAeIzVUxF/Gym+P1pLZ/K6nfz+3+TmHe3s978+dlcD7vH7X5/qWze5N/MV3XvaGwAAAAB4QtRTET+KFNcX37mdQ31n/ndf/udvbuR/jqRNW6t/5/tY9d6Avcz/7DeUjzux+24DAAAAAAAAAAAAAAAAAADAvpJSEWfyfOoTVT7/5Lbzqa9Eilf/64VcLh0uy/XmgR+qvjcurs8cOz89PduIxfaV6anm2Fz76lRZ95ORYu2vP5vrFtX86r355rtzvG/MxT4fKUa/0yvbnYu9Nzd5dz7wxvp6xImy7McjxX/+3Z1l89TUee7oar8ny7J/FSm++k9blz28UfZUWfbbkeIHX232yh4qy57JL0P91EbZF6/OFg9mYAAAAAAAAAAAAAAAAAAAAPhIqaci/jRS/PeN5du5/Hn+/3rfYuXtr/fN97/JrWqe/6Fq/v/tPt/P/P/VewWWtjsqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8mVIU8VakmLu4llYGy+WuxoXOzM1b4yOjW1c7mKqaA1X58qtx4uSp0186M3y2Fz+8/l77dLw+dvl885XZG3PzUwsLU5PN8ZnO1dnJqR3vYbf1NztanYDmjTduTl67ttA8+eKpOzbfGvpg8KnDQ+eGnz/2XK/s+Mjo6FhfmVr9vo9+l7TN+gNRxF9Gihe+++P0/cGIInZ/Lu5x7TxoB6tOHK06MT4yWnVkutOeWSw3XuqdiCKi2Vep1TtHD2EsdqUVsVQ2v2zw0bJ7Y3Pt+faV6anmpfb8YmexMztzKXVbW/anGUWcTRHLEbE6ePfu6lHEG5HiW0+vpX8ejBjonYcvXhz7yvGT27ejeIB93IGync16xHLxGIzZPjYYRfxjpPjJu0fiXwYjatH9ii9EvFbG70W8Hd3xTuWFcTri/S2uIx5PtSjif8vxP7eW3h0s7wflz1Mtb525NttXtndfeeyfDw/TPr83NaKIH1R3/LX0r36uAQAAAAAAAAAAAAAAAPaRIn45Urz03pFU5QffzinuzFxvXm5fme6m9fVy/3o50+vr6+vN1I2tHCdyXMpxOceVHFdzjCLXz7FVxsb6+kReXspxOceVHFdzjIFcP8dWjhM5LuW4nONKjqs5Ri3Xz7GV40SOSzku57iS42qOsU9y9wAAAAAAAAAAAAAAAAAAgCdLUf2X4ptfW0vrg935pSeiG1fMB/rE+/8AAAD///6O6yw=") socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf40d000857e5037271930e30900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095000008000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x6, 0x0, &(0x7f00000002c0)="b80000050000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x90) 21m32.012651808s ago: executing program 4 (id=345): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x408c4) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012"], 0x28}}, 0x802) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21m30.540179828s ago: executing program 4 (id=348): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) 21m27.426481617s ago: executing program 34 (id=348): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) 7m4.721606988s ago: executing program 5 (id=1572): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000a80)) close(0x3) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 7m2.498105934s ago: executing program 5 (id=1575): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x14, 0x5, {0xc, 0x7, 0x41, 0x3d3f, 0x100, 0xfff, 0x3, 0x58f}}]}}]}, 0x4c}}, 0x24040084) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) 6m59.462547059s ago: executing program 5 (id=1581): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x2002) r1 = syz_io_uring_setup(0x1cfd, &(0x7f0000000400)={0x0, 0x800, 0x2, 0x1, 0x91}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 6m58.844244696s ago: executing program 5 (id=1583): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ce35af41090000000000000000298b070000000000004faa2ae2c084a0ea0000000000007700000c0000200000002000000000000400", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) 6m57.285691555s ago: executing program 5 (id=1586): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x190080f, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) 6m56.506462019s ago: executing program 5 (id=1590): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)) dup3(r1, r0, 0x0) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x7, 0x0, 0x0) 6m55.556497556s ago: executing program 35 (id=1590): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)) dup3(r1, r0, 0x0) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x7, 0x0, 0x0) 4m54.687884481s ago: executing program 8 (id=1909): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3, 0x7}}, 0x10) 4m54.160967381s ago: executing program 8 (id=1912): socket(0x400000000010, 0x3, 0x2) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) 4m50.67412766s ago: executing program 8 (id=1928): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8054}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6(0xa, 0x80000, 0x295) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', &(0x7f00000003c0)='tmpfs\x00', 0x0, 0x0) 4m49.934654347s ago: executing program 8 (id=1930): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 4m49.115142686s ago: executing program 8 (id=1932): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x480, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x1c}}, 0x8800) r1 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000300), 0x0, 0x50ed, &(0x7f00000051c0)="$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") mount(0x0, &(0x7f0000005140)='./file0\x00', 0x0, 0x20, &(0x7f0000005200)='compress=zstd:15\x00') ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffc, 0x0, 0x80, @scatter={0x0, 0x0, &(0x7f0000000940)}, 0x0, 0x0, 0x5, 0x10002, 0xffffffffffffffff, 0x0}) r2 = openat(r1, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x1b6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$uinput_user_dev(r2, &(0x7f0000000340)={'syz1\x00', {0x2, 0x956e, 0x9, 0x4}, 0x47, [0x4, 0x10000, 0x400009, 0x0, 0x101, 0x6, 0x7fff, 0x3, 0x3, 0x4, 0x0, 0xc, 0xa95d, 0x6, 0xfffffffa, 0xfffffffe, 0x0, 0x8f, 0x7f, 0x6, 0x7, 0x8, 0x80000000, 0xf, 0x5, 0x9, 0xc, 0x8, 0xb1c1, 0x8, 0x400, 0x2, 0x1, 0x7f, 0xd, 0x6e, 0x40, 0x9, 0x4, 0x6, 0x100, 0x4, 0x4, 0x3, 0x24003, 0xe, 0x2, 0x7, 0x4e, 0x4, 0x1000, 0xc3cb, 0x5, 0x77, 0x5, 0x8, 0xffff0000, 0x6, 0x8143, 0x4, 0x6, 0xfffffffb, 0x10001, 0x16e], [0x5, 0x1, 0x2, 0x7e, 0x8bfc, 0xd, 0x3, 0xe, 0x4, 0x0, 0x8, 0xa, 0xf3, 0x3, 0x9, 0x2, 0xa, 0x7d87, 0x4, 0x7, 0x0, 0x200, 0x3b, 0xfe, 0x0, 0x9, 0x9042, 0x91cf, 0xa, 0x7, 0x400, 0x10000, 0x5, 0x4, 0x7, 0x8, 0x6, 0x310c, 0xf87, 0x2, 0x9, 0x5, 0xf00000, 0x8, 0x10, 0x0, 0x1ff, 0x9, 0x200, 0x5, 0x0, 0x4, 0x3, 0x0, 0x9, 0x28000000, 0xa, 0x6, 0x8, 0x9, 0x3a8, 0x6, 0x3b, 0x101], [0x8a, 0x7, 0x2, 0x12, 0x80, 0x7, 0x8, 0x8001, 0x5, 0x101, 0x1, 0x2, 0x6, 0x7, 0x3, 0x9, 0x3, 0x0, 0xfffffffc, 0xe19, 0x7, 0x4, 0x3, 0x8, 0x0, 0x5, 0xf5, 0x2, 0x856f, 0x355, 0x4, 0x6, 0x7, 0x3ff, 0x1, 0x8b20, 0x9, 0x5, 0xb7, 0x1000, 0xfffff2c6, 0xffff, 0x1, 0x82ab, 0x6, 0x101, 0xf6a0, 0x4, 0xfffffff2, 0x6, 0x4, 0x5096b07b, 0x323a, 0xd2, 0x8, 0x6, 0x7, 0x9, 0x6, 0x0, 0xc279, 0x3, 0x50f, 0x1], [0x4, 0x4, 0x3, 0x3, 0x2, 0x10, 0x1, 0x8, 0x7, 0x9, 0x1, 0x2, 0x9, 0x7, 0x6, 0xc, 0x1, 0xfffffff9, 0x5, 0xfff, 0x7, 0x6, 0x6, 0x1, 0x9, 0x8, 0x0, 0x1c000000, 0x1, 0x9, 0x5, 0xf9b, 0x5, 0x5, 0xf226, 0x5, 0x8, 0x6, 0x3, 0x0, 0x1000, 0x3, 0x1, 0x4, 0x12, 0xf, 0x1000, 0x1, 0x9, 0x5, 0xfffffff6, 0x7ff, 0x6, 0x4, 0x5, 0x9, 0x1, 0xfffffff8, 0x4, 0x4, 0x3c5, 0x0, 0x2, 0x1bf]}, 0x45c) fsync(r2) 4m46.533214537s ago: executing program 8 (id=1939): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x14) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x4}], 0x1, 0xffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4m45.493560906s ago: executing program 36 (id=1939): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x14) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x4}], 0x1, 0xffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m50.945347649s ago: executing program 3 (id=2041): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) 3m50.395362794s ago: executing program 3 (id=2044): io_uring_setup(0x4a88, &(0x7f00000004c0)={0x0, 0x4178, 0x400, 0x1, 0x803da}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18}, 0xc020) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0x20ac1f87, 0x8, 0x6, 0x4, 0x4, 0x8, 0x4, 0x6, 0x1, 0x1932be21, 0x1000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xff, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m49.789737386s ago: executing program 3 (id=2046): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000001c0)='ntfs\x00', 0xc9401, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRES8=r0, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0, 0x40, 0x1}) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5f9a3000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 3m45.516628313s ago: executing program 3 (id=2055): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x8, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/19, 0x13}, 0x3}], 0x1, 0x40000083, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000000240)="89ba41c97928dec7cec15a160d3dba2553b519a795020072ae0029d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de000000e0ff000000000000000000f1d3b9821c18", 0x80) 3m44.922760484s ago: executing program 3 (id=2058): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x5, 0x0, 0x8, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x20037}, 0x60) listen(r0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) 3m44.181613252s ago: executing program 3 (id=2060): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24008000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) socket$xdp(0x2c, 0x3, 0x0) 3m27.925747747s ago: executing program 37 (id=2060): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24008000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r0}, 0x2) socket$xdp(0x2c, 0x3, 0x0) 2m39.83714574s ago: executing program 7 (id=2130): r0 = io_uring_setup(0x4a82, &(0x7f0000000180)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xa26}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfe) syz_emit_ethernet(0x38, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.036450337s ago: executing program 7 (id=2131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.5732825s ago: executing program 7 (id=2134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b91f, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x1, 0xf}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x1, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000140)="fad33075218151db00316f3a277f", 0x3a, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 2m28.430787716s ago: executing program 7 (id=2140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72e0, 0x0, 0x40000, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') 2m26.555885509s ago: executing program 7 (id=2141): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m18.113266554s ago: executing program 7 (id=2148): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c6167730007020000000002000000", 0x36) 2m2.327404808s ago: executing program 38 (id=2148): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c6167730007020000000002000000", 0x36) 24.652307617s ago: executing program 9 (id=2245): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x44, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f00000006c0)={0x7, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x40006, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x11, 0x27, 0x7, 0xf8d1}, {0xd, 0x8, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0x80000008, 0x10, 0x1, 0x0, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x80000001, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x1, 0x2000001, 0x7}, {0x80000001, 0x200, 0x6, 0x68be, 0x8, 0x2}]}) 23.075758986s ago: executing program 9 (id=2247): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = memfd_create(0x0, 0x1) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200"], 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000140)={0x1, 0x2, "e3e7"}) lseek(r3, 0x86, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x701, 0x0, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000400)=""/62) 19.647548145s ago: executing program 2 (id=2249): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r0, 0x1) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x82, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x1ae}}}, &(0x7f0000000780)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604110, &(0x7f0000000bc0)={0x0, [[0x65ad, 0x0, 0x0, 0xc, 0x40000200, 0x0, 0x5, 0xfffffffd], [0x14, 0x100, 0x101, 0xfffffffc, 0x407f, 0xfffffffe, 0x4, 0x8], [0x2, 0x8, 0x44, 0x2, 0x1, 0x93c7, 0x8]], '\x00', [{0x0, 0x3}, {0xffffffff}, {0x400}, {0xffffffff, 0x4a}, {0x2000005}, {0x2, 0x22c685d3}, {0xf68f}, {0xb, 0xfffffff8}, {0xc51}, {0x7334486a, 0xa6a6}, {0x20000, 0xf}, {0x5e0f, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x20}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x7bd, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000400)={{0x5, 0x1, 0x7, 0x80000001, 'syz1\x00', 0x4}, 0x6, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x5, 'syz1\x00', 0x0}) 18.521116175s ago: executing program 2 (id=2250): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44) 15.425603474s ago: executing program 6 (id=2251): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 14.472034765s ago: executing program 9 (id=2252): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = open(0x0, 0x80242, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x2020) pipe2(0x0, 0x4000) sendmsg$nl_generic(r3, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x200080c1) 13.141188189s ago: executing program 2 (id=2253): openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write(r0, &(0x7f0000000000), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat(0xffffffffffffff9c, 0x0, 0x5d1043, 0x89) gettid() timer_create(0x2, 0x0, &(0x7f0000000400)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 12.106701824s ago: executing program 9 (id=2254): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/9, 0x9) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x4004000) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2815\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0x4f, 0x2000006, 0x77fd]}) close(r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 11.874256784s ago: executing program 9 (id=2255): inotify_init1(0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r3, &(0x7f0000000040)='0\x00', 0x2) 10.011769615s ago: executing program 6 (id=2256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1\n', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x3, 0x6, 0x40000002, 0x247, 0x19, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x6) write(r1, &(0x7f0000000d00)='777', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='0\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dlmfs_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000001000)='./dlmfs_mnt\x00', &(0x7f0000000300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs_mnt/domain1\x00', 0x1ff) write(r4, &(0x7f0000001300)='EX', 0x1) 9.836706361s ago: executing program 9 (id=2257): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x202001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 9.586463673s ago: executing program 6 (id=2258): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe2, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x12, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc3, '\x00', 0x0, r4, 0x1, 0x2, 0x4}, 0x50) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.993126067s ago: executing program 2 (id=2259): socket$inet6(0xa, 0x3, 0x87) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x28040680) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$netlink(0x10, 0x3, 0x0) 6.701506643s ago: executing program 6 (id=2260): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) shutdown(r0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/sem\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f0000000100)=""/9, 0xfffffd87) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xffe) 4.126615143s ago: executing program 2 (id=2261): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x38f9, 0x0) fcntl$setstatus(r5, 0x4, 0x42c00) fcntl$setstatus(r5, 0x4, 0x2400) write(r3, &(0x7f0000000040), 0xffffff4a) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r7, 0xc138fd03, &(0x7f0000000000)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) 2.720378351s ago: executing program 6 (id=2262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$mtd(0x0, 0x260c, 0xa02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000003c0)={0x32, 0xa, 0x1, "4a6535d359a9779c16cc07f4e70156e42a022ece000000005000", 0x30383653}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 181.723834ms ago: executing program 2 (id=2263): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x17f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0xb4}}, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000440)={0x11, 0x17, 0x1, {0x8, './config'}}, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f0000000200)=0x8) 0s ago: executing program 6 (id=2264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 5868] genl_rcv+0x28/0x40 [ 1398.955131][T15868] netlink_unicast+0x7bd/0x940 [ 1398.955168][T15868] netlink_sendmsg+0x7c3/0xae0 [ 1398.955199][T15868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1398.955232][T15868] ? apparmor_socket_sendmsg+0x98/0x360 [ 1398.955252][T15868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1398.955276][T15868] sock_sendmsg_nosec+0x13a/0x180 [ 1398.955306][T15868] ____sys_sendmsg+0x54e/0x850 [ 1398.955332][T15868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1398.955361][T15868] ? import_iovec+0x73/0xa0 [ 1398.955383][T15868] ___sys_sendmsg+0x2a5/0x360 [ 1398.955403][T15868] ? __lock_acquire+0x747/0x2de0 [ 1398.955429][T15868] ? __pfx____sys_sendmsg+0x10/0x10 [ 1398.955479][T15868] ? __fget_files+0x3a2/0x420 [ 1398.955500][T15868] ? __fget_files+0x2a/0x420 [ 1398.955528][T15868] __x64_sys_sendmsg+0x1b1/0x290 [ 1398.955552][T15868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1398.955581][T15868] ? handle_softirqs+0x704/0x840 [ 1398.955612][T15868] do_syscall_64+0x166/0x520 [ 1398.955635][T15868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.955652][T15868] ? clear_bhb_loop+0x70/0xc0 [ 1398.955673][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.955690][T15868] RIP: 0033:0x7fe1d2d9e159 [ 1398.955707][T15868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.955722][T15868] RSP: 002b:00007fe1d3cfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1398.955741][T15868] RAX: ffffffffffffffda RBX: 00007fe1d3025fa0 RCX: 00007fe1d2d9e159 [ 1398.955754][T15868] RDX: 0000000000000800 RSI: 00002000000029c0 RDI: 0000000000000006 [ 1398.955765][T15868] RBP: 00007fe1d2e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1398.955776][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1398.955786][T15868] R13: 00007fe1d3026038 R14: 00007fe1d3025fa0 R15: 00007ffef2d84a68 [ 1398.955812][T15868] [ 1399.618215][T15870] FAULT_INJECTION: forcing a failure. [ 1399.618215][T15870] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.618250][T15870] CPU: 0 UID: 0 PID: 15870 Comm: syz.6.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.618276][T15870] Tainted: [L]=SOFTLOCKUP [ 1399.618282][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1399.618293][T15870] Call Trace: [ 1399.618300][T15870] [ 1399.618307][T15870] dump_stack_lvl+0xe8/0x150 [ 1399.618338][T15870] should_fail_ex+0x3eb/0x540 [ 1399.618371][T15870] should_failslab+0xa8/0x100 [ 1399.618399][T15870] __kmalloc_node_noprof+0xfb/0x720 [ 1399.618419][T15870] ? __get_vm_area_node+0x200/0x2f0 [ 1399.618436][T15870] ? __get_vm_area_node+0x283/0x2f0 [ 1399.618452][T15870] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1399.618470][T15870] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1399.618495][T15870] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1399.618540][T15870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1399.618562][T15870] ? __fget_files+0x2a/0x420 [ 1399.618586][T15870] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1399.618612][T15870] __vmalloc_noprof+0xd2/0x120 [ 1399.618630][T15870] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1399.618657][T15870] bpf_prog_alloc_no_stats+0x47/0x550 [ 1399.618681][T15870] ? bpf_prog_alloc+0x2a/0x1a0 [ 1399.618708][T15870] bpf_prog_alloc+0x3c/0x1a0 [ 1399.618735][T15870] bpf_prog_load+0x7f8/0x1c60 [ 1399.618770][T15870] ? __pfx_bpf_prog_load+0x10/0x10 [ 1399.618808][T15870] ? __might_fault+0xaf/0x130 [ 1399.618831][T15870] __sys_bpf+0xd86/0xe00 [ 1399.618862][T15870] ? __pfx___sys_bpf+0x10/0x10 [ 1399.618889][T15870] ? do_futex+0x3e7/0x4e0 [ 1399.618928][T15870] ? rcu_is_watching+0x16/0xb0 [ 1399.618958][T15870] __x64_sys_bpf+0xba/0xd0 [ 1399.618983][T15870] do_syscall_64+0x166/0x520 [ 1399.619007][T15870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.619024][T15870] ? clear_bhb_loop+0x70/0xc0 [ 1399.619045][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.619062][T15870] RIP: 0033:0x7fdf6539e159 [ 1399.619077][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.619092][T15870] RSP: 002b:00007fdf66283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1399.619111][T15870] RAX: ffffffffffffffda RBX: 00007fdf65625fa0 RCX: 00007fdf6539e159 [ 1399.619124][T15870] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1399.619134][T15870] RBP: 00007fdf6543506b R08: 0000000000000000 R09: 0000000000000000 [ 1399.619145][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.619155][T15870] R13: 00007fdf65626038 R14: 00007fdf65625fa0 R15: 00007ffc41d7db18 [ 1399.619180][T15870] [ 1399.619210][T15870] syz.6.1949: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1399.619274][T15870] CPU: 0 UID: 0 PID: 15870 Comm: syz.6.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.619295][T15870] Tainted: [L]=SOFTLOCKUP [ 1399.619302][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1399.619311][T15870] Call Trace: [ 1399.619318][T15870] [ 1399.619324][T15870] dump_stack_lvl+0xe8/0x150 [ 1399.619351][T15870] warn_alloc+0x24d/0x270 [ 1399.619376][T15870] ? __pfx_warn_alloc+0x10/0x10 [ 1399.619402][T15870] ? __kmalloc_node_noprof+0x4d2/0x720 [ 1399.619422][T15870] ? __get_vm_area_node+0x200/0x2f0 [ 1399.619438][T15870] ? __get_vm_area_node+0x283/0x2f0 [ 1399.619454][T15870] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1399.619472][T15870] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1399.619497][T15870] __vmalloc_node_range_noprof+0xa10/0x16f0 [ 1399.619542][T15870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1399.619564][T15870] ? __fget_files+0x2a/0x420 [ 1399.619587][T15870] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1399.619610][T15870] __vmalloc_noprof+0xd2/0x120 [ 1399.619629][T15870] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1399.619656][T15870] bpf_prog_alloc_no_stats+0x47/0x550 [ 1399.619680][T15870] ? bpf_prog_alloc+0x2a/0x1a0 [ 1399.619706][T15870] bpf_prog_alloc+0x3c/0x1a0 [ 1399.619733][T15870] bpf_prog_load+0x7f8/0x1c60 [ 1399.619767][T15870] ? __pfx_bpf_prog_load+0x10/0x10 [ 1399.619805][T15870] ? __might_fault+0xaf/0x130 [ 1399.619827][T15870] __sys_bpf+0xd86/0xe00 [ 1399.619857][T15870] ? __pfx___sys_bpf+0x10/0x10 [ 1399.619885][T15870] ? do_futex+0x3e7/0x4e0 [ 1399.619924][T15870] ? rcu_is_watching+0x16/0xb0 [ 1399.619954][T15870] __x64_sys_bpf+0xba/0xd0 [ 1399.619979][T15870] do_syscall_64+0x166/0x520 [ 1399.620002][T15870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.620019][T15870] ? clear_bhb_loop+0x70/0xc0 [ 1399.620039][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.620056][T15870] RIP: 0033:0x7fdf6539e159 [ 1399.620070][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.620084][T15870] RSP: 002b:00007fdf66283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1399.620101][T15870] RAX: ffffffffffffffda RBX: 00007fdf65625fa0 RCX: 00007fdf6539e159 [ 1399.620113][T15870] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1399.620123][T15870] RBP: 00007fdf6543506b R08: 0000000000000000 R09: 0000000000000000 [ 1399.620134][T15870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.620144][T15870] R13: 00007fdf65626038 R14: 00007fdf65625fa0 R15: 00007ffc41d7db18 [ 1399.620170][T15870] [ 1399.685545][T15870] Mem-Info: [ 1399.685560][T15870] active_anon:11809 inactive_anon:17822 isolated_anon:0 [ 1399.685560][T15870] active_file:20941 inactive_file:41627 isolated_file:0 [ 1399.685560][T15870] unevictable:0 dirty:171 writeback:0 [ 1399.685560][T15870] slab_reclaimable:12252 slab_unreclaimable:102743 [ 1399.685560][T15870] mapped:31879 shmem:20548 pagetables:2141 [ 1399.685560][T15870] sec_pagetables:0 bounce:0 [ 1399.685560][T15870] kernel_misc_reclaimable:0 [ 1399.685560][T15870] free:1263914 free_pcp:20407 free_cma:0 [ 1399.685605][T15870] Node 0 active_anon:47236kB inactive_anon:71288kB active_file:83760kB inactive_file:166312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127516kB dirty:684kB writeback:0kB shmem:82192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13312kB pagetables:8448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1399.685672][T15870] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1399.685712][T15870] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.685763][T15870] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1399.685813][T15870] Node 0 DMA32 free:1092876kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47236kB inactive_anon:71288kB active_file:83760kB inactive_file:166312kB unevictable:0kB writepending:684kB zspages:0kB present:3129332kB managed:2546544kB mlocked:0kB bounce:0kB free_pcp:81628kB local_pcp:81628kB free_cma:0kB [ 1399.685862][T15870] lowmem_reserve[]: 0 0 0 0 0 [ 1399.685889][T15870] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.685950][T15870] lowmem_reserve[]: 0 0 0 0 0 [ 1399.685977][T15870] Node 1 Normal free:3947452kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.686022][T15870] lowmem_reserve[]: 0 0 0 0 0 [ 1399.686049][T15870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1399.686185][T15870] Node 0 DMA32: 2699*4kB (UME) 594*8kB (UME) 181*16kB (UME) 830*32kB (UME) 435*64kB (UME) 191*128kB (UME) 63*256kB (UM) 27*512kB (UME) 7*1024kB (UME) 12*2048kB (UM) 228*4096kB (UM) = 1092876kB [ 1399.686334][T15870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1399.686430][T15870] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 10*16kB (UM) 4*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3947452kB [ 1399.686568][T15870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1399.686581][T15870] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1399.686594][T15870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1399.686607][T15870] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1399.686619][T15870] 82963 total pagecache pages [ 1399.686626][T15870] 2 pages in swap cache [ 1399.686632][T15870] Free swap = 124988kB [ 1399.686638][T15870] Total swap = 124996kB [ 1399.686665][T15870] 2097051 pages RAM [ 1399.686671][T15870] 0 pages HighMem/MovableOnly [ 1399.686677][T15870] 428799 pages reserved [ 1399.686683][T15870] 0 pages cma reserved [ 1400.908949][T14304] Bluetooth: hci3: command tx timeout [ 1401.022318][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 1401.380245][T15875] loop6: detected capacity change from 0 to 32768 [ 1401.594679][T15875] Bad index:0 in slot in dtpage [ 1401.594679][T15875] [ 1401.594695][T15875] ERROR: (device loop6): dtSearch: DT_GETPAGE: dtree page corrupt [ 1401.594695][T15875] [ 1401.618053][T15875] ERROR: (device loop6): remounting filesystem as read-only [ 1401.618082][T15875] jfs_rename did not expect dtDelete to return rc = -5 [ 1401.618107][T15875] ERROR: (device loop6): jfs_rename: [ 1401.618107][T15875] [ 1402.295357][T15880] loop6: detected capacity change from 0 to 128 [ 1402.995378][ T5613] Bluetooth: hci3: command tx timeout [ 1408.822623][T15896] FAULT_INJECTION: forcing a failure. [ 1408.822623][T15896] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.822653][T15896] CPU: 0 UID: 0 PID: 15896 Comm: syz.2.1963 Tainted: G L syzkaller #0 PREEMPT(full) [ 1408.822676][T15896] Tainted: [L]=SOFTLOCKUP [ 1408.822683][T15896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1408.822693][T15896] Call Trace: [ 1408.822700][T15896] [ 1408.822707][T15896] dump_stack_lvl+0xe8/0x150 [ 1408.822740][T15896] should_fail_ex+0x3eb/0x540 [ 1408.822772][T15896] should_failslab+0xa8/0x100 [ 1408.822799][T15896] ? dst_alloc+0x105/0x170 [ 1408.822825][T15896] kmem_cache_alloc_noprof+0x9c/0x600 [ 1408.822844][T15896] ? read_seqbegin+0x123/0x180 [ 1408.822863][T15896] ? dst_alloc+0x105/0x170 [ 1408.822893][T15896] dst_alloc+0x105/0x170 [ 1408.822915][T15896] ? ip_check_mc_rcu+0x407/0x7c0 [ 1408.822940][T15896] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1408.823070][T15896] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1408.823100][T15896] ip_route_output_key_hash+0x18d/0x2a0 [ 1408.823129][T15896] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1408.823160][T15896] ? lock_acquire+0x115/0x350 [ 1408.823189][T15896] ip_route_output_flow+0x2a/0x150 [ 1408.823213][T15896] ? security_sk_classify_flow+0x6d/0x150 [ 1408.823264][T15896] udp_sendmsg+0x144a/0x2140 [ 1408.823314][T15896] ? __pfx_udp_sendmsg+0x10/0x10 [ 1408.823339][T15896] ? __css_rstat_updated+0x237/0x540 [ 1408.823370][T15896] ? current_check_autobind_udp_socket+0x26c/0x5b0 [ 1408.823405][T15896] ? aa_sock_msg_perm+0xfc/0x210 [ 1408.823425][T15896] ? sock_rps_record_flow+0x19/0x350 [ 1408.823454][T15896] ? inet_sendmsg+0x23e/0x320 [ 1408.823485][T15896] ? apparmor_socket_sendmsg+0x98/0x360 [ 1408.823504][T15896] ? __pfx_inet_sendmsg+0x10/0x10 [ 1408.823529][T15896] sock_sendmsg_nosec+0x10e/0x180 [ 1408.823558][T15896] ____sys_sendmsg+0x54e/0x850 [ 1408.823583][T15896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.823612][T15896] ? import_iovec+0x73/0xa0 [ 1408.823633][T15896] ___sys_sendmsg+0x2a5/0x360 [ 1408.823659][T15896] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.823679][T15896] ? __lock_acquire+0x747/0x2de0 [ 1408.823737][T15896] __sys_sendmmsg+0x273/0x4d0 [ 1408.823762][T15896] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1408.823782][T15896] ? do_futex+0x3e7/0x4e0 [ 1408.823806][T15896] ? __sys_connect+0x3a1/0x450 [ 1408.823836][T15896] ? rcu_is_watching+0x16/0xb0 [ 1408.823868][T15896] __x64_sys_sendmmsg+0xa0/0xc0 [ 1408.823891][T15896] do_syscall_64+0x166/0x520 [ 1408.823915][T15896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.823932][T15896] ? clear_bhb_loop+0x70/0xc0 [ 1408.823953][T15896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.823970][T15896] RIP: 0033:0x7f867459e159 [ 1408.823986][T15896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.824001][T15896] RSP: 002b:00007f86754f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1408.824019][T15896] RAX: ffffffffffffffda RBX: 00007f8674825fa0 RCX: 00007f867459e159 [ 1408.824032][T15896] RDX: 0400000000000284 RSI: 0000200000004d00 RDI: 0000000000000005 [ 1408.824044][T15896] RBP: 00007f867463506b R08: 0000000000000000 R09: 0000000000000000 [ 1408.824055][T15896] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000000 [ 1408.824065][T15896] R13: 00007f8674826038 R14: 00007f8674825fa0 R15: 00007ffd61c127e8 [ 1408.824091][T15896] [ 1409.698870][ T7299] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1409.848931][ T7299] usb 3-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 1409.875047][ T7299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1409.875118][ T7299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.215386][ T7299] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 1410.597156][T15825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.597234][T15825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.597421][T15825] bridge_slave_0: entered allmulticast mode [ 1410.603046][T15825] bridge_slave_0: entered promiscuous mode [ 1410.641409][T15825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.641571][T15825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.641982][T15825] bridge_slave_1: entered allmulticast mode [ 1410.660076][T15825] bridge_slave_1: entered promiscuous mode [ 1410.851743][ T7299] wwan wwan0: port wwan0qmi0 attached [ 1410.931078][T15825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.952055][T15825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.565072][ T7299] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 7a:06:33:47:32:dd [ 1411.585062][T15944] loop2: detected capacity change from 0 to 512 [ 1411.599933][ T7299] usb 3-1: USB disconnect, device number 33 [ 1411.615982][T15944] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1411.642336][ T7299] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 1413.020189][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1972'. [ 1413.350852][T15952] 9p: Bad value for 'rfdno' [ 1413.365299][ T34] audit: type=1800 audit(2000001034.367:76): pid=15953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1974" name="sysfs" dev="sda1" ino=2098 res=0 errno=0 [ 1413.401075][T15953] EXT4-fs warning (device sda1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 1413.822343][ T7299] wwan wwan0: port wwan0qmi0 disconnected [ 1413.843070][T15825] team0: Port device team_slave_0 added [ 1413.984438][T15825] team0: Port device team_slave_1 added [ 1414.192389][T15825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.192404][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.192446][T15825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.250540][T15825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.250575][T15825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.250597][T15825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.742580][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x49b1 instead [ 1414.742603][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x55f7 instead [ 1414.742617][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xce41 instead [ 1414.742629][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xa787 instead [ 1414.742662][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x1771 instead [ 1414.742675][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x729d instead [ 1414.742688][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xdc7f instead [ 1414.742701][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2c6c instead [ 1414.742714][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x11b0 instead [ 1414.742727][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xc54b instead [ 1414.742740][T15966] jffs2: Further such events for this erase block will not be printed [ 1414.743128][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x3d05 instead [ 1414.743142][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x146b instead [ 1414.743155][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xb0c4 instead [ 1414.743168][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xb801 instead [ 1414.743181][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xbb7d instead [ 1414.743210][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xd1dd instead [ 1414.743224][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xdc70 instead [ 1414.743237][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x5074 instead [ 1414.743250][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x1795 instead [ 1414.743262][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x08d2 instead [ 1415.822531][T15966] jffs2: Further such events for this erase block will not be printed [ 1415.822945][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x0f19 instead [ 1415.822963][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x2f6b instead [ 1415.822976][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x1dd0 instead [ 1415.822988][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x1ce7 instead [ 1415.823020][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x5b98 instead [ 1415.823034][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xa036 instead [ 1415.823047][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x62ac instead [ 1415.823059][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xec9a instead [ 1415.823072][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xe8ea instead [ 1415.823085][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x2a25 instead [ 1415.823100][T15966] jffs2: Further such events for this erase block will not be printed [ 1415.823480][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xcede instead [ 1415.823493][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xfa7e instead [ 1415.823506][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xc6e2 instead [ 1415.823519][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x2561 instead [ 1415.823532][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x808e instead [ 1415.823545][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x1957 instead [ 1415.823576][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x0fde instead [ 1415.823594][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x8592 instead [ 1415.823607][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0x1a33 instead [ 1415.823620][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x440f instead [ 1415.823632][T15966] jffs2: Further such events for this erase block will not be printed [ 1415.914020][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x3970 instead [ 1416.157637][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x1c71 instead [ 1416.157659][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x9a22 instead [ 1416.157672][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xfef8 instead [ 1416.157685][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x83aa instead [ 1416.157720][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x3e67 instead [ 1416.157734][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x4f02 instead [ 1416.157747][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xad29 instead [ 1416.157760][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x2823 instead [ 1416.157773][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x4d31 instead [ 1416.157785][T15966] jffs2: Further such events for this erase block will not be printed [ 1416.158203][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x0282 instead [ 1416.158218][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x6dce instead [ 1416.158231][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x33a7 instead [ 1416.158244][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xb39b instead [ 1416.158276][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xee4c instead [ 1416.158290][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xee00 instead [ 1416.158303][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x784b instead [ 1416.158315][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xc17c instead [ 1416.158328][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x7a07 instead [ 1416.158341][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xa4bd instead [ 1416.158354][T15966] jffs2: Further such events for this erase block will not be printed [ 1416.158748][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x2d1e instead [ 1416.158763][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xb517 instead [ 1416.158776][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xf199 instead [ 1416.158788][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xc991 instead [ 1416.158801][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x09df instead [ 1416.158814][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x186b instead [ 1416.158845][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x8245 instead [ 1416.158859][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x51c0 instead [ 1416.158872][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xa9ab instead [ 1416.158884][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xa7f3 instead [ 1416.158897][T15966] jffs2: Further such events for this erase block will not be printed [ 1416.370870][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xbc9b instead [ 1416.370914][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x4235 instead [ 1416.370928][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x75ea instead [ 1416.370942][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x6019 instead [ 1416.370955][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x58c3 instead [ 1416.370967][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xac35 instead [ 1416.370980][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xbfbb instead [ 1416.370993][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xa150 instead [ 1416.371006][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x6800 instead [ 1416.371019][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x688e instead [ 1416.371072][T15966] jffs2: Further such events for this erase block will not be printed [ 1416.371434][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xcae5 instead [ 1416.371448][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xdb20 instead [ 1416.371461][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x79a2 instead [ 1416.371492][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x603a instead [ 1416.371506][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x8496 instead [ 1416.371519][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x4893 instead [ 1416.371531][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbf7c instead [ 1416.371544][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x16a2 instead [ 1416.371557][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x4b89 instead [ 1416.371569][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xa0a8 instead [ 1416.371582][T15966] jffs2: Further such events for this erase block will not be printed [ 1416.371958][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x2dc5 instead [ 1416.371971][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x3854 instead [ 1416.371984][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xe15d instead [ 1416.371997][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x914e instead [ 1416.372009][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x9b24 instead [ 1416.372045][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x3160 instead [ 1416.372059][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xffec instead [ 1416.372072][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xbeae instead [ 1416.372085][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xc5fb instead [ 1416.372098][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x1054 instead [ 1416.372110][T15966] jffs2: Further such events for this erase block will not be printed [ 1416.973203][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x82c1 instead [ 1416.973226][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x31b6 instead [ 1416.973239][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xfc72 instead [ 1416.973272][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x0cdc instead [ 1416.973286][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xfb50 instead [ 1416.973299][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xb1a7 instead [ 1416.973312][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3e04 instead [ 1416.973325][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x3399 instead [ 1416.973338][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x3dc0 instead [ 1416.973350][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xcb78 instead [ 1416.973363][T15966] jffs2: Further such events for this erase block will not be printed [ 1416.973741][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x5196 instead [ 1416.973754][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x9592 instead [ 1416.973767][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xbf6e instead [ 1416.973780][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x1a32 instead [ 1416.973793][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xeb1b instead [ 1416.973826][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xe3cb instead [ 1416.973839][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x6fe5 instead [ 1416.973852][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x8b05 instead [ 1416.973865][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xa99a instead [ 1416.973878][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x60d8 instead [ 1416.973896][T15966] jffs2: Further such events for this erase block will not be printed [ 1416.974274][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xa6c0 instead [ 1416.974288][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xc528 instead [ 1416.974300][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xfc3e instead [ 1416.974313][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x723c instead [ 1416.974326][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x3e51 instead [ 1416.974339][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x798d instead [ 1416.974351][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x00c5 instead [ 1416.974382][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x808d instead [ 1416.974396][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xae47 instead [ 1416.974409][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x9af5 instead [ 1416.974421][T15966] jffs2: Further such events for this erase block will not be printed [ 1417.199814][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x3ad7 instead [ 1417.199836][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x19a8 instead [ 1417.199850][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x0e6b instead [ 1417.199863][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x899a instead [ 1417.199876][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x24a7 instead [ 1417.199909][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x6ed7 instead [ 1417.199922][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x3a24 instead [ 1417.199936][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x570c instead [ 1417.199955][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xe1c2 instead [ 1417.199968][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x148f instead [ 1417.199981][T15966] jffs2: Further such events for this erase block will not be printed [ 1417.200361][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x7c74 instead [ 1417.200375][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x955a instead [ 1417.200388][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xdfd8 instead [ 1417.200401][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x3f5b instead [ 1417.200414][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x223d instead [ 1417.200426][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x0db7 instead [ 1417.200457][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x1f2a instead [ 1417.200471][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x60b1 instead [ 1417.200483][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x9bf9 instead [ 1417.200496][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x8ec8 instead [ 1417.200508][T15966] jffs2: Further such events for this erase block will not be printed [ 1417.200883][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xb7f6 instead [ 1417.200897][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x5d09 instead [ 1417.200910][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xb46e instead [ 1417.200923][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xf2f9 instead [ 1417.200936][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x7cbd instead [ 1417.200953][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x49fa instead [ 1417.200966][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0f7c instead [ 1417.200979][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x3515 instead [ 1417.201007][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x5b4b instead [ 1417.201020][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x5011 instead [ 1417.201033][T15966] jffs2: Further such events for this erase block will not be printed [ 1417.654366][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xd60b instead [ 1417.654408][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xfc16 instead [ 1417.654422][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x3588 instead [ 1417.654435][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x7802 instead [ 1417.654448][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xb11c instead [ 1417.654461][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x7fb1 instead [ 1417.654474][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x2edf instead [ 1417.654487][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0xfb58 instead [ 1417.654500][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xb6af instead [ 1417.654513][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x2f76 instead [ 1417.654545][T15966] jffs2: Further such events for this erase block will not be printed [ 1417.654916][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xc70b instead [ 1417.654930][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xd867 instead [ 1417.654962][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x845f instead [ 1417.654975][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xc9e3 instead [ 1417.654988][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x5335 instead [ 1417.655001][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0xa423 instead [ 1417.655014][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5606 instead [ 1417.655027][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x1ec0 instead [ 1417.655039][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0xcbf6 instead [ 1417.655052][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x0790 instead [ 1417.655065][T15966] jffs2: Further such events for this erase block will not be printed [ 1417.655445][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xa994 instead [ 1417.655459][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x1cb8 instead [ 1417.655472][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xbf2e instead [ 1417.655485][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xb277 instead [ 1417.655513][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x32ab instead [ 1417.655527][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x5557 instead [ 1417.779710][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x9cd4 instead [ 1417.788662][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x3107 instead [ 1417.788696][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x2ac4 instead [ 1417.788726][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x185a instead [ 1417.788785][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.197129][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x24d7 instead [ 1418.197151][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xb333 instead [ 1418.197165][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x657a instead [ 1418.197178][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x8c08 instead [ 1418.197191][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xe2ca instead [ 1418.197204][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x9f4a instead [ 1418.197236][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5487 instead [ 1418.197249][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x00ff instead [ 1418.197263][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x95eb instead [ 1418.197276][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x63aa instead [ 1418.197289][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.197662][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x2b96 instead [ 1418.197676][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x2152 instead [ 1418.197689][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x34ee instead [ 1418.197702][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xa549 instead [ 1418.197715][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x4ee3 instead [ 1418.197728][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xe287 instead [ 1418.197740][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x4b9b instead [ 1418.197753][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xd7d0 instead [ 1418.197797][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x2254 instead [ 1418.197811][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x288e instead [ 1418.197824][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.198203][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4d8c instead [ 1418.198217][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x1965 instead [ 1418.198230][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x09ad instead [ 1418.198243][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x8da5 instead [ 1418.198256][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x55eb instead [ 1418.198269][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x2621 instead [ 1418.198281][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x9657 instead [ 1418.198294][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xb79c instead [ 1418.198307][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x8bcc instead [ 1418.364978][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x8f69 instead [ 1418.364997][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.365384][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x6cd9 instead [ 1418.365399][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xa397 instead [ 1418.365413][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x7710 instead [ 1418.365426][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xb367 instead [ 1418.365439][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xcb9c instead [ 1418.365452][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0xa975 instead [ 1418.365465][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xe256 instead [ 1418.365496][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x919c instead [ 1418.365510][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x29e5 instead [ 1418.365522][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0xd387 instead [ 1418.365535][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.366004][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xee4c instead [ 1418.366019][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0d7f instead [ 1418.366032][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x41b5 instead [ 1418.366045][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x9c27 instead [ 1418.366058][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x6f26 instead [ 1418.366071][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x768a instead [ 1418.366084][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x596c instead [ 1418.366097][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x17ff instead [ 1418.366109][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x89b3 instead [ 1418.366140][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x9dff instead [ 1418.366154][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.667523][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xeb1c instead [ 1418.667549][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x3f84 instead [ 1418.667563][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0xc46b instead [ 1418.667596][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x7ded instead [ 1418.667610][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0xe476 instead [ 1418.667623][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0xa56f instead [ 1418.667637][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x8453 instead [ 1418.667650][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xd50e instead [ 1418.667663][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xfb08 instead [ 1418.667677][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x5fa6 instead [ 1418.667690][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.668238][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xa0c8 instead [ 1418.668253][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x87f6 instead [ 1418.668285][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x95a7 instead [ 1418.668299][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x3d2c instead [ 1418.668312][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0xc7ae instead [ 1418.668325][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x5f5b instead [ 1418.668338][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x34e4 instead [ 1418.668351][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xf894 instead [ 1418.668364][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xfb92 instead [ 1418.668377][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xe340 instead [ 1418.668390][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.668770][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x557f instead [ 1418.668785][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x3987 instead [ 1418.668798][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xa0c3 instead [ 1418.668811][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x8165 instead [ 1418.668842][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x9857 instead [ 1418.668855][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x75e7 instead [ 1418.668874][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x487f instead [ 1418.668887][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x07fd instead [ 1418.668899][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x81da instead [ 1418.668912][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x2892 instead [ 1418.668925][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.963291][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0xbb67 instead [ 1418.963314][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x345e instead [ 1418.963328][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x330f instead [ 1418.963341][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x8fc5 instead [ 1418.963354][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x2e12 instead [ 1418.963367][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0xdd06 instead [ 1418.963399][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x6ffe instead [ 1418.963412][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x94c4 instead [ 1418.963425][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xde1f instead [ 1418.963438][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x008d instead [ 1418.963451][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.963835][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x656f instead [ 1418.963849][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x99e1 instead [ 1418.963862][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x62b4 instead [ 1418.963875][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x12b9 instead [ 1418.963888][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0xbf6a instead [ 1418.963901][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0xdd10 instead [ 1418.963913][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xbc49 instead [ 1418.963944][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x8ac6 instead [ 1418.963958][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xb842 instead [ 1418.963971][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x2d8c instead [ 1418.963984][T15966] jffs2: Further such events for this erase block will not be printed [ 1418.964360][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xad56 instead [ 1418.964374][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xc644 instead [ 1418.964387][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x3edf instead [ 1418.964400][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xa332 instead [ 1418.964413][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xd109 instead [ 1418.964426][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0xe974 instead [ 1418.964439][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x03a9 instead [ 1419.060757][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x38fa instead [ 1419.060795][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0x450a instead [ 1419.178557][T15825] hsr_slave_0: entered promiscuous mode [ 1419.243434][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xbf8b instead [ 1419.243455][T15966] jffs2: Further such events for this erase block will not be printed [ 1419.243872][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x0c60 instead [ 1419.243887][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xfeb9 instead [ 1419.243930][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xe84b instead [ 1419.243944][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xc450 instead [ 1419.243957][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x50df instead [ 1419.243970][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xfe79 instead [ 1419.243982][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x26a0 instead [ 1419.244001][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x7fdb instead [ 1419.244014][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x2bbe instead [ 1419.244027][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xf3bd instead [ 1419.244039][T15966] jffs2: Further such events for this erase block will not be printed [ 1419.244422][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x3b27 instead [ 1419.244437][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x6f2f instead [ 1419.244450][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x2a0f instead [ 1419.244482][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x662c instead [ 1419.244495][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x25b6 instead [ 1419.244508][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x1116 instead [ 1419.244520][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xee50 instead [ 1419.244533][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x6136 instead [ 1419.244546][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x9bb8 instead [ 1419.244559][T15966] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xd873 instead [ 1419.244571][T15966] jffs2: Further such events for this erase block will not be printed [ 1419.316120][T15825] hsr_slave_1: entered promiscuous mode [ 1419.417452][T15825] debugfs: 'hsr0' already exists in 'hsr' [ 1419.417472][T15825] Cannot create hsr debugfs directory [ 1419.549465][T15966] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1419.549480][T15966] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1420.368227][T15980] loop7: detected capacity change from 0 to 512 [ 1420.399235][T15980] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1423.314576][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.428067][ T34] audit: type=1800 audit(2000001044.418:77): pid=15986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1987" name="bus" dev="tmpfs" ino=3718 res=0 errno=0 [ 1424.041116][T15825] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1424.078410][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1424.104148][T15825] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1424.131958][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1424.144865][T15825] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1424.173856][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1424.184055][T15825] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1424.208111][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1424.225390][T16007] FAULT_INJECTION: forcing a failure. [ 1424.225390][T16007] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.225418][T16007] CPU: 0 UID: 0 PID: 16007 Comm: syz.6.1994 Tainted: G L syzkaller #0 PREEMPT(full) [ 1424.225451][T16007] Tainted: [L]=SOFTLOCKUP [ 1424.225457][T16007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1424.225468][T16007] Call Trace: [ 1424.225475][T16007] [ 1424.225482][T16007] dump_stack_lvl+0xe8/0x150 [ 1424.225512][T16007] should_fail_ex+0x3eb/0x540 [ 1424.225544][T16007] should_failslab+0xa8/0x100 [ 1424.225571][T16007] __kvmalloc_node_noprof+0x171/0x820 [ 1424.225596][T16007] ? ceph_msg_new2+0x3b/0x4d0 [ 1424.225699][T16007] ? kmem_cache_alloc_noprof+0x151/0x600 [ 1424.225718][T16007] ? ceph_msg_new2+0x166/0x4d0 [ 1424.225742][T16007] ? ceph_msg_new2+0x166/0x4d0 [ 1424.225772][T16007] ceph_msg_new2+0x166/0x4d0 [ 1424.225801][T16007] ceph_monc_init+0x691/0xb10 [ 1424.225849][T16007] ceph_create_client+0x225/0x310 [ 1424.225876][T16007] ceph_get_tree+0x1ca/0x1a40 [ 1424.225951][T16007] ? apparmor_capable+0x126/0x170 [ 1424.225981][T16007] vfs_get_tree+0x92/0x2a0 [ 1424.226008][T16007] vfs_cmd_create+0xa2/0x200 [ 1424.226028][T16007] __se_sys_fsconfig+0x6b9/0x810 [ 1424.226049][T16007] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1424.226068][T16007] ? rcu_is_watching+0x16/0xb0 [ 1424.226100][T16007] ? __x64_sys_fsconfig+0x20/0xc0 [ 1424.226119][T16007] do_syscall_64+0x166/0x520 [ 1424.226142][T16007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.226159][T16007] ? clear_bhb_loop+0x70/0xc0 [ 1424.226180][T16007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.226197][T16007] RIP: 0033:0x7fdf6539e159 [ 1424.226213][T16007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.226228][T16007] RSP: 002b:00007fdf66283028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1424.226246][T16007] RAX: ffffffffffffffda RBX: 00007fdf65625fa0 RCX: 00007fdf6539e159 [ 1424.226258][T16007] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1424.226268][T16007] RBP: 00007fdf6543506b R08: 0000000000000000 R09: 0000000000000000 [ 1424.226279][T16007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1424.226289][T16007] R13: 00007fdf65626038 R14: 00007fdf65625fa0 R15: 00007ffc41d7db18 [ 1424.226315][T16007] [ 1424.584623][T16004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1424.963753][T16018] gfs2: gfs2 mount does not exist [ 1425.075248][T15825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.128161][T16024] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 1425.308929][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1996'. [ 1425.340039][T16027] bond1: (slave gretap1): making interface the new active one [ 1425.344322][T16027] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1425.403243][T15825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.433255][T16024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1425.464725][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.466553][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.541285][ T260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.541379][ T260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.562887][T16029] syzkaller0: entered promiscuous mode [ 1425.562908][T16029] syzkaller0: entered allmulticast mode [ 1425.890824][T16038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1426.234935][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2000'. [ 1426.884083][T16046] xt_hashlimit: size too large, truncated to 1048576 [ 1429.066703][T16066] loop2: detected capacity change from 0 to 1024 [ 1430.343016][T15825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.441072][T16108] fuse: Bad value for 'fd' [ 1432.934207][T16115] geneve3: entered promiscuous mode [ 1433.356318][T15825] veth0_vlan: entered promiscuous mode [ 1433.421613][T15825] veth1_vlan: entered promiscuous mode [ 1433.724573][T15825] veth0_macvtap: entered promiscuous mode [ 1433.760507][T15825] veth1_macvtap: entered promiscuous mode [ 1433.831763][T16129] loop2: detected capacity change from 0 to 256 [ 1433.902486][T15825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.009779][T15825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.206406][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.218293][ T62] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.219333][ T62] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.219445][ T62] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.307702][T16133] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2018'. [ 1434.410360][T16133] ip6erspan0: entered promiscuous mode [ 1434.490409][T16137] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1435.064510][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.064550][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.273790][ T5874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.273808][ T5874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.365816][T16163] FAULT_INJECTION: forcing a failure. [ 1440.365816][T16163] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.365864][T16163] CPU: 0 UID: 0 PID: 16163 Comm: syz.6.2025 Tainted: G L syzkaller #0 PREEMPT(full) [ 1440.365888][T16163] Tainted: [L]=SOFTLOCKUP [ 1440.365895][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1440.365905][T16163] Call Trace: [ 1440.365912][T16163] [ 1440.365919][T16163] dump_stack_lvl+0xe8/0x150 [ 1440.365950][T16163] should_fail_ex+0x3eb/0x540 [ 1440.365985][T16163] should_failslab+0xa8/0x100 [ 1440.366013][T16163] __kmalloc_cache_noprof+0x9e/0x600 [ 1440.366034][T16163] ? __pfx_sprintf+0x10/0x10 [ 1440.366129][T16163] ? snd_timer_instance_new+0x51/0x260 [ 1440.366195][T16163] ? snd_timer_instance_new+0x51/0x260 [ 1440.366222][T16163] snd_timer_instance_new+0x51/0x260 [ 1440.366251][T16163] snd_seq_timer_open+0x23e/0x620 [ 1440.366305][T16163] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1440.366333][T16163] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1440.366359][T16163] snd_seq_queue_alloc+0x3ba/0x740 [ 1440.366405][T16163] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 1440.366429][T16163] snd_seq_oss_open+0x657/0xf40 [ 1440.366455][T16163] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1440.366502][T16163] ? rcu_is_watching+0x16/0xb0 [ 1440.366529][T16163] ? trace_contention_end+0x3d/0x140 [ 1440.366571][T16163] ? __pfx___mutex_lock+0x10/0x10 [ 1440.366599][T16163] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1440.366621][T16163] ? __pfx_free_devinfo+0x10/0x10 [ 1440.366641][T16163] ? do_raw_spin_unlock+0xf5/0x200 [ 1440.366662][T16163] ? soundcore_open+0x2da/0x490 [ 1440.366719][T16163] odev_open+0x67/0xa0 [ 1440.366739][T16163] chrdev_open+0x4d9/0x600 [ 1440.366757][T16163] ? __pfx_chrdev_open+0x10/0x10 [ 1440.366775][T16163] ? devcgroup_check_permission+0x31/0x8f0 [ 1440.366805][T16163] ? __pfx_chrdev_open+0x10/0x10 [ 1440.366820][T16163] do_dentry_open+0x80e/0x1360 [ 1440.366845][T16163] vfs_open_consume+0x4a/0x350 [ 1440.366861][T16163] ? path_openat+0x148a/0x1da0 [ 1440.366886][T16163] path_openat+0x14a6/0x1da0 [ 1440.366926][T16163] do_file_open+0x23e/0x4a0 [ 1440.366954][T16163] ? __pfx_do_file_open+0x10/0x10 [ 1440.366995][T16163] ? _raw_spin_unlock+0x28/0x50 [ 1440.367014][T16163] ? alloc_fd+0x6af/0x760 [ 1440.367042][T16163] do_sys_openat2+0x115/0x200 [ 1440.367060][T16163] ? __se_sys_futex+0x3a8/0x450 [ 1440.367078][T16163] ? __pfx_do_sys_openat2+0x10/0x10 [ 1440.367100][T16163] ? rcu_is_watching+0x16/0xb0 [ 1440.367128][T16163] __x64_sys_openat+0x138/0x170 [ 1440.367150][T16163] do_syscall_64+0x166/0x520 [ 1440.367173][T16163] ? trace_irq_disable+0x3b/0x140 [ 1440.367195][T16163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.367213][T16163] ? clear_bhb_loop+0x70/0xc0 [ 1440.367240][T16163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.367257][T16163] RIP: 0033:0x7fdf6539e159 [ 1440.367274][T16163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.367289][T16163] RSP: 002b:00007fdf66283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1440.367308][T16163] RAX: ffffffffffffffda RBX: 00007fdf65625fa0 RCX: 00007fdf6539e159 [ 1440.367320][T16163] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 1440.367332][T16163] RBP: 00007fdf6543506b R08: 0000000000000000 R09: 0000000000000000 [ 1440.367342][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.367353][T16163] R13: 00007fdf65626038 R14: 00007fdf65625fa0 R15: 00007ffc41d7db18 [ 1440.367379][T16163] [ 1443.564258][T16185] 0x00000000000a-0x000000000309 : "" [ 1445.212681][T16185] ftl_cs: FTL header corrupt! [ 1446.226116][T12038] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1446.341647][T16210] kvm: pic: non byte write [ 1446.359891][T16212] kvm: user requested TSC rate below hardware speed [ 1446.374519][T12038] usb 3-1: Using ep0 maxpacket: 16 [ 1446.380788][T12038] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1446.382455][T12038] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.382473][T12038] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1446.423225][T12038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.423248][T12038] usb 3-1: Product: syz [ 1446.423259][T12038] usb 3-1: Manufacturer: syz [ 1446.423272][T12038] usb 3-1: SerialNumber: syz [ 1446.485083][T16213] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 1446.485104][T16213] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer. [ 1446.542652][T12038] usb 3-1: 0:2 : does not exist [ 1446.763937][T12038] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1447.005092][T16217] loop6: detected capacity change from 0 to 32768 [ 1447.006054][T16217] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1447.047933][T16217] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2039 (16217) [ 1447.070991][T16217] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1447.071019][T16217] BTRFS info (device loop6): using crc32c checksum algorithm [ 1447.261985][T16217] BTRFS info (device loop6): rebuilding free space tree [ 1447.331091][T16217] BTRFS info (device loop6): disabling free space tree [ 1447.331146][T16217] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1447.331164][T16217] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1447.371120][T16217] BTRFS info (device loop6): enabling ssd optimizations [ 1447.374159][T16217] BTRFS info (device loop6): turning on async discard [ 1447.374212][T16217] BTRFS info (device loop6): force clearing of disk cache [ 1447.374228][T16217] BTRFS info (device loop6): use zstd compression, level 3 [ 1447.448263][T12038] usb 3-1: USB disconnect, device number 34 [ 1447.753559][T15886] udevd[15886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1448.584409][T16236] fuse: Bad value for 'fd' [ 1449.264534][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 1449.702467][T11611] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1450.768998][T16255] syzkaller0: entered promiscuous mode [ 1450.769037][T16255] syzkaller0: entered allmulticast mode [ 1450.820865][T16255] tipc: Started in network mode [ 1450.820892][T16255] tipc: Node identity a2c70a748606, cluster identity 4711 [ 1450.981437][T16255] tipc: Enabled bearer , priority 0 [ 1451.022644][T16254] tipc: Resetting bearer [ 1451.499115][T16254] tipc: Disabling bearer [ 1451.571670][T16261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2049'. [ 1452.235191][T16253] loop6: detected capacity change from 0 to 40427 [ 1452.263487][T16253] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1452.263507][T16253] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1452.292537][T16253] F2FS-fs (loop6): invalid crc value [ 1452.616393][T16274] lo: left allmulticast mode [ 1452.829997][T16253] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1452.993269][T16253] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1452.993293][T16253] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1453.829538][T16294] ip_tables: iptables: counters copy to user failed while replacing table [ 1457.539078][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2061'. [ 1460.076155][T14778] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.912353][T12038] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1461.040384][T14778] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.265089][T12038] usb 3-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1461.267877][T12038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.267898][T12038] usb 3-1: Product: syz [ 1461.267910][T12038] usb 3-1: Manufacturer: syz [ 1461.267922][T12038] usb 3-1: SerialNumber: syz [ 1463.272673][T12038] usb 3-1: config 0 descriptor?? [ 1463.307132][T12038] ch341 3-1:0.0: ch341-uart converter detected [ 1465.426796][T12038] usb 3-1: failed to receive control message: -71 [ 1465.426842][T12038] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1465.478044][T12038] usb 3-1: USB disconnect, device number 35 [ 1465.498223][T12038] ch341 3-1:0.0: device disconnected [ 1468.395189][T14778] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.061402][T14778] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.423684][T14304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1472.503967][T14304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1472.505304][T14304] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1472.511070][T14304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1472.552182][T14304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1474.224316][ T12] netdevsim netdevsim8 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 1474.664754][T14304] Bluetooth: hci5: command tx timeout [ 1476.743881][T14304] Bluetooth: hci5: command tx timeout [ 1476.772154][ T260] netdevsim netdevsim8 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 1477.158365][T16408] FAULT_INJECTION: forcing a failure. [ 1477.158365][T16408] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1477.158395][T16408] CPU: 0 UID: 0 PID: 16408 Comm: syz.9.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.158425][T16408] Tainted: [L]=SOFTLOCKUP [ 1477.158434][T16408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1477.158449][T16408] Call Trace: [ 1477.158456][T16408] [ 1477.158470][T16408] dump_stack_lvl+0xe8/0x150 [ 1477.158504][T16408] should_fail_ex+0x3eb/0x540 [ 1477.158537][T16408] get_futex_key+0x8e2/0x1580 [ 1477.158574][T16408] ? __pfx_get_futex_key+0x10/0x10 [ 1477.158657][T16408] ? __pfx_futex_wake_mark+0x10/0x10 [ 1477.158682][T16408] futex_wake_op+0x20d/0xdc0 [ 1477.158704][T16408] ? futex_hash+0x4e/0x2b0 [ 1477.158734][T16408] ? futex_wait+0x2a2/0x390 [ 1477.158754][T16408] ? __pfx_futex_wake_op+0x10/0x10 [ 1477.158791][T16408] do_futex+0x480/0x4e0 [ 1477.158811][T16408] ? __pfx_do_futex+0x10/0x10 [ 1477.158826][T16408] ? __fget_files+0x3a2/0x420 [ 1477.158849][T16408] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1477.158882][T16408] __se_sys_futex+0x3a8/0x450 [ 1477.158903][T16408] ? __pfx___se_sys_futex+0x10/0x10 [ 1477.158920][T16408] ? rcu_is_watching+0x16/0xb0 [ 1477.158952][T16408] ? __x64_sys_futex+0x21/0xf0 [ 1477.158971][T16408] do_syscall_64+0x166/0x520 [ 1477.158993][T16408] ? trace_irq_disable+0x3b/0x140 [ 1477.159017][T16408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.159035][T16408] ? clear_bhb_loop+0x70/0xc0 [ 1477.159055][T16408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.159072][T16408] RIP: 0033:0x7f308939e159 [ 1477.159087][T16408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.159101][T16408] RSP: 002b:00007f308a2d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1477.159120][T16408] RAX: ffffffffffffffda RBX: 00007f3089625fa0 RCX: 00007f308939e159 [ 1477.159132][T16408] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 1477.159143][T16408] RBP: 00007f308943506b R08: 0000000000000000 R09: 0000000034fffffd [ 1477.159154][T16408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.159164][T16408] R13: 00007f3089626038 R14: 00007f3089625fa0 R15: 00007fff14469258 [ 1477.159188][T16408] [ 1477.813884][ T260] netdevsim netdevsim8 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 1477.925562][T16409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1477.925675][T16409] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1477.993614][ T13] netdevsim netdevsim8 eth20: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.416861][T14778] bridge_slave_1: left allmulticast mode [ 1478.416884][T14778] bridge_slave_1: left promiscuous mode [ 1478.417091][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.467978][T14778] bridge_slave_0: left allmulticast mode [ 1478.468002][T14778] bridge_slave_0: left promiscuous mode [ 1478.468219][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.522137][T16428] fuse: Bad value for 'fd' [ 1478.823049][T14304] Bluetooth: hci5: command tx timeout [ 1479.172681][T16409] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1479.191709][T16409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1479.191764][T16409] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1479.309005][T16409] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1479.371133][T16409] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1479.371186][T16409] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1479.476958][T16409] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1479.609878][T16409] hwrng_fill thread creation failed [ 1479.863371][T14304] Bluetooth: hci2: command 0x0406 tx timeout [ 1480.287253][T16453] loop9: detected capacity change from 0 to 8 [ 1480.440165][T16453] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1480.440211][T16453] SQUASHFS error: Failed to read block 0x91: -5 [ 1480.440223][T16453] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1480.440233][T16453] SQUASHFS error: Unable to read inode 0x11f [ 1480.702019][T14778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.771289][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.797790][T14778] bond0 (unregistering): Released all slaves [ 1481.227425][T14304] Bluetooth: hci3: command 0x0c1a tx timeout [ 1481.227518][T14304] Bluetooth: hci4: command 0x0406 tx timeout [ 1481.398758][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 1481.459957][T16340] bond0: (slave syz_tun): Releasing backup interface [ 1481.689638][T16455] tipc: Enabled bearer , priority 0 [ 1481.835743][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1481.836286][T16459] syzkaller0: entered promiscuous mode [ 1481.836302][T16459] syzkaller0: entered allmulticast mode [ 1481.838741][T16475] tipc: Resetting bearer [ 1481.943650][ T5613] Bluetooth: hci2: command 0x0406 tx timeout [ 1482.011123][T16486] loop9: detected capacity change from 0 to 256 [ 1482.053523][T16486] exFAT-fs (loop9): error, no upcase table entry. Please run fsck [ 1482.053541][T16486] exFAT-fs (loop9): Filesystem has been set read-only [ 1482.053809][T16486] exFAT-fs (loop9): failed to test first cluster bit of root dir(5) [ 1482.124129][T16473] syzkaller0: entered promiscuous mode [ 1482.124148][T16473] syzkaller0: entered allmulticast mode [ 1482.128430][T16448] tipc: Resetting bearer [ 1482.297764][T16448] tipc: Disabling bearer [ 1483.303612][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 1483.466331][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 1484.749828][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.761545][T16502] loop2: detected capacity change from 0 to 512 [ 1485.147970][T14778] hsr_slave_0: left promiscuous mode [ 1485.162422][T14778] hsr_slave_1: left promiscuous mode [ 1485.163256][T14778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.163293][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.169206][T14778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.169225][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.346558][T14778] veth1_macvtap: left promiscuous mode [ 1485.346591][T14778] veth0_macvtap: left promiscuous mode [ 1485.346703][T14778] veth1_vlan: left promiscuous mode [ 1485.346754][T14778] veth0_vlan: left promiscuous mode [ 1485.383312][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 1485.418217][T16502] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 1486.379314][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 1493.488002][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1493.540633][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1494.031087][T16518] tipc: Enabled bearer , priority 0 [ 1494.051365][T16519] syzkaller0: entered promiscuous mode [ 1494.051384][T16519] syzkaller0: entered allmulticast mode [ 1494.435837][T16519] tipc: Resetting bearer [ 1494.900320][T16519] tipc: Disabling bearer [ 1495.216912][T14712] tipc: Node number set to 616630900 [ 1495.233740][ T7301] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1495.402985][ T7301] usb 10-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 1495.421622][ T7301] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.421664][ T7301] usb 10-1: config 0 has no interfaces? [ 1495.421689][ T7301] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.571146][ T7301] usb 10-1: config 0 descriptor?? [ 1495.950160][T16563] loop6: detected capacity change from 0 to 2048 [ 1495.971191][T16563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1496.022161][ T34] audit: type=1800 audit(2000001117.032:78): pid=16563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2103" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 1497.087478][T16574] loop7: detected capacity change from 0 to 32768 [ 1497.088397][T16574] xfs: Deprecated parameter 'noattr2' [ 1497.088431][T16574] XFS: noattr2 mount option is deprecated. [ 1497.088448][T16574] xfs: Deprecated parameter 'noattr2' [ 1497.088458][T16574] XFS: noattr2 mount option is deprecated. [ 1497.186310][T16574] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1497.289083][T16574] XFS (loop7): Ending clean mount [ 1497.293075][T16574] XFS (loop7): Quotacheck needed: Please wait. [ 1498.064806][ T7301] usb 10-1: USB disconnect, device number 2 [ 1498.178749][T16592] loop6: detected capacity change from 0 to 1024 [ 1498.209704][T16592] EXT4-fs: Ignoring removed orlov option [ 1498.274603][T16592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1498.486442][T16574] XFS (loop7): Quotacheck: Done. [ 1499.330370][T11877] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1499.608909][T14778] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.791536][T16608] loop9: detected capacity change from 0 to 512 [ 1499.811582][T16608] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1501.738793][ T5268] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1501.761825][T16397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.761922][T16397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.762075][T16397] bridge_slave_0: entered allmulticast mode [ 1501.804920][T16397] bridge_slave_0: entered promiscuous mode [ 1501.825761][T16397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.858712][T16397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.858915][T16397] bridge_slave_1: entered allmulticast mode [ 1501.894856][T16397] bridge_slave_1: entered promiscuous mode [ 1501.952233][ T7301] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1502.072351][T11611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.072721][T14778] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.116251][ T7301] usb 3-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1502.134828][ T7301] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1502.134849][ T7301] usb 3-1: config 0 has no interface number 0 [ 1502.158670][ T7301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.158693][ T7301] usb 3-1: Product: syz [ 1502.158705][ T7301] usb 3-1: Manufacturer: syz [ 1502.158716][ T7301] usb 3-1: SerialNumber: syz [ 1502.190529][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2107'. [ 1502.202236][ T7301] usb 3-1: config 0 descriptor?? [ 1502.338244][ T7301] usb 3-1: selecting invalid altsetting 1 [ 1502.338386][ T7301] dvb_ttusb_budget: ttusb_init_controller: error [ 1502.338396][ T7301] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1502.708622][ T7301] DVB: Unable to find symbol stv0299_attach() [ 1502.721484][T16615] vlan2: entered promiscuous mode [ 1502.721502][T16615] hsr0: entered promiscuous mode [ 1502.767719][T16617] hsr_slave_0: left promiscuous mode [ 1502.768585][T16617] hsr_slave_1: left promiscuous mode [ 1502.937263][ T7301] DVB: Unable to find symbol tda8083_attach() [ 1502.937277][ T7301] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1503.223633][T16397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.353956][T14778] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.413610][T12038] usb 3-1: USB disconnect, device number 36 [ 1503.488645][T16397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.674798][T14778] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.737776][T16397] team0: Port device team_slave_0 added [ 1503.767489][T16397] team0: Port device team_slave_1 added [ 1503.975104][T16397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.975120][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.975140][T16397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.065261][T16397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.065278][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.065300][T16397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.450431][T16397] hsr_slave_0: entered promiscuous mode [ 1504.470051][T16397] hsr_slave_1: entered promiscuous mode [ 1504.470698][T16397] debugfs: 'hsr0' already exists in 'hsr' [ 1504.470715][T16397] Cannot create hsr debugfs directory [ 1504.619365][T16636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2115'. [ 1510.349561][T16681] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1510.581255][ T12] netdevsim netdevsim3 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.708969][T16669] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1512.259534][T16690] loop9: detected capacity change from 0 to 512 [ 1512.623949][T16690] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.2123: corrupted in-inode xattr: invalid ea_ino [ 1512.623976][T16690] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1512.624396][T16690] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2123: couldn't read orphan inode 15 (err -117) [ 1512.624450][T16690] loop9: lost filesystem error report for type 5 error -117 [ 1512.667690][T16690] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1512.991928][T16690] fscrypt (loop9, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 1513.093887][T16690] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1513.150825][T16328] netdevsim netdevsim3 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.150885][T16328] netdevsim netdevsim3 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.307496][T15825] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.383018][T16698] loop7: detected capacity change from 0 to 1024 [ 1513.383904][T16698] EXT4-fs: Ignoring removed orlov option [ 1513.404040][ T5268] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1513.415225][T16328] netdevsim netdevsim3 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 1513.443792][T14778] bridge_slave_1: left allmulticast mode [ 1513.443815][T14778] bridge_slave_1: left promiscuous mode [ 1513.444032][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.494691][T14778] bridge_slave_0: left allmulticast mode [ 1513.494746][T14778] bridge_slave_0: left promiscuous mode [ 1513.497832][T16698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1513.530762][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.704302][T11877] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.355664][T16714] loop9: detected capacity change from 0 to 1024 [ 1519.486302][T16714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1519.568514][ T34] audit: type=1804 audit(2000001140.573:79): pid=16709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2129" name="/newroot/25/file1/bus" dev="loop9" ino=18 res=1 errno=0 [ 1521.236940][T15825] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.758765][T16729] loop9: detected capacity change from 0 to 8 [ 1524.495439][T14778] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1525.986484][T14778] bond0 (unregistering): (slave 30): Releasing backup interface [ 1526.011024][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.028929][T14778] bond0 (unregistering): Released all slaves [ 1526.119132][T14778] bond1 (unregistering): Released all slaves [ 1528.870191][T16753] loop2: detected capacity change from 0 to 256 [ 1528.945794][T16753] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 1533.545946][T14304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1533.574442][T14304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1533.577563][T14304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1533.593389][T14304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1533.605811][T14304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1535.699476][ T5613] Bluetooth: hci0: command tx timeout [ 1536.693916][T16397] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.124154][T16786] kvm [16785]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 1537.201504][T16786] kvm [16785]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x20 [ 1537.201601][T16786] kvm [16785]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1537.783110][ T5613] Bluetooth: hci0: command tx timeout [ 1538.956530][T16397] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.077988][ T5613] Bluetooth: hci0: command tx timeout [ 1541.294555][ T5268] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1541.439842][T16809] loop2: detected capacity change from 0 to 8192 [ 1541.484593][T16809] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1541.649167][T12038] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1541.840288][T12038] usb 7-1: Using ep0 maxpacket: 16 [ 1542.821630][ T5613] Bluetooth: hci0: command tx timeout [ 1542.825979][T12038] usb 7-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1542.831256][T12038] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1542.831278][T12038] usb 7-1: config 0 has no interface number 0 [ 1543.175600][T12038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.175624][T12038] usb 7-1: Product: syz [ 1543.175635][T12038] usb 7-1: Manufacturer: syz [ 1543.175646][T12038] usb 7-1: SerialNumber: syz [ 1543.220220][T12038] usb 7-1: config 0 descriptor?? [ 1543.292092][T12038] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1543.481136][T16397] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1543.707946][T14778] hsr_slave_0: left promiscuous mode [ 1543.721843][T14778] hsr_slave_1: left promiscuous mode [ 1543.722742][T14778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.722788][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.681151][T12038] gspca_spca1528: reg_w err -110 [ 1544.702327][T12038] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 1545.535297][T14778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.535319][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.311604][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.428623][ T192] usb 7-1: USB disconnect, device number 15 [ 1546.765832][T16842] loop2: detected capacity change from 0 to 2048 [ 1546.779971][T16842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1546.786656][ T34] audit: type=1800 audit(2000001167.795:80): pid=16842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2154" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 1547.425152][T14778] veth1_vlan: left promiscuous mode [ 1547.425238][T14778] veth0_vlan: left promiscuous mode [ 1556.459255][ T34] audit: type=1400 audit(2000001177.465:81): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name=223A6F pid=16866 comm="syz.7.2148" name=223A6F offset=50 [ 1556.902836][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1556.984306][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1557.710389][T14304] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1557.732359][T14304] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1557.748556][T14304] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1557.751835][T14304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1557.768599][T14304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1560.667245][T14304] Bluetooth: hci6: command tx timeout [ 1561.113018][T16904] loop6: detected capacity change from 0 to 512 [ 1561.134744][T16904] EXT4-fs: Ignoring removed nobh option [ 1561.164200][T16397] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1561.204967][T16904] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 1561.205010][T16904] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 1561.205108][T16904] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #13: comm syz.6.2159: inode has both inline data and extents flags [ 1561.205128][T16904] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1561.207900][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1561.207918][ C0] EXT4-fs (loop6): initial error at time 2000001182: ext4_orphan_get:1403: inode 13 [ 1561.207941][ C0] EXT4-fs (loop6): last error at time 2000001182: ext4_orphan_get:1403: inode 13 [ 1561.213318][T16904] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2159: couldn't read orphan inode 13 (err -117) [ 1561.213345][T16904] loop6: lost filesystem error report for type 5 error -117 [ 1561.308642][T16904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.336458][T16907] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1562.187941][T16910] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 1562.348097][T16910] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 1563.586124][T14304] Bluetooth: hci6: command tx timeout [ 1564.322918][T11611] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.959967][T14778] IPVS: stop unused estimator thread 0... [ 1565.097893][ T7301] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1565.272165][ T7301] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 1565.297908][ T7301] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.297950][ T7301] usb 7-1: Product: syz [ 1565.297962][ T7301] usb 7-1: Manufacturer: syz [ 1565.297973][ T7301] usb 7-1: SerialNumber: syz [ 1565.557575][ T7301] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1565.557939][ T7301] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1565.557956][ T7301] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1565.607071][ T7301] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 1565.618078][T14304] Bluetooth: hci6: command tx timeout [ 1565.936606][T16916] team0: Port device vxlan0 added [ 1566.060605][T12039] usb 7-1: USB disconnect, device number 16 [ 1566.221739][ T260] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1566.223173][ T260] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1566.247135][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1566.248070][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1567.697879][T14304] Bluetooth: hci6: command tx timeout [ 1570.079923][T14778] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.981400][ T5268] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1571.896220][T14778] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.116103][T16975] loop2: detected capacity change from 0 to 1024 [ 1572.142477][T16975] hfsplus: failed to load catalog file [ 1574.033446][T14778] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.546942][T14778] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.951272][T16771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.953686][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.972626][T16771] bridge_slave_0: entered allmulticast mode [ 1576.987863][T16771] bridge_slave_0: entered promiscuous mode [ 1577.006878][T16771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.008344][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.008528][T16771] bridge_slave_1: entered allmulticast mode [ 1577.050804][T16771] bridge_slave_1: entered promiscuous mode [ 1578.819537][T16771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.666438][T16771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.168966][T16771] team0: Port device team_slave_0 added [ 1582.194095][T16771] team0: Port device team_slave_1 added [ 1582.590106][T10442] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.591692][T16771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.591706][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.591727][T16771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.173961][T16771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.173977][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.174006][T16771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.111625][ T260] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1586.317755][T14780] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.056123][T14778] bridge_slave_1: left allmulticast mode [ 1588.056166][T14778] bridge_slave_1: left promiscuous mode [ 1588.057165][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.093707][T14778] bridge_slave_0: left allmulticast mode [ 1588.093730][T14778] bridge_slave_0: left promiscuous mode [ 1588.093934][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.196923][T14778] dvmrp8: left allmulticast mode [ 1590.269423][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.274617][T14778] bond0 (unregistering): Released all slaves [ 1592.116250][T16328] netdevsim netdevsim7 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1592.151153][T16771] hsr_slave_0: entered promiscuous mode [ 1592.153861][T16771] hsr_slave_1: entered promiscuous mode [ 1592.179577][ T5268] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1592.182010][T16883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.182091][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.182230][T16883] bridge_slave_0: entered allmulticast mode [ 1592.244711][T16883] bridge_slave_0: entered promiscuous mode [ 1592.270567][T16883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.270651][T16883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.274006][T16883] bridge_slave_1: entered allmulticast mode [ 1592.304053][T16883] bridge_slave_1: entered promiscuous mode [ 1592.379295][T14778] tipc: Left network mode [ 1592.962828][T16883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.998669][T16883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.096760][ T34] audit: type=1800 audit(2000001214.108:82): pid=17062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.9.2198" name="/newroot/45/proc" dev="tmpfs" ino=273 res=0 errno=0 [ 1593.436749][T16883] team0: Port device team_slave_0 added [ 1593.454251][T16883] team0: Port device team_slave_1 added [ 1594.933955][T17078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1594.950010][T17078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1594.952788][T17078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1594.955137][T17078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1594.955682][T17078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1595.014678][T14778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1595.014700][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1595.089084][T14778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1595.089112][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1595.305145][T14778] veth1_macvtap: left promiscuous mode [ 1595.305200][T14778] veth0_macvtap: left promiscuous mode [ 1595.305290][T14778] veth1_vlan: left promiscuous mode [ 1595.347002][T14778] veth0_vlan: left promiscuous mode [ 1597.295044][T17078] Bluetooth: hci4: command tx timeout [ 1599.375956][T17078] Bluetooth: hci4: command tx timeout [ 1600.007027][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1600.058640][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1601.559382][T17078] Bluetooth: hci4: command tx timeout [ 1602.485473][T16883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.485488][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.527151][T16883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.557977][T16883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.558012][T16883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.558034][T16883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.958898][T16883] hsr_slave_0: entered promiscuous mode [ 1602.959812][T16883] hsr_slave_1: entered promiscuous mode [ 1602.981345][T16883] debugfs: 'hsr0' already exists in 'hsr' [ 1602.981383][T16883] Cannot create hsr debugfs directory [ 1603.424570][T14778] bridge_slave_1: left allmulticast mode [ 1603.424592][T14778] bridge_slave_1: left promiscuous mode [ 1603.424782][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.458597][T14778] bridge_slave_0: left allmulticast mode [ 1603.458621][T14778] bridge_slave_0: left promiscuous mode [ 1603.458807][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.520025][T14778] bridge_slave_1: left allmulticast mode [ 1603.520071][T14778] bridge_slave_1: left promiscuous mode [ 1603.520248][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.601475][T14778] bridge_slave_0: left allmulticast mode [ 1603.601499][T14778] bridge_slave_0: left promiscuous mode [ 1603.601774][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.622016][T17078] Bluetooth: hci4: command tx timeout [ 1604.287104][T14778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.320665][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.341049][T14778] bond0 (unregistering): Released all slaves [ 1606.590919][T14778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1606.623043][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1606.653597][T14778] bond0 (unregistering): Released all slaves [ 1607.700494][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.811287][T17143] loop2: detected capacity change from 0 to 512 [ 1608.840939][T17143] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1611.918927][T17153] FAULT_INJECTION: forcing a failure. [ 1611.918927][T17153] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.918958][T17153] CPU: 0 UID: 0 PID: 17153 Comm: syz.6.2211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1611.918985][T17153] Tainted: [L]=SOFTLOCKUP [ 1611.918992][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1611.919003][T17153] Call Trace: [ 1611.919010][T17153] [ 1611.919018][T17153] dump_stack_lvl+0xe8/0x150 [ 1611.919056][T17153] should_fail_ex+0x3eb/0x540 [ 1611.919091][T17153] should_failslab+0xa8/0x100 [ 1611.919122][T17153] __kmalloc_cache_noprof+0x9e/0x600 [ 1611.919145][T17153] ? madvise_vma_behavior+0x141b/0x5240 [ 1611.919169][T17153] ? madvise_vma_behavior+0x141b/0x5240 [ 1611.919198][T17153] madvise_vma_behavior+0x141b/0x5240 [ 1611.919230][T17153] ? lock_acquire+0x115/0x350 [ 1611.919254][T17153] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1611.919282][T17153] ? cpupri_find+0xe7/0x240 [ 1611.919305][T17153] ? find_lowest_rq+0x11f/0x6c0 [ 1611.919326][T17153] ? find_lock_lowest_rq+0xc7/0x660 [ 1611.919351][T17153] ? lock_acquire+0x115/0x350 [ 1611.919388][T17153] ? irqentry_exit+0x218/0x910 [ 1611.919416][T17153] ? lockdep_hardirqs_on+0x7b/0x110 [ 1611.919438][T17153] ? irqentry_exit+0x218/0x910 [ 1611.919458][T17153] ? trace_irq_disable+0x3b/0x140 [ 1611.919497][T17153] ? lock_is_held_type+0x106/0x150 [ 1611.919525][T17153] ? mas_prev_slot+0xb76/0xbf0 [ 1611.919559][T17153] ? find_vma_prev+0x123/0x1b0 [ 1611.919578][T17153] ? __pfx_find_vma_prev+0x10/0x10 [ 1611.919604][T17153] ? __pfx___futex_wait+0x10/0x10 [ 1611.919629][T17153] madvise_walk_vmas+0x57d/0xb70 [ 1611.919661][T17153] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1611.919690][T17153] ? blk_start_plug+0x6e/0x1b0 [ 1611.919710][T17153] madvise_do_behavior+0x385/0x540 [ 1611.919738][T17153] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1611.919769][T17153] ? down_read+0x2b9/0x320 [ 1611.919801][T17153] do_madvise+0x26f/0x330 [ 1611.919830][T17153] ? __pfx_do_madvise+0x10/0x10 [ 1611.919862][T17153] ? rcu_is_watching+0x16/0xb0 [ 1611.919902][T17153] __x64_sys_madvise+0xa6/0xc0 [ 1611.919927][T17153] do_syscall_64+0x166/0x520 [ 1611.919950][T17153] ? trace_irq_disable+0x3b/0x140 [ 1611.919972][T17153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.919991][T17153] ? clear_bhb_loop+0x70/0xc0 [ 1611.920012][T17153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.920028][T17153] RIP: 0033:0x7fdf6539e159 [ 1611.920045][T17153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1611.920059][T17153] RSP: 002b:00007fdf66283028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1611.920078][T17153] RAX: ffffffffffffffda RBX: 00007fdf65625fa0 RCX: 00007fdf6539e159 [ 1611.920091][T17153] RDX: 0000000000000019 RSI: 0000000000400000 RDI: 0000200000000000 [ 1611.920103][T17153] RBP: 00007fdf6543506b R08: 0000000000000000 R09: 0000000000000000 [ 1611.920113][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1611.920123][T17153] R13: 00007fdf65626038 R14: 00007fdf65625fa0 R15: 00007ffc41d7db18 [ 1611.920149][T17153] [ 1612.383245][T14778] hsr_slave_0: left promiscuous mode [ 1612.404671][T14778] hsr_slave_1: left promiscuous mode [ 1612.406315][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.468965][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1612.519496][T14778] hsr_slave_0: left promiscuous mode [ 1612.530679][T14778] hsr_slave_1: left promiscuous mode [ 1612.531587][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.553686][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.395587][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1614.446666][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1615.582678][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1615.646432][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1617.389773][T17164] loop6: detected capacity change from 0 to 256 [ 1617.390684][T17164] exfat: Deprecated parameter 'namecase' [ 1617.496369][T17164] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 1619.701562][ T5268] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1621.414995][T14304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1621.442572][T14304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1621.453741][T14304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1621.469896][T14304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1621.539698][T14304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1623.385007][T14778] bridge_slave_1: left allmulticast mode [ 1623.385030][T14778] bridge_slave_1: left promiscuous mode [ 1623.385311][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.452572][T14778] bridge_slave_0: left allmulticast mode [ 1623.452596][T14778] bridge_slave_0: left promiscuous mode [ 1623.452787][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.614755][T17078] Bluetooth: hci0: command tx timeout [ 1624.222626][T14778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.268059][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1624.288145][T14778] bond0 (unregistering): Released all slaves [ 1624.805596][T14778] hsr_slave_0: left promiscuous mode [ 1624.831258][T14778] hsr_slave_1: left promiscuous mode [ 1624.832298][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.885694][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.142208][T17078] Bluetooth: hci0: command tx timeout [ 1627.899925][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1627.946331][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1628.174815][T17078] Bluetooth: hci0: command tx timeout [ 1628.311926][T17210] syzkaller0: entered promiscuous mode [ 1628.311948][T17210] syzkaller0: entered allmulticast mode [ 1628.313430][T17212] tipc: Enabled bearer , priority 0 [ 1628.367726][T17220] tipc: Resetting bearer [ 1628.368019][T17204] tipc: Resetting bearer [ 1628.440289][T17204] tipc: Disabling bearer [ 1628.551423][ T5268] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1628.994990][T17077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.995117][T17077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.995275][T17077] bridge_slave_0: entered allmulticast mode [ 1629.030245][T17077] bridge_slave_0: entered promiscuous mode [ 1629.052935][T17077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.053032][T17077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.053179][T17077] bridge_slave_1: entered allmulticast mode [ 1629.083805][T17077] bridge_slave_1: entered promiscuous mode [ 1630.400839][T17078] Bluetooth: hci0: command tx timeout [ 1630.598370][T17077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.822598][T17077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.098377][T17077] team0: Port device team_slave_0 added [ 1631.151488][T17077] team0: Port device team_slave_1 added [ 1633.291620][T17077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.291636][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.291657][T17077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.347883][T17077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.347898][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1633.347920][T17077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.670691][T17254] loop2: detected capacity change from 0 to 512 [ 1633.739726][T17254] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1635.281176][T17077] hsr_slave_0: entered promiscuous mode [ 1635.299422][T17077] hsr_slave_1: entered promiscuous mode [ 1636.973290][T17182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.973384][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.973522][T17182] bridge_slave_0: entered allmulticast mode [ 1637.006812][T17182] bridge_slave_0: entered promiscuous mode [ 1637.025416][T17182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.029591][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.029753][T17182] bridge_slave_1: entered allmulticast mode [ 1637.181394][T17182] bridge_slave_1: entered promiscuous mode [ 1638.338421][T17182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.715751][T17182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1640.262652][T17182] team0: Port device team_slave_0 added [ 1640.281110][T17182] team0: Port device team_slave_1 added [ 1640.873931][T17182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.873946][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.873967][T17182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.945574][T17182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.945590][T17182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.945612][T17182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.182122][T17287] loop2: detected capacity change from 0 to 1024 [ 1641.248128][T17287] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1641.248178][T17287] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1641.248249][T17287] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1641.292693][T17287] EXT4-fs error (device loop2): ext4_get_journal_inode:5927: inode #5: comm syz.2.2227: unexpected bad inode w/o EXT4_IGET_BAD [ 1641.292723][T17287] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 1641.293164][T17287] EXT4-fs (loop2): no journal found [ 1641.293180][T17287] EXT4-fs (loop2): can't get journal size [ 1641.293461][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1641.293476][ C0] EXT4-fs (loop2): initial error at time 2000001262: ext4_get_journal_inode:5927: inode 5 [ 1641.293500][ C0] EXT4-fs (loop2): last error at time 2000001262: ext4_get_journal_inode:5927: inode 5 [ 1641.379261][T17287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1642.653960][T17292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1643.207170][ T5608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.439554][T17182] hsr_slave_0: entered promiscuous mode [ 1643.459958][T17182] hsr_slave_1: entered promiscuous mode [ 1643.479616][T17182] debugfs: 'hsr0' already exists in 'hsr' [ 1643.479651][T17182] Cannot create hsr debugfs directory [ 1645.042922][T17077] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1645.065877][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1645.142207][T17077] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1645.164662][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1645.178337][T17077] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1645.200299][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1645.295141][T17077] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1645.315694][T17077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1646.352954][T17077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.567189][T17315] null_blk: nullb1: using native zone append [ 1646.689987][T17315] null_blk: disk nullb1 created [ 1650.117361][T17344] loop2: detected capacity change from 0 to 64 [ 1650.346328][T17344] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1650.425092][T17182] netdevsim netdevsim1 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1651.674706][T17371] 9p: Bad value for 'rfdno' [ 1651.835341][T17077] 8021q: adding VLAN 0 to HW filter on device team0 [ 1653.480016][T17379] nbd0: detected capacity change from 0 to 127 [ 1653.569067][T17078] block nbd0: Receive control failed (result -32) [ 1653.631039][ T4936] block nbd0: Dead connection, failed to find a fallback [ 1653.631063][ T4936] block nbd0: shutting down sockets [ 1653.631075][ T4936] blk_print_req_error: 25 callbacks suppressed [ 1653.631087][ T4936] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.631110][ T4936] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1653.631823][ T4936] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.631845][ T4936] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1653.631955][ T4936] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.631975][ T4936] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1653.632071][ T4936] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.632091][ T4936] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1653.632200][ T4936] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.632220][ T4936] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1653.632311][ T4936] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.632331][ T4936] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1653.632402][ T4936] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.632443][ T4936] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1653.632515][ T4936] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.632535][ T4936] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1653.654144][ T4936] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1653.654171][ T4936] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1653.842558][ T4936] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1653.842588][ T4936] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1653.875228][T17175] ldm_validate_partition_table(): Disk read failed. [ 1653.876463][T17175] Dev nbd0: unable to read RDB block 0 [ 1653.898221][T17175] nbd0: unable to read partition table [ 1653.933099][T17175] ldm_validate_partition_table(): Disk read failed. [ 1653.933613][T17175] Dev nbd0: unable to read RDB block 0 [ 1653.936110][T17175] nbd0: unable to read partition table [ 1654.044351][T17182] netdevsim netdevsim1 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1654.115684][T14778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.115764][T14778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.671791][T14304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1655.691007][T14304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1655.706373][T14304] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1655.720715][T14304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1656.051642][T14304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1656.214937][T17182] netdevsim netdevsim1 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1658.267494][ T34] audit: type=1800 audit(2000001279.271:83): pid=17400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2246" name=08 dev="sda1" ino=2060 res=0 errno=0 [ 1658.267750][T14304] Bluetooth: hci5: command tx timeout [ 1658.866506][T17182] netdevsim netdevsim1 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1660.581180][T14304] Bluetooth: hci5: command tx timeout [ 1662.652647][T14304] Bluetooth: hci5: command tx timeout [ 1663.467036][T17423] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1664.571690][T17432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1665.592759][T14304] Bluetooth: hci5: command tx timeout [ 1667.149911][T17453] 9p: Bad value for 'wfdno' [ 1669.056232][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.396042][T17465] o2cb: This node has not been configured. [ 1669.396056][T17465] o2cb: Cluster check failed. Fix errors before retrying. [ 1669.396073][T17465] (syz.6.2256,17465,0):user_dlm_register:674 ERROR: status = -22 [ 1669.396092][T17465] (syz.6.2256,17465,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 1670.230247][T17182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1671.223366][T17182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1672.206882][T17182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1672.250744][T17182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1672.279184][T17182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1672.416156][T17182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1672.419127][T17182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1672.490472][T17182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1678.849033][T16328] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.008402][T17508] kthread_run failed with err -4 [ 1679.422412][ T6370] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.427952][T17517] [ 1679.438487][T17517] ====================================================== [ 1679.445518][T17517] WARNING: possible circular locking dependency detected [ 1679.452552][T17517] syzkaller #0 Tainted: G L [ 1679.458626][T17517] ------------------------------------------------------ [ 1679.465684][T17517] syz.2.2263/17517 is trying to acquire lock: [ 1679.471773][T17517] ffffffff8fc1c2c8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_store+0xe4/0xb00 [ 1679.483506][T17517] [ 1679.483506][T17517] but task is already holding lock: [ 1679.490893][T17517] ffff88802b62cf70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 1679.500792][T17517] [ 1679.500792][T17517] which lock already depends on the new lock. [ 1679.500792][T17517] [ 1679.511485][T17517] [ 1679.511485][T17517] the existing dependency chain (in reverse order) is: [ 1679.520735][T17517] [ 1679.520735][T17517] -> #4 (&p->frag_sem){++++}-{4:4}: [ 1679.528153][T17517] down_write_killable+0xa1/0x230 [ 1679.537184][T17517] configfs_rmdir+0x3b0/0x950 [ 1679.542662][T17517] vfs_rmdir+0x3e6/0x6a0 [ 1679.547442][T17517] filename_rmdir+0x292/0x520 [ 1679.552643][T17517] __se_sys_rmdir+0x2e/0x140 [ 1679.557761][T17517] do_syscall_64+0x166/0x520 [ 1679.562896][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.569332][T17517] [ 1679.569332][T17517] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 1679.578033][T17517] down_write+0x91/0x200 [ 1679.582820][T17517] configfs_depend_item_unlocked+0x153/0x420 [ 1679.589346][T17517] usbg_make_tpg+0x1e0/0x550 [ 1679.594549][T17517] target_fabric_make_tpg+0xa8/0x6d0 [ 1679.600438][T17517] configfs_mkdir+0x4f6/0x9e0 [ 1679.605659][T17517] vfs_mkdir+0x40e/0x630 [ 1679.610468][T17517] filename_mkdirat+0x285/0x510 [ 1679.615873][T17517] __se_sys_mkdirat+0x35/0x150 [ 1679.621416][T17517] do_syscall_64+0x166/0x520 [ 1679.626566][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.633011][T17517] [ 1679.633011][T17517] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1679.641124][T17517] __mutex_lock+0x197/0x15a0 [ 1679.646259][T17517] tcm_alloc_inst+0x65/0x1a0 [ 1679.651451][T17517] usb_get_function_instance+0xe3/0x2f0 [ 1679.657672][T17517] function_make+0x127/0x360 [ 1679.662808][T17517] configfs_mkdir+0x4f6/0x9e0 [ 1679.668015][T17517] vfs_mkdir+0x40e/0x630 [ 1679.672795][T17517] filename_mkdirat+0x285/0x510 [ 1679.678188][T17517] __se_sys_mkdirat+0x35/0x150 [ 1679.683487][T17517] do_syscall_64+0x166/0x520 [ 1679.688626][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.695147][T17517] [ 1679.695147][T17517] -> #1 (func_lock){+.+.}-{4:4}: [ 1679.702296][T17517] __mutex_lock+0x197/0x15a0 [ 1679.707576][T17517] usb_get_function_instance+0x2e/0x2f0 [ 1679.713676][T17517] function_make+0x127/0x360 [ 1679.718841][T17517] configfs_mkdir+0x4f6/0x9e0 [ 1679.724069][T17517] vfs_mkdir+0x40e/0x630 [ 1679.728865][T17517] filename_mkdirat+0x285/0x510 [ 1679.734252][T17517] __se_sys_mkdirat+0x35/0x150 [ 1679.739699][T17517] do_syscall_64+0x166/0x520 [ 1679.744835][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.751260][T17517] [ 1679.751260][T17517] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1679.759651][T17517] __lock_acquire+0x164c/0x2de0 [ 1679.765137][T17517] lock_acquire+0x115/0x350 [ 1679.770212][T17517] __mutex_lock+0x197/0x15a0 [ 1679.775724][T17517] uvcg_extension_ba_source_id_store+0xe4/0xb00 [ 1679.782977][T17517] configfs_write_iter+0x337/0x430 [ 1679.788696][T17517] vfs_write+0x612/0xba0 [ 1679.793578][T17517] ksys_write+0x150/0x270 [ 1679.799057][T17517] do_syscall_64+0x166/0x520 [ 1679.804279][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1679.810800][T17517] [ 1679.810800][T17517] other info that might help us debug this: [ 1679.810800][T17517] [ 1679.821043][T17517] Chain exists of: [ 1679.821043][T17517] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 1679.821043][T17517] [ 1679.835681][T17517] Possible unsafe locking scenario: [ 1679.835681][T17517] [ 1679.843234][T17517] CPU0 CPU1 [ 1679.848622][T17517] ---- ---- [ 1679.854003][T17517] rlock(&p->frag_sem); [ 1679.858265][T17517] lock(&sb->s_type->i_mutex_key#26); [ 1679.866286][T17517] lock(&p->frag_sem); [ 1679.872973][T17517] lock(gadget_subsys.su_mutex); [ 1679.878014][T17517] [ 1679.878014][T17517] *** DEADLOCK *** [ 1679.878014][T17517] [ 1679.886185][T17517] locks held by syz.2.2263/17517: 4, last CPU#0: [ 1679.892556][T17517] #0: ffff888021b2cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 1679.901647][T17517] #1: ffff88801d722460 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1679.910640][T17517] #2: ffff888035fcf680 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x7e/0x430 [ 1679.920896][T17517] #3: ffff88802b62cf70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 1679.930769][T17517] [ 1679.930769][T17517] stack backtrace: [ 1679.936706][T17517] CPU: 0 UID: 0 PID: 17517 Comm: syz.2.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 1679.947761][T17517] Tainted: [L]=SOFTLOCKUP [ 1679.952093][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1679.962165][T17517] Call Trace: [ 1679.965497][T17517] [ 1679.968466][T17517] dump_stack_lvl+0xe8/0x150 [ 1679.973116][T17517] print_circular_bug+0x2e2/0x300 [ 1679.978182][T17517] check_noncircular+0x12f/0x150 [ 1679.983156][T17517] __lock_acquire+0x164c/0x2de0 [ 1679.988254][T17517] ? unwind_get_return_address+0x4d/0x90 [ 1679.994188][T17517] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1680.000548][T17517] ? arch_stack_walk+0xfb/0x150 [ 1680.005430][T17517] lock_acquire+0x115/0x350 [ 1680.009999][T17517] ? uvcg_extension_ba_source_id_store+0xe4/0xb00 [ 1680.016495][T17517] __mutex_lock+0x197/0x15a0 [ 1680.021123][T17517] ? uvcg_extension_ba_source_id_store+0xe4/0xb00 [ 1680.027572][T17517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.033664][T17517] ? uvcg_extension_ba_source_id_store+0xe4/0xb00 [ 1680.040121][T17517] ? __pfx___mutex_lock+0x10/0x10 [ 1680.045224][T17517] ? __might_fault+0xaf/0x130 [ 1680.049929][T17517] uvcg_extension_ba_source_id_store+0xe4/0xb00 [ 1680.056207][T17517] ? irqentry_exit+0x218/0x910 [ 1680.061005][T17517] ? trace_irq_disable+0x3b/0x140 [ 1680.066207][T17517] ? __pfx_uvcg_extension_ba_source_id_store+0x10/0x10 [ 1680.073092][T17517] ? __pfx_uvcg_extension_ba_source_id_store+0x10/0x10 [ 1680.079989][T17517] ? __pfx_uvcg_extension_ba_source_id_store+0x10/0x10 [ 1680.086962][T17517] configfs_write_iter+0x337/0x430 [ 1680.092102][T17517] vfs_write+0x612/0xba0 [ 1680.096418][T17517] ? __pfx_vfs_write+0x10/0x10 [ 1680.101210][T17517] ? __fget_files+0x3a2/0x420 [ 1680.106019][T17517] ? __fget_files+0x2a/0x420 [ 1680.110639][T17517] ? fdget+0x1ac/0x250 [ 1680.114733][T17517] ksys_write+0x150/0x270 [ 1680.119092][T17517] ? __pfx_ksys_write+0x10/0x10 [ 1680.123990][T17517] do_syscall_64+0x166/0x520 [ 1680.128640][T17517] ? trace_irq_disable+0x3b/0x140 [ 1680.133699][T17517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.139813][T17517] ? clear_bhb_loop+0x70/0xc0 [ 1680.144518][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.150445][T17517] RIP: 0033:0x7f867459e159 [ 1680.155062][T17517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.174685][T17517] RSP: 002b:00007f86754d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1680.183248][T17517] RAX: ffffffffffffffda RBX: 00007f8674826090 RCX: 00007f867459e159 [ 1680.191331][T17517] RDX: 0000000000000011 RSI: 0000200000000440 RDI: 0000000000000007 [ 1680.199313][T17517] RBP: 00007f867463506b R08: 0000000000000000 R09: 0000000000000000 [ 1680.207522][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1680.215555][T17517] R13: 00007f8674826128 R14: 00007f8674826090 R15: 00007ffd61c127e8 [ 1680.223572][T17517] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1680.571854][T16328] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.575798][T16328] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.777372][T14778] bridge_slave_1: left allmulticast mode [ 1680.777411][T14778] bridge_slave_1: left promiscuous mode [ 1680.777554][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.847300][T14778] bridge_slave_0: left allmulticast mode [ 1680.847325][T14778] bridge_slave_0: left promiscuous mode [ 1680.847483][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.711869][T17523] trusted_key: encrypted_key: key user:syz not found [ 1681.748710][T17078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1681.836903][ T5608] process 7380 (syz.2.287) no longer affine to cpu1 [ 1682.065631][T17078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1682.317065][T14778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.323830][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.326634][T14778] bond0 (unregistering): Released all slaves [ 1682.330278][T17078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1682.704653][T14778] hsr_slave_0: left promiscuous mode [ 1682.705017][T14778] hsr_slave_1: left promiscuous mode [ 1682.705433][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.705740][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1682.760190][T17078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1683.029529][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1683.171020][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1683.183766][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1683.830636][T14778] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.867434][T14778] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.909235][T14778] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.968903][T14778] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.051041][ T5874] netdevsim netdevsim9 eth26: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.051074][ T5874] netdevsim netdevsim9 eth25: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.121204][ T62] netdevsim netdevsim9 eth27: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.173610][ T62] netdevsim netdevsim9 eth28: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.410301][T14778] bridge_slave_1: left allmulticast mode [ 1684.410322][T14778] bridge_slave_1: left promiscuous mode [ 1684.410458][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.452004][T14778] bridge_slave_0: left allmulticast mode [ 1684.452025][T14778] bridge_slave_0: left promiscuous mode [ 1684.452156][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.507199][T14778] bridge_slave_1: left allmulticast mode [ 1684.507223][T14778] bridge_slave_1: left promiscuous mode [ 1684.507367][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.534357][T14778] bridge_slave_0: left allmulticast mode [ 1684.534378][T14778] bridge_slave_0: left promiscuous mode [ 1684.534508][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.788157][T14778] bond0 (unregistering): Released all slaves [ 1684.950760][T14778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1684.964879][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.965801][T14778] bond0 (unregistering): Released all slaves [ 1685.020717][T14778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1685.034849][T14778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1685.035665][T14778] bond0 (unregistering): Released all slaves [ 1685.281763][ T5874] netdevsim netdevsim1 eth32: set [0, 0] type 1 family 0 port 8472 - 0 [ 1685.281810][ T5874] netdevsim netdevsim1 eth31: set [0, 0] type 1 family 0 port 8472 - 0 [ 1685.281857][ T5874] netdevsim netdevsim1 eth30: set [0, 0] type 1 family 0 port 8472 - 0 [ 1685.281883][ T5874] netdevsim netdevsim1 eth29: set [0, 0] type 1 family 0 port 8472 - 0 [ 1685.337147][T14778] hsr_slave_0: left promiscuous mode [ 1685.337520][T14778] hsr_slave_1: left promiscuous mode [ 1685.337974][T14778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1685.338005][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.338441][T14778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1685.338453][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.390025][T14778] hsr_slave_0: left promiscuous mode [ 1685.390374][T14778] hsr_slave_1: left promiscuous mode [ 1685.390799][T14778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.410411][T14778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.421510][T14778] veth1_macvtap: left promiscuous mode [ 1685.421536][T14778] veth0_macvtap: left promiscuous mode [ 1685.421585][T14778] veth1_vlan: left promiscuous mode [ 1685.421636][T14778] veth0_vlan: left promiscuous mode [ 1685.451146][ T5613] Bluetooth: hci4: command tx timeout [ 1685.687818][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1685.708122][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1685.999928][T14778] team0 (unregistering): Port device team_slave_1 removed [ 1686.016150][T14778] team0 (unregistering): Port device team_slave_0 removed [ 1686.597399][T17520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.597453][T17520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.597576][T17520] bridge_slave_0: entered allmulticast mode [ 1686.598441][T17520] bridge_slave_0: entered promiscuous mode [ 1686.629958][T17520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.630011][T17520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.630144][T17520] bridge_slave_1: entered allmulticast mode [ 1686.651599][T17520] bridge_slave_1: entered promiscuous mode [ 1686.787521][T17520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.789604][T17520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.854368][T17520] team0: Port device team_slave_0 added [ 1686.890684][T17520] team0: Port device team_slave_1 added [ 1686.949656][T17520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.949671][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.949692][T17520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.001476][T17520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.001490][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.001528][T17520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.238401][T14778] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1687.266250][ T6370] smbdirect: ib_dev[syz1] removed [ 1687.282247][T14778] bond0 (unregistering): Released all slaves [ 1687.286947][T14778] bond1 (unregistering): Released all slaves [ 1687.310022][T17520] hsr_slave_0: entered promiscuous mode [ 1687.310602][T17520] hsr_slave_1: entered promiscuous mode [ 1687.395380][T14778] tipc: Disabling bearer [ 1687.395476][T14778] tipc: Left network mode [ 1687.521313][ T6370] netdevsim netdevsim2 eth35: set [0, 0] type 1 family 0 port 8472 - 0 [ 1687.521390][ T6370] netdevsim netdevsim2 eth34: set [0, 0] type 1 family 0 port 8472 - 0 [ 1687.521420][ T6370] netdevsim netdevsim2 eth33: set [0, 0] type 1 family 0 port 8472 - 0 [ 1687.521448][ T6370] netdevsim netdevsim2 eth36: set [0, 0] type 1 family 0 port 8472 - 0 [ 1687.532346][ T5613] Bluetooth: hci4: command tx timeout [ 1687.664703][T17520] netdevsim netdevsim1 eth32 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1687.687875][T17520] netdevsim netdevsim1 eth31 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.209658][T17520] netdevsim netdevsim1 eth30 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.287086][T17520] netdevsim netdevsim1 eth29 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.373880][T14778] IPVS: stop unused estimator thread 0... [ 1688.453377][T17520] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1688.457381][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1688.457975][T17520] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1688.484428][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1688.485638][T17520] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1688.507423][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1688.509335][T17520] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1688.528206][T17520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1688.734383][T17520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1688.780596][T17520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1688.795712][T16328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.795768][T16328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1688.828424][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.828495][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state