last executing test programs: 4m55.634008464s ago: executing program 2 (id=255): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x7, "cf"}, @global=@item_012={0x2, 0x1, 0x3, '\\E'}]}}, 0x0}, 0x0) 4m50.317368612s ago: executing program 2 (id=264): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9d, 0x41, 0x8, 0x0, 0xfffffffffffffffc}}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 4m47.807608078s ago: executing program 2 (id=275): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) 4m43.438575801s ago: executing program 2 (id=288): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x50000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)) 4m42.838960536s ago: executing program 2 (id=293): r0 = inotify_init() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xb}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() prlimit64(r4, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 4m39.975161243s ago: executing program 2 (id=305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0xffffffff, 0x4) 4m23.600855883s ago: executing program 32 (id=305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0xffffffff, 0x4) 3m6.45580048s ago: executing program 0 (id=528): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e0001020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000002010500000600000000000000000008db0aee440c028c413ee1336b7a0ea0b4274b33334b9dba53c9bf1502433d6b3391f1a36d135193bd2fa80c89d81d10042d359cedd005053ee868cc2cd3ac1983e44806d9df3d6b529cf1251da56e653b4e"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0xc308f5b02c6b718f, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20008000) 3m2.674404559s ago: executing program 0 (id=537): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m0.93447958s ago: executing program 0 (id=541): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) 3m0.713388733s ago: executing program 0 (id=542): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000300)={0x20, 0xe, 0x4, "f6cc8272"}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}}) 2m56.96650332s ago: executing program 0 (id=554): syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x20, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2m54.56854318s ago: executing program 4 (id=559): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ppoll(&(0x7f0000000280)=[{r0, 0x1000}], 0x1, &(0x7f0000000540)={0x0, 0x989680}, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) 2m52.32486991s ago: executing program 4 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x2, 0xa, 0x300) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) 2m52.067476525s ago: executing program 0 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1208000, 0x0, 0x7, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) ptrace$peek(0x1, r0, &(0x7f0000000300)) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2m49.818405535s ago: executing program 4 (id=574): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ppoll(&(0x7f0000000280)=[{r0, 0x1000}], 0x1, &(0x7f0000000540)={0x0, 0x989680}, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) 2m47.83055078s ago: executing program 4 (id=577): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) 2m47.435135774s ago: executing program 4 (id=579): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) open_by_handle_at(r0, 0x0, 0x4000) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0x400) fdatasync(r1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={0x484, 0x3f4, 0x10, 0x70bd2b, 0x25dfdbfc, {0x6, 0x0, 0x11, [0x8, 0x0, 0x4, 0x4, 0x0, 0x8, 0x2, 0x1ff, 0x0, 0x2, 0x10, 0x3ff, 0x3, 0x698, 0x3, 0x0, 0x3, 0x7ff, 0x5, 0x9, 0x6, 0x10000, 0x1, 0x5, 0xffffffff, 0x8000, 0x3, 0x13b, 0x6, 0xe8, 0xd29, 0x2, 0x6, 0x0, 0x2ab, 0x7f, 0xffffffff, 0x5, 0x0, 0xfc, 0x7fffffff, 0x9, 0x8, 0xfffff4e2, 0x10000, 0x4b, 0x1, 0x2, 0xffffff13, 0x279d, 0x6, 0x200, 0x0, 0x9, 0xfffffffd, 0x6, 0x7, 0xfffffffc, 0x400, 0x6, 0x3, 0xa, 0x4, 0xfffffffd], [0x0, 0x80000000, 0x9cc, 0x2, 0xff000000, 0xaa56, 0x10000, 0x4, 0x4, 0x1, 0x0, 0x3, 0x6, 0x9, 0x3, 0x81, 0x2, 0x4, 0x9634, 0x53d3, 0x20000000, 0x80, 0x400, 0x6, 0x3723, 0x80000001, 0x2, 0xd, 0xfffffff7, 0x7f, 0x1d, 0x6, 0x8, 0x0, 0x2, 0x1, 0x1, 0x1, 0xfffffff7, 0x6, 0x1, 0xffff, 0x3, 0x6, 0x6, 0x10000, 0x0, 0x6, 0x6, 0x8, 0x4, 0xb6, 0x401, 0x3, 0x4, 0xffffffd9, 0x7, 0x3000, 0xfff, 0x5da, 0x80, 0x6, 0x8, 0x3], [0x2, 0x4, 0x1, 0x100, 0x0, 0x6, 0x0, 0x101, 0x70000000, 0x5, 0x9, 0x7, 0x1, 0x10, 0x2, 0xfffffff6, 0x3ff, 0x10ab, 0xe7c, 0x2, 0x101, 0x7, 0x4, 0x4, 0x9, 0x80000000, 0x2, 0x4055, 0x2, 0x0, 0x8, 0x411a, 0xc6882165, 0x40, 0x80000000, 0x0, 0x7, 0x7, 0xcef, 0xa, 0x6, 0x4, 0x8, 0x6, 0x7fff, 0x0, 0x5, 0x3, 0x3, 0x3, 0x94, 0x3, 0x3, 0xdde, 0x2, 0x30, 0x13, 0x9, 0x203, 0x4, 0x6, 0x2, 0x80, 0x7], [0x1, 0x0, 0x800, 0x4, 0x4, 0x10001, 0x1, 0xffffffff, 0x1, 0x8, 0x7fff, 0xff, 0x3ff, 0x101, 0xa, 0x7f, 0x3, 0x8000, 0x3, 0x5, 0x6, 0xb, 0x0, 0x9, 0x80000001, 0x8, 0x2, 0x6, 0x7, 0x80, 0xfffffffa, 0x10000, 0x8, 0x6, 0x4, 0x1be3, 0x1000, 0x6, 0xf, 0x40, 0x4, 0xfff, 0x0, 0x100, 0x6, 0x2, 0xffffffff, 0x9, 0x2, 0xa2d0, 0x8, 0x9, 0x726, 0x5, 0x7, 0x7, 0x5, 0xfffffffa, 0x0, 0x1, 0x1, 0x9, 0x9a], 0x63, ['vfat\x00', '{{,{\x00', '%,]@,\x00', 'vfat\x00', 'vfat\x00', 'vfat\x00', '\x00\x02$w\x1d1\x0em\xf0\'\x95\xd1\xb8\f\xf9\x93\x8c\xdc0d\x01\x05~r\xd2\xf5p\xc0\x84B\xd6\xd1\xd5\xf3\xf2T.\xbdt{^)\x7fw =u\x9c\xc2\x1d\xb3\xa4V-aa\x91H\x01\x0e\x0eE\xb9\x95o|\xf5\xec']}}, 0x484}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet6(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c3, &(0x7f0000000100)="$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") setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f00000004c0)="548a01633cb7793a9c5a61e7f0d93b452f2b66de2981b763ef8a90ff09af8183950869d296acba7b0720d45406e688f3bc", 0x31) 2m47.1544441s ago: executing program 4 (id=582): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="75062c7747acbcf75d08735d6211dff1756ab603c500705976dcb40e21c4f9cd4786fc974bbaa4eca7d692678381f4a11a13862f5fb7743b361df017e58fc2bc66dbff77b444e0f4f7e248e5583e8044b62353169a7fd8660d01097d9dee0837357dc24395d81f9edb0670971af1941969c274f4036d8128a449830162c133b96f92d31563480117e09cd3f43bee52df451b3ec70158ac26a4c97986847440d48410939cd07e287d", @ANYBLOB="864d072d53e325342db1cf1e236fe3ac11136affc4196e075b73198fb1cecebed1a61fe2a9896dba0cda581f28c54fad9784ff7edb9e5d73a4f6bf36409ec10a0d39c03b2890ae132b84447d768be4a4de16b4636786ac2ed79b411c32d767511c376e265c8b67", @ANYRES8], 0xff, 0x1f8, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x18) fadvise64(r0, 0x0, 0x117102, 0x3) creat(&(0x7f0000000540)='./file0\x00', 0x0) 2m36.897620385s ago: executing program 33 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1208000, 0x0, 0x7, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) ptrace$peek(0x1, r0, &(0x7f0000000300)) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2m32.107865953s ago: executing program 34 (id=582): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="75062c7747acbcf75d08735d6211dff1756ab603c500705976dcb40e21c4f9cd4786fc974bbaa4eca7d692678381f4a11a13862f5fb7743b361df017e58fc2bc66dbff77b444e0f4f7e248e5583e8044b62353169a7fd8660d01097d9dee0837357dc24395d81f9edb0670971af1941969c274f4036d8128a449830162c133b96f92d31563480117e09cd3f43bee52df451b3ec70158ac26a4c97986847440d48410939cd07e287d", @ANYBLOB="864d072d53e325342db1cf1e236fe3ac11136affc4196e075b73198fb1cecebed1a61fe2a9896dba0cda581f28c54fad9784ff7edb9e5d73a4f6bf36409ec10a0d39c03b2890ae132b84447d768be4a4de16b4636786ac2ed79b411c32d767511c376e265c8b67", @ANYRES8], 0xff, 0x1f8, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x18) fadvise64(r0, 0x0, 0x117102, 0x3) creat(&(0x7f0000000540)='./file0\x00', 0x0) 2m19.894434831s ago: executing program 1 (id=638): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m19.041367711s ago: executing program 1 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x0, 0xc000, 0x1000, &(0x7f0000001000/0x1000)=nil}) 2m18.775014997s ago: executing program 1 (id=641): syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x6}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.439734886s ago: executing program 1 (id=642): timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r1, &(0x7f0000000180)=""/202, 0xca, 0x102, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r2, 0x21, 0x0) r3 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1-6'], 0x31) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x181) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r4, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r4, r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b45, 0x8) gettid() 2m17.002306119s ago: executing program 1 (id=645): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ppoll(&(0x7f0000000280)=[{r0, 0x1000}], 0x1, &(0x7f0000000540)={0x0, 0x989680}, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) 2m15.887681934s ago: executing program 1 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m0.170543596s ago: executing program 35 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m17.664526723s ago: executing program 7 (id=801): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m16.5038339s ago: executing program 7 (id=803): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) userfaultfd(0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x18, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1m8.814527716s ago: executing program 7 (id=814): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) recvfrom$unix(r0, &(0x7f0000000500)=""/217, 0xd9, 0x40000142, 0x0, 0x0) 1m8.701861103s ago: executing program 7 (id=817): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1m8.313346136s ago: executing program 7 (id=821): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000000500)) 1m8.134971496s ago: executing program 7 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "bd47604b63ab6f1ee0fab0861fd44714"}}]}, 0x190}}, 0x0) 51.951019795s ago: executing program 36 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "bd47604b63ab6f1ee0fab0861fd44714"}}]}, 0x190}}, 0x0) 27.942368948s ago: executing program 8 (id=958): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/79, 0x4f}], 0x1, 0x2f, 0xffffff7d) 27.772896938s ago: executing program 8 (id=960): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x6, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000001, 0x4, 0x200000003, 0x9}, {0xa5f}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d3, 0x6c}, 0xa, @in=@private=0x200, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) 27.517306033s ago: executing program 8 (id=962): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x5, 0x0, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x48) 27.38704893s ago: executing program 8 (id=965): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac14143b00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000010000000044000500ac1414aa003100000000000000000000000000003200000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d", @ANYRESDEC], 0x1, 0x1534, &(0x7f0000002d00)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm8SyyRJLklySZIkSXJLSJrkSEJiyC1pSJJch+QyhOQyMWnc7/dLQpI0SRKSW7L+H8Vfnep3zvmdfjmfM8/383k/1jNrP2s/+33ey94b83WnwdUb1qhSn4jg34I//5EMALEA0B8ArgKAAADKxJeJPz+fU2Lyv7cT9ud6MO1yV8AuJ+5/9sb9z964/9kb9z974/5nb9z/7I37n71x/xnLzjZOLXA1P7Lvg+////er+4cz/P3/XySr5OjPV5e8tjNAzD+bwv3P3rj//7WCf2Yj7n/2xv3PrmIvdwHsPwC//7ODHH84w/3P3rj/jGVnl/v+8+V+QCR7PweX+/XHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx7OOUvUQBwcXy562KMMcYYY4wxxtifx+e43BUwxhhjjDHGGGPs/x6CAAkKAoiBHBALOSEOBABcCbnhKojA1RAP10AeuBbyQj7IDwUgAQpCIdBgwAJBCIWhCEThOigK10MxuAGKQwlwUBIS4UYoBTdBabgZysAtUBZuhXJQHipARbgNKsHtUBnugCpwJ1SFalAdasBdUBPuhlpwD9SGe6EO3Ad14X6oBw9AfXgQGsBD0BAehkbwCDSGJtAUmkHz/1X+89ANXoDu0AOSoSf0ghehN/SBvtAP+sNLMABehoHwCqTAIBgMr8IQeA2GwuswDN6A4fAmjICRMApGwxgYC6kwDsbDWzAB3oaJMAkmwxRIg6kwDd6B6TADZsK7MAveg9kwB+bCPEiH92E+LIAM+AAWwoeQCYtgMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w0ewAz6GnbALdsMnsAc+/RfzT/5dfmcEBBQoUKHCGIzBWIzFOIzDXJgLc2NujGAE4zEe82AezIt5MT/mxwRMwEJYCA0aJCQsjIUxilEsikWxGBbD4lgcHTpMxEQshTdhaSyNZbAMlsWyWA7LY3msiBWxElbCylgZq2AVrIpVsTpWx7vwLuyJtbAW1sbaWAfrXLw9hfWxPjbABtgQG2IjbISNsTE2xabYHJtjC2yBLbEltsbW2AbbYFtsi0mYhO2wHbbH9tgBO2BH7IidsBN2xi7YJev5HIAv4AvYA6uKntgLe2FvTMnRF/thP3wJB+DL+DK+gik4CAfjq/gqvoZD8QQOwzdwOA7HSmIkjsLRSGIspmIqjsfxOAEn4ESchJNwCqbhVJyG03A6zsAZ+C7OwvfwPZyDc3AepmM6zscFmIEZuBBPYiYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFt+A23AYfoQLAj3EX7sIU3IN7cC/uxX24D/fjfszCLDyAB/AgHsRDeAgP42E8gkfxGB7F43gcT+BJPIWn8AyewbP4bMKXDT66YVUKiPOUUCJGxIhYESviRJzIJXKJ3CK3iIiIiBfxIo/II/KKvCK/yC8SRIIoJAoJI4wgEcYAgIiKqCgqiopiopgoLooLJ5xIFImilCglSovSooy4RZQVt4pyorxo5SqKiqKSaO0qiztEFVFFVBXVRHVRQ9QQNUVNUUvUErVFbVFH1BF1xf2inuiJffFBcb4zDcUgbCQGY2PRRMgLn2AtxFBsKVqJ1uJx8QYOw7aihUsST4l2YhS2F38To/EZ0VGMxU7iOdFZdBFdxfOim2jpuoseYiL2FL3EFOwt+oi+op+YjtXEuzgrZ3XxikgRg8Rg8aqYh6+JoeJ1MeynI31TjBAjxSgxWowRY0WqGCfGi7fEBPG2mCgmicliikgTU8U08Y6YLmaImeJdMUu8J2aLOWKumCfSxftivlggMsQHYqH4UGSKRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrv4SOwQH4udYpfYLT4Re8SnYq/4TOwTn4v94guRJb4UB8RX4qD4WhwS34jD4ltxRBwVx8R34rj4XpwQJ8UpcVqcET+Is+JHcU54ARKlkFIqGcgYmUPGypwyTl4hc8ngwrN7tYyX18g88lqZV+aT+WUBmSALykJSSyOtJBnKwrKIjMrrZFF5vSwmb5DFZQnpZEmZKG+UpeRNsrS8WZaRt8iy8lZZTpaXFWRFeZusJG+XEPl5H1VlNVld1pB3yWS4W9aS98ja8l5ZR94n68r7ZT35gKwvH5QN5EOyoXxYNpKPyMayiWwqm8nm8lHZQj4mW8pWsrV8XLaRT8i28kmZJJ+S7aS/8BJ5RnaUz8pO8jnZWXaRXeWP8pz0srvsIaEnyF7yRdlb9pF9ZT/ZX74kB8iX5UD5ikyRg+Rg+aocIl+TQ+Xrcph8Qw6Xb8oRcqQcJUfLMXKsTJXj5Hj5lpwg35YT5SQ5WU6RaXKq7HthpZlS/sP8t34nf+BPe98gN8pNcrPcIrfKbXK7/EjukDvkTrlT7pa75R65R+6Ve+U+uU/ul/tllsySB+QBeVAelIfkIXlYHpZH5FF5Wn4nj8vv5Ql5Up6Up+UZeUaevfAcgEIllFRKBSpG5VCxKqeKU1eoXOpKlVtdpSLqahWvrlF51LUqr8qn8qsCKkEVVIWUVkZZRSpUhVURFVXX4YUXjCquSiinSqpEdeO/kq+KqutVMXXDr/Iv1pf8B/U1V81VC9VCtVQtVWvVWrVRbVRb1VYlqSTVTrVT7VV71UF1UB1VR9VJdVKdVWfVVXVV3VQ31V11V8kqWfVSL6reqo/qq/qp/uolNUANUAPVQJWiUtRgNVgNUUPUUDVUDVPD1HA1XI1QI9QoNUqNUWNUqkpV49V4NUFNUBPVRDVZTVZpKk1NU9PUdDVdzVQz1Sw1S81Ws9VcNVelq3Q1X81XGSpDLVQLVaZapBapJWqJWqaWqRVqhVqlVqk1ao1ap9apTLVRbVSb1Wa1VW1V29V2tUPtUDvVTrVb7VZ71B61V+1V+9Q+tV/tV1kqSx1QB9RBdVAdUofUYXVYHVFH1DF1TB1Xx9UJdUKdUqfUGXVGnVVn1Tl17vxpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4Nogb5AvyB8UCBKCgkGhQAcmsIG40PRocF1QNLg+KBbcEBQPSgQuKBkkBjcGpYKbgtLBzUGZ4JagbHBrUC4oH1QIKga3BZWC24PKwR1BleDOoGpQLage1AjuCmoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB88GDQIHgoaBg8HjYJHgsZBk6Bp0Cxo/qeu7/2JfI+57rqHTtY9dS/9ou6t++i+up/ur1/SA/TLeqB+RafoQXqwflUP0a/pofp1PUy/oYfrN/UIPVKP0qP1GD1Wp+pxerx+S0/Qb+uJepKerKfoND1VT9Pv6Ol6hp6p39Wz9Ht6tp6j5+p5Ol2/r+frBTpDf6AX6g91pl6kF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa364/0Dv2x3ql36d36E71Hf6r36s/0Pv253q+/0Fn6S31Af6UP6q/1If2NPqy/1Uf0UX1Mf6eP6+/1CX1Sn9Kn9Rn9gz6rf9TntD9/cn/+690oo0yMiTGxJtbEmTiTy+QyuU1uEzERE2/iTR6Tx+Q1eU1+k98kmARTyBQy55EhU9gUNlETNUVNUVPMFDPFTXHjjDOJJtGUMqVMaVPalDFlTFlT1pQz5UwFU8HcZm4zt5vbzR3mDnOnudNUM9VMDVPD1DQ1TS1Ty9Q2tU0dU8fUNXVNPVPP1Df1TQPTwDQ0DU0j08g0No1NU9PUNDfNTQvTwrQ0LU1r09q0MW1MW9PWJJkk0860M+1Ne9PBdDAdTUfTyXQynU1n09V0Nd1MN9PddDfJJtn0Mr1Mb9Pb9DV9TX/T3wwwA8xAM9CkmBQz2Aw2Q8wQM9QMNcPMG2b4+RNVM9KMMqPNGDPWpJpUM96MNxPMBDPRTDSTzWSTZtLMNDPNTDfTzUwz08wys8xsM9vMNXNNukk38818k2EyzEKz0GSaTLPYLDZLzVKz3Cw3K81Ks9qsNmthrVlv1puNZqPZbDabrWar2W62mx1mh9lpdprdZrfZY/aYvWav2Wf2mf1mv8kyWeaAOWAOmoPmkDlkDpvD5og5Yo6ZY+a4OW5OmBPmlDllzph8F74vvYm1OW2cvcLmslfa3PYq+/dxflvAJtiCtpDVNq/N96vYWGuL2RtscVvCOlvSJtobfxOXs+VtBVvR3mYr2dtt5d/ENe3dtpa9x9a299oa9q5fxXXsfbaufdjWQwSwTWwD28w2tA/bRvYR29g2sU1tM9vGPmHb2idtkn3KtrNP/yaebxfYlXaVXW3X2J12lz1lT9uD9mt7xv5gu9setr99yQ6wL9uB9hWbYgf9Jh5u37Qj7Eg7yo62Y+zY38ST7RSbZqfaafYdO93O+E2cbt+3s2yGnW3n2Ll23k/x+Zoy7Ad2of3QZtoAFtsldqldZpfbFf+/1iV2nV1vN9gd9mO72W6xW+02u/3iibDdZXfbT+we+6k9YL+y++zndr89ZLPslz/F54/vkP3GHrbf2iP2qD1mv7PH7ffqp9yRvQHsD/Y7+6M9Z70FQgKSpCigGMpBsZST4ugKykVXUm66iiJ0NcXTNZSHrqW8lI/yUwFKoIJUiDQZskQUUmEqQlG6ji6WV5xKkKOSlEg3Uim6iUrTzVSGbqGydCuVo/JUgSrSbVSJbqfKdAdVoTupKlWj6lSD7qKadDfVonuoNt1Ldeg+qkv3Uz16gOrTg9SAHqKG9DA1okeoMTWhptSMmtOj1IIeo5bUilrT49SGnqC29CQl0VPUjp6m9vQ36kDPUEd6ljrRc9SZulBXep660QvUnXpQMvWkXvQi9aY+1Jf6UX96iQbQyzSQXqEUGkSD6VUaQq/RUHqdhtEbNJzepBE0kkbRaBpDYymVxtF4eosm0Ns0kSbRZJpCaTSVptE7NJ1m0Ex6l2bRezSb5tBcmkfp9D7NpwWUQR/QQvqQMmkRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdvqIdtDHtJN20W76hPbQp7SXPqN99Dntpy8oi76kA/QVHaSv6RB943vQt3SEjtIx+o6O0/d0gk7SKTpNZ+gHOks/0jnyBCGGIpShCoMwJswRxoY5w7jwijBXeGWYO7wqjIRXh/HhNWGe8Nowb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGw+vCouH1YbEQw+JhidCFJcPE8MawVHhTWDq8OSwT3hKWDW8Ny4Xlw4fvrRjeFlYKbw8rh3eEVcI7w6phtbB6WCO8K6wZ3h3WCu8Ja4f3hqXD+8K64f1hvfCBsH74YNggfChsGD4cNgofCRuHTcKmYbOwefho2CJ8LGwZtgpbh4+HbcInwrbhk2FS+FTYLnz6p/n7FvzxfHLYM+wVvhi+GHp/j5wbnRdNj74fnR9dEM2IfhBdGP0wmhldFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10f3RD1vkYOcOiEk065wMW4HC7W5XRx7gqXy13pcrurXMRd7eLdNS6Pu9bldflcflfAJbiCrpDTzjjryIWusCviou46V9Rd74q5G1xxV8I5V9IlumauuWvuWrjHXEvXyrV2j7vH3RPuCfeke9I95dq5p1179zfXwT3jOrpn3bPuOdfZdXFd3fOumxuX++f3ZLLr5Xq53q636+v6uv6uvxvgBriBbqBLcSlusBvshrghbqgb6oa5YW64G+5GuBFulBvlxrgxLtWluvFuvJvgJriJbqKb7Ca7NJfmprlpbrqb7irN+Hkvs91sN9fNdeku3c13588ZM9xCt9Bluky32C12S91St9wtdyvdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A6301/186Juj9vr9rp9bp/b775wWe5Ld8B95Q66r90h94077L51R9xRd8x95467790Jd9KdcqfdGfeDO+t+dOecd6mRcZHxkbciEyJvRyZGJkUmR6ZE0iJTI9Mi70SmR2ZEZkbejcyKvBeZHZkTmRuZF0mPvB+ZH1kQyYh8EFkY+TCSGVkUWRxZElkaWRbxvuDm0Bf2RXzUX+eL+ut9MX+DL+5LeOdL+kR/oy/lb/Kl/c2+jL/Fl/W3+nK+vK/gH/GNfRPf1Dfzzf2jvoV/zLf0rXxr/7hv45/wbf2TPsk/5dv5p317/zffwT/jO/pnfSf/nO/su/iu/nnfzb/gu/sePtn39L38i7637+P7+n6+v3/JD/Av+4H+FZ/iB/nB/lU/xL/mh/rX/TD/hh8e86YfcfESGcb6VD/Oj/dv+Qn+bT/RT/KT/RSf5qf6af4dP93P8DP9u36Wf8/P9nP8XD/Pp/v3/Xy/wGf4D/xC/6HP9Isu3lT2y/0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9R36H/9jv9Lv8bv+J3+M/9Xv9Z36f/9zv91/4LP+lP+C/8gf91/6Q/8Yf9t/6I/6oP+a/88f99/6EP+lP+dP+jP/Bn/U/+nP8f9YYY4wxxv4p4y4Nxa9nfr6d3/N3csQvNu4FAFduKZD1y/nzZ5Rr8/487iMS2kQA4KkenR68+KhaNTk5+cK2mRKCInMALv5N0HkxcCleBK3hCUiCVlDqd+vvI7qcoX+wfvQWgLhf5MTCpfjS+p8BYPLvrP/o48Pnlw1Pxf8P688BKFbkUk5OuBQvgtY/3V9pBaX/oP58LX5Zf+xv18/5eSpAy1/k5IJL8aX6E+ExeBqSfrUlY4wxxhhjjDH2sz6iQoeL158X/8Xn712fJ6hLOTngUvyPrs8ZY4wxxhhjjDF2+T3TpeuTjyYlterwrw8q/6+y/ulBI/i/WvkvGdzxn1HGvzDwHuDiTxQA/JsLApwfyL/yKDb9JftKufDW+fuppad9AP8ZrfwzBpf5g4kxxhhjjDH2p7t00v/rn6vLVRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYN/RW/TuyX++tx+Q6VMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu2z+XwAAAP//dMcCKA==") 24.724236995s ago: executing program 8 (id=969): mknod(0x0, 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) 24.575220953s ago: executing program 8 (id=970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) 11.088520336s ago: executing program 6 (id=1011): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80) fcntl$setstatus(r3, 0x4, 0x2800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) ftruncate(0xffffffffffffffff, 0x2000009) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) socket$nl_route(0x10, 0x3, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300)={[{@test_dummy_encryption}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@sb}, {@commit={'commit', 0x3d, 0x5}}, {@nodelalloc}, {@max_batch_time}, {@abort}, {@data_err_abort}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5f1, &(0x7f0000001200)="$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") 9.034305315s ago: executing program 37 (id=970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) 9.009187167s ago: executing program 6 (id=1016): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x4, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0xfffc, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0xffff, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x2, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x80, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x9, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x4, 0xee3, 0x5, 0x1000000, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x0, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xa, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x7fe, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20482, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 7.654568496s ago: executing program 3 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c000280050001000000090024000280140001800800010000000109080002"], 0xa8}}, 0x0) 7.535871333s ago: executing program 3 (id=1020): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x20, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xb0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x5, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x6, {0x6, 0x7, "a7ea3163"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.957775386s ago: executing program 6 (id=1023): syslog(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r4, 0x3, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.84431579s ago: executing program 6 (id=1026): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ec0000000000000000a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06adb7b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02040000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f6505003cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096746a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140495fde085", @ANYRESOCT=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000240)=0x400001, 0x12) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 4.902246296s ago: executing program 5 (id=1032): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x4, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0xfffc, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0xffff, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x2, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x80, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x9, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x4, 0xee3, 0x5, 0x1000000, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x0, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xa, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x7fe, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20482, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 4.81223281s ago: executing program 9 (id=1033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 4.687782217s ago: executing program 3 (id=1034): r0 = socket$tipc(0x1e, 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4.454070281s ago: executing program 3 (id=1035): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x3, 0x5}]}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="54020000150001"], 0x254}}, 0x0) 4.442110132s ago: executing program 5 (id=1036): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.385418183s ago: executing program 3 (id=1037): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodiscard,whint_mode=user-based,discard_unit=section,no_heap,checkpoint=disable,resuid=', @ANYRESHEX, @ANYBLOB="2c6261636b67726f756e645f67633d6f6e2c6163746976655f6c6f67733d342c6a71666d743d7666736f9452e1be76091dd3667261676d656e743a626c6f636b2c646174615f666c7573682c686561702c6572726f72733d636f6e74696e75652c6e6f696e6c696e655f64656e74727915002d53bbb2eb667ba7ca5348c8e778ae413f2dfd4ef8d730df271bc0c4a7b1c02c1edf1193e0d7ccfc2e4c9f19b18a2a320b57a09925dca758f5882c6ec0d8a884326457e9ab"], 0x1, 0x550f, &(0x7f000000cf00)="$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") 3.358086625s ago: executing program 9 (id=1038): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113d00000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc9, &(0x7f0000000500)=""/201, 0x0, 0x3, '\x00', 0x0, @fallback=0x36}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="efdd0ec57a04", @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}, {[@timestamp_addr={0x44, 0x1c, 0x1a, 0x1, 0x4, [{@private=0xa010100, 0x1000}, {@empty, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x4}]}]}}, @echo={0x8, 0x0, 0x0, 0x5, 0x9}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfffb, 0x8, 0x5, 0x81, 0xc77d, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x20040840) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x570, 0x0, 0x388, 0xffffffff, 0x160, 0x388, 0x5e8, 0x5e8, 0xffffffff, 0x5e8, 0x5e8, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0x118, 0x160, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hbh={{0x48}, {0xb, 0x7, 0x1, [0x81, 0x5, 0xa4, 0x8000, 0x5, 0x8, 0x4, 0xe, 0x8ec6, 0x7, 0xff, 0xf, 0x100, 0x401, 0x6, 0x7ff], 0xd}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x131, 0x4, 0x1, [0x0, 0x9, 0x20, 0x0, 0x5, 0xc, 0x9, 0x6, 0x80, 0x10, 0x0, 0xffbf, 0x100, 0x7bf4, 0x0, 0x8], 0x6}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0xffffff00], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x91, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 1.36252755s ago: executing program 6 (id=1039): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 1.309486074s ago: executing program 5 (id=1040): r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r3 = dup(r2) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.L'}, 0x15) close_range(0xffffffffffffffff, r1, 0x2) sendmmsg$inet(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x400d5) read$FUSE(r3, &(0x7f0000004a40)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 1.20553611s ago: executing program 9 (id=1041): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', &(0x7f0000000080), 0x18) preadv2(r1, 0x0, 0x0, 0x5, 0x4, 0x19) 970.549763ms ago: executing program 9 (id=1042): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x800) 810.580543ms ago: executing program 5 (id=1043): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000002240)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000002200)={0x6}, 0x8) 790.214534ms ago: executing program 9 (id=1044): socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x0, 0x2, 0x6, 0xfffa}, 0x3d, [0x8000, 0x1, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x17f, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x800, 0x2003c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80000000, 0x8bd, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xffffffff, 0x5, 0x1000005, 0x0, 0xd, 0x4e4, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x200003, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x80004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x20008, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0x800bb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 598.180165ms ago: executing program 9 (id=1045): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x4, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0xfffc, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0xffff, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x2, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x80, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x9, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x4, 0xee3, 0x5, 0x1000000, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x0, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xa, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x7fe, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20482, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 591.786765ms ago: executing program 5 (id=1046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004169}, 0x10) 468.018432ms ago: executing program 5 (id=1047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 746.23µs ago: executing program 3 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x14, 0x0, &(0x7f0000000180)) sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000180)='./bus\x00', 0x1400037e) r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) 0s ago: executing program 6 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) unshare(0x64000600) kernel console output (not intermixed with test programs): 75] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.030802][ T6275] loop4: detected capacity change from 0 to 512 [ 233.057953][ T6277] loop3: detected capacity change from 0 to 512 [ 233.095249][ T6275] EXT4-fs (loop4): Invalid default hash set in the superblock [ 233.208071][ T6277] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 233.301247][ T6277] EXT4-fs (loop3): inline encryption not supported [ 233.378995][ T6277] EXT4-fs (loop3): Test dummy encryption mode enabled [ 233.425768][ T6277] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 233.488773][ T6277] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.718541][ T6277] EXT4-fs (loop3): 1 truncate cleaned up [ 233.724696][ T6277] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 234.028252][ T6294] loop4: detected capacity change from 0 to 512 [ 234.039170][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 234.116726][ T6294] EXT4-fs (loop4): Test dummy encryption mode enabled [ 234.166593][ T6294] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.238221][ T6294] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 234.434405][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.488933][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.569081][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.657825][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.700274][ T6300] loop4: detected capacity change from 0 to 128 [ 234.724867][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.764046][ T6300] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.817769][ T13] usb 1-1: config 0 descriptor?? [ 235.331748][ T13] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 235.449153][ T13] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 235.845187][ T6318] device syzkaller0 entered promiscuous mode [ 236.989208][ T4270] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 237.669009][ T4270] usb 1-1: device descriptor read/64, error -71 [ 237.949111][ T4270] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 237.971379][ T6349] loop4: detected capacity change from 0 to 512 [ 238.239302][ T4270] usb 1-1: device firmware changed [ 238.247933][ T4311] usb 1-1: USB disconnect, device number 4 [ 238.260444][ T6349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.319095][ T6349] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.484601][ T6332] loop3: detected capacity change from 0 to 40427 [ 238.509029][ T4311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 238.532804][ T6349] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 238.559312][ T6349] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 238.621588][ T6332] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.648046][ T6349] EXT4-fs (loop4): This should not happen!! Data will be lost [ 238.648046][ T6349] [ 238.733870][ T6349] EXT4-fs (loop4): Total free blocks count 0 [ 238.865319][ T6349] EXT4-fs (loop4): Free/Dirty block details [ 238.909090][ T6349] EXT4-fs (loop4): free_blocks=65280 [ 238.926985][ T6371] loop1: detected capacity change from 0 to 512 [ 239.062484][ T4311] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 239.250293][ T6349] EXT4-fs (loop4): dirty_blocks=33 [ 239.255847][ T6349] EXT4-fs (loop4): Block reservation details [ 239.378330][ T4311] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 239.532357][ T6349] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 239.569808][ T6371] EXT4-fs (loop1): 1 orphan inode deleted [ 239.575664][ T6371] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: none. [ 239.592590][ T4311] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 239.603174][ T4311] usb 1-1: config 220 has no interface number 2 [ 239.609576][ T4311] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 239.623417][ T4311] usb 1-1: config 220 interface 0 has no altsetting 0 [ 239.630780][ T4311] usb 1-1: config 220 interface 76 has no altsetting 0 [ 239.637779][ T4311] usb 1-1: config 220 interface 1 has no altsetting 0 [ 239.759462][ T6371] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.807451][ T4311] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 239.844254][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.885754][ T4311] usb 1-1: Product: syz [ 239.903204][ T4311] usb 1-1: Manufacturer: syz [ 239.907873][ T4311] usb 1-1: SerialNumber: syz [ 240.309431][ T4311] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 240.318022][ T4311] usb 1-1: No valid video chain found. [ 240.323738][ T4311] usb 1-1: selecting invalid altsetting 0 [ 240.850035][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 240.859760][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 240.878870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 240.888016][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 240.897220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 241.950305][ T4311] usb 1-1: selecting invalid altsetting 0 [ 241.956117][ T4311] usbtest: probe of 1-1:220.1 failed with error -22 [ 242.182546][ T4311] usb 1-1: USB disconnect, device number 5 [ 242.383121][ T6412] loop3: detected capacity change from 0 to 128 [ 242.429125][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 242.474234][ T6412] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 242.507817][ T6397] device syzkaller0 entered promiscuous mode [ 243.000850][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 243.028869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 243.037955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 243.047589][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 243.661350][ T6423] overlayfs: missing 'lowerdir' [ 243.672323][ T6421] binder: 6420:6421 ioctl c00c620f 200000000200 returned -22 [ 244.188281][ T6437] loop1: detected capacity change from 0 to 512 [ 244.342221][ T6437] EXT4-fs (loop1): Ignoring removed bh option [ 244.374650][ T6437] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.435023][ T6437] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 244.512931][ T6437] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 244.637308][ T6437] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 244.687832][ T6437] System zones: 0-2, 18-18, 34-35 [ 244.712971][ T6437] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,bh,barrier,,errors=continue. Quota mode: none. [ 245.730953][ T6449] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 246.882032][ T6468] loop4: detected capacity change from 0 to 128 [ 246.930152][ T6468] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.284609][ T6478] loop4: detected capacity change from 0 to 16 [ 248.059854][ T6478] erofs: (device loop4): mounted with root inode @ nid 36. [ 248.179688][ T6481] device syzkaller0 entered promiscuous mode [ 248.231935][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1146879 of nid 36 [ 248.327711][ T6487] attempt to access beyond end of device [ 248.327711][ T6487] loop4: rw=0, want=24, limit=16 [ 248.339026][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 279 @ nid 36 [ 248.621577][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1142783 of nid 36 [ 248.637120][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 278 @ nid 36 [ 248.646421][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1138687 of nid 36 [ 249.211749][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 277 @ nid 36 [ 249.221097][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1134591 of nid 36 [ 249.232192][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 276 @ nid 36 [ 249.242353][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1130495 of nid 36 [ 249.253470][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 275 @ nid 36 [ 249.275214][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1126399 of nid 36 [ 249.351051][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 274 @ nid 36 [ 249.372335][ T6490] kthread_run failed with err -4 [ 249.469030][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1122303 of nid 36 [ 249.511945][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 273 @ nid 36 [ 249.558019][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1118207 of nid 36 [ 249.595128][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 272 @ nid 36 [ 249.630072][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1114111 of nid 36 [ 249.761364][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 271 @ nid 36 [ 249.779063][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1110015 of nid 36 [ 249.793887][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 270 @ nid 36 [ 249.814182][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1105919 of nid 36 [ 249.851941][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 269 @ nid 36 [ 249.886438][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1101823 of nid 36 [ 249.913871][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 268 @ nid 36 [ 249.933428][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1097727 of nid 36 [ 249.948919][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 267 @ nid 36 [ 249.958128][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1093631 of nid 36 [ 250.160798][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 266 @ nid 36 [ 250.217970][ T6505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 250.248718][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1089535 of nid 36 [ 250.259637][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 265 @ nid 36 [ 250.269814][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1085439 of nid 36 [ 250.282726][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 264 @ nid 36 [ 250.299705][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1081343 of nid 36 [ 250.328067][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 263 @ nid 36 [ 250.350005][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1077247 of nid 36 [ 250.363490][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 262 @ nid 36 [ 250.374986][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1073151 of nid 36 [ 250.385294][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 261 @ nid 36 [ 250.409773][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1069055 of nid 36 [ 250.419986][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 260 @ nid 36 [ 250.429283][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1064959 of nid 36 [ 250.440359][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 259 @ nid 36 [ 250.450606][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1060863 of nid 36 [ 250.461531][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 258 @ nid 36 [ 250.523185][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1056767 of nid 36 [ 250.533677][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 257 @ nid 36 [ 250.644752][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1052671 of nid 36 [ 250.717427][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 256 @ nid 36 [ 250.758994][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1048575 of nid 36 [ 251.007602][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 255 @ nid 36 [ 251.040140][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1044479 of nid 36 [ 251.091042][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 254 @ nid 36 [ 251.100391][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1040383 of nid 36 [ 251.112770][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 253 @ nid 36 [ 251.122074][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1036287 of nid 36 [ 251.143183][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 252 @ nid 36 [ 251.168887][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1032191 of nid 36 [ 251.188932][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 251 @ nid 36 [ 251.198777][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1028095 of nid 36 [ 251.259409][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 250 @ nid 36 [ 251.315846][ T6520] loop1: detected capacity change from 0 to 128 [ 251.343759][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1023999 of nid 36 [ 251.419055][ T6520] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.428698][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 249 @ nid 36 [ 251.605380][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1019903 of nid 36 [ 251.678619][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 248 @ nid 36 [ 251.736154][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1015807 of nid 36 [ 251.799220][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 247 @ nid 36 [ 251.812357][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1011711 of nid 36 [ 251.823618][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 246 @ nid 36 [ 251.833084][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1007615 of nid 36 [ 251.845669][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 245 @ nid 36 [ 251.857201][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 1003519 of nid 36 [ 251.870940][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 244 @ nid 36 [ 251.880544][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 999423 of nid 36 [ 251.892501][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 243 @ nid 36 [ 251.902578][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 995327 of nid 36 [ 251.914688][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 242 @ nid 36 [ 251.931434][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 991231 of nid 36 [ 251.965391][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 241 @ nid 36 [ 251.984538][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 987135 of nid 36 [ 252.006686][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 240 @ nid 36 [ 252.028919][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 983039 of nid 36 [ 252.078660][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 239 @ nid 36 [ 252.128492][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 978943 of nid 36 [ 252.160286][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 238 @ nid 36 [ 253.039109][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 974847 of nid 36 [ 253.082413][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 237 @ nid 36 [ 253.092191][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 970751 of nid 36 [ 253.102976][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 236 @ nid 36 [ 253.148579][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 966655 of nid 36 [ 253.189086][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 235 @ nid 36 [ 253.198309][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 962559 of nid 36 [ 253.340450][ T6536] device syzkaller0 entered promiscuous mode [ 253.404663][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 234 @ nid 36 [ 254.599414][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 958463 of nid 36 [ 254.628929][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 233 @ nid 36 [ 254.638134][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 954367 of nid 36 [ 254.736333][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 232 @ nid 36 [ 254.822209][ T6478] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 114 of nid 36 [ 255.066129][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 230 @ nid 36 [ 255.076127][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 942079 of nid 36 [ 255.087329][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 229 @ nid 36 [ 255.223124][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 937983 of nid 36 [ 255.233587][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 228 @ nid 36 [ 255.242951][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 933887 of nid 36 [ 255.263855][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 227 @ nid 36 [ 255.448988][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 929791 of nid 36 [ 255.488987][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 226 @ nid 36 [ 255.518962][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 925695 of nid 36 [ 255.599681][ T6556] loop3: detected capacity change from 0 to 512 [ 256.322442][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.328784][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.369166][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 225 @ nid 36 [ 256.378366][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 921599 of nid 36 [ 256.456611][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 224 @ nid 36 [ 256.469996][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 917503 of nid 36 [ 256.480472][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 223 @ nid 36 [ 256.490956][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 913407 of nid 36 [ 256.501457][ T6556] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 256.514775][ T6556] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.526441][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 222 @ nid 36 [ 256.535785][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 909311 of nid 36 [ 256.550317][ T6555] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.602: bg 0: block 145: padding at end of block bitmap is not set [ 256.566746][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 221 @ nid 36 [ 256.576714][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 905215 of nid 36 [ 256.586865][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 220 @ nid 36 [ 256.838895][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 901119 of nid 36 [ 256.870856][ T6571] loop1: detected capacity change from 0 to 128 [ 256.887714][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 219 @ nid 36 [ 256.922304][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 897023 of nid 36 [ 256.953539][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 218 @ nid 36 [ 256.985376][ T6571] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.014689][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 892927 of nid 36 [ 257.065379][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 217 @ nid 36 [ 257.240221][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 888831 of nid 36 [ 257.250540][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 216 @ nid 36 [ 257.259879][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 884735 of nid 36 [ 257.278913][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 215 @ nid 36 [ 257.288103][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 880639 of nid 36 [ 257.528131][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 214 @ nid 36 [ 257.556948][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 876543 of nid 36 [ 257.590658][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 213 @ nid 36 [ 257.618678][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 872447 of nid 36 [ 257.650092][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 212 @ nid 36 [ 257.678100][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 868351 of nid 36 [ 257.712810][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 211 @ nid 36 [ 257.740706][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 864255 of nid 36 [ 257.773166][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 210 @ nid 36 [ 258.149042][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 860159 of nid 36 [ 258.193934][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 209 @ nid 36 [ 258.215083][ T6582] loop1: detected capacity change from 0 to 256 [ 258.239516][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 856063 of nid 36 [ 258.274320][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 208 @ nid 36 [ 258.287431][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 851967 of nid 36 [ 258.308960][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 207 @ nid 36 [ 258.369428][ T6582] FAT-fs (loop1): Directory bread(block 64) failed [ 258.388885][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 847871 of nid 36 [ 258.409118][ T6582] FAT-fs (loop1): Directory bread(block 65) failed [ 258.415799][ T6582] FAT-fs (loop1): Directory bread(block 66) failed [ 258.438936][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 206 @ nid 36 [ 258.448139][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 843775 of nid 36 [ 258.479055][ T6582] FAT-fs (loop1): Directory bread(block 67) failed [ 258.485736][ T6582] FAT-fs (loop1): Directory bread(block 68) failed [ 258.533880][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 258.559089][ T6582] FAT-fs (loop1): Directory bread(block 69) failed [ 258.566802][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 839679 of nid 36 [ 258.589190][ T6582] FAT-fs (loop1): Directory bread(block 70) failed [ 258.622672][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 204 @ nid 36 [ 258.634710][ T6582] FAT-fs (loop1): Directory bread(block 71) failed [ 258.660359][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 819199 of nid 36 [ 258.671273][ T6582] FAT-fs (loop1): Directory bread(block 72) failed [ 258.677982][ T6582] FAT-fs (loop1): Directory bread(block 73) failed [ 258.691201][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 199 @ nid 36 [ 258.767512][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 815103 of nid 36 [ 258.829173][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 198 @ nid 36 [ 258.857284][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 811007 of nid 36 [ 258.930259][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 259.230373][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 806911 of nid 36 [ 259.262084][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 196 @ nid 36 [ 259.306196][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 193 @ nid 36 [ 259.319722][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 259.409200][ T6478] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 93 of nid 36 [ 259.419139][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 188 @ nid 36 [ 259.428905][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 770047 of nid 36 [ 259.439190][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 187 @ nid 36 [ 259.448517][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 765951 of nid 36 [ 259.460998][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 186 @ nid 36 [ 259.470392][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 761855 of nid 36 [ 259.480652][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 185 @ nid 36 [ 259.490256][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 757759 of nid 36 [ 259.500453][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 184 @ nid 36 [ 259.509667][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 753663 of nid 36 [ 259.519834][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 183 @ nid 36 [ 259.529116][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 749567 of nid 36 [ 259.539303][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 182 @ nid 36 [ 259.548658][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 169 @ nid 36 [ 259.592798][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 259.700627][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 157 @ nid 36 [ 259.724533][ T6587] chnl_net:caif_netlink_parms(): no params data found [ 259.757731][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 156 @ nid 36 [ 259.799411][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 259.808609][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 259.904323][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 260.179173][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 260.191797][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 622591 of nid 36 [ 260.209288][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 151 @ nid 36 [ 260.239781][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 618495 of nid 36 [ 260.309084][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 150 @ nid 36 [ 260.318653][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 614399 of nid 36 [ 260.377219][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.5.616'. [ 260.416223][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 260.561645][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 610303 of nid 36 [ 260.607780][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 260.621376][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.638187][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.647633][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 145 @ nid 36 [ 260.667459][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 260.680231][ T6587] device bridge_slave_0 entered promiscuous mode [ 260.689231][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 524287 of nid 36 [ 260.700567][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 127 @ nid 36 [ 260.710144][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 520191 of nid 36 [ 260.721327][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 126 @ nid 36 [ 260.732202][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 516095 of nid 36 [ 260.744339][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 125 @ nid 36 [ 260.748308][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.761173][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 511999 of nid 36 [ 260.771986][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 260.778340][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 124 @ nid 36 [ 260.788230][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 507903 of nid 36 [ 260.798971][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 123 @ nid 36 [ 260.808342][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 503807 of nid 36 [ 260.820499][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 122 @ nid 36 [ 260.830070][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 499711 of nid 36 [ 260.841520][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 121 @ nid 36 [ 260.853461][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 495615 of nid 36 [ 260.864175][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 260.869686][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.874528][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 491519 of nid 36 [ 260.894073][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 119 @ nid 36 [ 260.903570][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 487423 of nid 36 [ 260.914341][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 118 @ nid 36 [ 260.925166][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 483327 of nid 36 [ 260.935963][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 117 @ nid 36 [ 260.942372][ T6587] device bridge_slave_1 entered promiscuous mode [ 260.945752][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 479231 of nid 36 [ 260.963878][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 116 @ nid 36 [ 260.974364][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 475135 of nid 36 [ 260.986805][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 115 @ nid 36 [ 260.996555][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 471039 of nid 36 [ 261.006978][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 114 @ nid 36 [ 261.016411][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 466943 of nid 36 [ 261.028333][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 113 @ nid 36 [ 261.033305][ T6592] loop3: detected capacity change from 0 to 40427 [ 261.039353][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 462847 of nid 36 [ 261.054370][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 112 @ nid 36 [ 261.063713][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 458751 of nid 36 [ 261.075809][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 261.085625][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 454655 of nid 36 [ 261.099041][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 261.108705][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 450559 of nid 36 [ 261.119517][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 261.133841][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 446463 of nid 36 [ 261.144717][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 261.154236][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 442367 of nid 36 [ 261.165353][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 261.175188][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 438271 of nid 36 [ 261.190590][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 261.199438][ T6592] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 261.207589][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 434175 of nid 36 [ 261.218498][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 105 @ nid 36 [ 261.229527][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 430079 of nid 36 [ 261.259227][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 104 @ nid 36 [ 261.268425][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 425983 of nid 36 [ 261.279013][ T6592] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 261.335843][ T6587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.352915][ T6587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.379124][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 103 @ nid 36 [ 261.392980][ T6613] loop1: detected capacity change from 0 to 128 [ 261.400118][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 421887 of nid 36 [ 261.400151][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 102 @ nid 36 [ 261.400171][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 417791 of nid 36 [ 261.400190][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 101 @ nid 36 [ 261.400208][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 413695 of nid 36 [ 261.400228][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 100 @ nid 36 [ 261.400247][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 409599 of nid 36 [ 261.400266][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 99 @ nid 36 [ 261.400285][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 405503 of nid 36 [ 261.400305][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 98 @ nid 36 [ 261.400323][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 401407 of nid 36 [ 261.400343][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 97 @ nid 36 [ 261.571254][ T6587] team0: Port device team_slave_0 added [ 261.580988][ T6613] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.603735][ T6587] team0: Port device team_slave_1 added [ 261.695782][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.726072][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.779117][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 397311 of nid 36 [ 261.803456][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 96 @ nid 36 [ 261.813664][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 393215 of nid 36 [ 261.888676][ T6587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.899220][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 95 @ nid 36 [ 261.899269][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 389119 of nid 36 [ 261.899662][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 94 @ nid 36 [ 262.007873][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.055525][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.099010][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 385023 of nid 36 [ 262.365914][ T6587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.373118][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 93 @ nid 36 [ 262.431384][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 380927 of nid 36 [ 262.498984][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 262.525955][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 91 @ nid 36 [ 262.578973][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 90 @ nid 36 [ 262.612235][ T6587] device hsr_slave_0 entered promiscuous mode [ 262.619221][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 89 @ nid 36 [ 262.628454][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 88 @ nid 36 [ 262.658896][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 262.679510][ T6587] device hsr_slave_1 entered promiscuous mode [ 262.700953][ T6587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.709115][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 262.721787][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 356351 of nid 36 [ 262.731794][ T6587] Cannot create hsr debugfs directory [ 262.839350][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 262.858993][ T5472] Bluetooth: hci4: command 0x041b tx timeout [ 262.949084][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 352255 of nid 36 [ 262.959566][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 262.969308][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 262.997977][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 263.039174][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 263.098599][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 263.148933][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 339967 of nid 36 [ 263.197748][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 263.238941][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 335871 of nid 36 [ 263.288644][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 263.318945][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 331775 of nid 36 [ 263.348293][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 263.378898][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 327679 of nid 36 [ 263.415627][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 263.446047][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 323583 of nid 36 [ 263.492170][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 263.522130][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 319487 of nid 36 [ 263.563111][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 263.594291][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 263.658317][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 263.686393][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 294911 of nid 36 [ 263.708478][ T6625] loop3: detected capacity change from 0 to 40427 [ 263.728571][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 263.737980][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 263.752075][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 263.761522][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 286719 of nid 36 [ 263.772208][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 263.772248][ T6625] F2FS-fs (loop3): invalid crc value [ 263.787078][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 282623 of nid 36 [ 263.801661][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 263.828266][ T6625] F2FS-fs (loop3): Found nat_bits in checkpoint [ 263.844963][ T6631] chnl_net:caif_netlink_parms(): no params data found [ 263.852139][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 263.889404][ T6478] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 26 of nid 36 [ 263.959432][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 263.985055][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 221183 of nid 36 [ 264.019999][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 264.041563][ T6625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 264.088998][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 264.141036][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 264.249239][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 212991 of nid 36 [ 264.307141][ T4193] attempt to access beyond end of device [ 264.307141][ T4193] loop3: rw=2049, want=45104, limit=40427 [ 264.326206][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.333760][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 264.359516][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.367946][ T6631] device bridge_slave_0 entered promiscuous mode [ 264.396023][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 264.431257][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.438466][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 264.458993][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.467284][ T6631] device bridge_slave_1 entered promiscuous mode [ 264.478990][ T6478] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 23 of nid 36 [ 264.488544][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 264.522879][ T6587] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.529208][ T6478] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 23 of nid 36 [ 264.557377][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 264.587756][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 264.608256][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 264.651202][ T6587] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.663534][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 192511 of nid 36 [ 264.693764][ T6631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.703013][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 264.737598][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 188415 of nid 36 [ 264.750119][ T6631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.780783][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 264.791260][ T6587] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.808969][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 184319 of nid 36 [ 264.856372][ T6587] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.881446][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 264.899274][ T6478] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 20 of nid 36 [ 264.913043][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 264.929455][ T1108] Bluetooth: hci6: command 0x0409 tx timeout [ 264.935836][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 264.960813][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 264.978957][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 265.009172][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 167935 of nid 36 [ 265.042852][ T6631] team0: Port device team_slave_0 added [ 265.049168][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 265.058265][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 265.140751][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 265.143700][ T6631] team0: Port device team_slave_1 added [ 265.198976][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 265.236905][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 265.285600][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.295550][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 90111 of nid 36 [ 265.305636][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.305670][ T6631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.375011][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.415792][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 265.446399][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 86015 of nid 36 [ 265.516173][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 265.581915][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.609420][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 81919 of nid 36 [ 265.629854][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 265.665011][ T6631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.677480][ T6478] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 77823 of nid 36 [ 265.708101][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 265.752530][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 265.813076][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 11 @ nid 36 [ 265.849683][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 265.859313][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 265.868466][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 265.878382][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 36 [ 265.887602][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 36 [ 265.891106][ T6631] device hsr_slave_0 entered promiscuous mode [ 265.897592][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 36 [ 265.912416][ T6478] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 265.925220][ T6631] device hsr_slave_1 entered promiscuous mode [ 265.934455][ T6478] attempt to access beyond end of device [ 265.934455][ T6478] loop4: rw=524288, want=1049280, limit=16 [ 265.947927][ T6631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.966655][ T6631] Cannot create hsr debugfs directory [ 265.979110][ T6478] attempt to access beyond end of device [ 265.979110][ T6478] loop4: rw=524288, want=1049288, limit=16 [ 266.004613][ T6478] attempt to access beyond end of device [ 266.004613][ T6478] loop4: rw=524288, want=392, limit=16 [ 266.017004][ T6478] attempt to access beyond end of device [ 266.017004][ T6478] loop4: rw=524288, want=400, limit=16 [ 266.029028][ T6478] attempt to access beyond end of device [ 266.029028][ T6478] loop4: rw=524288, want=67108896, limit=16 [ 266.042443][ T6478] attempt to access beyond end of device [ 266.042443][ T6478] loop4: rw=524288, want=736, limit=16 [ 266.079388][ T6478] attempt to access beyond end of device [ 266.079388][ T6478] loop4: rw=524288, want=744, limit=16 [ 266.099019][ T6587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.123497][ T6478] attempt to access beyond end of device [ 266.123497][ T6478] loop4: rw=524288, want=525160, limit=16 [ 266.239572][ T6478] attempt to access beyond end of device [ 266.239572][ T6478] loop4: rw=524288, want=525168, limit=16 [ 266.324175][ T6587] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.565253][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.578306][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.587346][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.596633][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.611938][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.619117][ T5671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.670945][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.692577][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.711677][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.718973][ T5671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.735304][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.753579][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.775682][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.795125][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.814660][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.832637][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.867003][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.629'. [ 266.956228][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.988383][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.009750][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 267.018054][ T1108] Bluetooth: hci6: command 0x041b tx timeout [ 267.076839][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.107690][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.225249][ T6587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.246300][ T6694] loop1: detected capacity change from 0 to 128 [ 267.275480][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.310975][ T6694] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.352767][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.369910][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.805523][ T6698] loop3: detected capacity change from 0 to 40427 [ 268.965865][ T6698] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 268.989603][ T6698] F2FS-fs (loop3): invalid crc value [ 269.089371][ T1108] Bluetooth: hci6: command 0x040f tx timeout [ 269.117910][ T6698] F2FS-fs (loop3): Found nat_bits in checkpoint [ 269.281551][ T6698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 270.857841][ T9] device hsr_slave_0 left promiscuous mode [ 270.897136][ T9] device hsr_slave_1 left promiscuous mode [ 270.961062][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.008270][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.037864][ T9] device bridge_slave_1 left promiscuous mode [ 271.049606][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.614593][ T4228] Bluetooth: hci6: command 0x0419 tx timeout [ 273.272353][ T9] device bridge_slave_0 left promiscuous mode [ 273.278653][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.564336][ T9] team0 (unregistering): Port device team_slave_1 removed [ 273.596070][ T9] team0 (unregistering): Port device team_slave_0 removed [ 273.624053][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.832023][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.954768][ T9] bond0 (unregistering): Released all slaves [ 274.374733][ T6631] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.416522][ T6631] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 274.451845][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.638'. [ 274.542721][ T6631] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 274.596024][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.623426][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.649286][ T6631] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 274.664672][ T6587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.981274][ T6631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.062956][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.085300][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.172408][ T6631] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.240436][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.272719][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.313500][ T5675] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.321107][ T5675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.396395][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.446231][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.508089][ T5675] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.515510][ T5675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.545011][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.565856][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.642386][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.662530][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.675410][ T26] audit: type=1326 audit(1769536577.637:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe563115eb9 code=0x0 [ 275.711335][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.762438][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.792493][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.840387][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.873107][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.909697][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.939421][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.959457][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.997801][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.014965][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.094794][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.127257][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.147784][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.185035][ T6587] device veth0_vlan entered promiscuous mode [ 276.376485][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.388510][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.407291][ T6587] device veth1_vlan entered promiscuous mode [ 277.285093][ T6587] device veth0_macvtap entered promiscuous mode [ 277.369443][ T6587] device veth1_macvtap entered promiscuous mode [ 277.650701][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.707036][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.765433][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.827678][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.880008][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.941953][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.996437][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.063353][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.125183][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.346093][ T4270] Bluetooth: hci5: command 0x0406 tx timeout [ 278.352116][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.352157][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.352168][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.352182][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.352194][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.352208][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.352223][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.352237][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.513044][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.526451][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.603495][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.647602][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.677400][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.709606][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 278.744749][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.790093][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.850078][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.886568][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.003263][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.107630][ T6587] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.154902][ T6587] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.180962][ T6587] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.208942][ T6587] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.301546][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.314604][ T5679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.389977][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.487862][ T5681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.529711][ T5681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.594492][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.604517][ T5685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.618017][ T5685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.680416][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.910823][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 280.237318][ T6835] loop6: detected capacity change from 0 to 512 [ 280.289858][ T6835] EXT4-fs (loop6): Invalid default hash set in the superblock [ 280.368017][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.407786][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.505101][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.539708][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.576408][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.627131][ T5671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.654623][ T6631] device veth0_vlan entered promiscuous mode [ 280.729699][ T6631] device veth1_vlan entered promiscuous mode [ 280.915022][ T6631] device veth0_macvtap entered promiscuous mode [ 280.922724][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.953710][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.070358][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.159706][ T6631] device veth1_macvtap entered promiscuous mode [ 281.248421][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.341629][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.511732][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.522408][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.532456][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.543674][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.553585][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.564067][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.598713][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.654960][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.742230][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.822250][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.883732][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.942152][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.991830][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.039009][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.080242][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.118897][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.168854][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.215900][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.268200][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.319143][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.361302][ T6631] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.421130][ T6631] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.457794][ T6631] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.497391][ T6631] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.758457][ T5681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.791265][ T5681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.903235][ T5681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.945897][ T5681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.211819][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.299916][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 283.322673][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.351753][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.391445][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.446590][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.466484][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.469076][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.659'. [ 286.799195][ T6894] capability: warning: `syz.6.660' uses deprecated v2 capabilities in a way that may be insecure [ 287.260375][ T6901] loop6: detected capacity change from 0 to 512 [ 287.315634][ T6904] loop7: detected capacity change from 0 to 512 [ 287.353048][ T6901] EXT4-fs (loop6): Invalid default hash set in the superblock [ 287.458475][ T6910] loop3: detected capacity change from 0 to 512 [ 288.022976][ T6910] EXT4-fs (loop3): orphan cleanup on readonly fs [ 288.037252][ T6910] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.663: bg 0: block 248: padding at end of block bitmap is not set [ 288.065332][ T6910] Quota error (device loop3): write_blk: dquota write failed [ 288.073376][ T6910] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 288.083554][ T6910] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.663: Failed to acquire dquot type 1 [ 288.101050][ T6910] EXT4-fs (loop3): 1 truncate cleaned up [ 288.117899][ T6904] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.662: inode has both inline data and extents flags [ 288.141791][ T6910] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 288.487037][ T6904] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.662: couldn't read orphan inode 15 (err -117) [ 288.603017][ T6904] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 289.168922][ T6912] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 290.348894][ T26] audit: type=1326 audit(1769536591.697:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6903 comm="syz.7.662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac00262eb9 code=0x0 [ 291.758403][ T6944] loop6: detected capacity change from 0 to 512 [ 291.802291][ T6944] EXT4-fs (loop6): inline encryption not supported [ 291.831249][ T6947] loop7: detected capacity change from 0 to 512 [ 291.886368][ T6947] EXT4-fs (loop7): 1 truncate cleaned up [ 291.892536][ T6944] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 291.909311][ T6947] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 291.930751][ T6944] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.671: invalid indirect mapped block 2683928664 (level 1) [ 291.979266][ T6944] EXT4-fs (loop6): 1 truncate cleaned up [ 291.984975][ T6944] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,init_itable=0x0000000000000b8f,nodiscard,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback. [ 293.253273][ T6947] EXT4-fs error (device loop7): xattr_find_entry:297: inode #12: comm syz.7.669: corrupted xattr entries [ 293.374109][ T6947] EXT4-fs (loop7): Remounting filesystem read-only [ 294.658281][ T6990] loop6: detected capacity change from 0 to 512 [ 296.362857][ T6990] EXT4-fs (loop6): orphan cleanup on readonly fs [ 296.371524][ T6990] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.678: bg 0: block 248: padding at end of block bitmap is not set [ 296.401763][ T6990] Quota error (device loop6): write_blk: dquota write failed [ 296.409770][ T6990] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 296.419931][ T6990] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.678: Failed to acquire dquot type 1 [ 296.439510][ T6990] EXT4-fs (loop6): 1 truncate cleaned up [ 296.463388][ T6990] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 298.219951][ T6994] chnl_net:caif_netlink_parms(): no params data found [ 298.496171][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.557582][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.625436][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 298.650078][ T6994] device bridge_slave_0 entered promiscuous mode [ 298.663765][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.719976][ T7031] loop7: detected capacity change from 0 to 512 [ 298.848091][ T7015] loop6: detected capacity change from 0 to 8192 [ 298.869684][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.085034][ T6994] device bridge_slave_1 entered promiscuous mode [ 299.523655][ T7031] EXT4-fs (loop7): Invalid default hash set in the superblock [ 299.548197][ T7015] process 'syz.6.682' launched './file2' with NULL argv: empty string added [ 299.679133][ T7015] handle_bad_sector: 17 callbacks suppressed [ 299.679153][ T7015] attempt to access beyond end of device [ 299.679153][ T7015] loop6: rw=0, want=57848, limit=8192 [ 299.840919][ T7015] Buffer I/O error on dev loop6, logical block 57847, async page read [ 299.886579][ T6994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.915438][ T26] audit: type=1800 audit(1769536601.877:10): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.682" name="file2" dev="loop6" ino=1048624 res=0 errno=0 [ 300.056046][ T6994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.499682][ T6994] team0: Port device team_slave_0 added [ 300.596608][ T6994] team0: Port device team_slave_1 added [ 300.680239][ T5681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.691175][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 301.062311][ T5681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.971770][ T7053] ipt_CLUSTERIP: Please specify destination IP [ 302.333227][ T5681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.438675][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.451846][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.500272][ T6994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.567843][ T5681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.808066][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 302.825404][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.845114][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.088242][ T6994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.613476][ T6994] device hsr_slave_0 entered promiscuous mode [ 303.665644][ T6994] device hsr_slave_1 entered promiscuous mode [ 303.865847][ T7089] device syzkaller0 entered promiscuous mode [ 304.034920][ T7092] xt_hashlimit: size too large, truncated to 1048576 [ 304.617906][ T6994] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 304.706590][ T6994] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 304.826501][ T6994] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 304.849067][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 304.875425][ T6994] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 305.749337][ T6994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.918214][ T6994] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.259059][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.277571][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.338380][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.435083][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.470664][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.477978][ T5685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.532811][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.569489][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.596827][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.604228][ T5685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.619266][ T7137] loop7: detected capacity change from 0 to 4096 [ 306.647482][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.697140][ T7137] EXT4-fs (loop7): Test dummy encryption mode enabled [ 306.727732][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.739326][ T7137] EXT4-fs (loop7): Can't change test_dummy_encryption on remount [ 306.767448][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.807816][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.848168][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.925202][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.946864][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.983627][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.050499][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.093426][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.149886][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.232134][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.260418][ T7142] loop7: detected capacity change from 0 to 512 [ 307.301286][ T6994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.405797][ T7142] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 307.420540][ T7142] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.435307][ T7142] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.706: bg 0: block 145: padding at end of block bitmap is not set [ 307.772673][ T7162] device syzkaller0 entered promiscuous mode [ 307.849324][ T5681] device hsr_slave_0 left promiscuous mode [ 307.863324][ T5681] device hsr_slave_1 left promiscuous mode [ 307.882337][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.912384][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.942140][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.956517][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.972397][ T5681] device bridge_slave_1 left promiscuous mode [ 307.986523][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.005931][ T5681] device bridge_slave_0 left promiscuous mode [ 308.028048][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.060639][ T5681] device veth1_macvtap left promiscuous mode [ 308.078030][ T5681] device veth0_macvtap left promiscuous mode [ 308.111882][ T5681] device veth1_vlan left promiscuous mode [ 308.129345][ T5681] device veth0_vlan left promiscuous mode [ 309.294344][ T5681] team0 (unregistering): Port device team_slave_1 removed [ 309.359239][ T5681] team0 (unregistering): Port device team_slave_0 removed [ 309.416058][ T5681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.473683][ T5681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.822661][ T5681] bond0 (unregistering): Released all slaves [ 310.841289][ T6994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.247071][ T7197] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.460985][ T7200] loop7: detected capacity change from 0 to 256 [ 311.477743][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.495694][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 312.070852][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 312.102776][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 312.196927][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 312.295198][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 312.368591][ T7216] capability: warning: `syz.7.720' uses 32-bit capabilities (legacy support in use) [ 312.385056][ T6994] device veth0_vlan entered promiscuous mode [ 312.418761][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 312.499550][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 312.546394][ T6994] device veth1_vlan entered promiscuous mode [ 312.653902][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 312.673331][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 312.706732][ T6994] device veth0_macvtap entered promiscuous mode [ 312.773652][ T7224] device syzkaller0 entered promiscuous mode [ 312.815771][ T6994] device veth1_macvtap entered promiscuous mode [ 312.983351][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.008112][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.035701][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.077054][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.103810][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.126743][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.148886][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.170601][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.188941][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 313.206392][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.229510][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.256821][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.279246][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 313.300772][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.339408][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 313.357226][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 313.380413][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.421849][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.459635][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.495427][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.516959][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.017341][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.042195][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.055932][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.089884][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.111329][ T13] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 314.135609][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.153282][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.176732][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.198085][ T13] usb 4-1: config 0 descriptor?? [ 314.227119][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.303480][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.409728][ T6994] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.490321][ T6994] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.529682][ T6994] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.569490][ T6994] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.368929][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.325850][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.370413][ T13] usbhid 4-1:0.0: can't add hid device: -71 [ 316.383498][ T13] usbhid: probe of 4-1:0.0 failed with error -71 [ 316.557880][ T13] usb 4-1: USB disconnect, device number 2 [ 316.768476][ T5671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.787321][ T5671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.867553][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.895590][ T5685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.924099][ T5685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.998780][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 317.173444][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.179909][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.953801][ T7335] device syzkaller0 entered promiscuous mode [ 321.315123][ T7306] loop3: detected capacity change from 0 to 40427 [ 321.373678][ T7306] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 321.417047][ T7306] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 321.479763][ T7306] F2FS-fs (loop3): invalid crc value [ 321.533829][ T7306] F2FS-fs (loop3): Found nat_bits in checkpoint [ 321.840609][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.755'. [ 321.954987][ T7364] loop7: detected capacity change from 0 to 4096 [ 322.018670][ T7364] EXT4-fs (loop7): Test dummy encryption mode enabled [ 322.130275][ T7364] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 322.168118][ T7364] System zones: 0-5 [ 322.372282][ T7364] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 322.764979][ T26] audit: type=1804 audit(1769536624.727:11): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.754" name="/newroot/33/file0/file0/file0" dev="loop7" ino=13 res=1 errno=0 [ 322.807621][ T7381] netlink: 'syz.6.757': attribute type 12 has an invalid length. [ 323.082574][ T26] audit: type=1800 audit(1769536624.887:12): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.754" name="file0" dev="loop7" ino=13 res=0 errno=0 [ 323.132267][ T26] audit: type=1804 audit(1769536625.097:13): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.754" name="/newroot/33/file0/file0/file0" dev="loop7" ino=13 res=1 errno=0 [ 325.502189][ T7407] device syzkaller0 entered promiscuous mode [ 325.697374][ T7415] loop3: detected capacity change from 0 to 256 [ 326.426848][ T7415] FAT-fs (loop3): Directory bread(block 64) failed [ 326.448542][ T7415] FAT-fs (loop3): Directory bread(block 65) failed [ 326.519063][ T7415] FAT-fs (loop3): Directory bread(block 66) failed [ 326.557289][ T7415] FAT-fs (loop3): Directory bread(block 67) failed [ 326.589310][ T7415] FAT-fs (loop3): Directory bread(block 68) failed [ 326.595927][ T7415] FAT-fs (loop3): Directory bread(block 69) failed [ 326.654340][ T7415] FAT-fs (loop3): Directory bread(block 70) failed [ 326.676445][ T7415] FAT-fs (loop3): Directory bread(block 71) failed [ 326.705263][ T7415] FAT-fs (loop3): Directory bread(block 72) failed [ 326.721281][ T7415] FAT-fs (loop3): Directory bread(block 73) failed [ 326.873024][ T7415] attempt to access beyond end of device [ 326.873024][ T7415] loop3: rw=524288, want=1196, limit=256 [ 326.920130][ T7415] attempt to access beyond end of device [ 326.920130][ T7415] loop3: rw=0, want=1196, limit=256 [ 326.968121][ T26] audit: type=1800 audit(1769536628.927:14): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.764" name="file1" dev="loop3" ino=1048627 res=0 errno=0 [ 326.989998][ T7415] attempt to access beyond end of device [ 326.989998][ T7415] loop3: rw=0, want=1196, limit=256 [ 328.551274][ T7464] netlink: 'syz.8.772': attribute type 3 has an invalid length. [ 329.578012][ T7472] device syzkaller0 entered promiscuous mode [ 332.140556][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.781'. [ 332.631705][ T7501] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 334.578947][ T4270] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 334.724528][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 334.921782][ T7540] device syzkaller0 entered promiscuous mode [ 335.320165][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.795'. [ 335.499057][ T4270] usb 9-1: unable to get BOS descriptor or descriptor too short [ 335.620170][ T4270] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 335.628456][ T4270] usb 9-1: can't read configurations, error -71 [ 335.684205][ T7565] loop8: detected capacity change from 0 to 512 [ 335.877401][ T7565] EXT4-fs (loop8): orphan cleanup on readonly fs [ 335.902796][ T7565] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.798: bg 0: block 248: padding at end of block bitmap is not set [ 335.923798][ T7565] Quota error (device loop8): write_blk: dquota write failed [ 335.931763][ T7565] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 335.942066][ T7565] EXT4-fs error (device loop8): ext4_acquire_dquot:6234: comm syz.8.798: Failed to acquire dquot type 1 [ 335.971654][ T7565] EXT4-fs (loop8): 1 truncate cleaned up [ 335.987190][ T7565] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 336.895881][ T7532] loop6: detected capacity change from 0 to 40427 [ 338.114528][ T7592] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.129467][ T7592] loop3: detected capacity change from 0 to 512 [ 338.157346][ T7594] device syzkaller0 entered promiscuous mode [ 338.239824][ T7592] EXT4-fs (loop3): Invalid default hash set in the superblock [ 341.915972][ T7624] loop6: detected capacity change from 0 to 40427 [ 342.159044][ T7624] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 342.177338][ T7624] F2FS-fs (loop6): invalid crc value [ 342.351096][ T7624] F2FS-fs (loop6): Found nat_bits in checkpoint [ 343.368965][ T7624] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 344.184303][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.8.810'. [ 345.936369][ T7657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.268595][ T7683] overlayfs: failed to resolve './file0': -2 [ 349.247535][ T7734] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.260023][ T7734] FAT-fs (loop11): unable to read boot sector [ 349.924470][ T7735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.939929][ T7735] loop8: detected capacity change from 0 to 512 [ 349.946708][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 350.073595][ T7735] EXT4-fs (loop8): Invalid default hash set in the superblock [ 350.353870][ T7742] device ip6gretap0 entered promiscuous mode [ 351.066411][ T7737] device ip6gretap0 left promiscuous mode [ 351.132039][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 351.381579][ T7752] loop6: detected capacity change from 0 to 512 [ 351.390024][ T4228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.429252][ T4228] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 352.438264][ T4228] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 352.593788][ T4228] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.688037][ T4228] usb 4-1: string descriptor 0 read error: -71 [ 353.734374][ T4228] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.746253][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.112433][ T4228] usb 4-1: can't set config #1, error -71 [ 354.171954][ T4228] usb 4-1: USB disconnect, device number 3 [ 354.286032][ T7752] EXT4-fs: failed to create workqueue [ 354.291857][ T7752] EXT4-fs (loop6): mount failed [ 354.399956][ T7762] overlayfs: failed to resolve './file2': -2 [ 355.503448][ T7790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.518452][ T7790] loop3: detected capacity change from 0 to 512 [ 355.674365][ T7791] loop6: detected capacity change from 0 to 512 [ 355.682543][ T7790] EXT4-fs (loop3): Invalid default hash set in the superblock [ 355.818008][ T7791] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 355.831607][ T7791] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.848186][ T7791] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.851: bg 0: block 145: padding at end of block bitmap is not set [ 356.276259][ T7809] loop3: detected capacity change from 0 to 512 [ 356.484326][ T7813] overlayfs: failed to resolve './file2': -2 [ 356.763760][ T7809] EXT4-fs (loop3): orphan cleanup on readonly fs [ 356.911595][ T7809] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 357.788222][ T7809] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 358.113307][ T7809] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.856: attempt to clear invalid blocks 2 len 1 [ 358.320219][ T7809] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.856: invalid indirect mapped block 1819239214 (level 0) [ 359.155634][ T7835] loop6: detected capacity change from 0 to 512 [ 359.911240][ T7835] EXT4-fs (loop6): orphan cleanup on readonly fs [ 359.927927][ T7835] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.861: bg 0: block 248: padding at end of block bitmap is not set [ 359.959762][ T7835] Quota error (device loop6): write_blk: dquota write failed [ 359.967696][ T7835] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 359.977912][ T7835] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.861: Failed to acquire dquot type 1 [ 360.003271][ T7835] EXT4-fs (loop6): 1 truncate cleaned up [ 360.011457][ T7835] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 360.123941][ T7809] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.856: invalid indirect mapped block 1819239214 (level 1) [ 360.457689][ T7809] EXT4-fs (loop3): 1 truncate cleaned up [ 360.555034][ T7809] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000004,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 362.682601][ T7864] overlayfs: failed to resolve './file2': -2 [ 362.762282][ T7870] loop3: detected capacity change from 0 to 256 [ 363.276572][ T7870] FAT-fs (loop3): Directory bread(block 64) failed [ 363.347112][ T7870] FAT-fs (loop3): Directory bread(block 65) failed [ 363.399288][ T7870] FAT-fs (loop3): Directory bread(block 66) failed [ 363.405982][ T7870] FAT-fs (loop3): Directory bread(block 67) failed [ 363.540639][ T7882] loop6: detected capacity change from 0 to 2048 [ 363.559098][ T7870] FAT-fs (loop3): Directory bread(block 68) failed [ 363.565716][ T7870] FAT-fs (loop3): Directory bread(block 69) failed [ 363.621121][ T7870] FAT-fs (loop3): Directory bread(block 70) failed [ 363.675578][ T7870] FAT-fs (loop3): Directory bread(block 71) failed [ 363.689052][ T7870] FAT-fs (loop3): Directory bread(block 72) failed [ 363.695669][ T7870] FAT-fs (loop3): Directory bread(block 73) failed [ 365.497972][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 365.526448][ T7882] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.004011][ T7913] device ip6gretap0 entered promiscuous mode [ 366.311572][ T7911] device ip6gretap0 left promiscuous mode [ 366.398261][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.520865][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.605799][ T7889] device bridge_slave_0 entered promiscuous mode [ 366.673961][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.753403][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.832840][ T7889] device bridge_slave_1 entered promiscuous mode [ 366.868499][ T4245] Bluetooth: hci2: command 0x0409 tx timeout [ 366.960706][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.025241][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.041898][ T7934] loop3: detected capacity change from 0 to 512 [ 368.021493][ T7889] team0: Port device team_slave_0 added [ 368.086917][ T7889] team0: Port device team_slave_1 added [ 368.108999][ T4270] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 368.341480][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.349064][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.381380][ T4270] usb 6-1: Using ep0 maxpacket: 16 [ 368.467846][ T7889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.525758][ T4270] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 368.536003][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.548875][ T4270] usb 6-1: config 0 has no interface number 0 [ 368.568918][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.598855][ T4270] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.627200][ T4270] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.656752][ T4270] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 368.681121][ T7889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.706838][ T4270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.759348][ T4270] usb 6-1: config 0 descriptor?? [ 369.346075][ T4245] Bluetooth: hci2: command 0x041b tx timeout [ 369.392220][ T7889] device hsr_slave_0 entered promiscuous mode [ 369.428380][ T7889] device hsr_slave_1 entered promiscuous mode [ 369.458074][ T4270] uclogic 0003:28BD:0071.0005: pen parameters not found [ 369.502874][ T4270] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring [ 369.586985][ T7889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.615419][ T7889] Cannot create hsr debugfs directory [ 369.695422][ T4311] usb 6-1: USB disconnect, device number 2 [ 370.718033][ T7974] device ip6gretap0 entered promiscuous mode [ 370.785095][ T7974] device ip6gretap0 left promiscuous mode [ 371.043653][ T7889] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 371.073541][ T7889] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 371.136872][ T7889] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 371.169626][ T7889] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 371.419877][ T4173] Bluetooth: hci2: command 0x040f tx timeout [ 372.309912][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.325120][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.389799][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.404651][ T8017] binder: 8014:8017 ioctl c0306201 2000000004c0 returned -22 [ 372.439471][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.534875][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.576357][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.619835][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.627013][ T5691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.734936][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.795708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.214217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.237696][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.244887][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.255721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.281484][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 373.463396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.489996][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 373.509966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.601198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.663949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.720444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.760731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.783663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.837193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.896781][ T7889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.936302][ T7889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.020839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.041426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.762331][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.776132][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.679426][ T7889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.377544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.405444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.801744][ T8109] loop3: detected capacity change from 0 to 1024 [ 377.948250][ T7889] device veth0_vlan entered promiscuous mode [ 378.037091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.084945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.137749][ T8109] EXT4-fs (loop3): barriers disabled [ 378.151418][ T8109] JBD2: no valid journal superblock found [ 378.157234][ T8109] EXT4-fs (loop3): error loading journal [ 378.179700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.239678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.281974][ T7889] device veth1_vlan entered promiscuous mode [ 378.424591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 378.443639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 378.479574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.522222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.551666][ T7889] device veth0_macvtap entered promiscuous mode [ 378.613867][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.620253][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.643903][ T7889] device veth1_macvtap entered promiscuous mode [ 378.716058][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.767526][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.812006][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.824906][ T8139] loop3: detected capacity change from 0 to 256 [ 378.853290][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.903557][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.940352][ T8139] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 378.969407][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.007917][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.070914][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.133601][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.180876][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.228421][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.269045][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.313959][ T7889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.349255][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.357628][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.437347][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.477886][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.544008][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.575118][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.615960][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.646692][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.677364][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.720560][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.741827][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.758424][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.776797][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.781016][ T8150] loop6: detected capacity change from 0 to 512 [ 379.798370][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.822006][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.842618][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.865336][ T7889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.918919][ T8150] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 379.928214][ T8150] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 379.959786][ T8150] EXT4-fs (loop6): Unrecognized mount option "seclabel" or missing value [ 379.978738][ T8145] device syzkaller0 entered promiscuous mode [ 380.020287][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.050022][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.082855][ T7889] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.107366][ T7889] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.138713][ T7889] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.171613][ T7889] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.530162][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.592026][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.601073][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.669274][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.692821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.776706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 381.000597][ T8178] netlink: 36 bytes leftover after parsing attributes in process `syz.6.940'. [ 381.842619][ T8184] loop3: detected capacity change from 0 to 512 [ 381.883733][ T8186] loop6: detected capacity change from 0 to 512 [ 381.916878][ T8184] EXT4-fs warning (device loop3): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 381.969193][ T8184] EXT4-fs warning (device loop3): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132787, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop15 [ 382.054578][ T8186] EXT4-fs (loop6): Ignoring removed oldalloc option [ 382.128127][ T8194] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 383.717643][ T8186] EXT4-fs error (device loop6): ext4_iget_extra_inode:4566: inode #15: comm syz.6.945: corrupted in-inode xattr [ 383.769627][ T8186] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.945: couldn't read orphan inode 15 (err -117) [ 383.778459][ T8186] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,abort,nombcache,noload,init_itable,max_batch_time=0x0000000000000001,oldalloc,inode_readahead_blks=0x0000000004000000,jqfmt=vfsold,nobarrier,,errors=continue. Quota mode: none. [ 385.162888][ T8205] device syzkaller0 entered promiscuous mode [ 385.980732][ T5681] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.200301][ T8240] loop3: detected capacity change from 0 to 256 [ 386.225895][ T8242] loop9: detected capacity change from 0 to 512 [ 386.319565][ T8242] EXT4-fs (loop9): inline encryption not supported [ 386.333477][ T8240] FAT-fs (loop3): Directory bread(block 64) failed [ 386.349567][ T8240] FAT-fs (loop3): Directory bread(block 65) failed [ 386.358550][ T8240] FAT-fs (loop3): Directory bread(block 66) failed [ 386.376086][ T8240] FAT-fs (loop3): Directory bread(block 67) failed [ 386.388006][ T5681] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.424224][ T8242] EXT4-fs (loop9): orphan cleanup on readonly fs [ 386.433078][ T8240] FAT-fs (loop3): Directory bread(block 68) failed [ 386.468695][ T8242] EXT4-fs warning (device loop9): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 386.483685][ T8240] FAT-fs (loop3): Directory bread(block 69) failed [ 386.483847][ T8240] FAT-fs (loop3): Directory bread(block 70) failed [ 386.497242][ T8240] FAT-fs (loop3): Directory bread(block 71) failed [ 386.504060][ T8240] FAT-fs (loop3): Directory bread(block 72) failed [ 386.511226][ T8240] FAT-fs (loop3): Directory bread(block 73) failed [ 386.633163][ T8242] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 386.651534][ T5681] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.677066][ T8242] EXT4-fs error (device loop9): ext4_ext_check_inode:501: inode #13: comm syz.9.957: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 386.783345][ T8242] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.957: couldn't read orphan inode 13 (err -117) [ 386.796248][ T8242] EXT4-fs (loop9): mounted filesystem without journal. Opts: sysvgroups,inlinecrypt,lazytime,grpquota,grpjquota=,journal_ioprio=0x0000000000000003,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 386.849549][ T8242] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.957: deleted inode referenced: 12 [ 386.873450][ T5681] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.660400][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 389.677871][ T8284] loop9: detected capacity change from 0 to 512 [ 390.078011][ T8284] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 390.093094][ T8284] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 390.115199][ T8282] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.966: bg 0: block 145: padding at end of block bitmap is not set [ 391.494285][ T8324] loop3: detected capacity change from 0 to 512 [ 391.519612][ T8312] tipc: Started in network mode [ 391.524561][ T8312] tipc: Node identity ac141439, cluster identity 4711 [ 391.540850][ T8312] tipc: Enabled bearer , priority 10 [ 391.557646][ T8324] EXT4-fs warning (device loop3): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 391.610296][ T8324] EXT4-fs warning (device loop3): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132787, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop15 [ 392.589804][ T8344] loop9: detected capacity change from 0 to 512 [ 392.596843][ T8345] loop3: detected capacity change from 0 to 256 [ 393.698868][ T4245] tipc: Node number set to 2886997049 [ 393.821237][ T8345] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 394.177537][ T8344] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nobarrier,noload,,errors=continue. Quota mode: writeback. [ 394.191163][ T8344] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.216732][ T8341] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.985: bg 0: block 145: padding at end of block bitmap is not set [ 394.232495][ T8341] EXT4-fs error (device loop9): ext4_xattr_block_set:2194: inode #15: comm syz.9.985: bad block 33 [ 398.173275][ T8398] loop6: detected capacity change from 0 to 512 [ 400.410657][ T8398] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,norecovery,,errors=continue. Quota mode: writeback. [ 400.801841][ T8398] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 402.655847][ T5681] device hsr_slave_0 left promiscuous mode [ 402.999508][ T5681] device hsr_slave_1 left promiscuous mode [ 403.091566][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.179300][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.212071][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.226924][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.246462][ T5681] device bridge_slave_1 left promiscuous mode [ 403.292875][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.346140][ T5681] device bridge_slave_0 left promiscuous mode [ 403.409090][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.679005][ T4245] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 403.758407][ T8473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 403.854699][ T8473] loop6: detected capacity change from 0 to 1024 [ 404.088948][ T4245] usb 4-1: Using ep0 maxpacket: 32 [ 404.212082][ T4245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.361256][ T4245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.515745][ T5681] device veth1_macvtap left promiscuous mode [ 404.522072][ T5681] device veth0_macvtap left promiscuous mode [ 404.528191][ T5681] device veth1_vlan left promiscuous mode [ 404.533365][ T8473] EXT4-fs (loop6): Test dummy encryption mode enabled [ 404.534607][ T5681] device veth0_vlan left promiscuous mode [ 404.612840][ T8473] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #4: comm syz.6.1011: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 404.631311][ T8473] EXT4-fs error (device loop6): ext4_quota_enable:6445: comm syz.6.1011: Bad quota inode: 4, type: 1 [ 404.643191][ T8473] EXT4-fs warning (device loop6): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 404.662041][ T8473] EXT4-fs (loop6): mount failed [ 404.688054][ T4245] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 404.730968][ T4245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.795816][ T4245] usb 4-1: config 0 descriptor?? [ 404.840451][ T4245] hub 4-1:0.0: USB hub found [ 405.049068][ T4245] hub 4-1:0.0: 1 port detected [ 405.422047][ T4245] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 405.429488][ T4245] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 405.569271][ T4245] usbhid 4-1:0.0: can't add hid device: -71 [ 405.582015][ T4245] usbhid: probe of 4-1:0.0 failed with error -71 [ 405.783356][ T4245] usb 4-1: USB disconnect, device number 4 [ 406.463836][ T5681] team0 (unregistering): Port device team_slave_1 removed [ 406.496829][ T5681] team0 (unregistering): Port device team_slave_0 removed [ 406.570043][ T5681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.600308][ T8502] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1019'. [ 406.628886][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'. [ 406.629184][ T5681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.771289][ T8507] raw_sendmsg: syz.5.1021 forgot to set AF_INET. Fix it! [ 406.989338][ T4245] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 407.006986][ T5681] bond0 (unregistering): Released all slaves [ 407.082231][ T8469] device syzkaller0 entered promiscuous mode [ 407.256825][ T4245] usb 4-1: Using ep0 maxpacket: 8 [ 407.509141][ T4245] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 407.528374][ T4245] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.535289][ T4245] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 407.655553][ T4245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.954169][ T4245] usb 4-1: config 0 descriptor?? [ 408.401002][ T8528] loop9: detected capacity change from 0 to 256 [ 408.449187][ T1108] Bluetooth: hci6: command 0x0409 tx timeout [ 408.535496][ T8528] FAT-fs (loop9): Directory bread(block 64) failed [ 408.552477][ T8495] chnl_net:caif_netlink_parms(): no params data found [ 408.584320][ T8528] FAT-fs (loop9): Directory bread(block 65) failed [ 408.614598][ T8528] FAT-fs (loop9): Directory bread(block 66) failed [ 408.638918][ T8528] FAT-fs (loop9): Directory bread(block 67) failed [ 408.679007][ T8528] FAT-fs (loop9): Directory bread(block 68) failed [ 408.719180][ T8528] FAT-fs (loop9): Directory bread(block 69) failed [ 408.725870][ T8528] FAT-fs (loop9): Directory bread(block 70) failed [ 408.732979][ T8528] FAT-fs (loop9): Directory bread(block 71) failed [ 408.739965][ T8528] FAT-fs (loop9): Directory bread(block 72) failed [ 408.746649][ T8528] FAT-fs (loop9): Directory bread(block 73) failed [ 408.812389][ T4245] uclogic 0003:28BD:0042.0006: item fetching failed at offset 3/5 [ 408.829327][ T4245] uclogic 0003:28BD:0042.0006: parse failed [ 408.837550][ T4245] uclogic: probe of 0003:28BD:0042.0006 failed with error -22 [ 409.013604][ T4245] usb 4-1: USB disconnect, device number 5 [ 409.065861][ T8495] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.159225][ T8495] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.212587][ T8495] device bridge_slave_0 entered promiscuous mode [ 409.279231][ T8495] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.286559][ T8495] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.319696][ T8495] device bridge_slave_1 entered promiscuous mode [ 409.441184][ T8553] device syzkaller0 entered promiscuous mode [ 409.472519][ T8557] device syzkaller0 entered promiscuous mode [ 409.500524][ T8495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.657224][ T8495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.686503][ T8526] loop6: detected capacity change from 0 to 40427 [ 409.750165][ T8526] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 409.758018][ T8526] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 409.891894][ T8569] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1035'. [ 409.894003][ T8495] team0: Port device team_slave_0 added [ 409.909912][ T8526] F2FS-fs (loop6): invalid crc value [ 410.097557][ T8574] binder: BINDER_SET_CONTEXT_MGR already set [ 410.104380][ T8574] binder: 8566:8574 ioctl 4018620d 200000000040 returned -16 [ 410.284049][ T8526] F2FS-fs (loop6): Found nat_bits in checkpoint [ 410.528894][ T4270] Bluetooth: hci6: command 0x041b tx timeout [ 410.622888][ T8495] team0: Port device team_slave_1 added [ 411.014765][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.092770][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.352890][ T8495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.374894][ T8526] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 412.279452][ T8526] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 412.391173][ T8495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.398287][ T8495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.609007][ T7] Bluetooth: hci6: command 0x040f tx timeout [ 412.628999][ T8495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.033772][ T8495] device hsr_slave_0 entered promiscuous mode [ 413.092073][ T8495] device hsr_slave_1 entered promiscuous mode [ 413.159050][ T8495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.166772][ T8495] Cannot create hsr debugfs directory [ 413.293063][ T26] audit: type=1326 audit(1769536715.257:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.9.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ef03feb9 code=0x7ffc0000 [ 413.372258][ T26] audit: type=1326 audit(1769536715.307:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.9.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fc3ef03feb9 code=0x7ffc0000 [ 413.538390][ T26] audit: type=1326 audit(1769536715.307:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8599 comm="syz.9.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ef03feb9 code=0x7ffc0000 [ 414.086036][ T8615] device syzkaller0 entered promiscuous mode [ 414.128674][ T8619] device syzkaller0 entered promiscuous mode [ 415.100478][ T27] INFO: task syz.4.582:6478 blocked for more than 143 seconds. [ 415.267217][ T27] Not tainted syzkaller #0 [ 415.296715][ T1108] Bluetooth: hci6: command 0x0419 tx timeout [ 415.301135][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.325122][ T27] task:syz.4.582 state:D stack:25264 pid: 6478 ppid: 4184 flags:0x00004006 [ 415.336006][ T27] Call Trace: [ 415.346166][ T27] [ 415.350385][ T27] __schedule+0x11ef/0x43c0 [ 415.355034][ T27] ? verify_lock_unused+0x140/0x140 [ 415.365828][ T27] ? release_firmware_map_entry+0x190/0x190 [ 415.374097][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.391253][ T27] ? blk_check_plugged+0x250/0x250 [ 415.408856][ T27] ? lock_chain_count+0x20/0x20 [ 415.430699][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 415.458571][ T27] schedule+0x11b/0x1e0 [ 415.478147][ T27] io_schedule+0x7c/0xd0 [ 415.498826][ T27] wait_on_page_bit_common+0x83b/0xe50 [ 415.504386][ T27] ? wait_on_page_bit+0x50/0x50 [ 415.518830][ T27] ? rcu_lock_release+0x20/0x20 [ 415.523771][ T27] ? bio_add_page+0x2d6/0x460 [ 415.528498][ T27] z_erofs_runqueue+0x700/0x1940 [ 415.549067][ T27] ? z_erofs_do_read_page+0x26c0/0x26c0 [ 415.555044][ T27] ? send_mds_reconnect+0x1990/0x1990 [ 415.560547][ T27] z_erofs_readahead+0xbcc/0x1140 [ 415.565625][ T27] ? z_erofs_readpage+0x740/0x740 [ 415.571230][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.577287][ T27] ? local_lock_release+0x97/0x170 [ 415.583239][ T27] read_pages+0x175/0x930 [ 415.592995][ T27] ? page_cache_ra_unbounded+0x940/0x940 [ 415.605160][ T27] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 415.655363][ T27] page_cache_ra_unbounded+0x838/0x940 [ 415.673654][ T27] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 415.703693][ T27] force_page_cache_ra+0x3e5/0x440 [ 415.722682][ T27] generic_fadvise+0x530/0x7f0 [ 415.732951][ T27] ? dump_task+0x600/0x600 [ 415.737540][ T27] ? __fdget+0x18b/0x210 [ 415.747678][ T27] __x64_sys_fadvise64+0x139/0x180 [ 415.764848][ T27] do_syscall_64+0x4c/0xa0 [ 415.772192][ T27] ? clear_bhb_loop+0x30/0x80 [ 415.777278][ T27] ? clear_bhb_loop+0x30/0x80 [ 415.788653][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.798395][ T27] RIP: 0033:0x7fb302261eb9 [ 415.823771][ T27] RSP: 002b:00007fb3004bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 415.842914][ T27] RAX: ffffffffffffffda RBX: 00007fb3024dcfa0 RCX: 00007fb302261eb9 [ 415.868271][ T27] RDX: 0000000000117102 RSI: 0000000000000000 RDI: 0000000000000004 [ 415.887066][ T27] RBP: 00007fb3022cfc1f R08: 0000000000000000 R09: 0000000000000000 [ 415.915886][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 415.954893][ T27] R13: 00007fb3024dd038 R14: 00007fb3024dcfa0 R15: 00007ffc4c15fe28 [ 415.974666][ T27] [ 415.989016][ T27] [ 415.989016][ T27] Showing all locks held in the system: [ 416.017506][ T27] 3 locks held by kworker/0:0/7: [ 416.034765][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 416.057162][ T27] #1: ffffc90000cc7d00 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 416.089800][ T27] #2: ffff88801ffe0400 (&nsim_dev->port_list_lock#2){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x56/0xb40 [ 416.114973][ T27] 3 locks held by kworker/u4:0/9: [ 416.128106][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 416.152836][ T27] #1: ffffc90000ce7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 416.177070][ T27] #2: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 416.191193][ T27] 1 lock held by khungtaskd/27: [ 416.196237][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 416.206127][ T27] 2 locks held by kworker/1:2/2856: [ 416.211681][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 416.222557][ T27] #1: ffffc9000c41fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 416.237900][ T27] 1 lock held by dhcpcd/3853: [ 416.244085][ T27] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x258/0x1a70 [ 416.263240][ T27] 2 locks held by getty/3940: [ 416.274523][ T27] #0: ffff88802bd6c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 416.287394][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 416.307289][ T27] 3 locks held by kworker/1:5/4245: [ 416.312926][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 416.333988][ T27] #1: ffffc9000320fd00 ((work_completion)(&pool->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 416.353452][ T27] #2: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: xp_release_deferred+0x25/0x2b0 [ 416.365482][ T27] 3 locks held by kworker/0:7/4270: [ 416.372275][ T27] #0: ffff88802b063d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 416.384337][ T27] #1: ffffc9000333fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 416.397803][ T27] #2: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xca/0x1540 [ 416.407523][ T27] 4 locks held by kworker/u4:11/4866: [ 416.413282][ T27] 4 locks held by kworker/u4:20/5681: [ 416.418696][ T27] #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 416.429603][ T27] #1: ffffc9000460fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 416.442879][ T27] #2: ffffffff8d4308d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 416.453624][ T27] #3: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit+0xe/0x20 [ 416.463188][ T27] 1 lock held by syz.4.582/6478: [ 416.470354][ T27] #0: ffff888072c8c320 (mapping.invalidate_lock#4){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x198/0x940 [ 416.482107][ T27] 7 locks held by syz-executor/8495: [ 416.487432][ T27] #0: ffff88807f6b4460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 416.496736][ T27] #1: ffff8880607c5088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e5/0x4c0 [ 416.506858][ T27] #2: ffff8880227cacb8 (kn->active#284){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x208/0x4c0 [ 416.524917][ T27] #3: ffffffff8cd79ca8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd3/0x3a0 [ 416.536934][ T27] #4: ffff8880602c7178 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb0/0x750 [ 416.559446][ T27] #5: ffff88801ffe0400 (&nsim_dev->port_list_lock#2){+.+.}-{3:3}, at: nsim_dev_reload_destroy+0x115/0x240 [ 416.581347][ T27] #6: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x88f/0xa70 [ 416.596580][ T27] 2 locks held by syz.9.1045/8615: [ 416.604518][ T27] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 416.622913][ T27] #1: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 416.638678][ T27] 1 lock held by syz.5.1047/8619: [ 416.647810][ T27] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 416.667770][ T27] 1 lock held by syz.3.1048/8626: [ 416.676108][ T27] #0: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 416.687514][ T27] 1 lock held by syz.3.1048/8633: [ 416.692903][ T27] 2 locks held by syz.6.1049/8637: [ 416.698046][ T27] #0: ffffffff8d4308d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x32e/0x5b0 [ 416.707989][ T27] #1: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x240 [ 416.718513][ T27] [ 416.726057][ T27] ============================================= [ 416.726057][ T27] [ 416.756105][ T27] NMI backtrace for cpu 0 [ 416.760561][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 416.767878][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.777974][ T27] Call Trace: [ 416.781374][ T27] [ 416.784337][ T27] dump_stack_lvl+0x188/0x250 [ 416.789058][ T27] ? show_regs_print_info+0x20/0x20 [ 416.794294][ T27] ? load_image+0x400/0x400 [ 416.798835][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 416.804295][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 416.809457][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 416.814434][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 416.820627][ T27] ? _printk+0xda/0x130 [ 416.824818][ T27] ? load_image+0x400/0x400 [ 416.829361][ T27] ? load_image+0x400/0x400 [ 416.833907][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 416.840020][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 416.846046][ T27] watchdog+0xe0f/0xe50 [ 416.850246][ T27] kthread+0x436/0x520 [ 416.854449][ T27] ? hungtask_pm_notify+0x40/0x40 [ 416.859569][ T27] ? kthread_blkcg+0xd0/0xd0 [ 416.864194][ T27] ret_from_fork+0x1f/0x30 [ 416.868655][ T27] [ 416.872722][ T27] Sending NMI from CPU 0 to CPUs 1: [ 416.878757][ C1] NMI backtrace for cpu 1 [ 416.878770][ C1] CPU: 1 PID: 4171 Comm: syz-executor Not tainted syzkaller #0 [ 416.878789][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.878799][ C1] RIP: 0010:__kasan_check_read+0x6/0x10 [ 416.878828][ C1] Code: 41 5f 5d c3 48 c7 c7 1b c5 de 8b eb 0a 48 c7 c7 3b d8 c4 8b 48 89 de e8 88 1c f3 07 31 ed eb d7 00 00 cc cc 89 f6 48 8b 0c 24 <31> d2 e9 43 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 [ 416.878844][ C1] RSP: 0018:ffffc9000310fed8 EFLAGS: 00000046 [ 416.878862][ C1] RAX: ffffffff817f4dc5 RBX: 0000000000000000 RCX: ffffffff817f4ddd [ 416.878875][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d89d8a8 [ 416.878887][ C1] RBP: ffffc9000310ff48 R08: ffffffff8d89d8af R09: 1ffffffff1b13b15 [ 416.878900][ C1] R10: dffffc0000000000 R11: fffffbfff1b13b16 R12: 0000000000000000 [ 416.878912][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 416.878923][ C1] FS: 00005555692ae500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 416.878939][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.878950][ C1] CR2: 00005555836684e8 CR3: 000000007b941000 CR4: 00000000003506e0 [ 416.878966][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 416.878976][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 416.878986][ C1] Call Trace: [ 416.878991][ C1] [ 416.879015][ C1] trace_hardirqs_off_finish+0x9d/0x1f0 [ 416.879038][ C1] syscall_enter_from_user_mode+0x1c/0x70 [ 416.879057][ C1] do_syscall_64+0x24/0xa0 [ 416.879079][ C1] ? clear_bhb_loop+0x30/0x80 [ 416.879095][ C1] ? clear_bhb_loop+0x30/0x80 [ 416.879111][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.879127][ C1] RIP: 0033:0x7fa3867d70d7 [ 416.879141][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 416.879155][ C1] RSP: 002b:00007ffc7d877bf0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 416.879171][ C1] RAX: ffffffffffffffda RBX: 00005555692ae500 RCX: 00007fa3867d70d7 [ 416.879183][ C1] RDX: 00007ffc7d877c30 RSI: 0000000000000000 RDI: 0000000000000000 [ 416.879193][ C1] RBP: 00007ffc7d878110 R08: 0000000000000000 R09: 0000000000000000 [ 416.879203][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 416.879212][ C1] R13: 00007ffc7d877c6c R14: 00007ffc7d877d00 R15: 0000000000000000 [ 416.879231][ C1] [ 416.926894][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 417.132758][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 417.139989][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.150078][ T27] Call Trace: [ 417.153425][ T27] [ 417.156377][ T27] dump_stack_lvl+0x188/0x250 [ 417.161180][ T27] ? show_regs_print_info+0x20/0x20 [ 417.166498][ T27] ? load_image+0x400/0x400 [ 417.171043][ T27] panic+0x2e5/0x810 [ 417.174968][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 417.180632][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 417.185167][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 417.190759][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 417.196952][ T27] watchdog+0xe4e/0xe50 [ 417.201149][ T27] kthread+0x436/0x520 [ 417.205247][ T27] ? hungtask_pm_notify+0x40/0x40 [ 417.210300][ T27] ? kthread_blkcg+0xd0/0xd0 [ 417.214925][ T27] ret_from_fork+0x1f/0x30 [ 417.219404][ T27] [ 417.222704][ T27] Kernel Offset: disabled [ 417.227069][ T27] Rebooting in 86400 seconds..