last executing test programs: 7m15.260798171s ago: executing program 32 (id=1459): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f000000b0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000200)={0x3, 0xffffffff, 0x3b7c, 0x4, 0x40000d, 0xc}) 5m38.109251384s ago: executing program 33 (id=1944): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB]) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020}, 0x2020) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ed8755b5dc4e0e000c58ea00000000000600", 0x0, 0xfffffffe, 0x2, 0x2}, 0x3c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)="b2d311af94b883a7c917af570ae7b1e843a0a788f69d7891ade96769393efc8056a6f002e30c8d84568d737b56856a562c77400d2763599c42c39c2c346641f570afdc53d009685de5793fa1d5eece360b7f7647069f8c0e53a28126b06a6b5e797d92fc70f0bbf7cf41ac7523191c55decb8e836ebd8eba368cc270864fb703f797122b8690d189cd617620b20d0a9b8796") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x185b2000) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80100, 0x9c) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, 0x0, 0x54) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002e00090027bd700000000000040000004500118031f9e05e2f826cfc31dc2af824704f63dac994ce01dc7224e5479795b50d9015743a8b755e02e490bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0000000acc652da811ec41bc62fcd1ece064007233e937838ec6dd310243bb25df3f3da4035c973b36db7eee41680503e9a85319b6cde33bdcbed0f57b013b4c015dd521107a0df866951fe5769bce047be17f072233a9eb9244fd8d9ecd9ec5c3acf4bf2d9cd7209000000c3eb0e5d2c2ae6227b44019352854167792e"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3m49.890189802s ago: executing program 6 (id=2416): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/20, &(0x7f00000000c0)=0x14) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10) 3m48.929003977s ago: executing program 6 (id=2422): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}, {0x8002}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3m48.428110117s ago: executing program 6 (id=2428): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/4089, 0xff9}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/134, 0x86}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f0000000500)=""/135, 0x87}], 0x5}}], 0x1, 0x10020, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 3m48.181553628s ago: executing program 6 (id=2433): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01000000 \\00000', 0x11) 3m48.128445916s ago: executing program 5 (id=2434): syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3m47.348562049s ago: executing program 6 (id=2435): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 3m47.060034628s ago: executing program 5 (id=2439): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m46.75872386s ago: executing program 5 (id=2442): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0xff}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3m46.738322586s ago: executing program 6 (id=2443): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000700)="b068", 0x2) 3m46.567417648s ago: executing program 5 (id=2448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="0f013b9a004800004600c4e193d04436e966b846008ee80f21c40f2204c4c3697c6500d336f01964740a0fc71cbc0f011b", 0x31}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m45.401281446s ago: executing program 5 (id=2454): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 3m45.010963416s ago: executing program 5 (id=2459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e008900000dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0000ff00060000f814a74cb3addda147fb682a6bf9d594503d1009f073dab11b65a5923005721bdb241e8d85776cd4e532d4543f13358194a29ef2", 0x3b}], 0x2) 3m41.10850418s ago: executing program 4 (id=2491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 3m40.963884251s ago: executing program 4 (id=2492): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000002fc0), 0xd203, 0x801) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BLKROSET(r2, 0x125d, 0x0) 3m39.997812986s ago: executing program 4 (id=2498): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000440)="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", 0x1000, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x0}, &(0x7f00000014c0)="454b0e2463d83c68d8f7dccf14caffeccae1cd629a9d892b05b19c7099237a5ab1ac3301c321d6ba31221a57372056e05c65c5053dc042b20273cedf633994571cfc7790fa82ca11a95bdd37beb862e7ad94e228a87e0395c079d33903835dd7a57c6fd47243d5d8b0f59a724d7f121823dd97697845c92401e128aa5fe777e0a351b9f9aec3b2cac335d315a0d775434eb1f1b6522fe6054bc92535e55b846fe5bda132c5", 0xa5, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000015c0)={r4, r6, r7}, &(0x7f0000001600)=""/57, 0x39, &(0x7f0000001780)={&(0x7f0000001640)={'hmac(sha1)\x00'}, &(0x7f0000001680)="c128b587a7180cf50c8411645c760ced68964b996c1fab233739df89bf6a86e793ce1be58677374255d3763cc9876e29ce0f295345467b5d094a5c1bd47355b3af85f778e0e2bf85e2de4ba02d6746a79f070c3c07a21c202724ada8b6efa998a738ab1dc56858281781a502069ee7c58d9752c0a8f3a7ae080f2969bf76e9d7b0341dd0f1a8ec7d3a7f0176ce6928f8e6850335fbb60996c6b1ef7656348ea37417dd97c661200b716e3892fe3547922f873e37d2ca616fc090188e91f5e52ba551ff2f8f3f83ea", 0xc8}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 3m39.740523155s ago: executing program 4 (id=2501): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) 3m39.639847372s ago: executing program 4 (id=2502): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 3m39.417344756s ago: executing program 4 (id=2504): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r1, 0xe, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r5, 0x409, 0x8) fallocate(r5, 0x3, 0x29c00000000000, 0x20000) 3m31.632645985s ago: executing program 34 (id=2443): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000700)="b068", 0x2) 3m29.692337889s ago: executing program 35 (id=2459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e008900000dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0000ff00060000f814a74cb3addda147fb682a6bf9d594503d1009f073dab11b65a5923005721bdb241e8d85776cd4e532d4543f13358194a29ef2", 0x3b}], 0x2) 3m24.31451335s ago: executing program 36 (id=2504): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r1, 0xe, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r5, 0x409, 0x8) fallocate(r5, 0x3, 0x29c00000000000, 0x20000) 1m58.932631965s ago: executing program 1 (id=3222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m58.551683986s ago: executing program 1 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x148}}, 0x0) 1m58.222984771s ago: executing program 2 (id=3233): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x4, 0x204, 0xb8, 0x1000, r2}, &(0x7f0000000340)=0x10) 1m58.207540208s ago: executing program 1 (id=3234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) write(0xffffffffffffffff, &(0x7f0000000240)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 1m57.815758393s ago: executing program 1 (id=3238): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000008000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x38}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m57.679207273s ago: executing program 1 (id=3241): prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 1m57.194268654s ago: executing program 2 (id=3246): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0xf}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0xfffffffd, 0x8, 0x9, 0x9, 0x9, 0x20000f5, 0x200, 0x6, 0x5, 0x10001, 0xfff, 0x9, 0x1, 0x9, 0x10000, 0x5, 0x6, 0xff, 0x4, 0x8, 0x9, 0xe6c1, 0x2, 0x66, 0x6, 0x5, 0x73, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x7, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x8, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x4, 0x60df8662, 0x2, 0x5, 0x6, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff3, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665191e5, 0x5, 0x7, 0x5, 0x4, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0xd, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xfffeffff, 0x5, 0x0, 0xaf, 0x9, 0xb, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f89, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x3, 0x6, 0x2, 0x80000003, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m57.002050325s ago: executing program 1 (id=3249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x3, 0xe, 0xa, 0x3, 0x7, 0xb, 0xe, 0xc, 0x10, 0xc, 0x6, 0xe, 0x6, 0xc, 0xd, 0x8], 0x0, [0x400, 0x8cf, 0x400, 0x0, 0x0, 0x0, 0xb, 0x5, 0x7, 0x2, 0x8, 0x0, 0x9, 0x9, 0x8, 0xc], [0xff7f, 0xffff, 0x3, 0xfff, 0x5, 0xa4e, 0x5, 0x80, 0x200, 0x401, 0x9, 0x9d, 0x0, 0x0, 0x1, 0x4]}}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 1m56.90654678s ago: executing program 2 (id=3250): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000640)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@stripe={'stripe', 0x3d, 0xb9}}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, 0x0, 0x0, 0xe7c) 1m56.537705946s ago: executing program 2 (id=3255): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000440)="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", 0x1000, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x0}, &(0x7f00000014c0)="454b0e2463d83c68d8f7dccf14caffeccae1cd629a9d892b05b19c7099237a5ab1ac3301c321d6ba31221a57372056e05c65c5053dc042b20273cedf633994571cfc7790fa82ca11a95bdd37beb862e7ad94e228a87e0395c079d33903835dd7a57c6fd47243d5d8b0f59a724d7f121823dd97697845c92401e128aa5fe777e0a351b9f9aec3b2cac335d315a0d775434eb1f1b6522fe6054bc92535e55b846fe5bda132c50c2277308c2523cf7e6306143221a04e3e2e33f7167ab32bd49e769351686828dba2ce34c7e896aa3dda3cb79d825405555fa519f3a4", 0xdb, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000015c0)={r4, r6, r7}, &(0x7f0000001600)=""/57, 0x39, &(0x7f0000001780)={&(0x7f0000001640)={'hmac(sha1)\x00'}, &(0x7f0000001680)="c128b587a7180cf50c8411645c760ced68964b996c1fab233739df89bf6a86e793ce1be58677374255d3763cc9876e29ce0f295345467b5d094a5c1bd47355b3af85f778e0e2bf85e2de4ba02d6746a79f070c3c07a21c202724ada8b6efa998a738ab1dc56858281781a502069ee7c58d9752c0a8f3a7ae080f2969bf76e9d7b0341dd0f1a8ec7d3a7f0176ce6928f8e6850335fbb60996c6b1ef7656348ea37417dd97c661200b716e3892fe3547922f873e37d2ca616fc090188e", 0xbc}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m56.148646935s ago: executing program 2 (id=3259): prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 1m55.88725457s ago: executing program 2 (id=3261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYBLOB="81"], 0x9) 1m41.911444216s ago: executing program 37 (id=3249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x3, 0xe, 0xa, 0x3, 0x7, 0xb, 0xe, 0xc, 0x10, 0xc, 0x6, 0xe, 0x6, 0xc, 0xd, 0x8], 0x0, [0x400, 0x8cf, 0x400, 0x0, 0x0, 0x0, 0xb, 0x5, 0x7, 0x2, 0x8, 0x0, 0x9, 0x9, 0x8, 0xc], [0xff7f, 0xffff, 0x3, 0xfff, 0x5, 0xa4e, 0x5, 0x80, 0x200, 0x401, 0x9, 0x9d, 0x0, 0x0, 0x1, 0x4]}}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 1m40.822506482s ago: executing program 38 (id=3261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYBLOB="81"], 0x9) 52.508076918s ago: executing program 8 (id=3630): setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 52.259649018s ago: executing program 7 (id=3633): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe2$9p(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) io_uring_enter(r0, 0x2219, 0x35a5, 0x16, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x9) 52.258337284s ago: executing program 8 (id=3635): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xe, 0xb}, {0xc, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d1fd14f401004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 51.677656256s ago: executing program 7 (id=3638): mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1,port=2049,sec=sys\x00') 51.607017574s ago: executing program 7 (id=3639): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3}, &(0x7f00000006c0), &(0x7f0000000780)='%+9llu \x00'}, 0x20) 50.979934069s ago: executing program 7 (id=3642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$tipc(0x1e, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 x00000000ffffffff00000', 0x38) 50.970631802s ago: executing program 8 (id=3643): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000023c0)=[{0x6, 0x25, 0xd, 0x7}, {0x9, 0x4b, 0x9, 0x3}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) 50.734973214s ago: executing program 8 (id=3645): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x40, 0x3a8, 0x1, 0x6, 0x6e8]}, &(0x7f0000000340)=0x54) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000140)="2e1221b23bb601c476d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c060000850875090000000008", 0x13}, {&(0x7f0000000400)="be5802a8515d2d2a5b68", 0xa}], 0x3) 50.639968092s ago: executing program 7 (id=3646): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 49.996527561s ago: executing program 7 (id=3649): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240), 0x0, 0x6400, 0x0, 0x3) 48.808163137s ago: executing program 8 (id=3659): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 47.734596039s ago: executing program 8 (id=3666): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000023c0)=[{0x6, 0x25, 0xd, 0x7}, {0x9, 0x4b, 0x9, 0x3}]}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) 34.93918214s ago: executing program 39 (id=3649): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240), 0x0, 0x6400, 0x0, 0x3) 31.970428156s ago: executing program 40 (id=3666): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000023c0)=[{0x6, 0x25, 0xd, 0x7}, {0x9, 0x4b, 0x9, 0x3}]}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) 19.839449405s ago: executing program 3 (id=3774): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x2d0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0xffffff00, 'wg0\x00', 'syzkaller0\x00', {}, {0xff}, 0x84, 0x1, 0x20}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @gre_key=0x1}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key=0x3}}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'bond_slave_1\x00', {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r2, &(0x7f0000000800), 0x0}, 0x20) 19.776438992s ago: executing program 3 (id=3775): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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") openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x4001, 0x0, 0x13}, 0x18) 19.421844347s ago: executing program 3 (id=3776): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000300)="09000000ffffffffb79e08da88a8a5a186dd6fbde6d75d2074904159267b95021ad33b196d9ef6a2", 0x0, 0x1000fe1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 19.235541288s ago: executing program 3 (id=3777): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="08002b11", 0x4}, {0x0}], 0x2}, 0x0) 19.233247428s ago: executing program 3 (id=3778): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, 0x0, 0xa2) 18.357915527s ago: executing program 3 (id=3782): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0x1, 0xe32d) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) sendfile(r1, r1, 0x0, 0x9100) 3.13323404s ago: executing program 41 (id=3782): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0x1, 0xe32d) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) sendfile(r1, r1, 0x0, 0x9100) 2.002858693s ago: executing program 0 (id=3832): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write$cgroup_type(r0, &(0x7f00000001c0), 0x9) 1.800081953s ago: executing program 0 (id=3833): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000640)="68a55d6df108bed91373cc794c16187a680c0c711ae161400d400e28f7117e17fd75340a58f8d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1000000fc4d76dadbb0", 0x48}], 0x1}}], 0x1, 0x0) 1.255552136s ago: executing program 0 (id=3835): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f00000000c0)="3b41a87d3cc628d31cd916c9847cf87976b118ada53f77dfc4dd403afe38c0bf9e5ca26201746528754f7d8d") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl(r2, 0x40047435, 0x0) 1.13525053s ago: executing program 9 (id=3836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40081}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000003b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) 903.411025ms ago: executing program 9 (id=3837): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='10 ', 0x3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x4000054) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000500), 0x0) 751.501411ms ago: executing program 9 (id=3838): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001cc0)={@cgroup, 0xffffffffffffffff, 0x3, 0xecf56251b3e6ad4e}, 0x20) 658.645522ms ago: executing program 9 (id=3839): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/stat\x00') getdents(r0, &(0x7f00000001c0)=""/28, 0x1c) getdents(r0, 0xffffffffffffffff, 0x5a) 542.427161ms ago: executing program 9 (id=3840): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) 311.996236ms ago: executing program 9 (id=3841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r0}, &(0x7f0000000000), &(0x7f0000001a80)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r0}, 0x38) 310.29224ms ago: executing program 0 (id=3842): unshare(0x28000600) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 32.076861ms ago: executing program 0 (id=3843): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 0 (id=3844): r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000001100)='m', 0x1) kernel console output (not intermixed with test programs): agic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 623.791847][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5e1f instead [ 623.791875][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9654 instead [ 623.791928][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 623.791949][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 623.791969][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5e1f instead [ 623.791991][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9654 instead [ 623.792039][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 623.792057][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 623.792077][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5e1f instead [ 623.792099][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9654 instead [ 623.792145][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 623.792166][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 623.792187][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5e1f instead [ 623.792209][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9654 instead [ 623.792262][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 623.792284][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 623.792306][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5e1f instead [ 623.792329][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9654 instead [ 623.792387][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 623.792412][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 623.792433][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5e1f instead [ 623.792457][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9654 instead [ 623.792507][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 623.792528][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 623.792548][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5e1f instead [ 623.792571][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9654 instead [ 623.792619][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 623.792640][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 623.792674][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5e1f instead [ 623.792697][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9654 instead [ 623.792748][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 623.792769][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 623.792790][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5e1f instead [ 623.792813][T15782] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9654 instead [ 623.792849][T15782] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 623.792862][T15782] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 624.397825][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.397870][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.823249][T15813] syzkaller0: entered promiscuous mode [ 624.823272][T15813] syzkaller0: entered allmulticast mode [ 625.313579][ T30] audit: type=1804 audit(1786064493.711:262): pid=15823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3112" name="file1" dev="ramfs" ino=69442 res=1 errno=0 [ 625.507617][T15837] ubi: mtd0 is already attached to ubi0 [ 625.765285][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 625.765330][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 625.765371][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5e1f instead [ 625.765394][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9654 instead [ 625.765415][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 625.765435][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 625.765451][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 625.765472][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 625.765511][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 625.765542][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 625.765562][T15837] jffs2: Further such events for this erase block will not be printed [ 625.765895][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 625.765919][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 625.765941][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5e1f instead [ 625.765964][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9654 instead [ 625.765984][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 625.766004][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 625.766024][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 625.766048][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 625.766083][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 625.766118][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 625.766138][T15837] jffs2: Further such events for this erase block will not be printed [ 625.822256][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 625.822285][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 625.822303][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5e1f instead [ 625.822322][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9654 instead [ 625.822365][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 625.822380][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 625.822396][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5e1f instead [ 625.822415][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9654 instead [ 625.822455][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 625.822472][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 625.822489][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5e1f instead [ 625.822508][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9654 instead [ 625.822553][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 625.822570][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 625.822587][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5e1f instead [ 625.822606][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9654 instead [ 625.822650][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 625.822666][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 625.822682][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5e1f instead [ 625.822700][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9654 instead [ 625.822739][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 625.822754][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 625.822771][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5e1f instead [ 625.822789][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9654 instead [ 625.822829][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 625.822844][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 625.822861][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5e1f instead [ 625.822881][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9654 instead [ 625.822925][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 625.822941][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 625.822959][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5e1f instead [ 625.822989][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9654 instead [ 625.823033][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 625.823049][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 625.823068][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5e1f instead [ 625.823088][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9654 instead [ 625.823160][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 625.823178][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 625.823195][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5e1f instead [ 625.823216][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9654 instead [ 625.823260][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 625.823277][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 625.823295][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5e1f instead [ 625.823314][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9654 instead [ 625.823358][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 625.823375][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 625.823393][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5e1f instead [ 625.823413][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9654 instead [ 625.823456][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 625.823472][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 625.823489][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5e1f instead [ 625.823509][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9654 instead [ 625.823552][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 625.823568][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 625.823587][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5e1f instead [ 625.823606][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9654 instead [ 625.835209][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 625.835234][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 625.835252][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5e1f instead [ 625.835273][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9654 instead [ 625.835318][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 625.835335][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 625.835353][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5e1f instead [ 625.835373][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9654 instead [ 625.835417][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 625.835434][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 625.835451][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5e1f instead [ 625.835471][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9654 instead [ 625.835523][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 625.835541][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 625.835558][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5e1f instead [ 625.835578][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9654 instead [ 625.835637][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 625.835654][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 625.835671][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5e1f instead [ 625.835691][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9654 instead [ 625.835736][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 625.835753][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 625.835770][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5e1f instead [ 625.835790][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9654 instead [ 625.835834][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 625.835851][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 625.835868][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5e1f instead [ 625.835888][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9654 instead [ 625.835932][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 625.835948][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 625.835966][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5e1f instead [ 625.835985][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9654 instead [ 625.836028][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 625.836045][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 625.836063][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5e1f instead [ 625.836082][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9654 instead [ 625.836125][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 625.836142][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 625.844873][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5e1f instead [ 625.844899][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9654 instead [ 625.844953][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 625.844970][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 625.844988][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5e1f instead [ 625.845008][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9654 instead [ 625.845054][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 625.845072][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 625.845090][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5e1f instead [ 625.845110][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9654 instead [ 625.845155][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 625.845172][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 625.845205][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5e1f instead [ 625.845225][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9654 instead [ 625.845270][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 625.859462][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 625.859493][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5e1f instead [ 625.859514][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9654 instead [ 625.859567][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 625.859584][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 625.859603][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5e1f instead [ 625.859623][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9654 instead [ 625.859668][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 625.859684][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 625.859703][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5e1f instead [ 625.859722][T15837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9654 instead [ 625.859755][T15837] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 625.859765][T15837] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 628.545885][T15884] comedi comedi3: pcl818: I/O base address or length out of range [ 629.280204][T15893] ubi: mtd0 is already attached to ubi0 [ 629.558547][ T5931] IPVS: starting estimator thread 0... [ 629.656582][T15901] IPVS: using max 55 ests per chain, 132000 per kthread [ 629.666442][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 629.666469][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 629.666487][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5e1f instead [ 629.666507][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x9654 instead [ 629.666523][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 629.666540][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 629.666556][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 629.666577][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 629.666609][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 629.666647][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 629.666663][T15893] jffs2: Further such events for this erase block will not be printed [ 629.667007][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 629.667024][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 629.667042][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5e1f instead [ 629.667062][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x9654 instead [ 629.667078][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 629.667094][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 629.667112][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 629.667132][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 629.667163][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 629.667193][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 629.667209][T15893] jffs2: Further such events for this erase block will not be printed [ 629.680145][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 629.680171][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 629.680190][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5e1f instead [ 629.680210][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9654 instead [ 629.680254][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 629.680272][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 629.680289][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5e1f instead [ 629.680313][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9654 instead [ 629.680357][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 629.680374][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 629.680392][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5e1f instead [ 629.680411][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9654 instead [ 629.680454][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 629.680470][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 629.680488][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5e1f instead [ 629.680507][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9654 instead [ 629.680556][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 629.680572][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 629.680595][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5e1f instead [ 629.680614][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9654 instead [ 629.680708][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 629.680726][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 629.680744][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5e1f instead [ 629.680763][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9654 instead [ 629.680808][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 629.680825][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 629.680843][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5e1f instead [ 629.680862][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9654 instead [ 629.680907][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 629.680923][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 629.680941][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5e1f instead [ 629.680960][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9654 instead [ 629.681004][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 629.681020][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 629.681038][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5e1f instead [ 629.681057][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9654 instead [ 629.681100][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 629.681117][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 629.681135][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5e1f instead [ 629.681154][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9654 instead [ 629.681196][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 629.681213][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 629.681231][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5e1f instead [ 629.681251][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9654 instead [ 629.681309][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 629.681326][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 629.681344][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5e1f instead [ 629.681364][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9654 instead [ 629.681407][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 629.784563][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 629.784589][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5e1f instead [ 629.784611][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9654 instead [ 629.784664][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 629.784681][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 629.784700][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5e1f instead [ 629.784719][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9654 instead [ 629.784764][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 629.784781][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 629.784799][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5e1f instead [ 629.784818][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9654 instead [ 629.784862][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 629.784908][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 629.784927][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5e1f instead [ 629.784946][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9654 instead [ 629.784991][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 629.785009][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 629.785028][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5e1f instead [ 629.785047][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9654 instead [ 629.785093][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 629.785110][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 629.785128][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5e1f instead [ 629.785146][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9654 instead [ 629.785185][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 629.785200][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 629.785224][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5e1f instead [ 629.785242][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9654 instead [ 629.785284][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 629.785298][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 629.785315][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5e1f instead [ 629.785333][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9654 instead [ 629.785374][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 629.785391][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 629.785407][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5e1f instead [ 629.785426][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9654 instead [ 629.785468][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 629.785486][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 629.785504][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5e1f instead [ 629.785523][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9654 instead [ 629.785567][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 629.785584][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 629.785633][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5e1f instead [ 629.785652][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9654 instead [ 629.785699][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 629.785715][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 629.785734][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5e1f instead [ 629.785752][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9654 instead [ 629.785797][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 629.785813][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 629.785831][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5e1f instead [ 629.785850][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9654 instead [ 629.785894][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 629.785910][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 629.785928][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5e1f instead [ 629.785947][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9654 instead [ 629.804869][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 629.804896][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 629.804915][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5e1f instead [ 629.804935][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9654 instead [ 629.804982][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 629.805000][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 629.805017][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5e1f instead [ 629.805037][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9654 instead [ 629.805082][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 629.805100][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 629.805118][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5e1f instead [ 629.805138][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9654 instead [ 629.805185][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 629.805203][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 629.805229][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5e1f instead [ 629.805249][T15893] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9654 instead [ 629.805282][T15893] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 629.805292][T15893] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 630.557168][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3143'. [ 631.042621][T15916] loop2: detected capacity change from 0 to 512 [ 631.058536][T15916] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 631.084434][T15916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 631.084603][T15916] System zones: 1-12 [ 631.089773][T15916] EXT4-fs (loop2): 1 truncate cleaned up [ 631.101381][T15916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.447989][T15068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.065223][T15945] comedi comedi3: pcl818: I/O base address or length out of range [ 632.162143][T15956] loop8: detected capacity change from 0 to 512 [ 632.172950][T15956] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 632.183955][T15954] loop2: detected capacity change from 0 to 512 [ 632.203208][T15956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 632.203393][T15956] System zones: 1-12 [ 632.220646][T15956] EXT4-fs (loop8): 1 truncate cleaned up [ 632.231094][T15956] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.310289][T15954] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3162: inode has both inline data and extents flags [ 632.310340][T15954] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 632.317566][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 632.317592][ C0] EXT4-fs (loop2): initial error at time 1786064500: ext4_orphan_get:1399: inode 15 [ 632.317621][ C0] EXT4-fs (loop2): last error at time 1786064500: ext4_orphan_get:1399: inode 15 [ 632.326997][T15954] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3162: couldn't read orphan inode 15 (err -117) [ 632.327029][T15954] loop2: lost filesystem error report for type 5 error -117 [ 632.346528][T15954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.597023][T13717] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.754174][T15068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.066124][ T59] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.540159][T15957] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.329847][ T30] audit: type=1800 audit(1786064503.741:263): pid=16001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3178" name="id" dev="configfs" ino=70778 res=0 errno=0 [ 635.620222][T16012] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 635.620249][T16012] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 635.620348][T16012] vhci_hcd vhci_hcd.0: Device attached [ 635.905971][T16025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3185'. [ 635.928455][ T43] usb 52-1: SetAddress Request (2) to port 0 [ 635.928532][ T43] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 636.073832][T16014] vhci_hcd: connection reset by peer [ 636.079782][ T8939] vhci_hcd vhci_hcd.9: stop threads [ 636.079808][ T8939] vhci_hcd vhci_hcd.9: release socket [ 636.079857][ T8939] vhci_hcd vhci_hcd.9: disconnect device [ 636.554050][ T30] audit: type=1800 audit(1786064504.951:264): pid=16038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3191" name="id" dev="configfs" ino=70831 res=0 errno=0 [ 637.510614][T16068] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 637.945661][T16088] loop8: detected capacity change from 0 to 512 [ 637.950823][T16088] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 637.962179][T16088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 637.962297][T16088] System zones: 1-12 [ 637.966159][T16088] EXT4-fs (loop8): 1 truncate cleaned up [ 637.974265][T16088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.179139][T13717] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.322905][T16101] loop8: detected capacity change from 0 to 512 [ 638.366685][T16101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 638.456016][T16103] loop9: detected capacity change from 0 to 1024 [ 638.493912][T16101] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.494033][T16101] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.512279][T16103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 638.524208][T16103] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.552989][ T30] audit: type=1800 audit(1786064506.961:265): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3214" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 638.579301][ T30] audit: type=1800 audit(1786064506.991:266): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3214" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 638.622330][T16111] syzkaller0: entered promiscuous mode [ 638.622375][T16111] syzkaller0: entered allmulticast mode [ 638.638076][ T30] audit: type=1800 audit(1786064507.041:267): pid=16103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3214" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 638.654376][T13717] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.693049][T16103] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm syz.9.3214: lblock 0 mapped to illegal pblock 0 (length 4) [ 638.723609][T16103] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.3214: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 638.898964][T13809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 639.253414][T16132] loop2: detected capacity change from 0 to 512 [ 639.282540][T16132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 639.300865][T16132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 639.301001][T16132] System zones: 1-12 [ 639.302131][T16132] EXT4-fs (loop2): 1 truncate cleaned up [ 639.315672][T16132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.521359][T15068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.965903][T16154] syzkaller0: entered promiscuous mode [ 639.965951][T16154] syzkaller0: entered allmulticast mode [ 640.222413][T16168] netlink: 'syz.9.3237': attribute type 6 has an invalid length. [ 640.525245][T16178] syzkaller0: entered promiscuous mode [ 640.525286][T16178] syzkaller0: entered allmulticast mode [ 641.034739][ T43] usb 52-1: device descriptor read/8, error -110 [ 641.049220][T16196] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3248'. [ 641.153155][T16199] loop2: detected capacity change from 0 to 512 [ 641.170200][T16199] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 641.192463][T16199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 641.201364][T16199] System zones: 1-12 [ 641.217403][T16199] EXT4-fs (loop2): 1 truncate cleaned up [ 641.281726][T16199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.420753][ T43] usb usb52-port1: attempt power cycle [ 641.501822][T15068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.581371][T16208] syzkaller0: entered promiscuous mode [ 641.581437][T16208] syzkaller0: entered allmulticast mode [ 641.780946][ T30] audit: type=1804 audit(1786064510.191:268): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3255" name="file1" dev="ramfs" ino=71133 res=1 errno=0 [ 641.978746][ T43] usb usb52-port1: unable to enumerate USB device [ 642.006148][T16220] syzkaller0: entered promiscuous mode [ 642.006196][T16220] syzkaller0: entered allmulticast mode [ 642.841608][T16243] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 642.841637][T16243] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 642.856655][T16243] vhci_hcd vhci_hcd.0: Device attached [ 643.140215][ T43] usb 50-1: SetAddress Request (2) to port 0 [ 643.140310][ T43] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 643.221090][T16244] vhci_hcd: connection reset by peer [ 643.226907][ T12] vhci_hcd vhci_hcd.8: stop threads [ 643.226969][ T12] vhci_hcd vhci_hcd.8: release socket [ 643.227048][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 643.456238][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3268'. [ 643.467985][ T8939] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.764303][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3269'. [ 643.838378][T16247] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.175162][T16290] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3280'. [ 646.439346][ T30] audit: type=1804 audit(1786064514.851:269): pid=16299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3282" name="file1" dev="ramfs" ino=70080 res=1 errno=0 [ 646.649601][T16308] loop7: detected capacity change from 0 to 512 [ 646.665624][T16304] comedi comedi3: pcl818: I/O base address or length out of range [ 646.690025][T16308] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3286: iget: bad i_size value: 38620345925642 [ 646.690078][T16308] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 646.702885][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 646.702907][ C1] EXT4-fs (loop7): initial error at time 1786064515: ext4_orphan_get:1399: inode 15 [ 646.702936][ C1] EXT4-fs (loop7): last error at time 1786064515: ext4_orphan_get:1399: inode 15 [ 646.742374][T16308] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3286: couldn't read orphan inode 15 (err -117) [ 646.742427][T16308] loop7: lost filesystem error report for type 5 error -117 [ 646.778002][T16308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.552365][ T12] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 647.585829][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 647.597760][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 647.597760][ T12] [ 647.597787][ T12] EXT4-fs (loop7): Total free blocks count 0 [ 647.597801][ T12] EXT4-fs (loop7): Free/Dirty block details [ 647.597814][ T12] EXT4-fs (loop7): free_blocks=0 [ 647.597827][ T12] EXT4-fs (loop7): dirty_blocks=7480 [ 647.597839][ T12] EXT4-fs (loop7): Block reservation details [ 647.597850][ T12] EXT4-fs (loop7): i_reserved_data_blocks=7480 [ 647.733322][ T148] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 647.794074][T13680] EXT4-fs warning (device loop7): ext4_evict_inode:196: inode #18: comm syz-executor: data will be lost [ 647.954365][T16317] loop8: detected capacity change from 0 to 40427 [ 647.963376][T16324] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3292'. [ 647.978691][T16317] F2FS-fs (loop8): invalid crc value [ 648.076936][T16317] F2FS-fs (loop8): access invalid blkaddr:0 [ 648.083100][T16317] CPU: 1 UID: 0 PID: 16317 Comm: syz.8.3288 Not tainted syzkaller #0 PREEMPT(full) [ 648.083129][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.083143][T16317] Call Trace: [ 648.083153][T16317] [ 648.083164][T16317] dump_stack_lvl+0xe8/0x150 [ 648.083204][T16317] __f2fs_is_valid_blkaddr+0xe62/0x14f0 [ 648.083245][T16317] sanity_check_extent_cache+0x1a3/0x620 [ 648.083279][T16317] ? f2fs_sanity_check_inline_data+0x70/0x740 [ 648.083309][T16317] f2fs_iget+0x41fc/0x6230 [ 648.083365][T16317] f2fs_fill_super+0x4edb/0x77f0 [ 648.083446][T16317] get_tree_bdev_flags+0x430/0x4f0 [ 648.083473][T16317] ? __pfx_f2fs_fill_super+0x10/0x10 [ 648.083503][T16317] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 648.083538][T16317] vfs_get_tree+0x92/0x2a0 [ 648.083564][T16317] do_new_mount+0x319/0xdc0 [ 648.083621][T16317] ? __pfx_do_new_mount+0x10/0x10 [ 648.083655][T16317] ? ns_capable+0x89/0xe0 [ 648.083683][T16317] ? path_mount+0x647/0x1050 [ 648.083720][T16317] ? user_path_at+0xd4/0x160 [ 648.083744][T16317] __se_sys_mount+0x31d/0x420 [ 648.083783][T16317] ? __pfx___se_sys_mount+0x10/0x10 [ 648.083821][T16317] ? __x64_sys_mount+0x20/0xc0 [ 648.083851][T16317] do_syscall_64+0x166/0x510 [ 648.083875][T16317] ? trace_irq_disable+0x3b/0x140 [ 648.083893][T16317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.083916][T16317] ? clear_bhb_loop+0x40/0x90 [ 648.083943][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.083965][T16317] RIP: 0033:0x7f575d39f34a [ 648.083986][T16317] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.084006][T16317] RSP: 002b:00007f575e209e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 648.084031][T16317] RAX: ffffffffffffffda RBX: 00007f575e209ee0 RCX: 00007f575d39f34a [ 648.084048][T16317] RDX: 0000200000000140 RSI: 00002000000002c0 RDI: 00007f575e209ea0 [ 648.084064][T16317] RBP: 0000200000000140 R08: 00007f575e209ee0 R09: 000000000000000a [ 648.084086][T16317] R10: 000000000000000a R11: 0000000000000246 R12: 00002000000002c0 [ 648.084101][T16317] R13: 00007f575e209ea0 R14: 0000000000005546 R15: 0000200000001480 [ 648.084136][T16317] [ 648.162958][T16317] loop8: lost filesystem error report for type 5 error -117 [ 648.162981][T16317] F2FS-fs (loop8): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix [ 648.164567][T16317] loop8: lost filesystem error report for type 5 error -117 [ 648.164587][T16317] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 648.185641][T16317] F2FS-fs (loop8): Failed to read root inode [ 648.232443][ T43] usb 50-1: device descriptor read/8, error -110 [ 648.595327][T16335] syzkaller0: entered promiscuous mode [ 648.595377][T16335] syzkaller0: entered allmulticast mode [ 648.618751][ T43] usb usb50-port1: attempt power cycle [ 649.172519][T16357] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3303'. [ 649.188852][ T43] usb usb50-port1: unable to enumerate USB device [ 649.579506][T16369] syzkaller0: entered promiscuous mode [ 649.587244][T16369] syzkaller0: entered allmulticast mode [ 649.785246][ T30] audit: type=1804 audit(1786064518.191:270): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3311" name="file1" dev="ramfs" ino=70202 res=1 errno=0 [ 649.825562][T16367] loop8: detected capacity change from 0 to 40427 [ 649.852430][T16367] F2FS-fs (loop8): invalid crc value [ 649.965253][T16367] F2FS-fs (loop8): access invalid blkaddr:0 [ 649.965316][T16367] CPU: 0 UID: 0 PID: 16367 Comm: syz.8.3308 Not tainted syzkaller #0 PREEMPT(full) [ 649.965340][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.965354][T16367] Call Trace: [ 649.965362][T16367] [ 649.965370][T16367] dump_stack_lvl+0xe8/0x150 [ 649.965403][T16367] __f2fs_is_valid_blkaddr+0xe62/0x14f0 [ 649.965442][T16367] sanity_check_extent_cache+0x1a3/0x620 [ 649.965474][T16367] ? f2fs_sanity_check_inline_data+0x70/0x740 [ 649.965502][T16367] f2fs_iget+0x41fc/0x6230 [ 649.965549][T16367] f2fs_fill_super+0x4edb/0x77f0 [ 649.965619][T16367] get_tree_bdev_flags+0x430/0x4f0 [ 649.965644][T16367] ? __pfx_f2fs_fill_super+0x10/0x10 [ 649.965674][T16367] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 649.965708][T16367] vfs_get_tree+0x92/0x2a0 [ 649.965733][T16367] do_new_mount+0x319/0xdc0 [ 649.965770][T16367] ? __pfx_do_new_mount+0x10/0x10 [ 649.965803][T16367] ? ns_capable+0x89/0xe0 [ 649.965830][T16367] ? path_mount+0x647/0x1050 [ 649.965863][T16367] ? user_path_at+0xd4/0x160 [ 649.965896][T16367] __se_sys_mount+0x31d/0x420 [ 649.965933][T16367] ? __pfx___se_sys_mount+0x10/0x10 [ 649.965970][T16367] ? __x64_sys_mount+0x20/0xc0 [ 649.966003][T16367] do_syscall_64+0x166/0x510 [ 649.966027][T16367] ? trace_irq_disable+0x3b/0x140 [ 649.966046][T16367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.966068][T16367] ? clear_bhb_loop+0x40/0x90 [ 649.966094][T16367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.966115][T16367] RIP: 0033:0x7f575d39f34a [ 649.966135][T16367] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.966154][T16367] RSP: 002b:00007f575e209e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 649.966177][T16367] RAX: ffffffffffffffda RBX: 00007f575e209ee0 RCX: 00007f575d39f34a [ 649.966193][T16367] RDX: 0000200000000140 RSI: 00002000000002c0 RDI: 00007f575e209ea0 [ 649.966209][T16367] RBP: 0000200000000140 R08: 00007f575e209ee0 R09: 000000000000000a [ 649.966224][T16367] R10: 000000000000000a R11: 0000000000000246 R12: 00002000000002c0 [ 649.966237][T16367] R13: 00007f575e209ea0 R14: 0000000000005546 R15: 0000200000001480 [ 649.966270][T16367] [ 649.967280][T16367] loop8: lost filesystem error report for type 5 error -117 [ 649.967298][T16367] F2FS-fs (loop8): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix [ 649.977102][T16367] loop8: lost filesystem error report for type 5 error -117 [ 649.977125][T16367] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 649.977233][T16367] F2FS-fs (loop8): Failed to read root inode [ 650.204372][T16379] syzkaller0: entered promiscuous mode [ 650.204397][T16379] syzkaller0: entered allmulticast mode [ 650.552548][T16388] loop8: detected capacity change from 0 to 1024 [ 650.560928][T16388] EXT4-fs: Ignoring removed bh option [ 650.622605][T16388] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.716974][T13717] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.335631][T16412] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 651.335664][T16412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 651.352986][T16412] vhci_hcd vhci_hcd.0: Device attached [ 651.475790][T16416] syzkaller0: entered promiscuous mode [ 651.475825][T16416] syzkaller0: entered allmulticast mode [ 651.628628][T12008] usb 52-1: SetAddress Request (6) to port 0 [ 651.628722][T12008] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 651.799470][T16418] syzkaller0: entered promiscuous mode [ 651.799499][T16418] syzkaller0: entered allmulticast mode [ 651.962510][T16413] vhci_hcd: connection reset by peer [ 651.962948][ T1047] vhci_hcd vhci_hcd.9: stop threads [ 651.962969][ T1047] vhci_hcd vhci_hcd.9: release socket [ 651.963019][ T1047] vhci_hcd vhci_hcd.9: disconnect device [ 652.066173][T16422] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3327'. [ 653.490781][T16474] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 653.490809][T16474] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 653.506718][T16474] vhci_hcd vhci_hcd.0: Device attached [ 654.029440][T16477] vhci_hcd: connection closed [ 654.031307][ T8883] vhci_hcd vhci_hcd.9: stop threads [ 654.047762][ T8883] vhci_hcd vhci_hcd.9: release socket [ 654.048177][ T8883] vhci_hcd vhci_hcd.9: disconnect device [ 654.837994][T16514] syzkaller0: entered promiscuous mode [ 654.838021][T16514] syzkaller0: entered allmulticast mode [ 654.943339][T16516] loop8: detected capacity change from 0 to 164 [ 654.953946][T16516] ISOFS: unable to read i-node block [ 654.953999][T16516] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 655.067296][T16518] netlink: 'syz.8.3363': attribute type 2 has an invalid length. [ 656.225395][T16553] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3374'. [ 656.350141][T12159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 656.364720][T12159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 656.372815][T12159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 656.381213][T12159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 656.405151][T12159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 656.708674][T12008] usb 52-1: device descriptor read/8, error -110 [ 657.099356][T12008] usb usb52-port1: attempt power cycle [ 657.258563][ T30] audit: type=1326 audit(1786064525.671:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16586 comm="syz.7.3387" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16c759e0d9 code=0x0 [ 657.349433][T16590] loop8: detected capacity change from 0 to 256 [ 657.457284][T16590] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 657.457336][T16590] FAT-fs (loop8): Filesystem has been set read-only [ 657.457452][T16590] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 657.457486][T16590] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 657.536216][ T30] audit: type=1800 audit(1786064525.941:272): pid=16590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3388" name="file1" dev="loop8" ino=1048685 res=0 errno=0 [ 657.699096][T12008] usb usb52-port1: unable to enumerate USB device [ 657.814270][T12159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 657.834483][T12159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 657.842578][T12159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 657.853855][T12159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 657.864133][T12159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 658.227392][T16616] loop8: detected capacity change from 0 to 1024 [ 658.234554][T16616] EXT4-fs: Ignoring removed bh option [ 658.293988][T16616] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.397304][ T5932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.467695][ T5626] Bluetooth: hci4: command tx timeout [ 658.524845][T13717] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.637239][T16633] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3401'. [ 659.383391][ T5932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.746688][ T5932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.987789][ T5626] Bluetooth: hci2: command tx timeout [ 660.083362][T16663] program syz.7.3408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.097086][ T5932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.280422][T16658] syzkaller0: entered promiscuous mode [ 660.280468][T16658] syzkaller0: entered allmulticast mode [ 660.342325][T16670] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3411'. [ 660.342375][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3411'. [ 660.549557][ T5626] Bluetooth: hci4: command tx timeout [ 660.615620][T16670] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 660.652319][T16670] bond1 (unregistering): Released all slaves [ 661.179626][T16690] program syz.9.3417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.239804][ T30] audit: type=1326 audit(1786064529.651:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.9.3418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 661.273228][ T30] audit: type=1326 audit(1786064529.651:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.9.3418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 661.301449][ T30] audit: type=1326 audit(1786064529.711:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.9.3418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 661.301525][ T30] audit: type=1326 audit(1786064529.711:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.9.3418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 661.333143][ T30] audit: type=1326 audit(1786064529.741:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.9.3418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 661.333190][ T30] audit: type=1326 audit(1786064529.741:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.9.3418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 661.333226][ T30] audit: type=1326 audit(1786064529.741:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.9.3418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 661.333464][ T30] audit: type=1326 audit(1786064529.741:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16693 comm="syz.9.3418" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 661.523638][T16703] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 661.754090][T16558] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.762087][T16558] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.769554][T16558] bridge_slave_0: entered allmulticast mode [ 661.778747][T16558] bridge_slave_0: entered promiscuous mode [ 661.841802][T16558] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.841914][T16558] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.860558][T16558] bridge_slave_1: entered allmulticast mode [ 661.869578][T16558] bridge_slave_1: entered promiscuous mode [ 662.069498][ T5626] Bluetooth: hci2: command tx timeout [ 662.077945][ T5932] bridge_slave_1: left allmulticast mode [ 662.077993][ T5932] bridge_slave_1: left promiscuous mode [ 662.078210][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.113112][ T5932] bridge_slave_0: left allmulticast mode [ 662.113165][ T5932] bridge_slave_0: left promiscuous mode [ 662.117068][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.637738][ T5626] Bluetooth: hci4: command tx timeout [ 662.670284][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.718200][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.758933][ T5932] bond0 (unregistering): Released all slaves [ 662.782633][T16709] syzkaller0: entered promiscuous mode [ 662.782681][T16709] syzkaller0: entered allmulticast mode [ 662.796277][T16558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.807267][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 662.901982][T16741] program syz.9.3426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.984932][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 663.010662][ T30] audit: type=1326 audit(1786064531.391:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.010735][ T30] audit: type=1326 audit(1786064531.391:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.010793][ T30] audit: type=1326 audit(1786064531.391:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.010830][ T30] audit: type=1326 audit(1786064531.391:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.010867][ T30] audit: type=1326 audit(1786064531.391:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.010908][ T30] audit: type=1326 audit(1786064531.391:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.010947][ T30] audit: type=1326 audit(1786064531.391:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.010988][ T30] audit: type=1326 audit(1786064531.391:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.011028][ T30] audit: type=1326 audit(1786064531.391:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.011067][ T30] audit: type=1326 audit(1786064531.401:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16742 comm="syz.9.3427" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 663.280839][T16558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.410970][T16754] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 663.662469][T16558] team0: Port device team_slave_0 added [ 663.680009][T16558] team0: Port device team_slave_1 added [ 664.032153][T16558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.032209][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.032246][T16558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.037305][T16558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.037323][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.037347][T16558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.161516][ T5626] Bluetooth: hci2: command tx timeout [ 664.307662][ T5932] hsr_slave_0: left promiscuous mode [ 664.339192][ T5932] hsr_slave_1: left promiscuous mode [ 664.340093][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.340113][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.393890][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.393922][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.463578][ T5932] veth1_macvtap: left promiscuous mode [ 664.463640][ T5932] veth0_macvtap: left promiscuous mode [ 664.463740][ T5932] veth1_vlan: left promiscuous mode [ 664.463803][ T5932] veth0_vlan: left promiscuous mode [ 664.718823][ T5626] Bluetooth: hci4: command tx timeout [ 665.138286][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 665.171723][T16811] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3448'. [ 665.193331][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 665.450633][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 665.788406][T16558] hsr_slave_0: entered promiscuous mode [ 665.795302][T16558] hsr_slave_1: entered promiscuous mode [ 665.802666][T16558] debugfs: 'hsr0' already exists in 'hsr' [ 665.807872][T16558] Cannot create hsr debugfs directory [ 665.959250][T16599] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.959348][T16599] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.959512][T16599] bridge_slave_0: entered allmulticast mode [ 665.962926][T16599] bridge_slave_0: entered promiscuous mode [ 665.986675][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3456'. [ 666.024883][T16599] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.025015][T16599] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.025168][T16599] bridge_slave_1: entered allmulticast mode [ 666.029220][T16599] bridge_slave_1: entered promiscuous mode [ 666.238918][T16599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.242842][ T5626] Bluetooth: hci2: command tx timeout [ 666.258565][T16599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.570191][T16599] team0: Port device team_slave_0 added [ 666.584661][T16599] team0: Port device team_slave_1 added [ 666.811370][ T5932] IPVS: stop unused estimator thread 0... [ 666.935712][T16862] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3462'. [ 666.999200][T16599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.006499][T16599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.035894][T16599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.048732][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 667.049566][T16599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.049581][T16599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.049605][T16599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.159467][T16599] hsr_slave_0: entered promiscuous mode [ 667.165542][T16599] hsr_slave_1: entered promiscuous mode [ 667.166218][T16599] debugfs: 'hsr0' already exists in 'hsr' [ 667.166239][T16599] Cannot create hsr debugfs directory [ 667.729862][T16878] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3466'. [ 668.217924][ T5932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.622156][T16878] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 668.718987][T16878] bond1 (unregistering): Released all slaves [ 668.886728][T16904] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3471'. [ 668.897978][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 669.179183][ T5932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.802278][T16946] loop7: detected capacity change from 0 to 164 [ 669.838838][T16946] ISOFS: unable to read i-node block [ 669.851844][T16946] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 670.054433][T16951] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3482'. [ 670.079865][ T5932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.231960][T16945] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 670.263182][T16945] bond1 (unregistering): Released all slaves [ 670.327176][T16965] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3485'. [ 670.344771][T16955] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3482'. [ 670.536374][T16974] loop8: detected capacity change from 0 to 128 [ 670.569299][T16974] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 670.582581][T16974] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.624977][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 670.625032][ T30] audit: type=1800 audit(1786064539.031:330): pid=16974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3487" name="file1" dev="loop8" ino=12 res=0 errno=0 [ 670.712581][T16957] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3482'. [ 670.954957][ T5932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.106756][T13717] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 671.336667][T17001] loop8: detected capacity change from 0 to 164 [ 671.378443][T17001] ISOFS: unable to read i-node block [ 671.378513][T17001] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 672.073630][ T30] audit: type=1326 audit(1786064540.481:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.073719][ T30] audit: type=1326 audit(1786064540.481:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.136723][ T30] audit: type=1326 audit(1786064540.541:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.136795][ T30] audit: type=1326 audit(1786064540.541:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.148404][ T30] audit: type=1326 audit(1786064540.561:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.148454][ T30] audit: type=1326 audit(1786064540.561:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.148492][ T30] audit: type=1326 audit(1786064540.561:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.149236][ T30] audit: type=1326 audit(1786064540.561:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.149278][ T30] audit: type=1326 audit(1786064540.561:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17023 comm="syz.8.3494" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d39e0d9 code=0x7ffc0000 [ 672.547955][T16972] Bluetooth: hci3: command 0x0406 tx timeout [ 672.548059][T16972] Bluetooth: hci5: command 0x0406 tx timeout [ 672.718275][T17034] loop8: detected capacity change from 0 to 512 [ 672.739045][T17034] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.3496: bad orphan inode 15 [ 672.739094][T17034] loop8: lost filesystem error report for type 5 error -117 [ 672.739646][T17034] ext4_test_bit(bit=14, block=5) = 0 [ 672.741799][T17034] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.836712][T13717] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.946227][T16558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 672.996387][T16558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.071947][T16558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.120598][T16558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.128680][T16558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 673.161233][T16558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.342471][T16599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.520580][T16558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 673.559046][T16558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 673.920889][T16599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.944393][T17074] loop9: detected capacity change from 0 to 164 [ 673.979063][T17074] ISOFS: unable to read i-node block [ 673.984692][T17074] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 674.047950][ T5932] bridge_slave_1: left allmulticast mode [ 674.048002][ T5932] bridge_slave_1: left promiscuous mode [ 674.048200][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.100020][ T5932] bridge_slave_0: left allmulticast mode [ 674.100069][ T5932] bridge_slave_0: left promiscuous mode [ 674.100280][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.651903][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.699120][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.730425][ T5932] bond0 (unregistering): Released all slaves [ 674.878567][T17070] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 675.210755][T16599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.391581][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3514'. [ 675.863831][T17135] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 675.911615][T17135] bond1 (unregistering): Released all slaves [ 676.150257][T16599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.171815][T17156] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3524'. [ 676.650528][ T5932] hsr_slave_0: left promiscuous mode [ 676.677659][ T5932] hsr_slave_1: left promiscuous mode [ 676.678671][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.678692][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.709519][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.709561][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.758569][ T5932] veth1_macvtap: left promiscuous mode [ 676.758614][ T5932] veth0_macvtap: left promiscuous mode [ 676.758719][ T5932] veth1_vlan: left promiscuous mode [ 676.758784][ T5932] veth0_vlan: left promiscuous mode [ 677.589860][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 677.629705][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 677.670515][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 678.033289][T16558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.357479][T16558] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.382112][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.382234][ T8883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.399228][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.399345][ T8883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.710984][T17139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.725581][ T5933] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 678.735697][T17234] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 678.861757][T16599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 678.874402][T16599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.909651][T16599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 678.958391][T16599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.965190][T16599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 679.013950][T14177] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 679.014911][T16599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.023350][T16599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 679.065170][T16599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 679.158195][ T5873] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 679.208097][T14177] usb 9-1: Using ep0 maxpacket: 8 [ 679.208817][T14177] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 679.209763][T14177] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.209785][T14177] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 679.209838][T14177] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 679.211741][T14177] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.211761][T14177] usb 9-1: Product: syz [ 679.211776][T14177] usb 9-1: Manufacturer: syz [ 679.211790][T14177] usb 9-1: SerialNumber: syz [ 679.317971][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 679.328088][ T5873] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 679.343849][ T5873] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 679.343893][ T5873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.343924][ T5873] usb 10-1: config 1 has no interface number 0 [ 679.343966][ T5873] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 679.343992][ T5873] usb 10-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.344021][ T5873] usb 10-1: config 1 interface 105 has no altsetting 0 [ 679.402872][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 679.411294][ T5873] usb 10-1: Product: syz [ 679.411317][ T5873] usb 10-1: Manufacturer: syz [ 679.411332][ T5873] usb 10-1: SerialNumber: syz [ 679.431135][T17241] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 679.626220][T16599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.682393][ T5873] aqc111 10-1:1.105: probe with driver aqc111 failed with error -22 [ 679.738665][T16599] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.765385][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.765482][ T8939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.796919][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.797046][ T8939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.489397][T14177] usb 9-1: clock source 0 is not valid, cannot use [ 680.639550][T14177] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 680.640249][T14177] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 680.959691][T14177] usb 9-1: USB disconnect, device number 3 [ 681.082511][T12321] udevd[12321]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 681.096689][T16558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.375728][T16558] veth0_vlan: entered promiscuous mode [ 681.386785][T16558] veth1_vlan: entered promiscuous mode [ 681.450283][T16558] veth0_macvtap: entered promiscuous mode [ 681.467115][T16558] veth1_macvtap: entered promiscuous mode [ 681.532723][T16558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.546842][T16558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.610495][ T5873] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 681.677915][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.679815][ T5933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.680098][ T5933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.769507][ T1047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.778307][T16599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.786068][ T5873] usb 9-1: Using ep0 maxpacket: 32 [ 681.797104][ T5873] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 681.817816][ T5873] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 681.826164][ T5873] usb 9-1: config 0 has no interface number 0 [ 681.832680][ T5873] usb 9-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 681.843124][ T5873] usb 9-1: config 0 interface 184 has no altsetting 0 [ 681.858830][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.866964][ T5873] usb 9-1: Product: syz [ 681.871903][ T5873] usb 9-1: Manufacturer: syz [ 681.876629][ T5873] usb 9-1: SerialNumber: syz [ 681.878471][T14177] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 681.894421][ T5873] usb 9-1: config 0 descriptor?? [ 681.898397][T17298] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 681.983315][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.983363][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.995718][ T5743] usb 10-1: USB disconnect, device number 4 [ 682.031353][T14177] usb 8-1: Using ep0 maxpacket: 8 [ 682.033806][T14177] usb 8-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 682.036807][T14177] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.036883][T14177] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.048619][T14177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.048647][T14177] usb 8-1: Product: syz [ 682.048662][T14177] usb 8-1: Manufacturer: syz [ 682.048676][T14177] usb 8-1: SerialNumber: syz [ 682.121918][T17298] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 682.206727][T16599] veth0_vlan: entered promiscuous mode [ 682.220814][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.220858][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.266454][T16599] veth1_vlan: entered promiscuous mode [ 682.282615][T14177] usb 8-1: 1:1: invalid format type 0x1b02 is detected, processed as PCM [ 682.291522][T14177] usb 8-1: 1:1 : sample bitwidth 199 in over sample bytes 2 [ 682.291597][T14177] usb 8-1: 1:1: All rates were zero [ 682.305237][T14177] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 682.367446][T16599] veth0_macvtap: entered promiscuous mode [ 682.374188][T16599] veth1_macvtap: entered promiscuous mode [ 682.387201][T14177] usb 8-1: USB disconnect, device number 3 [ 682.425058][T16599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.445896][T16599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.503304][ T1047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.522112][T12316] udevd[12316]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 682.556394][ T5873] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 682.556447][ T5873] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 682.570833][ T5873] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 682.570863][ T5873] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 682.570883][ T5873] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 682.570900][ T5873] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 682.571155][ T5873] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 682.656538][ T1047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.660603][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.335072][ T8939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.752996][T17340] loop7: detected capacity change from 0 to 512 [ 683.761842][T17340] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 683.780861][T17340] EXT4-fs (loop7): 1 truncate cleaned up [ 683.789255][T17340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.840460][T13680] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.299083][T17349] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 684.299117][T17349] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 684.322021][T17349] vhci_hcd vhci_hcd.0: Device attached [ 684.355253][ T5750] usb 9-1: USB disconnect, device number 4 [ 684.597837][T12008] usb 34-1: SetAddress Request (14) to port 0 [ 684.597927][T12008] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd [ 684.896371][T17350] vhci_hcd: connection reset by peer [ 684.896750][ T1047] vhci_hcd vhci_hcd.0: stop threads [ 684.896773][ T1047] vhci_hcd vhci_hcd.0: release socket [ 684.896823][ T1047] vhci_hcd vhci_hcd.0: disconnect device [ 685.057751][ T190] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 685.116395][T17316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.226499][ T190] usb 8-1: Using ep0 maxpacket: 8 [ 685.233459][ T190] usb 8-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 685.234474][ T190] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.234557][ T190] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.236812][ T190] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.236835][ T190] usb 8-1: Product: syz [ 685.236849][ T190] usb 8-1: Manufacturer: syz [ 685.236864][ T190] usb 8-1: SerialNumber: syz [ 685.457377][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.457418][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.497228][ T190] usb 8-1: 1:1: invalid format type 0x1b02 is detected, processed as PCM [ 685.497271][ T190] usb 8-1: 1:1 : sample bitwidth 199 in over sample bytes 2 [ 685.497330][ T190] usb 8-1: 1:1: All rates were zero [ 685.499240][ T190] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 685.662825][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.662868][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.801541][ T190] usb 8-1: USB disconnect, device number 4 [ 685.836794][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.836875][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.257142][T17385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3560'. [ 686.477730][ T190] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 686.632873][ T190] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 686.635479][ T190] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 686.635509][ T190] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 686.638265][ T190] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.638289][ T190] usb 8-1: Product: syz [ 686.638303][ T190] usb 8-1: Manufacturer: syz [ 686.638317][ T190] usb 8-1: SerialNumber: syz [ 686.654286][T17384] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 686.654400][T17384] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 686.661122][ T190] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 686.661147][ T190] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 686.661187][ T190] usbserial_generic 8-1:1.0: generic converter detected [ 686.730749][ T190] usb 8-1: generic converter now attached to ttyUSB0 [ 686.994391][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 687.078690][ T5873] usb 8-1: USB disconnect, device number 5 [ 687.121837][ T5873] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 687.122604][ T5873] usbserial_generic 8-1:1.0: device disconnected [ 688.038741][T17431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3573'. [ 688.470397][T17437] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 688.470435][T17437] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 688.470562][T17437] vhci_hcd vhci_hcd.0: Device attached [ 688.581864][T17439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3575'. [ 688.650922][T17444] vhci_hcd: connection closed [ 688.651257][ T1047] vhci_hcd vhci_hcd.9: stop threads [ 688.651304][ T1047] vhci_hcd vhci_hcd.9: release socket [ 688.651350][ T1047] vhci_hcd vhci_hcd.9: disconnect device [ 688.682948][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 689.669415][ T5626] Bluetooth: hci0: command 0x1003 tx timeout [ 689.669602][T12159] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 689.682549][T12008] usb 34-1: device descriptor read/8, error -110 [ 689.707695][ T5750] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 689.898527][ T5750] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 689.910927][ T5750] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 689.910976][ T5750] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 689.933263][ T5750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.941512][ T5750] usb 9-1: Product: syz [ 689.945791][ T5750] usb 9-1: Manufacturer: syz [ 689.950604][ T5750] usb 9-1: SerialNumber: syz [ 689.965281][T17468] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 689.974500][T17468] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 689.983730][ T5750] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 689.995515][ T5750] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 690.036208][ T5750] usbserial_generic 9-1:1.0: generic converter detected [ 690.058227][ T5750] usb 9-1: generic converter now attached to ttyUSB0 [ 690.078858][T12008] usb usb34-port1: attempt power cycle [ 690.247733][ T5750] usb 9-1: USB disconnect, device number 5 [ 690.304305][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3584'. [ 690.327938][ T5750] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 690.328608][ T5750] usbserial_generic 9-1:1.0: device disconnected [ 690.659103][T12008] usb usb34-port1: unable to enumerate USB device [ 702.022015][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 702.031349][T17502] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3589'. [ 702.056887][T17520] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 702.234394][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3600'. [ 703.346501][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 703.346549][ T30] audit: type=1326 audit(1786064571.731:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17582 comm="syz.7.3608" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16c759e0d9 code=0x0 [ 703.514609][T17588] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 703.540870][T17588] bond1 (unregistering): Released all slaves [ 703.616911][T17596] loop3: detected capacity change from 0 to 512 [ 703.619849][T17596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 703.636601][T17596] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3613: bad orphan inode 131083 [ 703.636634][T17596] loop3: lost filesystem error report for type 5 error -117 [ 703.637561][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 703.637580][ C1] EXT4-fs (loop3): initial error at time 1786064572: ext4_orphan_get:1425 [ 703.637603][ C1] EXT4-fs (loop3): last error at time 1786064572: ext4_orphan_get:1425 [ 703.642239][T17596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.663312][ T30] audit: type=1800 audit(1786064572.071:427): pid=17596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3613" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 704.644371][T16599] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.213518][T17639] loop3: detected capacity change from 0 to 1024 [ 705.255808][T17639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.280424][T17541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.506773][T17648] loop7: detected capacity change from 0 to 512 [ 705.559665][T17648] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 705.590718][T17648] EXT4-fs (loop7): 1 truncate cleaned up [ 705.616870][T17648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.691612][T16599] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.807432][T13680] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.913910][ T30] audit: type=1326 audit(1786064574.311:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17662 comm="syz.9.3634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 705.914177][ T30] audit: type=1326 audit(1786064574.321:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17662 comm="syz.9.3634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 705.935514][ T30] audit: type=1326 audit(1786064574.341:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17662 comm="syz.9.3634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 705.943980][ T30] audit: type=1326 audit(1786064574.351:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17662 comm="syz.9.3634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 705.950566][ T30] audit: type=1326 audit(1786064574.361:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17662 comm="syz.9.3634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 705.950775][ T30] audit: type=1326 audit(1786064574.361:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17662 comm="syz.9.3634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 705.950972][ T30] audit: type=1326 audit(1786064574.361:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17662 comm="syz.9.3634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 705.965814][ T30] audit: type=1326 audit(1786064574.371:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17662 comm="syz.9.3634" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae2b9e0d9 code=0x7ffc0000 [ 706.277685][ T5728] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 706.294049][ T5931] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 706.304596][T17665] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 706.427635][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 706.428364][ T5728] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 706.441050][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.441078][ T5728] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 706.441130][ T5728] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 706.457039][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.457068][ T5728] usb 4-1: Product: syz [ 706.457083][ T5728] usb 4-1: Manufacturer: syz [ 706.457097][ T5728] usb 4-1: SerialNumber: syz [ 707.665307][ T5728] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 707.665883][ T5728] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 707.919470][ T5728] usb 4-1: USB disconnect, device number 73 [ 708.024280][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 708.144083][T17549] udevd[17549]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 708.491398][T17745] loop0: detected capacity change from 0 to 1024 [ 708.535786][T17745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.731416][T16558] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.923007][T17802] comedi comedi3: pcl818: I/O base address or length out of range [ 712.818340][T17843] comedi comedi3: pcl818: I/O base address or length out of range [ 714.465505][T17828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.597779][T17858] : renamed from bond_slave_0 (while UP) [ 715.932694][T17877] loop0: detected capacity change from 0 to 8192 [ 715.967025][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 715.967079][ T30] audit: type=1804 audit(1786064584.371:442): pid=17877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3683" name="/newroot/35/file0/bus" dev="loop0" ino=1048696 res=1 errno=0 [ 716.477669][ T37] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.762005][T17887] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.113130][T17920] loop9: detected capacity change from 0 to 8192 [ 719.136979][ T30] audit: type=1804 audit(1786064587.541:443): pid=17920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3698" name="/newroot/239/file0/bus" dev="loop9" ino=1048698 res=1 errno=0 [ 719.833996][T17899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.178664][T17950] loop0: detected capacity change from 0 to 8192 [ 721.329626][T17960] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3711'. [ 722.755320][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 723.345775][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 723.356576][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 723.365020][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 723.376984][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 723.385420][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.728271][T18017] loop0: detected capacity change from 0 to 8192 [ 725.507902][T12159] Bluetooth: hci0: command tx timeout [ 726.153174][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 726.177453][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 726.186201][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.200455][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.209398][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 727.587928][T12159] Bluetooth: hci0: command tx timeout [ 728.045396][T18028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.308209][T12159] Bluetooth: hci5: command tx timeout [ 729.667797][T12159] Bluetooth: hci0: command tx timeout [ 730.389434][T12159] Bluetooth: hci5: command tx timeout [ 731.747898][T12159] Bluetooth: hci0: command tx timeout [ 732.467624][T12159] Bluetooth: hci5: command tx timeout [ 733.721943][ T8939] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.557685][T12159] Bluetooth: hci5: command tx timeout [ 734.914160][ T8939] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.344281][ T8939] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.548289][T18148] loop3: detected capacity change from 0 to 256 [ 735.701725][ T8939] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.728918][T18192] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 736.736601][T18196] netlink: 'syz.0.3760': attribute type 1 has an invalid length. [ 736.755586][T18195] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 737.036553][T18207] xt_TCPMSS: Only works on TCP SYN packets [ 737.157182][T18212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3765'. [ 737.488753][T18231] loop3: detected capacity change from 0 to 1024 [ 737.488812][T18230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 737.594869][ T8939] bridge_slave_1: left allmulticast mode [ 737.594937][ T8939] bridge_slave_1: left promiscuous mode [ 737.595184][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.633275][T18231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.705281][ T8939] bridge_slave_0: left allmulticast mode [ 737.705317][ T8939] bridge_slave_0: left promiscuous mode [ 737.705536][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.793420][T18243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.804132][T18243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.857699][T16599] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.119021][ T4249] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 738.119200][T18241] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 738.283691][T18262] loop3: detected capacity change from 0 to 512 [ 738.348903][T18262] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 738.383508][T18262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 738.383658][T18262] System zones: 1-12 [ 738.383906][T18262] EXT4-fs (loop3): orphan cleanup on readonly fs [ 738.384189][T18262] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3775: invalid indirect mapped block 12 (level 1) [ 738.384228][T18262] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 738.424659][T18262] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3775: invalid indirect mapped block 2 (level 2) [ 738.424727][T18262] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 738.434107][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 738.434131][ C0] EXT4-fs (loop3): initial error at time 1786064606: ext4_free_branches:1023: inode 11 [ 738.434157][ C0] EXT4-fs (loop3): last error at time 1786064606: ext4_free_branches:1023: inode 11 [ 738.481315][T18262] EXT4-fs (loop3): 1 truncate cleaned up [ 738.494763][T18262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 738.604267][T16599] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 738.813942][ T8939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.878424][ T8939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.908985][ T8939] bond0 (unregistering): Released all slaves [ 739.392761][T18281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.403886][T18281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.021198][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 740.075878][T18011] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.076092][T18011] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.077149][T18011] bridge_slave_0: entered allmulticast mode [ 740.080102][T18011] bridge_slave_0: entered promiscuous mode [ 740.215143][T18011] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.215253][T18011] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.215424][T18011] bridge_slave_1: entered allmulticast mode [ 740.220597][T18011] bridge_slave_1: entered promiscuous mode [ 740.381554][T18011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.508503][T18298] loop9: detected capacity change from 0 to 1024 [ 740.516184][T18298] EXT4-fs: Ignoring removed bh option [ 740.532072][T18298] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 740.566689][ T30] audit: type=1800 audit(1786064608.971:444): pid=18298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3787" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 740.571983][T18298] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3787: bg 0: block 409: padding at end of block bitmap is not set [ 740.572682][T18298] EXT4-fs (loop9): Remounting filesystem read-only [ 740.572954][T18298] EXT4-fs (loop9): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 740.654598][T13809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.768597][T18011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.820983][T18034] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.828880][T18034] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.829051][T18034] bridge_slave_0: entered allmulticast mode [ 740.844482][T18034] bridge_slave_0: entered promiscuous mode [ 740.861549][T18034] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.861672][T18034] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.861817][T18034] bridge_slave_1: entered allmulticast mode [ 740.867340][T18034] bridge_slave_1: entered promiscuous mode [ 740.941697][T18011] team0: Port device team_slave_0 added [ 740.945695][T18011] team0: Port device team_slave_1 added [ 741.553708][T18034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.557184][T18034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.562620][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 741.576613][T18011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.576629][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.576652][T18011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.631762][T18325] comedi comedi3: pcl818: I/O base address or length out of range [ 741.821598][T18011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.832229][T18011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.858380][T18011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.956900][T18034] team0: Port device team_slave_0 added [ 742.087662][ T8939] hsr_slave_0: left promiscuous mode [ 742.107691][ T8939] hsr_slave_1: left promiscuous mode [ 742.108645][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.108668][ T8939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.150866][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.150905][ T8939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.229972][ T8939] veth1_macvtap: left promiscuous mode [ 742.230030][ T8939] veth0_macvtap: left promiscuous mode [ 742.230784][ T8939] veth1_vlan: left promiscuous mode [ 742.230859][ T8939] veth0_vlan: left promiscuous mode [ 742.577754][ T5348] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 742.728703][ T8939] team0 (unregistering): Port device team_slave_1 removed [ 742.747651][ T5348] usb 10-1: Using ep0 maxpacket: 32 [ 742.750242][ T5348] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 742.751511][ T5348] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 742.751536][ T5348] usb 10-1: config 0 has no interface number 0 [ 742.751577][ T5348] usb 10-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 742.751602][ T5348] usb 10-1: config 0 interface 184 has no altsetting 0 [ 742.753667][ T5348] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.753691][ T5348] usb 10-1: Product: syz [ 742.753706][ T5348] usb 10-1: Manufacturer: syz [ 742.753729][ T5348] usb 10-1: SerialNumber: syz [ 742.756573][ T5348] usb 10-1: config 0 descriptor?? [ 742.757481][T18329] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 742.808152][ T8939] team0 (unregistering): Port device team_slave_0 removed [ 742.956938][T18034] team0: Port device team_slave_1 added [ 742.960854][T18329] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 743.050376][T18011] hsr_slave_0: entered promiscuous mode [ 743.058560][T18011] hsr_slave_1: entered promiscuous mode [ 743.060637][T18011] debugfs: 'hsr0' already exists in 'hsr' [ 743.060659][T18011] Cannot create hsr debugfs directory [ 743.080378][T18034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.080402][T18034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.081422][T18034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.083993][T18034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.084009][T18034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.084058][T18034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.342042][T18034] hsr_slave_0: entered promiscuous mode [ 743.347074][T18034] hsr_slave_1: entered promiscuous mode [ 743.350450][T18034] debugfs: 'hsr0' already exists in 'hsr' [ 743.350503][T18034] Cannot create hsr debugfs directory [ 743.398675][ T5348] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 743.398721][ T5348] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 743.614306][ T5348] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 743.614354][ T5348] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 743.614392][ T5348] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 743.614638][ T5348] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -61 [ 744.202271][ T8939] IPVS: stop unused estimator thread 0... [ 744.361116][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19 [ 745.341104][ T5750] usb 10-1: USB disconnect, device number 5 [ 745.516782][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3797'. [ 747.062898][T18382] comedi comedi3: pcl818: I/O base address or length out of range [ 747.282225][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.282300][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.429216][ T5931] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.784531][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20 [ 748.222601][ T5931] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.604690][ T5931] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.989164][ T5931] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.269037][T18011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 749.306332][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.316571][T18011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 749.353970][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.362802][T18011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 749.385943][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.438646][T18011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 749.501713][T18011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.361261][ T5931] bridge_slave_1: left allmulticast mode [ 750.367139][ T5931] bridge_slave_1: left promiscuous mode [ 750.374115][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.448419][ T5931] bridge_slave_0: left allmulticast mode [ 750.448456][ T5931] bridge_slave_0: left promiscuous mode [ 750.449056][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.939947][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.998202][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.042457][ T5931] bond0 (unregistering): Released all slaves [ 751.339049][T18464] mmap: syz.0.3813 (18464): VmData 37597184 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 751.897333][T18476] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3818'. [ 752.079938][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3820'. [ 752.158501][T18480] bond0: option lp_interval: invalid value (0) [ 752.164906][T18480] bond0: option lp_interval: allowed values 1 - 2147483647 [ 752.286225][T18484] loop9: detected capacity change from 0 to 2048 [ 752.344845][T18484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.344971][T18484] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.420078][T13809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.828748][ T5931] hsr_slave_0: left promiscuous mode [ 752.851730][ T5931] hsr_slave_1: left promiscuous mode [ 752.853634][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.853657][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.879995][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.880046][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.955410][ T5931] veth1_macvtap: left promiscuous mode [ 752.955461][ T5931] veth0_macvtap: left promiscuous mode [ 752.955549][ T5931] veth1_vlan: left promiscuous mode [ 752.955613][ T5931] veth0_vlan: left promiscuous mode [ 753.679836][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 753.723379][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 754.060523][T18011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.259702][T18011] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.429630][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.429772][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.431518][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.431614][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.609936][T18034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 754.651075][T18034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 754.682406][T18549] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3826'. [ 754.722472][T18034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 754.804381][T18034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 754.815594][T18034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 754.857305][T18034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 754.875469][T18034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 754.915304][T18034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.336863][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 755.366415][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 755.380807][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 755.397704][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 755.411448][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 755.499891][ T5932] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.764890][T18034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.836069][T18034] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.881191][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.881338][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.925010][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.925130][ T8939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.165357][T18011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.661449][T18609] loop9: detected capacity change from 0 to 1024 [ 756.678151][T18609] EXT4-fs: Ignoring removed orlov option [ 756.715288][T18609] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.901995][T13809] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.963949][ T30] audit: type=1326 audit(1786064625.351:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18615 comm="syz.0.3835" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eb4d9e0d9 code=0x0 [ 757.406378][ T5931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.510838][T12159] Bluetooth: hci3: command tx timeout [ 757.966303][T18651] BUG: using smp_processor_id() in preemptible [00000000] code: syz.9.3841/18651 [ 757.966351][T18651] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 757.966449][T18651] CPU: 1 UID: 0 PID: 18651 Comm: syz.9.3841 Not tainted syzkaller #0 PREEMPT(full) [ 757.966476][T18651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.966491][T18651] Call Trace: [ 757.966501][T18651] [ 757.966511][T18651] dump_stack_lvl+0xe8/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 757.966544][T18651] check_preemption_disabled+0xd3/0xe0 [ 757.966582][T18651] bpf_mem_cache_free_rcu+0x48/0xc0 [ 757.966613][T18651] rhtab_delete_elem+0x185a/0x1b30 [ 757.966649][T18651] ? rhtab_delete_elem+0x15c/0x1b30 [ 757.966676][T18651] ? check_and_init_map_value+0x57/0x410 [ 757.966722][T18651] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 757.966767][T18651] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 757.966795][T18651] bpf_map_do_batch+0x445/0x630 [ 757.966837][T18651] __sys_bpf+0x906/0xd90 [ 757.966865][T18651] ? do_raw_spin_lock+0x70/0x2f0 [ 757.966895][T18651] ? __pfx___sys_bpf+0x10/0x10 [ 757.966918][T18651] ? do_futex+0x3e7/0x4e0 [ 757.966976][T18651] ? __pfx___se_sys_futex+0x10/0x10 [ 757.967000][T18651] ? rcu_is_watching+0x15/0xb0 [ 757.967031][T18651] __x64_sys_bpf+0xba/0xd0 [ 757.967073][T18651] do_syscall_64+0x166/0x510 [ 757.967097][T18651] ? trace_irq_disable+0x3b/0x140 [ 757.967116][T18651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.967139][T18651] ? clear_bhb_loop+0x40/0x90 [ 757.967163][T18651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.967184][T18651] RIP: 0033:0x7f0ae2b9e0d9 [ 757.967203][T18651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.967220][T18651] RSP: 002b:00007f0ae3b4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.967244][T18651] RAX: ffffffffffffffda RBX: 00007f0ae2e25fa0 RCX: 00007f0ae2b9e0d9 [ 757.967260][T18651] RDX: 0000000000000038 RSI: 00002000000018c0 RDI: 0000000000000019 [ 757.967273][T18651] RBP: 00007f0ae2c35024 R08: 0000000000000000 R09: 0000000000000000 [ 757.967287][T18651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.967300][T18651] R13: 00007f0ae2e26038 R14: 00007f0ae2e25fa0 R15: 00007ffeead2f0c8 [ 757.967331][T18651] [ 758.148452][ T5931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.920854][ T5931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.816415][ T5931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.542018][ T5931] bridge_slave_1: left allmulticast mode [ 760.542109][ T5931] bridge_slave_1: left promiscuous mode [ 760.542705][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.598902][ T5931] bridge_slave_0: left allmulticast mode [ 760.598953][ T5931] bridge_slave_0: left promiscuous mode [ 760.599176][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.142812][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.193877][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.229511][ T5931] bond0 (unregistering): Released all slaves [ 762.198921][ T5931] hsr_slave_0: left promiscuous mode [ 762.237730][ T5931] hsr_slave_1: left promiscuous mode [ 762.238721][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.238743][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.269616][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.269656][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.348411][ T5931] veth1_macvtap: left promiscuous mode [ 762.348466][ T5931] veth0_macvtap: left promiscuous mode [ 762.348557][ T5931] veth1_vlan: left promiscuous mode [ 762.348629][ T5931] veth0_vlan: left promiscuous mode [ 762.873674][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 762.908505][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 763.080024][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 763.525137][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 764.011601][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 764.480332][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 765.156055][ T5931] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.393668][ T5931] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.700031][ T5931] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.913941][ T5931] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.622962][ T5931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.889867][ T5931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0