last executing test programs: 40.221113031s ago: executing program 1 (id=100): syz_read_part_table(0x1075, &(0x7f0000000000)="$eJzs0LFNBDEQBdC/2rXvTiCIqYA2aAxBQAWkBJRCSklIBINsWFEBXPKeVtrxzPgHDmd1emu3SeohOWWtQ5Jjss0vef7ZqutkTT7W5LMOVVVZ0pL0EZGMxr66/B7uX7d2zM1sT6O4m6OrZBn/PhJyeTGb73nMS0+e5mj5Dtmy7uVI6dnjx832D08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/uKwAA//9svCNz") 39.912494376s ago: executing program 1 (id=106): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000006540)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="665134ecfac9621bdd9f0d3c85f7f044fb9b61056494501f1b9bd08326df69b6a59a873a932b5d62e563eea7457b7248182065bc8be2d7f948c4d9e8f1987f25db9566bffd50774befc6477fe948ca12322ebcdce621fdae6f9756938d7902eabe21deaddc305bbb7dc3f32fd8447fe99f8481e34816ff645bc5771882f2471af71e3d105a5c2996145e072ea884d2e6d412b6d934a94f5aa6c585b6364339229b75eae2f6515fd05c57d692ec19558a83b1276fd9f666cf8bd8cf5b2239989248e3d6dfbab467b7c0fc8421dbf4", @ANYRES32, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16], 0x1, 0x620d, &(0x7f0000000200)="$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") sync() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) sync() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000006bc0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x3, @local, 0x80000000}, 0x1c, &(0x7f0000006780)=[{&(0x7f0000000140)="ab5a4bc95d5c4c66d3b25332cae190f4099bb5ead9d7717b066613b4174000187fa3275230ec100e76599931c41dbfc5821d5e24323c3174f11c5e9ba1ad5726b9b7a0bdca62ade75d69a2c6ade07214cc1755f9fbed62c73d91067ef446", 0x5e}, {&(0x7f00000001c0)="311c0d1913fa4c6842eea1235214ec9097ac1f6ca8c8932f6cbb385c770862", 0x1f}, {&(0x7f0000006440)="fec9306fa3cd651de4c25f32aa1d1317d159b0335fdb97de87692cc6b72fe323546eaea1e19f937ea257bff3a419cb76ffad660600dec5ec08c1a5e73e19ff232a8a30464f30ec65d4cfd322fe0685dc7d75f55cf36da2c6e4e24b162def940b00c875a84449b4a8d4b953dc9ae06040b084bcfbd759a8d2c2dde077711d23d3102f6cb5a539d324c491214f1f37237e49cbd9a627235a846d2f50e27447bd232ec30e65177fe7a31c3a310d8de5ded00490d306905c3cc6ba2c598ba5abd1d72e9bcc86f12508ebf81490fb598ad18b29a7355ad0bb02af5dfca63ae6ef985a9f159d794658", 0xe6}, {&(0x7f0000006640)="84173faaf4bba04cebc9a66dcff5df6d79975ddd24", 0x15}, {&(0x7f0000006680)="4416f6d8e15c66881335eebb0a7c4fddbf0308213975a28b6aa7a3618ee215729ad6186c955ec5c35f75d218755615d559d2d5d3aabae4a9606dc062e33b2c3e069e6ac0e868d7182c5201716940e1fd75701e6f91750cc1e1ee065a211ab70f1f02f1c1dbd2206eae36666f0cff8fc05babd36a4bef0666e786723124b28b617be7ad16be36be929597b7b7441d13d9c8060d4d981bec11f96056eff3aa04e80265c480a25f1eeb9f9f20bf0376f6619654bbbf26484ece864425a08cdbe2b4cf0d28f266afa2be843e10b849cb7103f41e3f3d4ef4354b1c85eea6b3d69be986f49b2d830e35793f8d9b4481a582", 0xef}], 0x5, &(0x7f0000006800)=[@flowinfo={{0x14, 0x29, 0xb, 0x1ff}}], 0x18}}, {{&(0x7f0000006840)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000069c0)=[{&(0x7f0000006880)="f707356a5ba773aa3a1a406dea658adb3c4f6cddbb7079e3dc115ffd9d55fe9bddb90a9db7f14991642fe9541e3e16985c08fb745a51f98f5b99e6cf31992d", 0x3f}, {&(0x7f00000068c0)="9035b5497f4f3eaa2ee413ecd5ae59cf211499246d39ec11bf5361cc58ba5a8a9b75ed95533053fe6efc8d73fdca915e26db2a", 0x33}, {&(0x7f0000006900)="b139c882e88cdcab3f7f387cd6d1b767489d0a0f563e39fdf0bbe41c5f5d74cf287ade5f58322268430036b5cc0f540f77bfd63e990573cf1d072163de0500cc8b6771cae5819a3872809efbaf2edb1cdba170aac4791173b9c76c6ca426ca321f67c22c1bbf87077c64ca2101e301a5d34642dc9e98675087d1076212169d1f219ea43f8c33598d2353fd16de08b1d2b194a7b267b0efe1380c97", 0x9b}], 0x3, &(0x7f0000006a00)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x1d, 0xe, 0x1, 0xe, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @remote, @mcast1, @rand_addr=' \x01\x00', @loopback]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0xec, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0xc}, @ra={0x5, 0x2, 0x1}]}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x16, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x28, {0x1, 0x8, 0x9, 0x4, [0xffffffff, 0x3, 0x10000, 0x2]}}, @enc_lim={0x4, 0x1, 0x66}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x1a0}}], 0x2, 0x4000000) 38.995745679s ago: executing program 4 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x8848, 0x2}, {0xf, 0xffff}, {0x300, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x19}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 38.660010956s ago: executing program 4 (id=110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_open_dev$evdev(0x0, 0xe949, 0x593241) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x121301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000000c0)={0x20, 0x1, 0x73c, 0x7, 0x0, 0x5, 0x0}) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084523, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xb0}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 38.35344265s ago: executing program 1 (id=114): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000780)={r6, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) write$binfmt_script(r0, 0x0, 0x0) 36.241277802s ago: executing program 4 (id=119): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000), 0xf200000000000000, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) (fail_nth: 2) 36.136037116s ago: executing program 1 (id=120): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$midi(&(0x7f0000000000), 0xf200000000000000, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000940)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@numtail}, {@utf8no}, {@numtail}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '1255'}}]}, 0x25, 0x353, &(0x7f0000000100)="$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") r1 = syz_clone(0x80100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xfffffffe) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000140)='./file0\x00', 0x81c04e, &(0x7f00000009c0)=ANY=[], 0x6, 0x2d9, &(0x7f0000000580)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x0, 0x258) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000480)={0x1}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) 35.928374857s ago: executing program 4 (id=122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x29, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000019100), &(0x7f0000019140)=0x4) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f000001c640)=[{{&(0x7f0000019080)=@phonet, 0x80, &(0x7f000001b5c0)=[{&(0x7f0000019200)=""/249, 0xfffffffffffffeac}, {&(0x7f0000019480)=""/4096, 0x1000}, {&(0x7f000001a480)=""/4, 0x4}, {&(0x7f000001a4c0)=""/124, 0x7c}, {&(0x7f000001a540)=""/4096, 0x1000}, {&(0x7f000001b540)=""/86, 0x56}], 0x6, &(0x7f000001b640)=""/4096, 0x1000}, 0x9}], 0x1, 0x40000102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_procfs(0x0, &(0x7f0000019440)='net/ip_tables_targets\x00') pread64(r8, &(0x7f0000000080)=""/102350, 0xc345, 0x54) 34.880418427s ago: executing program 4 (id=125): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) connect$bt_l2cap(r4, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000004100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r6, 0x20049549e2a2d659) openat(r6, &(0x7f0000000100)='./file0\x00', 0x28c003, 0x2a) 34.715828775s ago: executing program 1 (id=128): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async, rerun: 32) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) setpgid(r2, r2) (async) waitid(0x2, r2, 0x0, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) (async) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x1, 0x0, 0x1, 0x0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x2) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000000300)={0x12b4, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x1}, 0x6, 0xa, 0x8, 0x800, 0x20, 'syz0\x00', "c47b14da69a7037cfeefd2dee42f68cee19b1ae46ec0b293175396a9729ecea8", "45b08cf17623e4a58cf82c6e9e195a1cc407d071e96f57152f847470bb0c5336", [{0x8, 0xb, {0x3, 0x8}}, {0x400, 0x8001, {0x1, 0xf}}, {0x0, 0x579, {0x2, 0x3ff}}, {0x3, 0xa3d, {0x1, 0xbb}}, {0xb706, 0x4, {0x3, 0x4}}, {0x2, 0x80, {0x0, 0x81}}, {0xc9, 0x1ff, {0x0, 0xf4}}, {0x9, 0xfffe, {0x0, 0x4}}, {0x7, 0x1000, {0x0, 0x7}}, {0xfff8, 0x0, {0x1, 0xffffffff}}, {0xfffc, 0x9, {0x1, 0x6}}, {0x2, 0x0, {0x3, 0x7}}, {0x5, 0x3, {0x3, 0x4}}, {0x2, 0x1, {0x2, 0x7}}, {0x7, 0x8, {0x3, 0xffffffff}}, {0x2, 0x0, {0x0, 0x1}}, {0x9, 0x5, {0x3}}, {0x4, 0x9, {0x2, 0x6}}, {0xd, 0x7, {0x3, 0x81}}, {0xe61, 0x2, {0x0, 0x6}}, {0xf3c8, 0xc11, {0x3, 0x81}}, {0x5, 0x4, {0x0, 0x7fffffff}}, {0x4, 0x8, {0x3, 0x4000000}}, {0x69ff, 0x0, {0x3, 0x6}}, {0x4, 0x3, {0x1, 0x9}}, {0xc, 0x7, {0x0, 0x7}}, {0x6, 0x9, {0x3, 0x6}}, {0x7, 0x2, {0x3, 0x5}}, {0x8, 0x8, {0x1, 0x1ff}}, {0x400, 0x3, {0x3, 0x8001}}, {0x100, 0x9, {0x2, 0x4}}, {0xcb99, 0x4, {0x3, 0x8}}, {0x72, 0x0, {0x0, 0x400}}, {0x401, 0x5, {0x3, 0x2b7}}, {0x200, 0x1000, {0x1}}, {0x5, 0x3, {0x3, 0x6}}, {0x970a, 0xb6ce, {0x1, 0x3}}, {0x401, 0x1, {0x1, 0x2}}, {0x4, 0x4687, {0x1, 0x1}}, {0x6b, 0x7, {0x3, 0x80000001}}]}}}, {{0x254, 0x1, {{0x2, 0xe}, 0x5, 0x6, 0x1cd, 0x0, 0x8, 'syz0\x00', "23e4046aa6a7235d30e55c64fc4b057e6eb1f51d3f41c30bf014a9cf20179f59", "2fc74c90b926bb2dcc8ed3d9ad4ac149f5bd4777eb778a2bd0eae27462e97333", [{0x7, 0x9, {0x2, 0x6}}, {0x8000, 0x8, {0x0, 0x7}}, {0xfffe, 0x2, {0x0, 0x4}}, {0xff, 0x0, {0x1, 0x80}}, {0xe8, 0x9, {0x3, 0x4}}, {0x8, 0x1, {0x2, 0xfffffff8}}, {0x9, 0x1, {0x0, 0xb}}, {0xa4, 0x6, {0x3, 0x70405682}}, {0x5, 0x4, {0x59742ea5479645db, 0x1}}, {0xe06d, 0x400, {0x2, 0x100}}, {0x761, 0x2, {0x0, 0x9}}, {0x9, 0x0, {0x2, 0x7}}, {0x8, 0xedc, {0x0, 0x1}}, {0x2, 0x6, {0x0, 0x19}}, {0x5, 0x46, {0x2, 0x1ae521e9}}, {0x0, 0x200, {0x1}}, {0x1, 0x57c5, {0x3, 0x80000000}}, {0x200, 0x1, {0x1, 0xffffffff}}, {0x2, 0x9, {0x3, 0xe71}}, {0xa3b9, 0xf6b9, {0x0, 0x1}}, {0x9, 0xc7, {0x3, 0x3}}, {0x3, 0x7ff, {0x2, 0x400}}, {0x5d9e, 0x2532, {0x2, 0x4}}, {0x81, 0x9, {0xb4488ba07a75c6f7, 0x3}}, {0x4, 0x4, {0x3, 0x662}}, {0x8000, 0xf87, {0x2, 0x5a46}}, {0xb, 0x54f7, {0x2, 0x6}}, {0x2, 0x81, {0x2, 0x5}}, {0x4, 0x6, {0x1, 0x80000000}}, {0x8, 0x7, {0x3, 0x7}}, {0x81, 0xab, {0x0, 0x7}}, {0x7, 0x6173, {0x2, 0x8}}, {0x9, 0xd, {0x0, 0x400}}, {0x3, 0xff00, {0x1, 0x3}}, {0x52b3, 0x4, {0x2, 0x5}}, {0x8, 0x1, {0x3, 0x8}}, {0x6, 0x5, {0x0, 0x6}}, {0x0, 0x5}, {0x0, 0xfef6, {0xabeab762f1e090d4, 0x4}}, {0x4, 0x29d, {0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x1ff}, 0x2, 0x6, 0x6, 0x5, 0x2, 'syz0\x00', "6cfd1d193293f19415240a11e396c1a1edb8ebe405dd6cec6d16ab7f0c148b66", "811196fb4afddc1d5ca3e46d781788f68af5bc1b9cd5da9090e32f595c10bcd6", [{0xe7e, 0x1, {0x1, 0xc29}}, {0x5, 0x1, {0x0, 0x1}}, {0x101, 0x5, {0x0, 0xed0}}, {0x7b7, 0x3, {0x2, 0x800}}, {0x4, 0xe}, {0x6, 0x8f6, {0x3, 0xfffffffe}}, {0x10, 0xe4c, {0xc047de2d1f21f5dd, 0x8}}, {0x2, 0x3, {0x1, 0x2}}, {0x4, 0x3, {0x1}}, {0xc3f, 0x10, {0x2, 0x9}}, {0x200, 0x1, {0x1, 0x2}}, {0xfffe, 0xfc00, {0x1, 0x6}}, {0xfff, 0x200, {0x3, 0x8}}, {0x10, 0x4, {0x2, 0xf8a1}}, {0x3, 0xb5, {0x1}}, {0x0, 0xd63, {0x1, 0x7}}, {0x1, 0x4, {0x1, 0xffffffff}}, {0x9, 0x7, {0x2, 0xbb}}, {0x1, 0x86ea, {0x3, 0x7}}, {0x1, 0x6, {0x2, 0x6}}, {0x6, 0x92, {0x3, 0x60}}, {0x1, 0x9, {0x2, 0xf5}}, {0x8000, 0x10, {0x1, 0x7ff}}, {0x2, 0x2, {0x2, 0x5d60}}, {0x8, 0x1, {0x1, 0x1}}, {0xfff, 0x2, {0x3, 0x102}}, {0xdb, 0x8, {0x2, 0x2}}, {0x7, 0x5, {0x3, 0x4}}, {0x7, 0x0, {0x1, 0x80000000}}, {0xffff, 0x0, {0x3, 0x5}}, {0x8000, 0x2, {0x0, 0xa73}}, {0xfffc, 0x0, {0x3, 0x5}}, {0x5, 0x9}, {0xd, 0x8001, {0x861d3a26de224337, 0x4}}, {0x7f, 0x1, {0x1, 0x1}}, {0x0, 0x2, {0x3, 0x4}}, {0x0, 0x2, {0x1, 0x4}}, {0xfff7, 0x2, {0x0, 0x3}}, {0x9, 0x8, {0x0, 0x2c3}}, {0x48d, 0x8, {0x0, 0x800}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffff7}, 0xb, 0x6, 0x2, 0x2, 0x23, 'syz0\x00', "385f1f2dd91ec17d5a6f5b9337b5ae502cd89a3495aabf85456742dafb9de33b", "077cf7466a13957508671580eba935f79ef86adf718819671966e78edd32d492", [{0x4, 0x2, {0x3, 0x8}}, {0x6, 0xfff9, {0x2, 0xfffffbff}}, {0x200, 0x10, {0x3, 0x7}}, {0x9, 0x8, {0x0, 0x10001}}, {0xffff, 0x100, {0x1, 0xd8b}}, {0x1ff, 0x0, {0x3, 0x8}}, {0xa, 0x401, {0x1, 0x4}}, {0x101, 0x7, {0x1, 0x2}}, {0xd179, 0x2, {0x3, 0xfffffbff}}, {0x1, 0x0, {0x0, 0x6}}, {0x7372, 0x8, {0x3, 0x4}}, {0x100, 0x84a3, {0x3, 0xa}}, {0x0, 0x1ff, {0x3, 0x9}}, {0x7, 0xe7c, {0x1, 0x7}}, {0x6, 0x7, {0x0, 0x1}}, {0x380, 0x6, {0x1, 0xf39}}, {0x1, 0x200, {0x0, 0x1}}, {0x4, 0x7, {0x3, 0x1}}, {0x6, 0x9, {0x0, 0x4}}, {0x547b, 0x9, {0x3, 0x7}}, {0x8, 0xc, {0x0, 0x10}}, {0x4, 0x2, {0x1, 0x2}}, {0x7, 0x3, {0x2, 0x9}}, {0x2, 0x8, {0xb65573c0816e6c88, 0x800}}, {0x7, 0xc, {0x0, 0x1}}, {0xe7b8, 0x2, {0x2, 0x10000}}, {0x4, 0xfffc, {0x3, 0x7}}, {0x80, 0x9b, {0x2, 0x52c}}, {0x5, 0xd, {0x0, 0x2}}, {0x6, 0x8, {0x2, 0x7}}, {0xff7f, 0x33, {0x3, 0x2}}, {0x3, 0x1, {0x1, 0x4}}, {0x8000, 0x9, {0x3, 0x1}}, {0x1, 0x2, {0x0, 0x800}}, {0x2, 0x80, {0x2}}, {0x4, 0x2, {0x1, 0x6}}, {0xd, 0xd960, {0x2, 0x4}}, {0x0, 0x1, {0x1, 0x54}}, {0x4, 0x7, {0x1, 0x2}}, {0xa, 0xfffb, {0x0, 0x1003}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xff, 0x1c, 0xe, 0xe, 0x21, 'syz1\x00', "bf763605d1de40bb25fa23e6c151a6ae92d07bc702aceebb17aafda6975eb258", "8d128665f6b786816cdbc29c71dc4bf9fa034982daacbc9bb7f9597218a069e4", [{0x7, 0x5, {0x2, 0xedc}}, {0x2, 0x95, {0x3, 0xfffffffa}}, {0xfffd, 0x8, {0x0, 0x8000}}, {0x1, 0x1, {0x2, 0x6}}, {0xb5, 0x81, {0x1, 0xffffffff}}, {0xff, 0x81, {0x1, 0x4}}, {0x6, 0xa8, {0x2, 0x9}}, {0x7da, 0x6, {0x1, 0x2}}, {0x2, 0xa6f6, {0x2, 0x5}}, {0x9, 0x4, {0x3, 0xcc9}}, {0x0, 0x4, {0x1, 0x9}}, {0x2, 0x6, {0x3, 0x14000000}}, {0x5, 0xfff, {0x1, 0xfffffffc}}, {0xc600, 0x8, {0x0, 0x2}}, {0x7ff, 0x4, {0x1, 0x6}}, {0xc, 0x8, {0x3, 0x9}}, {0x4626, 0x4, {0x1}}, {0x4, 0x8, {0x3}}, {0x5cc, 0xa78f}, {0xd7f5, 0x2, {0x2, 0x7}}, {0x6, 0x8, {0x0, 0x7}}, {0xff, 0x0, {0x0, 0x3ff}}, {0x80da, 0x8, {0x1, 0x312200}}, {0x100, 0x6, {0x3}}, {0x6, 0x7, {0x0, 0x7fffffff}}, {0x8, 0x7f, {0x1}}, {0xe, 0x6, {0x1, 0xfa47}}, {0x4, 0x7fff, {0x2, 0x7fff}}, {0x5e2, 0x0, {0x1, 0x5}}, {0x3, 0x4, {0x0, 0x7fffffff}}, {0xe5f, 0x2, {0x5, 0x72}}, {0x2, 0xfff4, {0x3, 0xfffffff7}}, {0xab75, 0x1431, {0x3, 0xa9}}, {0x8289, 0xfffc, {0x1, 0x3}}, {0x20, 0x9, {0x1, 0x3}}, {0x60b, 0x7, {0x0, 0x2}}, {0x75d9, 0x8001, {0x0, 0x463}}, {0x7, 0x3, {0x2, 0x8}}, {0x7, 0xfffc, {0x2, 0xc21}}, {0x101, 0x2, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0xffffff7f}, 0x7, 0x71, 0x1, 0x5, 0x7, 'syz0\x00', "d4ba8e14ab8c3dcc0f9d2e28df7cca9e325a96634ee5f21020338948c8664ae3", "5d7dd63fb68b53f293c61fa1661b9595c26fdbe99064849173cfaf3bd17ae54c", [{0xe6aa, 0xe, {0x0, 0x9}}, {0x0, 0x0, {0x0, 0x7}}, {0x0, 0x3, {0x1, 0x2544}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x10, {0x2, 0x5}}, {0x7, 0x0, {0x1, 0x810}}, {0x4, 0x0, {0x2, 0x4}}, {0x7, 0x8, {0x2, 0x5}}, {0x8, 0x3, {0x0, 0x401}}, {0x3, 0xd2, {0x3, 0x7fffffff}}, {0x9, 0x4, {0x0, 0xc2a1}}, {0x6, 0x7, {0x1, 0xfff}}, {0x6, 0x3, {0x1, 0x6}}, {0x2, 0x5f, {0x0, 0x200}}, {0x6, 0x6050}, {0x0, 0x6, {0x2, 0x8}}, {0x4, 0x400, {0x2, 0x8}}, {0x7, 0x5, {0x0, 0x30000}}, {0x40, 0x2, {0x1, 0x10001}}, {0x4, 0xe, {0x3, 0x8}}, {0x3, 0x6, {0x2}}, {0x84b6, 0x4, {0x0, 0xf}}, {0x0, 0x4, {0x1, 0x3}}, {0x10, 0x8, {0x2, 0x200}}, {0x92, 0x4, {0x3, 0x7}}, {0x2, 0x9, {0x3, 0x6}}, {0x6af9, 0x8, {0x0, 0x9}}, {0x5d0, 0x7ff, {0x0, 0xfffffffc}}, {0x9, 0x5, {0x2, 0x7}}, {0x1, 0x3, {0x3, 0xfffffff7}}, {0x5, 0xf, {0x0, 0x4}}, {0x0, 0xc, {0x3, 0x4}}, {0x2503, 0x97c5, {0x3, 0x5}}, {0x7ff, 0x4, {0x3, 0xc8ea}}, {0x3, 0xf, {0x3, 0x9}}, {0x9, 0xff07, {0x1, 0x30000000}}, {0x7, 0x3, {0x3, 0x5}}, {0x8001, 0xf95b, {0x3, 0x9}}, {0x10, 0xff, {0x1, 0x8}}, {0x3, 0x8d, {0x0, 0xfffffffd}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0xd, 0x0, 0xd8, 0xffa, 0x3, 'syz1\x00', "afd1d7a29542fdd1d4b32b1975c17a7809e452da53db54e2b07247791cd9de83", "f0e27cbecf8861ea6ed389b9f12c14a5aaf2ce2658c589c5d5d0f0619e716702", [{0x3ff, 0x0, {0x2, 0xffffffff}}, {0xb, 0x0, {0x2, 0x9}}, {0x1, 0x0, {0x1, 0xfff}}, {0x2040, 0xffff, {0x1, 0x2}}, {0x1, 0x9, {0x2, 0x5}}, {0x5, 0x7f55, {0x1, 0x3e82}}, {0x3ac, 0x8000, {0x0, 0x80000000}}, {0xe50, 0x400, {0x0, 0x8}}, {0x4, 0xf10e, {0x0, 0x100}}, {0x6, 0x7, {0x3, 0x5}}, {0x100, 0x100, {0x3, 0x4a}}, {0x0, 0x9, {0x2, 0x5}}, {0x6b38, 0x4, {0x1}}, {0x8, 0x4, {0x0, 0x81}}, {0x5, 0x1, {0x3, 0xfffffff7}}, {0x2, 0x2, {0x3, 0x1}}, {0x4, 0x4, {0x3, 0x3}}, {0x2, 0x6, {0x0, 0x7}}, {0x0, 0x0, {0x0, 0x7fffffff}}, {0x4, 0x9, {0x1, 0xff}}, {0x2, 0x6, {0x0, 0x3}}, {0x55e, 0x7, {0x3, 0x401}}, {0x81, 0x4, {0x3, 0xff}}, {0x401, 0x7, {0x1, 0x3c28}}, {0xb5, 0x1, {0x3, 0x401}}, {0xffff, 0x4, {0x3, 0x645a}}, {0x0, 0x4, {0x1, 0xef}}, {0x7fff, 0x7, {0x2, 0x3}}, {0x4, 0x1, {0x2, 0x2}}, {0x2, 0x1, {0x0, 0x9}}, {0xf8c, 0x0, {0x1, 0x3}}, {0x100, 0x1ff, {0x0, 0xbe9}}, {0x9, 0xa0a, {0x3, 0x6}}, {0xb, 0x0, {0x1, 0xfff}}, {0x0, 0x4, {0x1, 0x6}}, {0x7, 0x6, {0x1, 0x1e3dc00}}, {0xff01, 0x7, {0x0, 0x7}}, {0x2, 0x1, {0x1, 0x7}}, {0xb980, 0x5, {0x0, 0x10000}}, {0xc, 0x9, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x7ff}, 0x3d, 0x0, 0x2, 0xfff8, 0x4, 'syz0\x00', "e680d36f1d4489ac76938eaa19089fcbab49517655deb4463d3a2508c69feb1c", "77e808b898d369edd46b52cd3b6bb5a1a3c7e90e1044785f5c0bb16eb6dacde1", [{0xffff, 0x9, {0x0, 0x82}}, {0x400, 0x3b, {0x3, 0x2}}, {0xd, 0xd23, {0x3, 0xff}}, {0x6048, 0x7, {0x2, 0x9}}, {0x7f, 0xfff, {0x2, 0xb}}, {0xff, 0x2, {0x3, 0xfffffffc}}, {0xfff, 0x8000, {0x2, 0x9}}, {0x4, 0x1, {0x0, 0x40}}, {0x3, 0xa9, {0x0, 0x7}}, {0x7, 0xffff, {0x2, 0x5f}}, {0x2, 0xffff, {0x2, 0xf}}, {0x2, 0x80, {0x0, 0xdf66}}, {0x8, 0x8000, {0x3, 0x4c9c}}, {0x800, 0x3, {0x0, 0x3940}}, {0x200, 0x8, {0x3, 0xb67d}}, {0xfff9, 0x10, {0x1, 0x401}}, {0x2, 0x3ff, {0x0, 0x8}}, {0xa, 0x1, {0x1, 0x1}}, {0x9, 0x8, {0x0, 0x1}}, {0x81, 0x1, {0x1, 0x1ff}}, {0x4, 0x90a1, {0x3, 0x3}}, {0xffff, 0x6, {0x7198375e6ba00513, 0x1}}, {0x8, 0x9, {0x3, 0x6}}, {0xa4, 0x2, {0x1, 0xc6}}, {0x6d9, 0x8, {0x3, 0x6}}, {0x3, 0x4, {0x2, 0xffffffff}}, {0x1, 0x4, {0x1, 0x2}}, {0xa000, 0xfff, {0x2, 0x79}}, {0x81, 0x2, {0x2, 0x10001}}, {0x6, 0x7fff, {0x0, 0x2}}, {0x101, 0x7, {0x1, 0x2}}, {0x5, 0x9, {0x0, 0x6f2}}, {0x3, 0x6, {0x1, 0x84}}, {0x401, 0x7, {0x3, 0x81}}, {0x4, 0x3, {0x3, 0x1}}, {0x2, 0x200, {0x3, 0x5}}, {0xf8, 0x2, {0x0, 0xec20}}, {0xfff, 0xffff, {0x3, 0x23}}, {0x5, 0x6, {0x3, 0x703}}, {0x5, 0x7, {0x2, 0xa52}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x40000040}, 0x800088c) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000001c0)=0x41cd, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000040)=0xfffffffb, 0x4) (async) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x17, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xabbe}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {0x0, 0x200}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) (rerun: 64) 34.078163715s ago: executing program 1 (id=130): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000780)={r6, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) write$binfmt_script(r0, 0x0, 0x0) 33.872711035s ago: executing program 32 (id=130): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x3}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000780)={r6, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) write$binfmt_script(r0, 0x0, 0x0) 32.1123019s ago: executing program 4 (id=141): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x34600, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0xfffffffb) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x1d57, 0xc000, 0x7, 0x20002f9}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') setsockopt$inet6_tcp_buf(r3, 0x6, 0x30, &(0x7f00000000c0)="5ae5daeb7738731023b98af962b5a0e8598fe79477ded2d71196666c0133c4381f49125eac5829002c8fb2ad8594e343a838a59ba1c194d84df8ca253ef76dac894328b9be514cf05846e3fce049dc66ee2557cfffa46360e6dfb2ae60a2f43badc4f76470fef1d1ba03b49a2f843273d06d60b07c5ef06082ef1d66e16527c8a150abc44432ea418a3b8fe4dc87947431ec48fee5b397a001b55689fd4953fc2019f7097e799d3df0c85d3294032be4aa446dc6867bca7a3736494b0afe587d4412652e6c274652a80a9a9ad09e3a4047ebff076c0c2810bbcaaf9f861a62bb3a9a05cfff7860db5e3139da35e2cfd92064246e348ce6ef", 0xf8) syz_emit_ethernet(0x86, &(0x7f0000001800)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000078002000000011907800000010640101024e204e2000649078020000000100000001000000d029115d719a6f09c8f67bbfe5521d8409e8dc3528ae716ab8d87d3a11e134261d4c36aaf3d2b336a8219064cf399c3d26d60d111fcc045c3c8b69c1bbefe53f6f4062a09b90b92a24f5b57100000001000000"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x41c000, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file1\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x140) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x2000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d6, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x81, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4}) setns(0xc9, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x40106183, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 32.036060653s ago: executing program 33 (id=141): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x34600, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0xfffffffb) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x1d57, 0xc000, 0x7, 0x20002f9}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') setsockopt$inet6_tcp_buf(r3, 0x6, 0x30, &(0x7f00000000c0)="5ae5daeb7738731023b98af962b5a0e8598fe79477ded2d71196666c0133c4381f49125eac5829002c8fb2ad8594e343a838a59ba1c194d84df8ca253ef76dac894328b9be514cf05846e3fce049dc66ee2557cfffa46360e6dfb2ae60a2f43badc4f76470fef1d1ba03b49a2f843273d06d60b07c5ef06082ef1d66e16527c8a150abc44432ea418a3b8fe4dc87947431ec48fee5b397a001b55689fd4953fc2019f7097e799d3df0c85d3294032be4aa446dc6867bca7a3736494b0afe587d4412652e6c274652a80a9a9ad09e3a4047ebff076c0c2810bbcaaf9f861a62bb3a9a05cfff7860db5e3139da35e2cfd92064246e348ce6ef", 0xf8) syz_emit_ethernet(0x86, &(0x7f0000001800)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000078002000000011907800000010640101024e204e2000649078020000000100000001000000d029115d719a6f09c8f67bbfe5521d8409e8dc3528ae716ab8d87d3a11e134261d4c36aaf3d2b336a8219064cf399c3d26d60d111fcc045c3c8b69c1bbefe53f6f4062a09b90b92a24f5b57100000001000000"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x41c000, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file1\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXA4XOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//hBVVxg==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x140) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x2000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d6, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x4, 0x70, 0x81, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x4}) setns(0xc9, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x40106183, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 6.181074463s ago: executing program 5 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)="ea", 0x1) (fail_nth: 1) 6.116473456s ago: executing program 5 (id=275): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x787) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2004412, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.115221766s ago: executing program 5 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)="ea", 0x1) 6.093299027s ago: executing program 5 (id=277): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 6.048510309s ago: executing program 5 (id=278): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) tkill(r2, 0x7) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x301600, 0x0) execveat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000140)='-\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='tasks\x00', &(0x7f0000000200)='tasks\x00', &(0x7f0000000240)='./cgroup.net/syz1\x00', &(0x7f0000000280)='tasks\x00', &(0x7f00000002c0)='tasks\x00', &(0x7f0000000300)='{%\\%\x00', &(0x7f0000000340)='%)\x00']}, &(0x7f0000000440)={[&(0x7f0000000400)='./cgroup.net/syz1\x00']}, 0x800) wait4(r2, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) 4.850597987s ago: executing program 0 (id=280): openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0xffffffff) userfaultfd(0x80001) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0xa63f, 0x400, 0x201, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x4d, r4, 0x10, {0xef, 0x1f}, 0x81}, 0x1) 4.841286187s ago: executing program 5 (id=281): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0), 0x3, 0x5ad, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008090) 4.751933161s ago: executing program 6 (id=283): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r3, &(0x7f0000000180)=""/88, 0x58) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 3.661064334s ago: executing program 0 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008090) 3.544154189s ago: executing program 0 (id=288): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 3.484132352s ago: executing program 6 (id=289): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x521, &(0x7f0000001400)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noinit_itable}, {@prjquota}]}, 0x1, 0x4a5, &(0x7f0000000280)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) (fail_nth: 1) 2.614120594s ago: executing program 0 (id=292): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x4000, 0x0, 0x0) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 2.358088607s ago: executing program 2 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400bd7000ffdbdf253a0000000e0509f1b541d0b8460762c7076cfb473a0e339c1666b4d26cfedf160001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000001d1c72471122ce4d62dfd047be0ef7bcab535d13b08b80ff4e930d0b546c00ebc21f93a2c888fb8f0b7751dd94d7dfdf753f47d2a2399a828e4b832c4cb0b96e1fabdb4ef4dcf6c5"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x1, 0x1, 0x9, 0x3, 0x2fcac9d7, 0xffff8770}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000940)=@newtaction={0x14c, 0x30, 0x9, 0x0, 0x0, {}, [{0x138, 0x1, [@m_bpf={0x134, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x3}, {}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0x4, 0xd2, 0x6}]}]}, {0xd2, 0x6, "0a0dabf2e4b9a7e06a8be2de2082fcc21374ecfed5efa100e8c236ec222aec5a4243e893d42bcc86dbfb0db2913365c61bb41a06b3dca139cf88edf09c79c08a8ba3bb95b503df62f9675a0fbcbc9477d3292a3ebf8c1e7ba2614beda67291376a5aea3174dd82975abcaa1f74187ffacfe5ce9ca1637883df82c609b949a9f7c1e0d83f09bf65215cec6cf60969b8e674101b0fa12aa62cb059bfff711416f712bd366bb1a108030d3fd63e3c18cf952f918f6b0c5dee0ee5c8228319497687a253877ec221ddcc1d0f6244e614"}, {0xc}, {0xc}}}]}]}, 0x14c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0xa, 0x1, {0x2, 0x0, 0x81, '\x00', &(0x7f0000000900)={0xc07, 0x6, 0xaa, &(0x7f0000000840)="6b5472252bb923e3f9aeae177b71594a8405f6d41e88083e5907a29bb557114f0fc9615313451624e84944108a10664566f9e07993e4556ffe463545eae4cd8ddb8e60bba641be7645e6855bb4034f6a55aeb4f4ccbaa559c74ba766240716acab8b3686bbea43e3ca6be907101d269b8cfd2ac7f2b7696516ad12bd4cc4bf94e32fca9da4627a086bccb2375bea8cce07aafab79d8f854c99a019a3da4dead174de21aee78bf9f2728f", 0x3}, 0x9}}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) r10 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x4, 0x402c1}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r11, 0x4) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x48e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1fffd, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000068fb0105000000000000000000000000000000000800010003000000060003000100000014000200010000000200000000000014000c8008000300f9ffffff08000200"/80], 0x50}}, 0x0) sendto$inet6(r12, &(0x7f0000847fff)='X', 0x1, 0x4000, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00', 0x100}) 2.200359584s ago: executing program 6 (id=295): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) connect$bt_l2cap(r4, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000004100), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r6, 0x20049549e2a2d659) openat(r6, &(0x7f0000000100)='./file0\x00', 0x28c003, 0x2a) 2.199777614s ago: executing program 0 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)=@ethtool_rxfh_indir={0x39}}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000200)="1a875a821132417d9ef0e60ee12e62edd85d2a688d19cf491498dd06d4eae3", 0x1f}, {&(0x7f0000000380)="896b39ba0064b334ffafc05ec105ef47c30cf14b49ecb1ae8b8eb4a569edacd8104197bba63a1dc138d2d3db6d41ecabf5568957b3bf62e456aa344684fe7e69eefa730a19e1f5ffbca0453499bd74910dc5aaec7ea2d26cab8cab5ccd5f2ef2c84216c2b74a1d427564134bc19ca6bc99ae56a47f5dca3491e29dd3b218d11c7b678bc4929cd023caafedd3188b0e1d700a39dc8bf46f4148ac440cd2a8832ad0a4be0c8aacbdbbcde7c5f263ed82b1523106b18fd61c73e90186ebe0f607d5468f49678fd00d12f509e25e5fd2355d1f6640656c0bf3ee5a6d3743f189f9d2ea0b5421e6e2c8e7d525b5fd2d2411faf6dd9117", 0xf4}, {&(0x7f0000000500)="f6a8b5a94adfa284f5b06126f968bdbe027a4c2809214a9522ea111b1af3a18289dda7cb6c16d4baaf24b2a518ef027893de028abd9d3c38831f45e10e76f2f9954b259e1939b0997d71f3976af7e43599ed09f53dba18e0389c55e298adf4a6e82dff872f82868da90f7b41565adf75a16a8afb037d637868ebbceaf6de8b352a7ad4b8ba2ac68e40fe9ed74d54ff6a5dd238fdb0245e3abe549eacdec100f8bfafbb412219ae542d093992000100006150b3f0c217fe226fc3b7f02d40665630575fb436ccff8f8b8e0cca059cb92f8cfe555ed3db66255bf93ca2054201900a6f2deda9d97a81610e6d8210737b0ab9cbd47a867073765f5c08ee2db6abc6ce5480169d1294f93f4c9aa7b8fc0418105379e4d51f55d99af1ff222745352a2bef6a86f10ef5e0ec3fa7e59a1c5cd6aafb5d85fc82e2da2d6d15cfa59cfbc6e8e0", 0x142}], 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000280)) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3e, &(0x7f00000005c0)=0x800008, 0x4) write(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xff}}]}, 0x2c}}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYRESHEX=r8], 0xfdef) 1.909791588s ago: executing program 3 (id=297): openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0xffffffff) userfaultfd(0x80001) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0xa63f, 0x400, 0x201, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000200)={0x4d, r4, 0x10, {0xef, 0x1f}, 0x81}, 0x1) 1.869066479s ago: executing program 2 (id=298): syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2004412, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.815178812s ago: executing program 2 (id=299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008090) 1.761488835s ago: executing program 0 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x444a, &(0x7f000000bac0)="$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") r1 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0000000000000073013d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='sessname=s. device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x20010, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x54, r5, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x40014) write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7, 0x21, 0xfffd}, 0x61) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000610001fff000000000100000000000000b711d7f1bc7c45e85cc972cb28c08e8a26d7c2fef5f909deaaa1193b3750a4e2b97dee19336175b9c9038c288fd776b55ceebc7bae658b795e6a6d95f22690ea22237845043e0be96ea8adfe1f6487bb1f59cfa6e95d4b076523a3c949220792f7ac08e777afcdccb2e1aaba08000000373ccc8b0ae682a3314e49b9ffd073ccfbf756dfa748acd1b9ed010393e7e80ab346fd017f49fbc143f2eeec6a1ae03accc306388729909cea11321aeb27a47fdbd2527714fceeb49a58593e69eac1005fb5a1351e040a401ea1f19906377b77bb3b7dddb41599bbd7e6c31e64eaf133e3ea3c08d36d33193d683e5a7237a11325e2e93df5", @ANYRES64=r8, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.760732505s ago: executing program 3 (id=301): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x2004412, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.728870656s ago: executing program 2 (id=302): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x181001, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 1.684016848s ago: executing program 3 (id=303): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x153) chdir(&(0x7f0000000240)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10a) getdents64(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) getdents64(r3, &(0x7f0000000180)=""/88, 0x58) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 1.6494479s ago: executing program 2 (id=304): unshare(0x22020600) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2d, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) 1.526939306s ago: executing program 2 (id=305): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x9, 0x81, 0x7, 0x27b}, 0x14) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x13f}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad535a4", 0x60}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed61", 0x17}], 0x3) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r1, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000001700000000000000080009000d000000", 0x24) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd11d13dae5f798032ed4237ad618305d0bffb28dac3b13bd148e2d7e8798ce2deb330ec7cdfdc5cddd477f3ffd22b884e91529740da75f625d46b48a6aa4c40adced23638423cdc401bdd228b0590432be970bd3c9c7b2a6ee3dabba57022a222a4b012ef17e0385b92f034fe82ff530fddd4285581275eecee8a722e309654717a604b740ca6dbc00e7c878d6dd35f55413fc7c8cb1fd3beda73c7db9903f9d44c4faf64095a03292fda7cb99bc53991", 0x4a5) 571.157532ms ago: executing program 6 (id=306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x1, r0, 0x1}) write$cgroup_type(r1, &(0x7f0000000140), 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x12000, 0x128) write$vga_arbiter(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="746172676574205043493a31633a373a392e31390084d9af0c430638bbf6e8685a2f3e9bd4029730234aebfaa2efef7b4ae6730e599f782fa6f48a973cb557e6ae55b36b7506d7507871c6e5d2bb7d073c06c27fe698e859e4838565b99c8e492eb7955474ec37b62fcfd44c897495693ae4ff2ceba78fa6254df81478b3163d97b6f13f9271f10aa65cd061b6efc1e74336b3b80c8c15087e142d99ebcf0c9dd19916aff1d36f05"], 0x15) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x5, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000a40), 0x404000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) sendmsg$rds(r4, &(0x7f0000000a00)={&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000680)=""/236, 0xec}, {&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000000840)=""/17, 0x11}], 0x7, &(0x7f0000000980)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x7ec}, &(0x7f0000000900)=0x99, &(0x7f0000000940)=0x100, 0x59bf, 0x80000001, 0xfffffffffffffff2, 0x6, 0x2, 0x8}}], 0x58, 0x40004}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000088a2020100000800faff0700d06d6558b77daaaaaaaaaaaa81000000080045810034006100000506"], 0x54) 372.926442ms ago: executing program 3 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000088a2020100000800faff0700d06d6558b77daaaaaaaaaaaa81000000080045810034006100000506"], 0x54) 282.090506ms ago: executing program 3 (id=308): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x3a, 0x30}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r3, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000440), 0x12) write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[], 0x6a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x1000000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 28.698168ms ago: executing program 6 (id=309): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close(r0) syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r1, 0x787) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2004412, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9.737419ms ago: executing program 3 (id=310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r2, 0x80000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018000080140001800f0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) 0s ago: executing program 6 (id=311): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x1, 0x0) write(r1, 0x0, 0x0) (async) write(r1, 0x0, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9}, 0x94) (async) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r6, 0x3, 0x0, @val=@iter={0x0}}, 0x20) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0x7, 0x0, 0x55a}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x0, 0x5, 0x32f6, 0x558}) kernel console output (not intermixed with test programs): ommended to keep mac addresses unique to avoid problems! [ 33.343812][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.346032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.348006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.349665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.351390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.353050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.354602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.356228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.360970][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.362764][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.364557][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.366431][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.370552][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.372792][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.374247][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.375781][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.377214][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.383862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.385570][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.388013][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.389319][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.390655][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.393905][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.395470][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.396966][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.398899][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.406069][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.407828][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.421622][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.423218][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.425259][ T4336] device veth1_vlan entered promiscuous mode [ 33.428528][ T4341] device veth0_vlan entered promiscuous mode [ 33.434888][ T4341] device veth1_vlan entered promiscuous mode [ 33.446260][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.447980][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.449907][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.451409][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.453063][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.454766][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.456261][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.472929][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.474582][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.476177][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.479923][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.482328][ T4341] device veth0_macvtap entered promiscuous mode [ 33.490375][ T4341] device veth1_macvtap entered promiscuous mode [ 33.493470][ T4336] device veth0_macvtap entered promiscuous mode [ 33.495102][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.496458][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.502259][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.503965][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.505530][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.507220][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.509897][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.511578][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.514400][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.530511][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.537157][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.539696][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.541252][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.542924][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.544617][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.547173][ T4336] device veth1_macvtap entered promiscuous mode [ 33.554401][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.556197][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.558134][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.559813][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.561373][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.563120][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.564845][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.566571][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.569495][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.573799][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.575483][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.577218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.583361][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.585121][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.586774][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.589653][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.591268][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.592997][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.595619][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.598381][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.600127][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.601638][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.603319][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.604919][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.606689][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.609624][ T4341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.611379][ T4341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.613674][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.616089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.618396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.620362][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.622117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.625420][ T4336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.627050][ T4336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.629613][ T4336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.631138][ T4336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.636644][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.638162][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.645979][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.648001][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.653196][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.654911][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.688272][ T4341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.690502][ T4341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.692158][ T4341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.693808][ T4341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.695341][ T4414] loop4: detected capacity change from 0 to 4096 [ 33.724345][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.725620][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.727053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.790938][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.792381][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.793734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.798383][ T4414] EXT4-fs: inline encryption not supported [ 33.799519][ T4414] EXT4-fs: Ignoring removed nobh option [ 33.802260][ T4414] EXT4-fs (loop4): Test dummy encryption mode enabled [ 33.834305][ T4414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.843008][ T4426] loop0: detected capacity change from 0 to 1024 [ 33.873294][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.874656][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.876324][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.886247][ T4424] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 33.910417][ T4414] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 33.921179][ T4426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.947849][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.949225][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.950654][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.291194][ T4438] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 34.639696][ T4343] Bluetooth: hci2: command 0x041b tx timeout [ 34.640880][ T4343] Bluetooth: hci1: command 0x041b tx timeout [ 34.641984][ T4343] Bluetooth: hci0: command 0x041b tx timeout [ 34.643009][ T4343] Bluetooth: hci3: command 0x041b tx timeout [ 34.644173][ T4343] Bluetooth: hci4: command 0x041b tx timeout [ 34.893494][ T4430] loop3: detected capacity change from 0 to 32768 [ 34.975155][ T4445] loop1: detected capacity change from 0 to 512 [ 35.997302][ C0] sched: RT throttling activated [ 36.033554][ T4445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.035515][ T4445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.043204][ T4445] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.285426][ T4445] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.9: Invalid block bitmap block 0 in block_group 0 [ 36.288207][ T4430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4430) [ 36.289704][ T4445] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 36.292219][ T4445] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.9: attempt to clear invalid blocks 983261 len 1 [ 36.294731][ T4445] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.9: Invalid inode table block 0 in block_group 0 [ 36.297497][ T4445] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 36.299767][ T4445] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 36.301399][ T4445] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.9: Invalid inode table block 0 in block_group 0 [ 36.303682][ T4445] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 36.305541][ T4445] EXT4-fs error (device loop1): ext4_truncate:4325: inode #11: comm syz.1.9: mark_inode_dirty error [ 36.308036][ T4445] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 36.310074][ T4445] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.9: Invalid inode table block 0 in block_group 0 [ 36.317808][ T4445] EXT4-fs (loop1): 1 truncate cleaned up [ 36.318820][ T4445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.338957][ T4430] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.343125][ T4430] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 36.344698][ T4430] BTRFS info (device loop3): using free space tree [ 36.357135][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 36.462141][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 36.494343][ T4466] loop1: detected capacity change from 0 to 512 [ 36.501978][ T4466] ======================================================= [ 36.501978][ T4466] WARNING: The mand mount option has been deprecated and [ 36.501978][ T4466] and is ignored by this kernel. Remove the mand [ 36.501978][ T4466] option from the mount to silence this warning. [ 36.501978][ T4466] ======================================================= [ 36.546787][ T4430] BTRFS info (device loop3): enabling ssd optimizations [ 36.550433][ T4448] loop2: detected capacity change from 0 to 32768 [ 36.580748][ T4466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.606555][ T4448] XFS (loop2): Mounting V5 Filesystem [ 36.621782][ T9] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 36.661507][ T4481] loop4: detected capacity change from 0 to 512 [ 36.693296][ T4481] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.700472][ T4448] XFS (loop2): Ending clean mount [ 36.717499][ T4345] Bluetooth: hci4: command 0x040f tx timeout [ 36.719204][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 36.719224][ T4343] Bluetooth: hci3: command 0x040f tx timeout [ 36.719301][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 36.722670][ T4339] Bluetooth: hci0: command 0x040f tx timeout [ 38.029566][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 38.043876][ T4341] XFS (loop2): Unmounting Filesystem [ 38.056108][ T4430] input: syz0 as /devices/virtual/input/input2 [ 38.057234][ T4430] input: failed to attach handler leds to device input2, error: -6 [ 38.120344][ T4496] loop1: detected capacity change from 0 to 128 [ 38.249070][ T4336] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 38.632277][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 38.644962][ T4494] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.682435][ T4496] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 38.698025][ T4513] Zero length message leads to an empty skb [ 38.807769][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 38.808928][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 38.810000][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 38.811104][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 38.812087][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 38.944132][ T4526] mmap: syz.1.18 (4526) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.334786][ T4330] Bluetooth: hci0: failed to read key size for handle 200 [ 39.645325][ T4542] loop3: detected capacity change from 0 to 512 [ 40.287320][ T4542] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.289446][ T4542] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.466129][ T4542] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.22: Invalid block bitmap block 0 in block_group 0 [ 40.469687][ T4542] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 40.472097][ T4542] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.22: attempt to clear invalid blocks 983261 len 1 [ 40.474878][ T4542] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.22: Invalid inode table block 0 in block_group 0 [ 40.477639][ T4542] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 40.479864][ T4542] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 40.481975][ T4542] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.22: Invalid inode table block 0 in block_group 0 [ 40.484813][ T4542] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 40.487239][ T4542] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.22: mark_inode_dirty error [ 40.489802][ T4542] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 40.492162][ T4542] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.22: Invalid inode table block 0 in block_group 0 [ 40.494966][ T4542] EXT4-fs (loop3): 1 truncate cleaned up [ 40.496063][ T4542] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.712108][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 40.742250][ T4550] capability: warning: `syz.4.24' uses 32-bit capabilities (legacy support in use) [ 40.775585][ T4554] loop2: detected capacity change from 0 to 64 [ 40.815416][ T4552] loop3: detected capacity change from 0 to 32768 [ 41.006907][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 41.478929][ T4574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 41.485004][ T4574] FAULT_INJECTION: forcing a failure. [ 41.485004][ T4574] name failslab, interval 1, probability 0, space 0, times 1 [ 41.489341][ T4574] CPU: 1 PID: 4574 Comm: syz.1.32 Not tainted syzkaller #0 [ 41.490601][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.492306][ T4574] Call trace: [ 41.492888][ T4574] dump_backtrace+0x1c4/0x1f0 [ 41.493697][ T4574] show_stack+0x2c/0x3c [ 41.494443][ T4574] __dump_stack+0x30/0x40 [ 41.495205][ T4574] dump_stack_lvl+0xf4/0x15c [ 41.496012][ T4574] dump_stack+0x1c/0x5c [ 41.496750][ T4574] should_fail_ex+0x3cc/0x524 [ 41.497590][ T4574] __should_failslab+0xc0/0x11c [ 41.498490][ T4574] should_failslab+0x10/0x28 [ 41.499318][ T4574] kmem_cache_alloc+0x88/0x310 [ 41.500208][ T4574] __nf_conntrack_alloc+0xa4/0x3a4 [ 41.501155][ T4574] init_conntrack+0x214/0xf60 [ 41.502020][ T4574] nf_conntrack_in+0xa74/0x1934 [ 41.502950][ T4574] ipv6_conntrack_local+0x28/0x38 [ 41.503856][ T4574] nf_hook_slow+0xc8/0x208 [ 41.504606][ T4574] __ip6_local_out+0x6c0/0x7dc [ 41.505437][ T4574] ip6_local_out+0x3c/0x15c [ 41.506255][ T4574] ip6_send_skb+0x1a0/0x4e4 [ 41.507095][ T4574] udp_v6_send_skb+0x9f4/0x1610 [ 41.508036][ T4574] udpv6_sendmsg+0x1544/0x20d0 [ 41.509005][ T4574] inet6_sendmsg+0xb4/0xd8 [ 41.509852][ T4574] __sys_sendto+0x324/0x440 [ 41.510602][ T4574] __arm64_sys_sendto+0xe4/0x104 [ 41.511448][ T4574] invoke_syscall+0x98/0x290 [ 41.512243][ T4574] el0_svc_common+0x13c/0x258 [ 41.513088][ T4574] do_el0_svc+0x5c/0x134 [ 41.513882][ T4574] el0_svc+0x58/0x128 [ 41.514583][ T4574] el0t_64_sync_handler+0x84/0xf0 [ 41.515572][ T4574] el0t_64_sync+0x18c/0x190 [ 41.536982][ T4578] loop4: detected capacity change from 0 to 128 [ 41.616138][ T4576] loop2: detected capacity change from 0 to 4096 [ 41.777459][ T4330] Bluetooth: hci1: failed to read key size for handle 200 [ 41.961471][ T4578] device-mapper: ioctl: Invalid target message parameters. [ 42.019183][ T4591] device gretap0 entered promiscuous mode [ 42.029973][ T4591] device gretap0 left promiscuous mode [ 42.147830][ T4601] loop3: detected capacity change from 0 to 512 [ 43.040268][ T4601] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.042386][ T4601] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.173070][ T4601] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.37: Invalid block bitmap block 0 in block_group 0 [ 43.175607][ T4601] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 43.177409][ T4601] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.37: attempt to clear invalid blocks 983261 len 1 [ 43.179890][ T4601] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.37: Invalid inode table block 0 in block_group 0 [ 43.182154][ T4601] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 43.183882][ T4601] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 43.185549][ T4601] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.37: Invalid inode table block 0 in block_group 0 [ 43.188402][ T4601] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 43.190207][ T4601] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.37: mark_inode_dirty error [ 43.192333][ T4601] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 43.194317][ T4601] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.37: Invalid inode table block 0 in block_group 0 [ 43.201395][ T4601] EXT4-fs (loop3): 1 truncate cleaned up [ 43.202484][ T4601] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.258439][ T4609] loop0: detected capacity change from 0 to 128 [ 43.345929][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 43.529484][ T4330] Bluetooth: hci0: failed to read key size for handle 200 [ 43.672408][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.680772][ T4609] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(14) [ 43.750527][ T4618] FAULT_INJECTION: forcing a failure. [ 43.750527][ T4618] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.759058][ T4618] CPU: 1 PID: 4618 Comm: syz.0.46 Not tainted syzkaller #0 [ 43.760298][ T4618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 43.762005][ T4618] Call trace: [ 43.762538][ T4618] dump_backtrace+0x1c4/0x1f0 [ 43.763349][ T4618] show_stack+0x2c/0x3c [ 43.764106][ T4618] __dump_stack+0x30/0x40 [ 43.764876][ T4618] dump_stack_lvl+0xf4/0x15c [ 43.765683][ T4618] dump_stack+0x1c/0x5c [ 43.766475][ T4618] should_fail_ex+0x3cc/0x524 [ 43.767311][ T4618] should_fail+0x14/0x24 [ 43.768069][ T4618] should_fail_usercopy+0x20/0x30 [ 43.768952][ T4618] move_addr_to_kernel+0xa0/0x25c [ 43.769867][ T4618] __sys_connect+0xe0/0x2b4 [ 43.770652][ T4618] __arm64_sys_connect+0x7c/0x94 [ 43.771520][ T4618] invoke_syscall+0x98/0x290 [ 43.772308][ T4618] el0_svc_common+0x13c/0x258 [ 43.773154][ T4618] do_el0_svc+0x5c/0x134 [ 43.773942][ T4618] el0_svc+0x58/0x128 [ 43.774667][ T4618] el0t_64_sync_handler+0x84/0xf0 [ 43.775516][ T4618] el0t_64_sync+0x18c/0x190 [ 43.778215][ T4627] loop1: detected capacity change from 0 to 1024 [ 43.797796][ T4612] loop2: detected capacity change from 0 to 32768 [ 43.823540][ T4612] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 43.964381][ T4612] process 'syz.2.44' launched '/dev/fd/0/á Çü+4Æ"' with NULL argv: empty string added [ 44.247407][ T4330] Bluetooth: hci2: failed to read key size for handle 200 [ 44.454646][ T4341] ocfs2: Unmounting device (7,2) on (node local) [ 44.537114][ T4654] FAULT_INJECTION: forcing a failure. [ 44.537114][ T4654] name failslab, interval 1, probability 0, space 0, times 0 [ 44.539757][ T4654] CPU: 0 PID: 4654 Comm: syz.2.54 Not tainted syzkaller #0 [ 44.541026][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 44.542727][ T4654] Call trace: [ 44.542858][ T4655] loop1: detected capacity change from 0 to 128 [ 44.543289][ T4654] dump_backtrace+0x1c4/0x1f0 [ 44.545194][ T4654] show_stack+0x2c/0x3c [ 44.545915][ T4654] __dump_stack+0x30/0x40 [ 44.546669][ T4654] dump_stack_lvl+0xf4/0x15c [ 44.547468][ T4654] dump_stack+0x1c/0x5c [ 44.548238][ T4654] should_fail_ex+0x3cc/0x524 [ 44.549085][ T4654] __should_failslab+0xc0/0x11c [ 44.549976][ T4654] should_failslab+0x10/0x28 [ 44.550764][ T4654] slab_pre_alloc_hook+0x6c/0x31c [ 44.551628][ T4654] kmem_cache_alloc_lru+0x60/0x284 [ 44.552525][ T4654] __d_alloc+0x40/0x68c [ 44.553270][ T4654] d_alloc_pseudo+0x28/0x8c [ 44.554071][ T4654] alloc_file_pseudo+0xd8/0x1f4 [ 44.555093][ T4654] __shmem_file_setup+0x1a0/0x26c [ 44.556112][ T4654] shmem_file_setup+0x40/0x54 [ 44.556990][ T4654] __arm64_sys_memfd_create+0x2d8/0x458 [ 44.558064][ T4654] invoke_syscall+0x98/0x290 [ 44.558950][ T4654] el0_svc_common+0x13c/0x258 [ 44.559778][ T4654] do_el0_svc+0x5c/0x134 [ 44.560533][ T4654] el0_svc+0x58/0x128 [ 44.561270][ T4654] el0t_64_sync_handler+0x84/0xf0 [ 44.562235][ T4654] el0t_64_sync+0x18c/0x190 [ 44.571453][ T4320] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.692260][ T4661] loop4: detected capacity change from 0 to 512 [ 45.209058][ T4661] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.211023][ T4661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.502957][ T4661] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.55: Invalid block bitmap block 0 in block_group 0 [ 45.505788][ T4661] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 45.508464][ T4661] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.55: attempt to clear invalid blocks 983261 len 1 [ 45.511173][ T4661] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.55: Invalid inode table block 0 in block_group 0 [ 45.513705][ T4661] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 45.515925][ T4661] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 45.518720][ T4661] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.55: Invalid inode table block 0 in block_group 0 [ 45.521757][ T4661] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 45.524114][ T4661] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.55: mark_inode_dirty error [ 45.526684][ T4661] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 45.530706][ T4661] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.55: Invalid inode table block 0 in block_group 0 [ 45.533505][ T4661] EXT4-fs (loop4): 1 truncate cleaned up [ 45.534604][ T4661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.782000][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 45.791909][ T4670] overlayfs: failed to resolve './file1': -2 [ 45.806613][ T4677] FAULT_INJECTION: forcing a failure. [ 45.806613][ T4677] name failslab, interval 1, probability 0, space 0, times 0 [ 45.810074][ T4677] CPU: 0 PID: 4677 Comm: syz.1.64 Not tainted syzkaller #0 [ 45.811375][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.813015][ T4677] Call trace: [ 45.813579][ T4677] dump_backtrace+0x1c4/0x1f0 [ 45.814390][ T4677] show_stack+0x2c/0x3c [ 45.815096][ T4677] __dump_stack+0x30/0x40 [ 45.815831][ T4677] dump_stack_lvl+0xf4/0x15c [ 45.816598][ T4677] dump_stack+0x1c/0x5c [ 45.817320][ T4677] should_fail_ex+0x3cc/0x524 [ 45.818193][ T4677] __should_failslab+0xc0/0x11c [ 45.819111][ T4677] should_failslab+0x10/0x28 [ 45.819965][ T4677] __kmem_cache_alloc_node+0x7c/0x318 [ 45.820950][ T4677] __kmalloc_node_track_caller+0xb8/0x174 [ 45.821958][ T4677] kmemdup+0x5c/0x98 [ 45.822668][ T4677] ebt_register_table+0x150/0xd2c [ 45.823606][ T4677] frame_filter_table_init+0x30/0x40 [ 45.824550][ T4677] find_inlist_lock_noload+0x178/0x260 [ 45.825508][ T4677] do_update_counters+0x80/0x3e4 [ 45.826387][ T4677] do_ebt_set_ctl+0x3f8/0xbf4 [ 45.827255][ T4677] nf_setsockopt+0x260/0x280 [ 45.828068][ T4677] ip_setsockopt+0x124/0x134 [ 45.828907][ T4677] udp_setsockopt+0xa4/0xbc [ 45.829733][ T4677] sock_common_setsockopt+0xb0/0xcc [ 45.830681][ T4677] __sys_setsockopt+0x2fc/0x50c [ 45.831574][ T4677] __arm64_sys_setsockopt+0xc0/0xdc [ 45.832542][ T4677] invoke_syscall+0x98/0x290 [ 45.833417][ T4677] el0_svc_common+0x13c/0x258 [ 45.834252][ T4677] do_el0_svc+0x5c/0x134 [ 45.834961][ T4677] el0_svc+0x58/0x128 [ 45.835636][ T4677] el0t_64_sync_handler+0x84/0xf0 [ 45.836565][ T4677] el0t_64_sync+0x18c/0x190 [ 45.837451][ C0] vkms_vblank_simulate: vblank timer overrun [ 45.896135][ T4658] loop2: detected capacity change from 0 to 32768 [ 45.915330][ T4658] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 45.920366][ T4658] JBD2: Ignoring recovery information on journal [ 45.937631][ T4687] vhci_hcd: invalid port number 255 [ 45.942800][ T4687] vhci_hcd: invalid port number 255 [ 45.977240][ T4658] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 46.002729][ T4688] loop3: detected capacity change from 0 to 4096 [ 46.012905][ T4688] EXT4-fs: inline encryption not supported [ 46.015533][ T4667] loop0: detected capacity change from 0 to 40427 [ 46.020996][ T4688] EXT4-fs: Ignoring removed nobh option [ 46.036056][ T4692] loop1: detected capacity change from 0 to 512 [ 46.037879][ T4692] EXT4-fs: Ignoring removed bh option [ 46.038910][ T4692] EXT4-fs: inline encryption not supported [ 46.041743][ T4692] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.044097][ T4688] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.074617][ T4494] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.077575][ T4688] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.163686][ T4692] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.168642][ T4692] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.68: bg 0: block 248: padding at end of block bitmap is not set [ 46.194990][ T4692] Quota error (device loop1): write_blk: dquota write failed [ 46.196457][ T4692] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 46.208636][ T4341] ocfs2: Unmounting device (7,2) on (node local) [ 46.222690][ T4692] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.68: Failed to acquire dquot type 1 [ 46.401326][ T4713] loop0: detected capacity change from 0 to 512 [ 47.583675][ T4713] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.585665][ T4713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.613120][ T4692] EXT4-fs (loop1): 1 truncate cleaned up [ 47.614140][ T4692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.779073][ T4713] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.72: Invalid block bitmap block 0 in block_group 0 [ 47.781975][ T4713] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 47.783483][ T4713] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.72: attempt to clear invalid blocks 983261 len 1 [ 47.785900][ T4713] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.72: Invalid inode table block 0 in block_group 0 [ 47.791033][ T4713] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 47.792982][ T4713] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 47.794671][ T4713] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.72: Invalid inode table block 0 in block_group 0 [ 47.797096][ T4713] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 47.799922][ T4713] EXT4-fs error (device loop0): ext4_truncate:4325: inode #11: comm syz.0.72: mark_inode_dirty error [ 47.802012][ T4713] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 47.804076][ T4713] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.72: Invalid inode table block 0 in block_group 0 [ 47.806581][ T4713] EXT4-fs (loop0): 1 truncate cleaned up [ 47.807674][ T4713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.888303][ T4692] EXT4-fs (loop1): unmounting filesystem. [ 47.991518][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 48.141199][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 48.150683][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.152840][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.154206][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.156127][ T4724] device bridge_slave_0 left promiscuous mode [ 48.157627][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.164709][ T4330] Bluetooth: hci4: failed to read key size for handle 200 [ 48.212886][ T4729] 9pnet_fd: Insufficient options for proto=fd [ 48.261177][ T4732] binder: BINDER_SET_CONTEXT_MGR already set [ 48.262225][ T4732] binder: 4721:4732 ioctl 4018620d 20000040 returned -16 [ 48.262808][ T4726] loop0: detected capacity change from 0 to 8192 [ 48.263704][ T4732] binder: 4721:4732 got transaction to invalid handle, 1 [ 48.265964][ T4732] binder: 4732:4721 cannot find target node [ 48.276195][ T4724] device bridge_slave_1 left promiscuous mode [ 48.276498][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.279863][ T4732] binder: 4721:4732 transaction call to 0:0 failed 3/29201/-22, size 0-24 line 3062 [ 48.300637][ T4726] loop0: AHDI p1 p2 p3 [ 48.301587][ T4726] loop0: p1 start 36864 is beyond EOD, truncated [ 48.303206][ T4726] loop0: p3 start 1638400 is beyond EOD, truncated [ 48.309102][ T4724] bond0: (slave bond_slave_0): Releasing backup interface [ 48.310909][ T4742] netlink: 84 bytes leftover after parsing attributes in process `syz.3.79'. [ 48.383221][ T4747] FAULT_INJECTION: forcing a failure. [ 48.383221][ T4747] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.385824][ T4747] CPU: 0 PID: 4747 Comm: syz.4.80 Not tainted syzkaller #0 [ 48.387048][ T4747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.388935][ T4747] Call trace: [ 48.389527][ T4747] dump_backtrace+0x1c4/0x1f0 [ 48.390379][ T4747] show_stack+0x2c/0x3c [ 48.391143][ T4747] __dump_stack+0x30/0x40 [ 48.391921][ T4747] dump_stack_lvl+0xf4/0x15c [ 48.392730][ T4747] dump_stack+0x1c/0x5c [ 48.393428][ T4747] should_fail_ex+0x3cc/0x524 [ 48.394255][ T4747] should_fail_alloc_page+0x74/0xb8 [ 48.395151][ T4747] prepare_alloc_pages+0x1b8/0x4f0 [ 48.395993][ T4747] __alloc_pages+0x134/0x544 [ 48.396772][ T4747] __folio_alloc+0x1c/0x44 [ 48.397556][ T4747] vma_alloc_folio+0x37c/0x8ac [ 48.398412][ T4747] shmem_alloc_and_acct_folio+0x3bc/0x948 [ 48.399449][ T4747] shmem_get_folio_gfp+0xedc/0x2038 [ 48.400380][ T4747] shmem_fault+0x170/0x564 [ 48.401189][ T4747] __do_fault+0x11c/0x3d8 [ 48.402078][ T4747] handle_mm_fault+0x13a0/0x3018 [ 48.403097][ T4747] do_page_fault+0x310/0x99c [ 48.404051][ T4747] do_translation_fault+0x94/0xc8 [ 48.404985][ T4747] do_mem_abort+0x70/0x198 [ 48.405851][ T4747] el1_abort+0x3c/0x5c [ 48.406664][ T4747] el1h_64_sync_handler+0x50/0xac [ 48.407616][ T4747] el1h_64_sync+0x64/0x68 [ 48.408462][ T4747] __arch_copy_to_user+0xbc/0x234 [ 48.409392][ T4747] drm_ioctl_kernel+0x2a4/0x418 [ 48.410304][ T4747] drm_ioctl+0x59c/0x908 [ 48.411114][ T4747] __arm64_sys_ioctl+0x14c/0x1c8 [ 48.412062][ T4747] invoke_syscall+0x98/0x290 [ 48.412909][ T4747] el0_svc_common+0x13c/0x258 [ 48.413769][ T4747] do_el0_svc+0x5c/0x134 [ 48.414567][ T4747] el0_svc+0x58/0x128 [ 48.415363][ T4747] el0t_64_sync_handler+0x84/0xf0 [ 48.416324][ T4747] el0t_64_sync+0x18c/0x190 [ 48.431210][ T4724] bond0: (slave bond_slave_1): Releasing backup interface [ 48.473317][ T4724] team0: Port device team_slave_0 removed [ 48.503378][ T4724] team0: Port device team_slave_1 removed [ 48.505052][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.514905][ T4724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.583165][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.584668][ T4724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.700903][ T4764] loop4: detected capacity change from 0 to 512 [ 48.803422][ T4764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.805508][ T4764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.155823][ T4764] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.83: Invalid block bitmap block 0 in block_group 0 [ 49.162386][ T4764] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 49.164649][ T4764] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.83: attempt to clear invalid blocks 983261 len 1 [ 49.168200][ T4764] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.83: Invalid inode table block 0 in block_group 0 [ 49.170979][ T4764] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 49.173270][ T4764] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 49.175341][ T4764] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.83: Invalid inode table block 0 in block_group 0 [ 49.178291][ T4764] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 49.180422][ T4764] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.83: mark_inode_dirty error [ 49.182944][ T4764] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 49.185118][ T4764] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.83: Invalid inode table block 0 in block_group 0 [ 49.187984][ T4764] EXT4-fs (loop4): 1 truncate cleaned up [ 49.189157][ T4764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.406067][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 49.583418][ T4770] loop1: detected capacity change from 0 to 4096 [ 49.584986][ T4770] EXT4-fs: inline encryption not supported [ 49.586093][ T4770] EXT4-fs: Ignoring removed nobh option [ 49.627248][ T4770] EXT4-fs (loop1): Test dummy encryption mode enabled [ 49.659297][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.677195][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 49.700926][ T4776] loop3: detected capacity change from 0 to 256 [ 49.708176][ T4774] 9pnet_fd: Insufficient options for proto=fd [ 49.708846][ T4778] loop2: detected capacity change from 0 to 64 [ 49.829888][ T4778] hfs: unable to load iocharset "koi8-rucodepa" [ 49.831109][ T4778] hfs: unable to parse mount options [ 49.845168][ T4784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.90'. [ 50.369552][ T4784] FAULT_INJECTION: forcing a failure. [ 50.369552][ T4784] name failslab, interval 1, probability 0, space 0, times 0 [ 50.387741][ T4784] CPU: 0 PID: 4784 Comm: syz.4.90 Not tainted syzkaller #0 [ 50.389139][ T4784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.391275][ T4784] Call trace: [ 50.391936][ T4784] dump_backtrace+0x1c4/0x1f0 [ 50.392873][ T4784] show_stack+0x2c/0x3c [ 50.393792][ T4784] __dump_stack+0x30/0x40 [ 50.394586][ T4784] dump_stack_lvl+0xf4/0x15c [ 50.395426][ T4784] dump_stack+0x1c/0x5c [ 50.396190][ T4784] should_fail_ex+0x3cc/0x524 [ 50.397017][ T4784] __should_failslab+0xc0/0x11c [ 50.397901][ T4784] should_failslab+0x10/0x28 [ 50.398737][ T4784] __kmem_cache_alloc_node+0x7c/0x318 [ 50.399694][ T4784] kmalloc_trace+0x48/0x94 [ 50.400506][ T4784] nfnetlink_rcv+0xaac/0x1c54 [ 50.401326][ T4784] netlink_unicast+0x5fc/0x80c [ 50.402172][ T4784] netlink_sendmsg+0x6f0/0x9d8 [ 50.403015][ T4784] ____sys_sendmsg+0x588/0x90c [ 50.404000][ T4784] __sys_sendmsg+0x288/0x374 [ 50.404950][ T4784] __arm64_sys_sendmsg+0x80/0x94 [ 50.405885][ T4784] invoke_syscall+0x98/0x290 [ 50.406730][ T4784] el0_svc_common+0x13c/0x258 [ 50.407606][ T4784] do_el0_svc+0x5c/0x134 [ 50.408402][ T4784] el0_svc+0x58/0x128 [ 50.409144][ T4784] el0t_64_sync_handler+0x84/0xf0 [ 50.410167][ T4784] el0t_64_sync+0x18c/0x190 [ 50.907412][ T4322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.944876][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 50.991143][ T4379] lg-g15 0003:046D:0A07.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 50.993136][ T4379] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0001/input/input3 [ 51.017543][ T4797] FAULT_INJECTION: forcing a failure. [ 51.017543][ T4797] name failslab, interval 1, probability 0, space 0, times 0 [ 51.019843][ T4797] CPU: 0 PID: 4797 Comm: syz.2.95 Not tainted syzkaller #0 [ 51.021114][ T4797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.022820][ T4797] Call trace: [ 51.023353][ T4797] dump_backtrace+0x1c4/0x1f0 [ 51.024130][ T4797] show_stack+0x2c/0x3c [ 51.024819][ T4797] __dump_stack+0x30/0x40 [ 51.025546][ T4797] dump_stack_lvl+0xf4/0x15c [ 51.026427][ T4797] dump_stack+0x1c/0x5c [ 51.027187][ T4797] should_fail_ex+0x3cc/0x524 [ 51.028047][ T4797] __should_failslab+0xc0/0x11c [ 51.028943][ T4797] should_failslab+0x10/0x28 [ 51.029786][ T4797] kmem_cache_alloc+0x88/0x310 [ 51.030699][ T4797] skb_clone+0x194/0x308 [ 51.031508][ T4797] netlink_broadcast+0x580/0x1054 [ 51.032449][ T4797] kobject_uevent_net_broadcast+0x32c/0x528 [ 51.033503][ T4797] kobject_uevent_env+0x550/0x88c [ 51.034411][ T4797] kobject_uevent+0x2c/0x3c [ 51.035263][ T4797] lo_ioctl+0x1058/0x1aec [ 51.036031][ T4797] blkdev_ioctl+0x654/0xb74 [ 51.036856][ T4797] __arm64_sys_ioctl+0x14c/0x1c8 [ 51.037717][ T4797] invoke_syscall+0x98/0x290 [ 51.038542][ T4797] el0_svc_common+0x13c/0x258 [ 51.039406][ T4797] do_el0_svc+0x5c/0x134 [ 51.040183][ T4801] loop3: detected capacity change from 0 to 2048 [ 51.041346][ T4797] el0_svc+0x58/0x128 [ 51.042088][ T4797] el0t_64_sync_handler+0x84/0xf0 [ 51.043010][ T4797] el0t_64_sync+0x18c/0x190 [ 51.070724][ T4801] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 51.121575][ T4805] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.122313][ T4801] syz.3.96: attempt to access beyond end of device [ 51.122313][ T4801] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 51.266465][ T4811] loop4: detected capacity change from 0 to 512 [ 51.278681][ T4811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.280745][ T4811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.574372][ T4811] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.97: Invalid block bitmap block 0 in block_group 0 [ 51.577517][ T4811] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 51.579692][ T4811] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.97: attempt to clear invalid blocks 983261 len 1 [ 51.582749][ T4811] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.97: Invalid inode table block 0 in block_group 0 [ 51.585431][ T4811] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 51.587686][ T4811] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 51.589568][ T4811] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.97: Invalid inode table block 0 in block_group 0 [ 51.592454][ T4811] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 51.594620][ T4811] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.97: mark_inode_dirty error [ 51.597128][ T4811] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 51.600621][ T4811] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.97: Invalid inode table block 0 in block_group 0 [ 51.603422][ T4811] EXT4-fs (loop4): 1 truncate cleaned up [ 51.604582][ T4811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.124761][ T4821] FAULT_INJECTION: forcing a failure. [ 52.124761][ T4821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.139576][ T4810] fido_id[4810]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.152349][ T4821] CPU: 1 PID: 4821 Comm: syz.0.102 Not tainted syzkaller #0 [ 52.153530][ T4821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 52.155222][ T4821] Call trace: [ 52.155806][ T4821] dump_backtrace+0x1c4/0x1f0 [ 52.156663][ T4821] show_stack+0x2c/0x3c [ 52.157397][ T4821] __dump_stack+0x30/0x40 [ 52.158193][ T4821] dump_stack_lvl+0xf4/0x15c [ 52.159023][ T4821] dump_stack+0x1c/0x5c [ 52.159904][ T4821] should_fail_ex+0x3cc/0x524 [ 52.160885][ T4821] should_fail+0x14/0x24 [ 52.161786][ T4821] should_fail_usercopy+0x20/0x30 [ 52.162853][ T4821] dm_ctl_ioctl+0x680/0xf1c [ 52.163751][ T4821] __arm64_sys_ioctl+0x14c/0x1c8 [ 52.164748][ T4821] invoke_syscall+0x98/0x290 [ 52.165660][ T4821] el0_svc_common+0x13c/0x258 [ 52.166592][ T4821] do_el0_svc+0x5c/0x134 [ 52.167437][ T4821] el0_svc+0x58/0x128 [ 52.168244][ T4821] el0t_64_sync_handler+0x84/0xf0 [ 52.169235][ T4821] el0t_64_sync+0x18c/0x190 [ 52.177529][ T4816] loop1: detected capacity change from 0 to 8192 [ 52.197117][ T4824] loop3: detected capacity change from 0 to 4096 [ 52.203098][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 52.204710][ T4824] EXT4-fs: inline encryption not supported [ 52.205761][ T4824] EXT4-fs: Ignoring removed nobh option [ 52.215252][ T4824] EXT4-fs (loop3): Test dummy encryption mode enabled [ 52.218111][ T4816] loop1: AHDI p1 p2 p3 p4 [ 52.219565][ T4816] loop1: p3 start 1638400 is beyond EOD, truncated [ 52.220909][ T4816] loop1: p4 size 1073741824 extends beyond EOD, truncated [ 52.241563][ T4824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.340131][ T4829] loop0: detected capacity change from 0 to 32768 [ 52.936046][ T4829] JBD2: Ignoring recovery information on journal [ 53.098833][ T4829] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 53.248972][ T4330] Bluetooth: hci4: failed to read key size for handle 200 [ 53.479430][ T4836] loop1: detected capacity change from 0 to 32768 [ 53.482347][ T4836] [ 53.482347][ T4836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.482347][ T4836] [ 53.582357][ T4333] ocfs2: Unmounting device (7,0) on (node local) [ 53.610950][ T4336] EXT4-fs (loop3): unmounting filesystem. [ 53.711830][ T4852] FAULT_INJECTION: forcing a failure. [ 53.711830][ T4852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.719926][ T4852] CPU: 0 PID: 4852 Comm: syz.3.111 Not tainted syzkaller #0 [ 53.721260][ T4852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 53.723133][ T4852] Call trace: [ 53.723753][ T4852] dump_backtrace+0x1c4/0x1f0 [ 53.724727][ T4852] show_stack+0x2c/0x3c [ 53.725475][ T4852] __dump_stack+0x30/0x40 [ 53.726231][ T4852] dump_stack_lvl+0xf4/0x15c [ 53.727027][ T4852] dump_stack+0x1c/0x5c [ 53.727723][ T4852] should_fail_ex+0x3cc/0x524 [ 53.728543][ T4852] should_fail_alloc_page+0x74/0xb8 [ 53.729439][ T4852] prepare_alloc_pages+0x1b8/0x4f0 [ 53.730333][ T4852] __alloc_pages+0x134/0x544 [ 53.731176][ T4852] __folio_alloc+0x1c/0x44 [ 53.732018][ T4852] vma_alloc_folio+0x37c/0x8ac [ 53.732876][ T4852] new_page+0x394/0x4c8 [ 53.733604][ T4852] migrate_pages+0x1bc0/0x3d4c [ 53.734476][ T4852] __arm64_sys_mbind+0x6bc/0x854 [ 53.735526][ T4852] invoke_syscall+0x98/0x290 [ 53.736504][ T4852] el0_svc_common+0x13c/0x258 [ 53.737461][ T4852] do_el0_svc+0x5c/0x134 [ 53.738320][ T4852] el0_svc+0x58/0x128 [ 53.739097][ T4852] el0t_64_sync_handler+0x84/0xf0 [ 53.740099][ T4852] el0t_64_sync+0x18c/0x190 [ 53.771367][ T4846] [ 53.771367][ T4846] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.771367][ T4846] [ 53.774915][ T4836] [ 53.774915][ T4836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.774915][ T4836] [ 53.778987][ T4846] [ 53.778987][ T4846] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.778987][ T4846] [ 53.780708][ T4836] [ 53.780708][ T4836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.780708][ T4836] [ 53.844229][ T4328] [ 53.844229][ T4328] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.844229][ T4328] [ 53.846136][ T4328] [ 53.846136][ T4328] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 53.846136][ T4328] [ 54.068057][ T4874] loop1: detected capacity change from 0 to 512 [ 55.005660][ T4874] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.007604][ T4874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.462994][ T4874] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.114: Invalid block bitmap block 0 in block_group 0 [ 55.878971][ T4874] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 55.881034][ T4874] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.114: attempt to clear invalid blocks 983261 len 1 [ 55.883576][ T4874] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.114: Invalid inode table block 0 in block_group 0 [ 55.885773][ T4874] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 55.887814][ T4874] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 55.889501][ T4874] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.114: Invalid inode table block 0 in block_group 0 [ 55.891911][ T4874] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 55.893822][ T4874] EXT4-fs error (device loop1): ext4_truncate:4325: inode #11: comm syz.1.114: mark_inode_dirty error [ 55.895961][ T4874] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 55.897986][ T4874] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.114: Invalid inode table block 0 in block_group 0 [ 55.900152][ T4874] EXT4-fs (loop1): 1 truncate cleaned up [ 55.901236][ T4874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 55.942367][ T4884] FAULT_INJECTION: forcing a failure. [ 55.942367][ T4884] name failslab, interval 1, probability 0, space 0, times 0 [ 55.961442][ T4884] CPU: 1 PID: 4884 Comm: syz.4.119 Not tainted syzkaller #0 [ 55.962758][ T4884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 55.964648][ T4884] Call trace: [ 55.965248][ T4884] dump_backtrace+0x1c4/0x1f0 [ 55.966117][ T4884] show_stack+0x2c/0x3c [ 55.966911][ T4884] __dump_stack+0x30/0x40 [ 55.967741][ T4884] dump_stack_lvl+0xf4/0x15c [ 55.968537][ T4884] dump_stack+0x1c/0x5c [ 55.969248][ T4884] should_fail_ex+0x3cc/0x524 [ 55.970064][ T4884] __should_failslab+0xc0/0x11c [ 55.970892][ T4884] should_failslab+0x10/0x28 [ 55.971703][ T4884] __kmem_cache_alloc_node+0x7c/0x318 [ 55.972683][ T4884] __kmalloc+0xc4/0x180 [ 55.973482][ T4884] tomoyo_encode+0x260/0x484 [ 55.974322][ T4884] tomoyo_realpath_from_path+0x4b4/0x508 [ 55.975365][ T4884] tomoyo_path_number_perm+0x1c4/0x540 [ 55.976365][ T4884] tomoyo_file_ioctl+0x2c/0x3c [ 55.977252][ T4884] security_file_ioctl+0x80/0xbc [ 55.978143][ T4884] __arm64_sys_ioctl+0xa8/0x1c8 [ 55.979172][ T4884] invoke_syscall+0x98/0x290 [ 55.980143][ T4884] el0_svc_common+0x13c/0x258 [ 55.981096][ T4884] do_el0_svc+0x5c/0x134 [ 55.981851][ T4884] el0_svc+0x58/0x128 [ 55.982570][ T4884] el0t_64_sync_handler+0x84/0xf0 [ 55.983435][ T4884] el0t_64_sync+0x18c/0x190 [ 55.988861][ T4494] udevd[4494]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 56.050779][ T4320] udevd[4320]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 56.065442][ T4328] EXT4-fs (loop1): unmounting filesystem. [ 56.071052][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 56.148868][ T4884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.194256][ T4889] loop2: detected capacity change from 0 to 8192 [ 56.272027][ T4894] loop4: detected capacity change from 0 to 512 [ 56.280479][ T4894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.376292][ T4897] loop1: detected capacity change from 0 to 256 [ 56.384452][ T4899] FAULT_INJECTION: forcing a failure. [ 56.384452][ T4899] name failslab, interval 1, probability 0, space 0, times 0 [ 56.386660][ T4899] CPU: 0 PID: 4899 Comm: syz.2.123 Not tainted syzkaller #0 [ 56.387920][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 56.388428][ T4894] EXT4-fs (loop4): 1 truncate cleaned up [ 56.389849][ T4899] Call trace: [ 56.390862][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 56.391452][ T4899] dump_backtrace+0x1c4/0x1f0 [ 56.393909][ T4899] show_stack+0x2c/0x3c [ 56.394759][ T4899] __dump_stack+0x30/0x40 [ 56.395606][ T4899] dump_stack_lvl+0xf4/0x15c [ 56.396486][ T4899] dump_stack+0x1c/0x5c [ 56.397298][ T4899] should_fail_ex+0x3cc/0x524 [ 56.398160][ T4899] __should_failslab+0xc0/0x11c [ 56.399058][ T4899] should_failslab+0x10/0x28 [ 56.399883][ T4899] __kmem_cache_alloc_node+0x7c/0x318 [ 56.400811][ T4899] kmalloc_trace+0x48/0x94 [ 56.401564][ T4899] bpf_prog_alloc_no_stats+0xc0/0x3a0 [ 56.402531][ T4899] bpf_prog_alloc+0x38/0x1dc [ 56.403373][ T4899] bpf_prog_load+0x69c/0x12c0 [ 56.404226][ T4899] __sys_bpf+0x494/0x660 [ 56.405003][ T4899] __arm64_sys_bpf+0x80/0x98 [ 56.405885][ T4899] invoke_syscall+0x98/0x290 [ 56.406696][ T4899] el0_svc_common+0x13c/0x258 [ 56.407548][ T4899] do_el0_svc+0x5c/0x134 [ 56.408313][ T4899] el0_svc+0x58/0x128 [ 56.409042][ T4899] el0t_64_sync_handler+0x84/0xf0 [ 56.409962][ T4899] el0t_64_sync+0x18c/0x190 [ 57.106403][ T4897] FAT-fs (loop1): Directory bread(block 64) failed [ 57.107692][ T4897] FAT-fs (loop1): Directory bread(block 65) failed [ 57.108822][ T4897] FAT-fs (loop1): Directory bread(block 66) failed [ 57.109939][ T4897] FAT-fs (loop1): Directory bread(block 67) failed [ 57.111112][ T4897] FAT-fs (loop1): Directory bread(block 68) failed [ 57.112164][ T4897] FAT-fs (loop1): Directory bread(block 69) failed [ 57.113495][ T4897] FAT-fs (loop1): Directory bread(block 70) failed [ 57.114704][ T4897] FAT-fs (loop1): Directory bread(block 71) failed [ 57.189241][ T4897] FAT-fs (loop1): Directory bread(block 72) failed [ 57.197920][ T4897] FAT-fs (loop1): Directory bread(block 73) failed [ 57.270600][ T4329] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 57.288770][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.297221][ T4329] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /30/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.369464][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.371408][ T4329] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.431216][ T4328] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 57.432630][ T4328] FAT-fs (loop1): Filesystem has been set read-only [ 57.441143][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.442258][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.444978][ T4329] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /30/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.452472][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.453963][ T4329] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.499775][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.500932][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.503631][ T4329] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /30/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.530151][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.531441][ T4329] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.547357][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.549032][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.551704][ T4329] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /30/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.577381][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.578699][ T4329] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.594444][ T4329] EXT4-fs (loop4): Remounting filesystem read-only [ 57.595926][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.608394][ T4329] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /30/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 57.624486][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.633051][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.643515][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.680362][ T4915] fuse: Bad value for 'user_id' [ 57.779870][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.793444][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 57.806601][ T4329] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 58.522312][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.524359][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.531198][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.533385][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.534944][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.536550][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.540306][ T4926] 9pnet_fd: Insufficient options for proto=fd [ 58.796306][ T4935] loop2: detected capacity change from 0 to 4096 [ 58.807163][ T4935] EXT4-fs: inline encryption not supported [ 58.813086][ T4935] EXT4-fs: Ignoring removed nobh option [ 58.820000][ T1600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.826430][ T4935] EXT4-fs (loop2): Test dummy encryption mode enabled [ 58.838120][ T4935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.934659][ T1600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.326571][ T1600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.455510][ T4924] chnl_net:caif_netlink_parms(): no params data found [ 59.698691][ T1600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.739013][ T4924] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.740261][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.751296][ T4924] device bridge_slave_0 entered promiscuous mode [ 59.759712][ T4924] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.761166][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.771498][ T4924] device bridge_slave_1 entered promiscuous mode [ 59.799571][ T4924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.819109][ T4924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.843164][ T4924] team0: Port device team_slave_0 added [ 59.853287][ T4924] team0: Port device team_slave_1 added [ 59.897147][ T4924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.902069][ T4924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.916758][ T4924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.952434][ T4924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.953693][ T4924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.981869][ T4924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.068783][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 60.121357][ T4924] device hsr_slave_0 entered promiscuous mode [ 60.157612][ T4924] device hsr_slave_1 entered promiscuous mode [ 60.180697][ T4965] loop2: detected capacity change from 0 to 1024 [ 60.215676][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.220098][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.221838][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.223876][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.225560][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.227014][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.227656][ T4924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.234469][ T4924] Cannot create hsr debugfs directory [ 60.393276][ T4965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 60.395363][ T4965] netlink: 7 bytes leftover after parsing attributes in process `syz.2.144'. [ 60.476683][ T4983] loop0: detected capacity change from 0 to 2048 [ 60.511253][ T4983] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 60.514325][ T4983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.568121][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 60.775541][ T4924] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.808460][ T4924] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 60.842595][ T48] Bluetooth: hci4: failed to read key size for handle 200 [ 60.853844][ T4966] chnl_net:caif_netlink_parms(): no params data found [ 60.866390][ T4924] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 60.908802][ T4924] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.080982][ T4966] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.082419][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.083981][ T4966] device bridge_slave_0 entered promiscuous mode [ 61.090803][ T4924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.092330][ T4966] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.093822][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.095374][ T4966] device bridge_slave_1 entered promiscuous mode [ 61.879082][ T4966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.900944][ T4966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.943043][ T4966] team0: Port device team_slave_0 added [ 61.969907][ T4966] team0: Port device team_slave_1 added [ 62.003896][ T4966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.005142][ T4966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.046802][ T4966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.059129][ T4966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.060415][ T4966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.080378][ T4966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.168828][ T4966] device hsr_slave_0 entered promiscuous mode [ 62.207613][ T4966] device hsr_slave_1 entered promiscuous mode [ 62.237464][ T4966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.238843][ T4966] Cannot create hsr debugfs directory [ 62.289399][ T4924] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.301002][ T4924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.303237][ T4924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.346607][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 62.368480][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.373294][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.374904][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.376673][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.385850][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.387247][ T4786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.390090][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.392032][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.393804][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.395352][ T4786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.396965][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.399534][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.401405][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.403215][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.405018][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.406801][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.408878][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.457925][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.517747][ T4330] Bluetooth: hci2: failed to read key size for handle 200 [ 62.638151][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 62.688123][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.689880][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.767480][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.769141][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.770778][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.642339][ T4924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.649228][ T4966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.690934][ T4966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.748986][ T4966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 63.788926][ T4966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 63.889917][ T4966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.920993][ T4966] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.947831][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.949685][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.951127][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.952673][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.954490][ T5083] loop0: detected capacity change from 0 to 512 [ 63.977078][ T5083] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 63.986680][ T5083] System zones: 1-12 [ 63.999420][ T5083] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.163: missing EA_INODE flag [ 64.004951][ T5083] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.163: error while reading EA inode 12 err=-117 [ 64.012020][ T5083] EXT4-fs (loop0): 1 orphan inode deleted [ 64.013175][ T5083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.091766][ T4330] Bluetooth: hci4: failed to read key size for handle 200 [ 65.027840][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 65.028938][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 65.041349][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.338186][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.342878][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 65.449145][ T5098] loop2: detected capacity change from 0 to 16 [ 65.467827][ T5098] erofs: (device loop2): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 65.524018][ T5100] loop2: detected capacity change from 0 to 128 [ 65.555764][ T5100] syz.2.167: attempt to access beyond end of device [ 65.555764][ T5100] loop2: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 65.568617][ T5100] syz.2.167: attempt to access beyond end of device [ 65.568617][ T5100] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 65.768084][ T5112] loop2: detected capacity change from 0 to 64 [ 65.786904][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.789449][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.791010][ T4786] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.792186][ T4786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.793605][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.795134][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.810030][ T4786] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.811312][ T4786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.829168][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.834486][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.842737][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.851661][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.856439][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.863471][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.866408][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.869460][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.872392][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.875510][ T4491] kworker/u4:11: attempt to access beyond end of device [ 65.875510][ T4491] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 65.878401][ T4966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.880489][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.882123][ T4491] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 65.918515][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.920193][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.921764][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.174575][ T48] Bluetooth: hci4: failed to read key size for handle 200 [ 66.333830][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.335915][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.367233][ T1600] device hsr_slave_0 left promiscuous mode [ 66.407661][ T1600] device hsr_slave_1 left promiscuous mode [ 66.597573][ T1600] device veth1_macvtap left promiscuous mode [ 66.598836][ T1600] device veth0_macvtap left promiscuous mode [ 66.599966][ T1600] device veth1_vlan left promiscuous mode [ 66.601016][ T1600] device veth0_vlan left promiscuous mode [ 66.633668][ T5144] loop0: detected capacity change from 0 to 512 [ 66.655943][ T5144] FAT-fs (loop0): Invalid FSINFO signature: 0x00000d52, 0x61000000 (sector = 1) [ 66.806337][ T5146] loop2: detected capacity change from 0 to 4096 [ 66.822784][ T5146] EXT4-fs: inline encryption not supported [ 66.823837][ T5146] EXT4-fs: Ignoring removed nobh option [ 66.826797][ T5146] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.829654][ T5146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.037680][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 67.037715][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 67.944324][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 69.117385][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 69.598412][ T24] cfg80211: failed to load regulatory.db [ 71.631846][ T1600] bond0 (unregistering): Released all slaves [ 71.912921][ T4924] device veth0_vlan entered promiscuous mode [ 71.916378][ T4966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.932716][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.934341][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.936016][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.940762][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.942228][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.943953][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.955027][ T5151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'. [ 71.975250][ T5155] netlink: 92 bytes leftover after parsing attributes in process `syz.2.177'. [ 72.024234][ T4924] device veth1_vlan entered promiscuous mode [ 72.024690][ T5177] 9pnet_fd: Insufficient options for proto=fd [ 72.055441][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.082044][ T5184] loop0: detected capacity change from 0 to 64 [ 72.108003][ T5182] loop2: detected capacity change from 0 to 4096 [ 72.116173][ T5182] EXT4-fs: inline encryption not supported [ 72.129422][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.135167][ T4924] device veth0_macvtap entered promiscuous mode [ 72.136366][ T5182] EXT4-fs: Ignoring removed nobh option [ 72.148173][ T4924] device veth1_macvtap entered promiscuous mode [ 72.163583][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.163935][ T5182] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.165433][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.181847][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.184299][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.186148][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.188396][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.190104][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.192059][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.198139][ T4924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.199708][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.201391][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.202971][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.204648][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.216706][ T5182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.229569][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.231378][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.233090][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.236051][ T4330] Bluetooth: hci2: failed to read key size for handle 200 [ 72.241515][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.252235][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.254170][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.255961][ T4924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.258332][ T4924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.271437][ T4924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.276237][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.278604][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.323302][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.324974][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.343293][ T4924] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.344831][ T4924] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.346540][ T4924] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.348299][ T4924] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.373885][ T4966] device veth0_vlan entered promiscuous mode [ 72.379895][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.383115][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.384821][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.386631][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.151875][ T4966] device veth1_vlan entered promiscuous mode [ 73.180527][ T4966] device veth0_macvtap entered promiscuous mode [ 73.194845][ T4966] device veth1_macvtap entered promiscuous mode [ 73.224890][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.226718][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.238671][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.250776][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.252466][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.254257][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.281092][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.282968][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.284717][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.286575][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.316658][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 73.359565][ T4966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.361301][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.363131][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.364645][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.366430][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.383626][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.391117][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.396848][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.424798][ T4647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.426233][ T4647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.438461][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.440219][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.443124][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.445084][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.446927][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.470169][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.472137][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.473982][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.475689][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.484555][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.486270][ T4966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.488620][ T4966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.494867][ T4966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.502344][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.503985][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.513174][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.514529][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.515947][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.525842][ T4966] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.529616][ T4966] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.532830][ T4966] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.534299][ T4966] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.578890][ T5204] loop0: detected capacity change from 0 to 40427 [ 73.594829][ T5204] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 73.596173][ T5204] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.620177][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.621531][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.626484][ T5204] F2FS-fs (loop0): invalid crc value [ 73.640653][ T5204] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 73.684265][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.704998][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.706349][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.711587][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.718133][ T5204] F2FS-fs (loop0): Start checkpoint disabled! [ 73.784980][ T5204] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 73.791355][ T5226] FAULT_INJECTION: forcing a failure. [ 73.791355][ T5226] name failslab, interval 1, probability 0, space 0, times 0 [ 73.793540][ T5226] CPU: 1 PID: 5226 Comm: syz.5.131 Not tainted syzkaller #0 [ 73.794694][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.796389][ T5226] Call trace: [ 73.796968][ T5226] dump_backtrace+0x1c4/0x1f0 [ 73.797831][ T5226] show_stack+0x2c/0x3c [ 73.798608][ T5226] __dump_stack+0x30/0x40 [ 73.799442][ T5226] dump_stack_lvl+0xf4/0x15c [ 73.800235][ T5226] dump_stack+0x1c/0x5c [ 73.800958][ T5226] should_fail_ex+0x3cc/0x524 [ 73.801816][ T5226] __should_failslab+0xc0/0x11c [ 73.802736][ T5226] should_failslab+0x10/0x28 [ 73.803506][ T5226] __kmem_cache_alloc_node+0x7c/0x318 [ 73.804465][ T5226] __kmalloc+0xc4/0x180 [ 73.805237][ T5226] tomoyo_encode+0x260/0x484 [ 73.806074][ T5226] tomoyo_realpath_from_path+0x4b4/0x508 [ 73.807116][ T5226] tomoyo_path_number_perm+0x1c4/0x540 [ 73.808127][ T5226] tomoyo_file_ioctl+0x2c/0x3c [ 73.809027][ T5226] security_file_ioctl+0x80/0xbc [ 73.809905][ T5226] __arm64_sys_ioctl+0xa8/0x1c8 [ 73.810795][ T5226] invoke_syscall+0x98/0x290 [ 73.811630][ T5226] el0_svc_common+0x13c/0x258 [ 73.812482][ T5226] do_el0_svc+0x5c/0x134 [ 73.813192][ T5226] el0_svc+0x58/0x128 [ 73.813902][ T5226] el0t_64_sync_handler+0x84/0xf0 [ 73.814812][ T5226] el0t_64_sync+0x18c/0x190 [ 73.815794][ T5226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.004197][ T5204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 74.121416][ T5215] loop2: detected capacity change from 0 to 40427 [ 74.124139][ T5243] 9pnet_fd: Insufficient options for proto=fd [ 74.132550][ T5215] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 74.137870][ T5215] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.140745][ T5215] F2FS-fs (loop2): invalid crc value [ 74.150193][ T5215] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 74.162591][ T5236] input: syz1 as /devices/virtual/input/input4 [ 74.185217][ T5215] F2FS-fs (loop2): Start checkpoint disabled! [ 74.195789][ T5215] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 74.197099][ T5215] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 74.403325][ T5263] FAULT_INJECTION: forcing a failure. [ 74.403325][ T5263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 74.427746][ T5263] CPU: 0 PID: 5263 Comm: syz.0.193 Not tainted syzkaller #0 [ 74.429162][ T5263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 74.431032][ T5263] Call trace: [ 74.431603][ T5263] dump_backtrace+0x1c4/0x1f0 [ 74.432408][ T5263] show_stack+0x2c/0x3c [ 74.433226][ T5263] __dump_stack+0x30/0x40 [ 74.434038][ T5263] dump_stack_lvl+0xf4/0x15c [ 74.434893][ T5263] dump_stack+0x1c/0x5c [ 74.435580][ T5263] should_fail_ex+0x3cc/0x524 [ 74.436407][ T5263] should_fail_alloc_page+0x74/0xb8 [ 74.437286][ T5263] prepare_alloc_pages+0x1b8/0x4f0 [ 74.438233][ T5263] __alloc_pages+0x134/0x544 [ 74.439097][ T5263] __folio_alloc+0x1c/0x44 [ 74.440028][ T5263] vma_alloc_folio+0x37c/0x8ac [ 74.440932][ T5263] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 74.442138][ T5263] handle_mm_fault+0x1788/0x3018 [ 74.443182][ T5263] do_page_fault+0x310/0x99c [ 74.444094][ T5263] do_translation_fault+0x94/0xc8 [ 74.445108][ T5263] do_mem_abort+0x70/0x198 [ 74.446003][ T5263] el0_da+0x70/0x144 [ 74.446797][ T5263] el0t_64_sync_handler+0x90/0xf0 [ 74.447746][ T5263] el0t_64_sync+0x18c/0x190 [ 74.531140][ T5263] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 74.534125][ T5263] loop0: detected capacity change from 0 to 512 [ 74.548560][ T5263] FAT-fs (loop0): Unrecognized mount option " [ 74.548560][ T5263] " or missing value [ 74.631087][ T5281] loop2: detected capacity change from 0 to 4096 [ 74.689150][ T5281] EXT4-fs: inline encryption not supported [ 74.692985][ T5281] EXT4-fs: Ignoring removed nobh option [ 74.695384][ T5281] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.743817][ T5281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.776690][ T1600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.892553][ T4330] Bluetooth: hci0: failed to read key size for handle 200 [ 75.389870][ T4330] Bluetooth: hci2: failed to read key size for handle 200 [ 75.404041][ T1600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.570171][ T1600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.789222][ T1600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.094080][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 76.119780][ T5304] loop0: detected capacity change from 0 to 32768 [ 76.122027][ T5304] (syz.0.201,5304,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.131145][ T5304] (syz.0.201,5304,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.179600][ T5304] (syz.0.201,5304,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 76.182681][ T5304] JBD2: Ignoring recovery information on journal [ 76.276233][ T5304] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 76.297265][ T5304] FAULT_INJECTION: forcing a failure. [ 76.297265][ T5304] name failslab, interval 1, probability 0, space 0, times 0 [ 76.301460][ T5325] loop2: detected capacity change from 0 to 32768 [ 76.328807][ T5325] JBD2: Ignoring recovery information on journal [ 76.329350][ T5304] CPU: 1 PID: 5304 Comm: syz.0.201 Not tainted syzkaller #0 [ 76.331307][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.333011][ T5304] Call trace: [ 76.333537][ T5304] dump_backtrace+0x1c4/0x1f0 [ 76.334322][ T5304] show_stack+0x2c/0x3c [ 76.335015][ T5304] __dump_stack+0x30/0x40 [ 76.335723][ T5304] dump_stack_lvl+0xf4/0x15c [ 76.336515][ T5304] dump_stack+0x1c/0x5c [ 76.337206][ T5304] should_fail_ex+0x3cc/0x524 [ 76.338111][ T5304] __should_failslab+0xc0/0x11c [ 76.339004][ T5304] should_failslab+0x10/0x28 [ 76.339983][ T5304] kmem_cache_alloc+0x88/0x310 [ 76.340960][ T5304] getname_flags+0xb8/0x458 [ 76.341836][ T5304] __arm64_sys_mkdirat+0x80/0xa8 [ 76.342878][ T5304] invoke_syscall+0x98/0x290 [ 76.343776][ T5304] el0_svc_common+0x13c/0x258 [ 76.344619][ T5304] do_el0_svc+0x5c/0x134 [ 76.345414][ T5304] el0_svc+0x58/0x128 [ 76.346127][ T5304] el0t_64_sync_handler+0x84/0xf0 [ 76.347066][ T5304] el0t_64_sync+0x18c/0x190 [ 76.359358][ T5325] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 76.453998][ T4341] ocfs2: Unmounting device (7,2) on (node local) [ 76.455223][ T4333] ocfs2: Unmounting device (7,0) on (node local) [ 76.506311][ T5338] 9pnet_fd: Insufficient options for proto=fd [ 76.565154][ T5343] loop6: detected capacity change from 0 to 1024 [ 76.566658][ T5343] EXT4-fs: Invalid want_extra_isize 7 [ 76.573839][ T5346] 9pnet_fd: Insufficient options for proto=fd [ 76.584734][ T5345] loop2: detected capacity change from 0 to 128 [ 76.586588][ T5345] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 76.591174][ T5345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.685984][ T5350] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 76.983070][ T5350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.055605][ T5361] binder: 5360:5361 got transaction to invalid handle, 1 [ 77.057030][ T5361] binder: 5361:5360 cannot find target node [ 77.061534][ T5361] binder: 5360:5361 transaction call to 0:0 failed 4/29201/-22, size 96-0 line 3062 [ 77.071914][ T5361] binder: 5360:5361 ioctl c0306201 20000680 returned -14 [ 77.074691][ T5340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.206 (5340) [ 77.097104][ T5340] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.102475][ T5340] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 77.106538][ T5340] BTRFS info (device loop0): force clearing of disk cache [ 77.110201][ T5340] BTRFS info (device loop0): enabling auto defrag [ 77.112514][ T5340] BTRFS info (device loop0): max_inline at 0 [ 77.115491][ T5340] BTRFS info (device loop0): enabling disk space caching [ 77.135744][ T5340] BTRFS info (device loop0): disk space caching is enabled [ 77.176181][ T5368] FAULT_INJECTION: forcing a failure. [ 77.176181][ T5368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.188337][ T5368] CPU: 0 PID: 5368 Comm: syz.5.212 Not tainted syzkaller #0 [ 77.189794][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.191691][ T5368] Call trace: [ 77.192318][ T5368] dump_backtrace+0x1c4/0x1f0 [ 77.193200][ T5368] show_stack+0x2c/0x3c [ 77.193963][ T5368] __dump_stack+0x30/0x40 [ 77.194772][ T5368] dump_stack_lvl+0xf4/0x15c [ 77.195625][ T5368] dump_stack+0x1c/0x5c [ 77.196412][ T5368] should_fail_ex+0x3cc/0x524 [ 77.197302][ T5368] should_fail_alloc_page+0x74/0xb8 [ 77.198276][ T5368] prepare_alloc_pages+0x1b8/0x4f0 [ 77.199355][ T5368] __alloc_pages+0x134/0x544 [ 77.200272][ T5368] alloc_pages+0x434/0x6fc [ 77.201140][ T5368] __get_free_pages+0x18/0x84 [ 77.202073][ T5368] kasan_populate_vmalloc_pte+0x40/0xe8 [ 77.203088][ T5368] __apply_to_page_range+0x83c/0xbf4 [ 77.204028][ T5368] apply_to_page_range+0x4c/0x64 [ 77.204937][ T5368] kasan_populate_vmalloc+0x5c/0x6c [ 77.205904][ T5368] alloc_vmap_area+0x155c/0x169c [ 77.206807][ T5368] __get_vm_area_node+0x178/0x31c [ 77.207752][ T5368] __vmalloc_node_range+0x1d4/0xe70 [ 77.208739][ T5368] __vmalloc+0xa4/0xe0 [ 77.209484][ T5368] do_replace+0x24c/0x3c0 [ 77.210283][ T5368] do_ebt_set_ctl+0x20c/0xbf4 [ 77.211189][ T5368] nf_setsockopt+0x260/0x280 [ 77.212065][ T5368] ip_setsockopt+0x124/0x134 [ 77.212923][ T5368] raw_setsockopt+0xd8/0x288 [ 77.213770][ T5368] sock_common_setsockopt+0xb0/0xcc [ 77.214671][ T5368] __sys_setsockopt+0x2fc/0x50c [ 77.215545][ T5368] __arm64_sys_setsockopt+0xc0/0xdc [ 77.216470][ T5368] invoke_syscall+0x98/0x290 [ 77.217314][ T5368] el0_svc_common+0x13c/0x258 [ 77.218122][ T5368] do_el0_svc+0x5c/0x134 [ 77.218864][ T5368] el0_svc+0x58/0x128 [ 77.219581][ T5368] el0t_64_sync_handler+0x84/0xf0 [ 77.220495][ T5368] el0t_64_sync+0x18c/0x190 [ 77.221387][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.243435][ T5373] set_capacity_and_notify: 2 callbacks suppressed [ 77.243441][ T5373] loop2: detected capacity change from 0 to 4096 [ 77.246278][ T5373] EXT4-fs: inline encryption not supported [ 77.262077][ T5373] EXT4-fs: Ignoring removed nobh option [ 77.269177][ T5373] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.271400][ T5368] syz.5.212: vmalloc error: size 2089088, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 77.274750][ T5368] CPU: 0 PID: 5368 Comm: syz.5.212 Not tainted syzkaller #0 [ 77.276007][ T5368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.277723][ T5368] Call trace: [ 77.278302][ T5368] dump_backtrace+0x1c4/0x1f0 [ 77.279148][ T5368] show_stack+0x2c/0x3c [ 77.279895][ T5368] __dump_stack+0x30/0x40 [ 77.280668][ T5368] dump_stack_lvl+0xf4/0x15c [ 77.281475][ T5368] dump_stack+0x1c/0x5c [ 77.282211][ T5368] warn_alloc+0x214/0x324 [ 77.283009][ T5368] __vmalloc_node_range+0x24c/0xe70 [ 77.283980][ T5368] __vmalloc+0xa4/0xe0 [ 77.284739][ T5368] do_replace+0x24c/0x3c0 [ 77.285542][ T5368] do_ebt_set_ctl+0x20c/0xbf4 [ 77.286423][ T5368] nf_setsockopt+0x260/0x280 [ 77.287285][ T5368] ip_setsockopt+0x124/0x134 [ 77.288201][ T5368] raw_setsockopt+0xd8/0x288 [ 77.289103][ T5368] sock_common_setsockopt+0xb0/0xcc [ 77.290137][ T5368] __sys_setsockopt+0x2fc/0x50c [ 77.291108][ T5368] __arm64_sys_setsockopt+0xc0/0xdc [ 77.292140][ T5368] invoke_syscall+0x98/0x290 [ 77.293002][ T5368] el0_svc_common+0x13c/0x258 [ 77.293875][ T5368] do_el0_svc+0x5c/0x134 [ 77.294613][ T5368] el0_svc+0x58/0x128 [ 77.295313][ T5368] el0t_64_sync_handler+0x84/0xf0 [ 77.296195][ T5368] el0t_64_sync+0x18c/0x190 [ 77.301220][ T5368] Mem-Info: [ 77.301924][ T5368] active_anon:14429 inactive_anon:0 isolated_anon:0 [ 77.301924][ T5368] active_file:12596 inactive_file:2131 isolated_file:0 [ 77.301924][ T5368] unevictable:768 dirty:413 writeback:0 [ 77.301924][ T5368] slab_reclaimable:19696 slab_unreclaimable:93291 [ 77.301924][ T5368] mapped:33905 shmem:9774 pagetables:699 [ 77.301924][ T5368] sec_pagetables:0 bounce:0 [ 77.301924][ T5368] kernel_misc_reclaimable:0 [ 77.301924][ T5368] free:1430660 free_pcp:4863 free_cma:7360 [ 77.309893][ T5368] Node 0 active_anon:59316kB inactive_anon:0kB active_file:50384kB inactive_file:8524kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:137320kB dirty:1652kB writeback:0kB shmem:40796kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9596kB pagetables:2796kB sec_pagetables:0kB all_unreclaimable? no [ 77.315564][ T5368] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 77.320864][ T5368] lowmem_reserve[]: 0 0 3550 3550 3550 [ 77.321859][ T5368] Node 0 Normal free:2642752kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:61816kB inactive_anon:0kB active_file:50384kB inactive_file:8524kB unevictable:3072kB writepending:1652kB present:5242880kB managed:3639740kB mlocked:0kB bounce:0kB free_pcp:18292kB local_pcp:11612kB free_cma:0kB [ 77.327538][ T5368] lowmem_reserve[]: 0 0 0 0 0 [ 77.328343][ T5368] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 77.330667][ T5368] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (U) 4*32kB (UME) 191*64kB (UME) 38*128kB (UME) 9*256kB (ME) 12*512kB (UME) 6*1024kB (UME) 4*2048kB (UM) 635*4096kB (M) = 2640988kB [ 77.336502][ T5368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.338471][ T5368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 77.346021][ T5373] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.346140][ T5368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 77.351845][ T5368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 77.353478][ T5368] 26045 total pagecache pages [ 77.354336][ T5368] 0 pages in swap cache [ 77.355094][ T5368] Free swap = 124740kB [ 77.355820][ T5368] Total swap = 124996kB [ 77.356485][ T5368] 2097152 pages RAM [ 77.357161][ T5368] 0 pages HighMem/MovableOnly [ 77.364045][ T5368] 417169 pages reserved [ 77.364828][ T5368] 8192 pages cma reserved [ 77.365808][ T5368] 0 pages hwpoisoned [ 77.529143][ T5407] jffs2: notice: (5407) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.196583][ T5340] BTRFS info (device loop0): enabling ssd optimizations [ 78.199214][ T5340] BTRFS info (device loop0): rebuilding free space tree [ 78.249587][ T5425] 9pnet_fd: Insufficient options for proto=fd [ 78.268231][ T5340] BTRFS info (device loop0): disabling free space tree [ 78.269606][ T5340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.271350][ T5340] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.373685][ T5340] FAULT_INJECTION: forcing a failure. [ 78.373685][ T5340] name failslab, interval 1, probability 0, space 0, times 0 [ 78.375907][ T5340] CPU: 1 PID: 5340 Comm: syz.0.206 Not tainted syzkaller #0 [ 78.377092][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 78.378786][ T5340] Call trace: [ 78.379371][ T5340] dump_backtrace+0x1c4/0x1f0 [ 78.380216][ T5340] show_stack+0x2c/0x3c [ 78.380981][ T5340] __dump_stack+0x30/0x40 [ 78.381818][ T5340] dump_stack_lvl+0xf4/0x15c [ 78.382641][ T5340] dump_stack+0x1c/0x5c [ 78.383372][ T5340] should_fail_ex+0x3cc/0x524 [ 78.384197][ T5340] __should_failslab+0xc0/0x11c [ 78.385058][ T5340] should_failslab+0x10/0x28 [ 78.385892][ T5340] __kmem_cache_alloc_node+0x7c/0x318 [ 78.386859][ T5340] __kmalloc+0xc4/0x180 [ 78.387593][ T5340] btrfs_buffered_write+0x27c/0xe28 [ 78.388547][ T5340] btrfs_do_write_iter+0x290/0x1094 [ 78.389502][ T5340] btrfs_file_write_iter+0x2c/0x3c [ 78.390438][ T5340] vfs_write+0x3c8/0x7c8 [ 78.391211][ T5340] ksys_write+0x12c/0x228 [ 78.391988][ T5340] __arm64_sys_write+0x7c/0x90 [ 78.392841][ T5340] invoke_syscall+0x98/0x290 [ 78.393668][ T5340] el0_svc_common+0x13c/0x258 [ 78.394519][ T5340] do_el0_svc+0x5c/0x134 [ 78.395278][ T5340] el0_svc+0x58/0x128 [ 78.396000][ T5340] el0t_64_sync_handler+0x84/0xf0 [ 78.396930][ T5340] el0t_64_sync+0x18c/0x190 [ 78.411156][ T5430] 9pnet_fd: Insufficient options for proto=fd [ 78.481644][ T4330] Bluetooth: hci2: failed to read key size for handle 200 [ 78.518257][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 78.539617][ T5434] loop6: detected capacity change from 0 to 1024 [ 78.561392][ T5434] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.563397][ T5434] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.578778][ T5434] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 78.580324][ T5434] System zones: 0-1, 3-36 [ 78.591524][ T5439] overlayfs: upper fs does not support file handles, falling back to index=off. [ 78.707539][ T5434] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 78.723182][ T5439] FAULT_INJECTION: forcing a failure. [ 78.723182][ T5439] name failslab, interval 1, probability 0, space 0, times 0 [ 78.725455][ T5439] CPU: 0 PID: 5439 Comm: syz.2.222 Not tainted syzkaller #0 [ 78.726691][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 78.728557][ T5439] Call trace: [ 78.729203][ T5439] dump_backtrace+0x1c4/0x1f0 [ 78.730129][ T5439] show_stack+0x2c/0x3c [ 78.730899][ T5439] __dump_stack+0x30/0x40 [ 78.731738][ T5439] dump_stack_lvl+0xf4/0x15c [ 78.732618][ T5439] dump_stack+0x1c/0x5c [ 78.733411][ T5439] should_fail_ex+0x3cc/0x524 [ 78.734403][ T5439] __should_failslab+0xc0/0x11c [ 78.735320][ T5439] should_failslab+0x10/0x28 [ 78.736188][ T5439] kmem_cache_alloc+0x88/0x310 [ 78.737122][ T5439] getname_flags+0xb8/0x458 [ 78.737985][ T5439] __arm64_sys_renameat2+0xbc/0x104 [ 78.738898][ T5439] invoke_syscall+0x98/0x290 [ 78.739720][ T5439] el0_svc_common+0x13c/0x258 [ 78.740548][ T5439] do_el0_svc+0x5c/0x134 [ 78.741308][ T5439] el0_svc+0x58/0x128 [ 78.742010][ T5439] el0t_64_sync_handler+0x84/0xf0 [ 78.742855][ T5439] el0t_64_sync+0x18c/0x190 [ 78.773931][ T4333] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.778830][ T5434] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 78.884775][ T4321] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop0 scanned by udevd (4321) [ 78.926600][ T5447] loop2: detected capacity change from 0 to 4096 [ 78.949905][ T5447] ntfs3: Unknown parameter '|' [ 79.262839][ T5471] loop2: detected capacity change from 0 to 1764 [ 79.355392][ T5475] loop5: detected capacity change from 0 to 128 [ 79.381544][ T5475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 79.414373][ T5467] loop0: detected capacity change from 0 to 32768 [ 79.429381][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 79.444127][ T5467] JBD2: Ignoring recovery information on journal [ 79.509040][ T5487] 9pnet_fd: Insufficient options for proto=fd [ 79.523612][ T4924] EXT4-fs (loop5): unmounting filesystem. [ 79.526139][ T5467] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 79.945446][ T1600] device hsr_slave_0 left promiscuous mode [ 80.109068][ T1600] device hsr_slave_1 left promiscuous mode [ 80.197644][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.199073][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.218607][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.253361][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.312359][ T1600] device bridge_slave_1 left promiscuous mode [ 80.315408][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.438172][ T1600] device bridge_slave_0 left promiscuous mode [ 80.439622][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.512358][ T4333] ocfs2: Unmounting device (7,0) on (node local) [ 80.714988][ T22] logitech-hidpp-device 0005:046D:B012.0002: Device not connected [ 80.810936][ T5524] loop0: detected capacity change from 0 to 1024 [ 80.877086][ T5524] EXT4-fs: test_dummy_encryption requires encrypt feature [ 80.886821][ T4330] Bluetooth: hci0: failed to read key size for handle 200 [ 80.927697][ T1600] device veth1_macvtap left promiscuous mode [ 80.928805][ T1600] device veth0_macvtap left promiscuous mode [ 80.929855][ T1600] device veth1_vlan left promiscuous mode [ 80.930809][ T1600] device veth0_vlan left promiscuous mode [ 81.048118][ T5560] FAULT_INJECTION: forcing a failure. [ 81.048118][ T5560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.053429][ T5560] CPU: 0 PID: 5560 Comm: syz.0.246 Not tainted syzkaller #0 [ 81.054790][ T5560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.056636][ T5560] Call trace: [ 81.057203][ T5560] dump_backtrace+0x1c4/0x1f0 [ 81.058085][ T5560] show_stack+0x2c/0x3c [ 81.058866][ T5560] __dump_stack+0x30/0x40 [ 81.059662][ T5560] dump_stack_lvl+0xf4/0x15c [ 81.060552][ T5560] dump_stack+0x1c/0x5c [ 81.061348][ T5560] should_fail_ex+0x3cc/0x524 [ 81.062233][ T5560] should_fail+0x14/0x24 [ 81.063026][ T5560] should_fail_usercopy+0x20/0x30 [ 81.063973][ T5560] move_addr_to_kernel+0xa0/0x25c [ 81.064948][ T5560] __sys_connect+0xe0/0x2b4 [ 81.065793][ T5560] __arm64_sys_connect+0x7c/0x94 [ 81.066751][ T5560] invoke_syscall+0x98/0x290 [ 81.067639][ T5560] el0_svc_common+0x13c/0x258 [ 81.068522][ T5560] do_el0_svc+0x5c/0x134 [ 81.069316][ T5560] el0_svc+0x58/0x128 [ 81.070066][ T5560] el0t_64_sync_handler+0x84/0xf0 [ 81.070945][ T5560] el0t_64_sync+0x18c/0x190 [ 81.099006][ T5566] FAULT_INJECTION: forcing a failure. [ 81.099006][ T5566] name failslab, interval 1, probability 0, space 0, times 0 [ 81.105152][ T5566] CPU: 0 PID: 5566 Comm: syz.5.249 Not tainted syzkaller #0 [ 81.106574][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.108451][ T5566] Call trace: [ 81.109084][ T5566] dump_backtrace+0x1c4/0x1f0 [ 81.109969][ T5566] show_stack+0x2c/0x3c [ 81.110835][ T5566] __dump_stack+0x30/0x40 [ 81.111752][ T5566] dump_stack_lvl+0xf4/0x15c [ 81.112727][ T5566] dump_stack+0x1c/0x5c [ 81.113616][ T5566] should_fail_ex+0x3cc/0x524 [ 81.114549][ T5566] __should_failslab+0xc0/0x11c [ 81.115503][ T5566] should_failslab+0x10/0x28 [ 81.116432][ T5566] __kmem_cache_alloc_node+0x7c/0x318 [ 81.117489][ T5566] __kmalloc_node+0xc8/0x184 [ 81.118399][ T5566] kvmalloc_node+0x88/0x1d4 [ 81.119297][ T5566] file_tty_write+0x21c/0x6d8 [ 81.120196][ T5566] tty_write+0x44/0x54 [ 81.120992][ T5566] vfs_write+0x3c8/0x7c8 [ 81.121835][ T5566] ksys_write+0x12c/0x228 [ 81.122610][ T5566] __arm64_sys_write+0x7c/0x90 [ 81.123493][ T5566] invoke_syscall+0x98/0x290 [ 81.124342][ T5566] el0_svc_common+0x13c/0x258 [ 81.125213][ T5566] do_el0_svc+0x5c/0x134 [ 81.125981][ T5566] el0_svc+0x58/0x128 [ 81.126716][ T5566] el0t_64_sync_handler+0x84/0xf0 [ 81.127601][ T5566] el0t_64_sync+0x18c/0x190 [ 81.210302][ T5570] loop6: detected capacity change from 0 to 4096 [ 81.215754][ T5570] EXT4-fs: inline encryption not supported [ 81.221045][ T5570] EXT4-fs: Ignoring removed nobh option [ 81.224370][ T5570] EXT4-fs (loop6): Test dummy encryption mode enabled [ 81.234549][ T5570] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 81.351568][ T5574] loop5: detected capacity change from 0 to 32768 [ 82.142467][ T5580] loop0: detected capacity change from 0 to 164 [ 82.158237][ T5580] rock: directory entry would overflow storage [ 82.159419][ T5580] rock: sig=0x5252, size=5, remaining=3 [ 82.216112][ T5583] FAULT_INJECTION: forcing a failure. [ 82.216112][ T5583] name failslab, interval 1, probability 0, space 0, times 0 [ 82.218570][ T5583] CPU: 1 PID: 5583 Comm: syz.0.256 Not tainted syzkaller #0 [ 82.219834][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 82.221447][ T5583] Call trace: [ 82.222026][ T5583] dump_backtrace+0x1c4/0x1f0 [ 82.222871][ T5583] show_stack+0x2c/0x3c [ 82.223610][ T5583] __dump_stack+0x30/0x40 [ 82.224385][ T5583] dump_stack_lvl+0xf4/0x15c [ 82.225194][ T5583] dump_stack+0x1c/0x5c [ 82.225950][ T5583] should_fail_ex+0x3cc/0x524 [ 82.226806][ T5583] __should_failslab+0xc0/0x11c [ 82.227670][ T5583] should_failslab+0x10/0x28 [ 82.228504][ T5583] slab_pre_alloc_hook+0x6c/0x31c [ 82.229396][ T5583] kmem_cache_alloc_lru+0x60/0x284 [ 82.230322][ T5583] __d_alloc+0x40/0x68c [ 82.231083][ T5583] d_alloc_pseudo+0x28/0x8c [ 82.231842][ T5583] alloc_file_pseudo+0xd8/0x1f4 [ 82.232642][ T5583] __shmem_file_setup+0x1a0/0x26c [ 82.233517][ T5583] shmem_file_setup+0x40/0x54 [ 82.234349][ T5583] __arm64_sys_memfd_create+0x2d8/0x458 [ 82.235310][ T5583] invoke_syscall+0x98/0x290 [ 82.236164][ T5583] el0_svc_common+0x13c/0x258 [ 82.236996][ T5583] do_el0_svc+0x5c/0x134 [ 82.237715][ T5583] el0_svc+0x58/0x128 [ 82.238407][ T5583] el0t_64_sync_handler+0x84/0xf0 [ 82.239269][ T5583] el0t_64_sync+0x18c/0x190 [ 82.344072][ T4320] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.351677][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 82.377540][ T4494] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.404549][ T5589] FAULT_INJECTION: forcing a failure. [ 82.404549][ T5589] name failslab, interval 1, probability 0, space 0, times 0 [ 82.406932][ T5589] CPU: 1 PID: 5589 Comm: syz.6.257 Not tainted syzkaller #0 [ 82.408278][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 82.410160][ T5589] Call trace: [ 82.410818][ T5589] dump_backtrace+0x1c4/0x1f0 [ 82.411693][ T5589] show_stack+0x2c/0x3c [ 82.412418][ T5589] __dump_stack+0x30/0x40 [ 82.413210][ T5589] dump_stack_lvl+0xf4/0x15c [ 82.414064][ T5589] dump_stack+0x1c/0x5c [ 82.414814][ T5589] should_fail_ex+0x3cc/0x524 [ 82.415701][ T5589] __should_failslab+0xc0/0x11c [ 82.416635][ T5589] should_failslab+0x10/0x28 [ 82.417491][ T5589] __kmem_cache_alloc_node+0x7c/0x318 [ 82.418627][ T5589] __kmalloc+0xc4/0x180 [ 82.419424][ T5589] __arm64_sys_memfd_create+0x11c/0x458 [ 82.420586][ T5589] invoke_syscall+0x98/0x290 [ 82.421483][ T5589] el0_svc_common+0x13c/0x258 [ 82.422420][ T5589] do_el0_svc+0x5c/0x134 [ 82.423207][ T5589] el0_svc+0x58/0x128 [ 82.424038][ T5589] el0t_64_sync_handler+0x84/0xf0 [ 82.425083][ T5589] el0t_64_sync+0x18c/0x190 [ 82.503489][ T4330] Bluetooth: hci0: failed to read key size for handle 200 [ 82.582610][ T5602] set_capacity_and_notify: 1 callbacks suppressed [ 82.582622][ T5602] loop0: detected capacity change from 0 to 8 [ 82.604857][ T5602] SQUASHFS error: zlib decompression failed, data probably corrupt [ 82.608721][ T5602] SQUASHFS error: Failed to read block 0x9b: -5 [ 82.610102][ T5602] SQUASHFS error: Unable to read metadata cache entry [99] [ 82.611558][ T5602] SQUASHFS error: Unable to read inode 0x127 [ 82.694216][ T5610] loop0: detected capacity change from 0 to 8192 [ 82.710522][ T5610] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.832044][ T5615] loop0: detected capacity change from 0 to 4096 [ 82.842277][ T5615] EXT4-fs: inline encryption not supported [ 82.847469][ T5615] EXT4-fs: Ignoring removed nobh option [ 82.851496][ T5615] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.854838][ T5615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.878028][ T5617] FAULT_INJECTION: forcing a failure. [ 82.878028][ T5617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.880216][ T5617] CPU: 0 PID: 5617 Comm: syz.6.266 Not tainted syzkaller #0 [ 82.881422][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 82.883314][ T5617] Call trace: [ 82.883940][ T5617] dump_backtrace+0x1c4/0x1f0 [ 82.884851][ T5617] show_stack+0x2c/0x3c [ 82.885680][ T5617] __dump_stack+0x30/0x40 [ 82.886524][ T5617] dump_stack_lvl+0xf4/0x15c [ 82.887370][ T5617] dump_stack+0x1c/0x5c [ 82.888161][ T5617] should_fail_ex+0x3cc/0x524 [ 82.888994][ T5617] should_fail+0x14/0x24 [ 82.889871][ T5617] should_fail_usercopy+0x20/0x30 [ 82.890835][ T5617] move_addr_to_kernel+0xa0/0x25c [ 82.891783][ T5617] __sys_sendto+0x20c/0x440 [ 82.892675][ T5617] __arm64_sys_sendto+0xe4/0x104 [ 82.893673][ T5617] invoke_syscall+0x98/0x290 [ 82.894551][ T5617] el0_svc_common+0x13c/0x258 [ 82.895480][ T5617] do_el0_svc+0x5c/0x134 [ 82.896321][ T5617] el0_svc+0x58/0x128 [ 82.897059][ T5617] el0t_64_sync_handler+0x84/0xf0 [ 82.897988][ T5617] el0t_64_sync+0x18c/0x190 [ 82.898819][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.963974][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 84.052113][ T5628] kernel kvm profiling enabled (shift: 4) [ 84.524898][ T5630] FAULT_INJECTION: forcing a failure. [ 84.524898][ T5630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.527219][ T5630] CPU: 0 PID: 5630 Comm: syz.5.269 Not tainted syzkaller #0 [ 84.528585][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 84.530395][ T5630] Call trace: [ 84.530978][ T5630] dump_backtrace+0x1c4/0x1f0 [ 84.531889][ T5630] show_stack+0x2c/0x3c [ 84.532674][ T5630] __dump_stack+0x30/0x40 [ 84.533469][ T5630] dump_stack_lvl+0xf4/0x15c [ 84.534328][ T5630] dump_stack+0x1c/0x5c [ 84.535088][ T5630] should_fail_ex+0x3cc/0x524 [ 84.535946][ T5630] should_fail_alloc_page+0x74/0xb8 [ 84.536871][ T5630] prepare_alloc_pages+0x1b8/0x4f0 [ 84.537770][ T5630] __alloc_pages+0x134/0x544 [ 84.538630][ T5630] __folio_alloc+0x1c/0x44 [ 84.539422][ T5630] vma_alloc_folio+0x37c/0x8ac [ 84.540225][ T5630] new_page+0x394/0x4c8 [ 84.540962][ T5630] migrate_pages+0x1bc0/0x3d4c [ 84.541792][ T5630] __arm64_sys_mbind+0x6bc/0x854 [ 84.542655][ T5630] invoke_syscall+0x98/0x290 [ 84.543454][ T5630] el0_svc_common+0x13c/0x258 [ 84.544242][ T5630] do_el0_svc+0x5c/0x134 [ 84.544967][ T5630] el0_svc+0x58/0x128 [ 84.545651][ T5630] el0t_64_sync_handler+0x84/0xf0 [ 84.546519][ T5630] el0t_64_sync+0x18c/0x190 [ 84.571663][ T5632] loop5: detected capacity change from 0 to 1024 [ 84.601972][ T5632] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 84.929756][ T1600] team0 (unregistering): Port device team_slave_1 removed [ 85.108792][ T1600] team0 (unregistering): Port device team_slave_0 removed [ 85.268747][ T1600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.477779][ T1600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.744615][ T4924] EXT4-fs (loop5): unmounting filesystem. [ 85.836505][ T4330] Bluetooth: hci0: failed to read key size for handle 200 [ 86.023603][ T5647] FAULT_INJECTION: forcing a failure. [ 86.023603][ T5647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.026104][ T5647] CPU: 1 PID: 5647 Comm: syz.5.274 Not tainted syzkaller #0 [ 86.027275][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 86.029055][ T5647] Call trace: [ 86.029662][ T5647] dump_backtrace+0x1c4/0x1f0 [ 86.030516][ T5647] show_stack+0x2c/0x3c [ 86.031237][ T5647] __dump_stack+0x30/0x40 [ 86.031966][ T5647] dump_stack_lvl+0xf4/0x15c [ 86.032744][ T5647] dump_stack+0x1c/0x5c [ 86.033443][ T5647] should_fail_ex+0x3cc/0x524 [ 86.034256][ T5647] should_fail+0x14/0x24 [ 86.034993][ T5647] should_fail_usercopy+0x20/0x30 [ 86.035897][ T5647] simple_read_from_buffer+0xcc/0x238 [ 86.036835][ T5647] proc_fail_nth_read+0x19c/0x23c [ 86.037731][ T5647] vfs_read+0x2a4/0x7b8 [ 86.038446][ T5647] ksys_read+0x12c/0x228 [ 86.039199][ T5647] __arm64_sys_read+0x7c/0x90 [ 86.040021][ T5647] invoke_syscall+0x98/0x290 [ 86.040841][ T5647] el0_svc_common+0x13c/0x258 [ 86.041671][ T5647] do_el0_svc+0x5c/0x134 [ 86.042401][ T5647] el0_svc+0x58/0x128 [ 86.043090][ T5647] el0t_64_sync_handler+0x84/0xf0 [ 86.043969][ T5647] el0t_64_sync+0x18c/0x190 [ 87.008922][ T1600] bond0 (unregistering): Released all slaves [ 87.422335][ T5668] loop5: detected capacity change from 0 to 1024 [ 87.432289][ T5672] loop6: detected capacity change from 0 to 512 [ 87.452272][ T5672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 87.453620][ T5672] System zones: 1-12 [ 87.455821][ T5672] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.283: missing EA_INODE flag [ 87.460742][ T5672] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.283: error while reading EA inode 12 err=-117 [ 87.470750][ T5672] EXT4-fs (loop6): 1 orphan inode deleted [ 87.471867][ T5672] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 87.474569][ T5668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 87.712817][ T4330] Bluetooth: hci2: failed to read key size for handle 200 [ 88.546590][ T5691] loop2: detected capacity change from 0 to 512 [ 88.616657][ T5691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.736438][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 88.820045][ T5711] loop6: detected capacity change from 0 to 512 [ 89.505570][ T5711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.836120][ T4341] EXT4-fs (loop2): unmounting filesystem. [ 89.844630][ T5711] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 89.872368][ T5732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.294'. [ 89.874250][ T5728] FAULT_INJECTION: forcing a failure. [ 89.874250][ T5728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.876471][ T5728] CPU: 1 PID: 5728 Comm: syz.0.292 Not tainted syzkaller #0 [ 89.877665][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 89.879416][ T5728] Call trace: [ 89.879986][ T5728] dump_backtrace+0x1c4/0x1f0 [ 89.880834][ T5728] show_stack+0x2c/0x3c [ 89.881595][ T5728] __dump_stack+0x30/0x40 [ 89.882376][ T5728] dump_stack_lvl+0xf4/0x15c [ 89.883159][ T5728] dump_stack+0x1c/0x5c [ 89.883861][ T5728] should_fail_ex+0x3cc/0x524 [ 89.884683][ T5728] should_fail+0x14/0x24 [ 89.885454][ T5728] should_fail_usercopy+0x20/0x30 [ 89.886277][ T5728] simple_read_from_buffer+0xcc/0x238 [ 89.887248][ T5728] proc_fail_nth_read+0x19c/0x23c [ 89.888157][ T5728] vfs_read+0x2a4/0x7b8 [ 89.888916][ T5728] ksys_read+0x12c/0x228 [ 89.889716][ T5728] __arm64_sys_read+0x7c/0x90 [ 89.890584][ T5728] invoke_syscall+0x98/0x290 [ 89.891445][ T5728] el0_svc_common+0x13c/0x258 [ 89.892302][ T5728] do_el0_svc+0x5c/0x134 [ 89.893035][ T5728] el0_svc+0x58/0x128 [ 89.893736][ T5728] el0t_64_sync_handler+0x84/0xf0 [ 89.894622][ T5728] el0t_64_sync+0x18c/0x190 [ 89.903028][ T5711] FAULT_INJECTION: forcing a failure. [ 89.903028][ T5711] name failslab, interval 1, probability 0, space 0, times 0 [ 89.905123][ T5711] CPU: 1 PID: 5711 Comm: syz.6.289 Not tainted syzkaller #0 [ 89.906339][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 89.907961][ T5711] Call trace: [ 89.908541][ T5711] dump_backtrace+0x1c4/0x1f0 [ 89.909469][ T5711] show_stack+0x2c/0x3c [ 89.910273][ T5711] __dump_stack+0x30/0x40 [ 89.911108][ T5711] dump_stack_lvl+0xf4/0x15c [ 89.911977][ T5711] dump_stack+0x1c/0x5c [ 89.912756][ T5711] should_fail_ex+0x3cc/0x524 [ 89.913613][ T5711] __should_failslab+0xc0/0x11c [ 89.914513][ T5711] should_failslab+0x10/0x28 [ 89.915393][ T5711] __kmem_cache_alloc_node+0x7c/0x318 [ 89.916361][ T5711] kmalloc_trace+0x48/0x94 [ 89.917132][ T5711] bdi_split_work_to_wbs+0x3f4/0x778 [ 89.918099][ T5711] __writeback_inodes_sb_nr+0x1ac/0x224 [ 89.919095][ T5711] writeback_inodes_sb+0x78/0x8c [ 89.920005][ T5711] sync_filesystem+0xa0/0x218 [ 89.920213][ T5725] sctp: failed to load transform for md5: -2 [ 89.920858][ T5711] ext4_reconfigure+0x1508/0x21e8 [ 89.922818][ T5711] reconfigure_super+0x1d4/0x7cc [ 89.923715][ T5711] vfs_fsconfig_locked+0x164/0x374 [ 89.924673][ T5711] __arm64_sys_fsconfig+0x640/0x790 [ 89.925611][ T5711] invoke_syscall+0x98/0x290 [ 89.926470][ T5711] el0_svc_common+0x13c/0x258 [ 89.927340][ T5711] do_el0_svc+0x5c/0x134 [ 89.928141][ T5711] el0_svc+0x58/0x128 [ 89.928828][ T5711] el0t_64_sync_handler+0x84/0xf0 [ 89.929713][ T5711] el0t_64_sync+0x18c/0x190 [ 89.934759][ T5711] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 89.949337][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 90.189929][ T4330] Bluetooth: hci3: failed to read key size for handle 200 [ 91.494900][ T5769] loop0: detected capacity change from 0 to 32768 [ 91.696666][ T5769] JBD2: Ignoring recovery information on journal [ 91.743482][ T5769] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.056235][ T5769] rnbd_client L600: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 92.059128][ T5769] rtrs_client L2807: pathname cannot contain / and . [ 92.136494][ T5819] 9pnet_fd: Insufficient options for proto=fd [ 92.179533][ T5769] [ 92.179952][ T5769] ====================================================== [ 92.181058][ T5769] WARNING: possible circular locking dependency detected [ 92.182345][ T5769] syzkaller #0 Not tainted [ 92.183165][ T5769] ------------------------------------------------------ [ 92.184480][ T5769] syz.0.300/5769 is trying to acquire lock: [ 92.185564][ T5769] ffff0000fce61808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 92.188096][ T5769] [ 92.188096][ T5769] but task is already holding lock: [ 92.189429][ T5769] ffff0000fcd9b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x348/0xf0c [ 92.191183][ T5769] [ 92.191183][ T5769] which lock already depends on the new lock. [ 92.191183][ T5769] [ 92.193104][ T5769] [ 92.193104][ T5769] the existing dependency chain (in reverse order) is: [ 92.194687][ T5769] [ 92.194687][ T5769] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 92.196127][ T5769] down_read+0x64/0x300 [ 92.196994][ T5769] ocfs2_init_acl+0x264/0x61c [ 92.197946][ T5769] ocfs2_mknod+0x12b0/0x218c [ 92.198888][ T5769] ocfs2_create+0x19c/0x51c [ 92.199798][ T5769] path_openat+0xda8/0x27a0 [ 92.200718][ T5769] do_filp_open+0x198/0x38c [ 92.201592][ T5769] do_sys_openat2+0x134/0x3fc [ 92.202504][ T5769] __arm64_sys_openat+0x11c/0x150 [ 92.203469][ T5769] invoke_syscall+0x98/0x290 [ 92.204413][ T5769] el0_svc_common+0x13c/0x258 [ 92.205367][ T5769] do_el0_svc+0x5c/0x134 [ 92.206247][ T5769] el0_svc+0x58/0x128 [ 92.207087][ T5769] el0t_64_sync_handler+0x84/0xf0 [ 92.208091][ T5769] el0t_64_sync+0x18c/0x190 [ 92.208991][ T5769] [ 92.208991][ T5769] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 92.210554][ T5769] down_read+0x64/0x300 [ 92.211378][ T5769] ocfs2_start_trans+0x38c/0x6f4 [ 92.212389][ T5769] ocfs2_mknod+0xd2c/0x218c [ 92.213309][ T5769] ocfs2_create+0x19c/0x51c [ 92.214268][ T5769] path_openat+0xda8/0x27a0 [ 92.215134][ T5769] do_filp_open+0x198/0x38c [ 92.215976][ T5769] do_sys_openat2+0x134/0x3fc [ 92.216910][ T5769] __arm64_sys_openat+0x11c/0x150 [ 92.217919][ T5769] invoke_syscall+0x98/0x290 [ 92.218851][ T5769] el0_svc_common+0x13c/0x258 [ 92.219778][ T5769] do_el0_svc+0x5c/0x134 [ 92.220604][ T5769] el0_svc+0x58/0x128 [ 92.221406][ T5769] el0t_64_sync_handler+0x84/0xf0 [ 92.222420][ T5769] el0t_64_sync+0x18c/0x190 [ 92.223350][ T5769] [ 92.223350][ T5769] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 92.224676][ T5769] ocfs2_start_trans+0x20c/0x6f4 [ 92.225701][ T5769] ocfs2_create_refcount_tree+0x3bc/0x118c [ 92.226899][ T5769] ocfs2_reflink_remap_blocks+0x28c/0x15e8 [ 92.228050][ T5769] ocfs2_remap_file_range+0x3f8/0x640 [ 92.229120][ T5769] do_clone_file_range+0x248/0x2a8 [ 92.230159][ T5769] vfs_clone_file_range+0x28c/0x730 [ 92.231150][ T5769] do_vfs_ioctl+0x143c/0x202c [ 92.232072][ T5769] __arm64_sys_ioctl+0xe4/0x1c8 [ 92.233040][ T5769] invoke_syscall+0x98/0x290 [ 92.233958][ T5769] el0_svc_common+0x13c/0x258 [ 92.234881][ T5769] do_el0_svc+0x5c/0x134 [ 92.235758][ T5769] el0_svc+0x58/0x128 [ 92.236536][ T5769] el0t_64_sync_handler+0x84/0xf0 [ 92.237512][ T5769] el0t_64_sync+0x18c/0x190 [ 92.238395][ T5769] [ 92.238395][ T5769] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 92.240290][ T5769] __lock_acquire+0x2808/0x6634 [ 92.241273][ T5769] lock_acquire+0x20c/0x638 [ 92.242185][ T5769] down_write+0x5c/0x88 [ 92.243033][ T5769] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 92.244117][ T5769] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 92.245277][ T5769] ocfs2_init_xattr_set_ctxt+0x310/0x7dc [ 92.246355][ T5769] ocfs2_xattr_set+0x978/0xf0c [ 92.247301][ T5769] ocfs2_xattr_trusted_set+0x4c/0x64 [ 92.248324][ T5769] __vfs_setxattr+0x374/0x390 [ 92.249278][ T5769] __vfs_setxattr_noperm+0x120/0x56c [ 92.250336][ T5769] __vfs_setxattr_locked+0x1e8/0x214 [ 92.251392][ T5769] vfs_setxattr+0x158/0x2a8 [ 92.252294][ T5769] setxattr+0x258/0x2d8 [ 92.253101][ T5769] path_setxattr+0x130/0x260 [ 92.253968][ T5769] __arm64_sys_setxattr+0xc4/0xe0 [ 92.255002][ T5769] invoke_syscall+0x98/0x290 [ 92.255914][ T5769] el0_svc_common+0x13c/0x258 [ 92.256906][ T5769] do_el0_svc+0x5c/0x134 [ 92.257777][ T5769] el0_svc+0x58/0x128 [ 92.258601][ T5769] el0t_64_sync_handler+0x84/0xf0 [ 92.259625][ T5769] el0t_64_sync+0x18c/0x190 [ 92.260508][ T5769] [ 92.260508][ T5769] other info that might help us debug this: [ 92.260508][ T5769] [ 92.262197][ T5769] Chain exists of: [ 92.262197][ T5769] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 92.262197][ T5769] [ 92.265215][ T5769] Possible unsafe locking scenario: [ 92.265215][ T5769] [ 92.266523][ T5769] CPU0 CPU1 [ 92.267414][ T5769] ---- ---- [ 92.268330][ T5769] lock(&oi->ip_xattr_sem); [ 92.269123][ T5769] lock(&journal->j_trans_barrier); [ 92.270488][ T5769] lock(&oi->ip_xattr_sem); [ 92.271793][ T5769] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 92.273133][ T5769] [ 92.273133][ T5769] *** DEADLOCK *** [ 92.273133][ T5769] [ 92.274580][ T5769] 3 locks held by syz.0.300/5769: [ 92.275476][ T5769] #0: ffff0000c31b8460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 92.277102][ T5769] #1: ffff0000fcd9b488 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: vfs_setxattr+0x138/0x2a8 [ 92.279026][ T5769] #2: ffff0000fcd9b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x348/0xf0c [ 92.280855][ T5769] [ 92.280855][ T5769] stack backtrace: [ 92.281907][ T5769] CPU: 0 PID: 5769 Comm: syz.0.300 Not tainted syzkaller #0 [ 92.283254][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 92.285044][ T5769] Call trace: [ 92.285647][ T5769] dump_backtrace+0x1c4/0x1f0 [ 92.286490][ T5769] show_stack+0x2c/0x3c [ 92.287249][ T5769] __dump_stack+0x30/0x40 [ 92.288037][ T5769] dump_stack_lvl+0xf4/0x15c [ 92.288872][ T5769] dump_stack+0x1c/0x5c [ 92.289614][ T5769] print_circular_bug+0x148/0x1b0 [ 92.290500][ T5769] check_noncircular+0x264/0x2f8 [ 92.291331][ T5769] __lock_acquire+0x2808/0x6634 [ 92.292159][ T5769] lock_acquire+0x20c/0x638 [ 92.292942][ T5769] down_write+0x5c/0x88 [ 92.293705][ T5769] ocfs2_reserve_suballoc_bits+0x110/0x3d40 [ 92.294715][ T5769] ocfs2_reserve_new_metadata_blocks+0x340/0x7e4 [ 92.295799][ T5769] ocfs2_init_xattr_set_ctxt+0x310/0x7dc [ 92.296808][ T5769] ocfs2_xattr_set+0x978/0xf0c [ 92.297656][ T5769] ocfs2_xattr_trusted_set+0x4c/0x64 [ 92.298619][ T5769] __vfs_setxattr+0x374/0x390 [ 92.299493][ T5769] __vfs_setxattr_noperm+0x120/0x56c [ 92.300443][ T5769] __vfs_setxattr_locked+0x1e8/0x214 [ 92.301390][ T5769] vfs_setxattr+0x158/0x2a8 [ 92.302168][ T5769] setxattr+0x258/0x2d8 [ 92.302901][ T5769] path_setxattr+0x130/0x260 [ 92.303726][ T5769] __arm64_sys_setxattr+0xc4/0xe0 [ 92.304608][ T5769] invoke_syscall+0x98/0x290 [ 92.305400][ T5769] el0_svc_common+0x13c/0x258 [ 92.306224][ T5769] do_el0_svc+0x5c/0x134 [ 92.306986][ T5769] el0_svc+0x58/0x128 [ 92.307724][ T5769] el0t_64_sync_handler+0x84/0xf0 [ 92.308549][ T5769] el0t_64_sync+0x18c/0x190 [ 92.309384][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.321249][ T5826] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 92.335111][ T5826] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 92.336991][ T5826] OCFS2: File system is now read-only. [ 92.338600][ T5826] (syz.0.300,5826,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 92.340244][ T5826] (syz.0.300,5826,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 92.341689][ T5826] (syz.0.300,5826,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 92.343438][ T5826] (syz.0.300,5826,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 92.349384][ T4924] EXT4-fs (loop5): unmounting filesystem. [ 92.353250][ T5826] (syz.0.300,5826,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 92.357228][ T5826] (syz.0.300,5826,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 92.360851][ T5826] (syz.0.300,5826,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 92.364054][ T5826] (syz.0.300,5826,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 92.367084][ T5826] (syz.0.300,5826,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 92.371618][ T5826] (syz.0.300,5826,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 92.372587][ T5769] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 92.373492][ T5826] (syz.0.300,5826,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 92.378403][ T5826] (syz.0.300,5826,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 92.378721][ T5769] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 92.380124][ T5826] (syz.0.300,5826,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 92.383439][ T5826] (syz.0.300,5826,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 92.384773][ T5769] (syz.0.300,5769,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 92.385286][ T5826] (syz.0.300,5826,1):ocfs2_lock_allocators:2704 ERROR: status = -30 [ 92.386961][ T5769] (syz.0.300,5769,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 92.390582][ T5826] (syz.0.300,5826,1):ocfs2_write_begin_nolock:1746 ERROR: status = -30 [ 92.390612][ T5826] (syz.0.300,5826,1):ocfs2_write_begin:1909 ERROR: status = -30 [ 92.395223][ T5769] (syz.0.300,5769,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 92.395248][ T5769] (syz.0.300,5769,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 92.395256][ T5769] (syz.0.300,5769,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 92.395264][ T5769] (syz.0.300,5769,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 92.395271][ T5769] (syz.0.300,5769,0):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 92.395278][ T5769] (syz.0.300,5769,0):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 92.395297][ T5769] (syz.0.300,5769,0):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 92.395304][ T5769] (syz.0.300,5769,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 92.395312][ T5769] (syz.0.300,5769,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 92.395320][ T5769] (syz.0.300,5769,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 92.395331][ T5769] (syz.0.300,5769,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 92.395338][ T5769] (syz.0.300,5769,0):ocfs2_init_xattr_set_ctxt:3290 ERROR: status = -30 [ 92.395344][ T5769] (syz.0.300,5769,0):ocfs2_xattr_set:3647 ERROR: status = -30 [ 92.438688][ T4333] ocfs2: Unmounting device (7,0) on (node local)