last executing test programs: 31m51.276801879s ago: executing program 32 (id=28): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = dup(r0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x7, 0x0, 0x0) 29m43.746746896s ago: executing program 0 (id=263): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x1, 0xa, 0x80000, 0x3b32, "f7000000000041942f7500", '\x00\x00\a\x00', "0300", "f400", ["50d5de5200000000000000b6", '\x00', "0c436d743c97c443084000", "ff81000000008000"]}) 29m42.262459549s ago: executing program 0 (id=267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) shutdown(0xffffffffffffffff, 0x2) shutdown(r0, 0x1) 29m40.83440199s ago: executing program 0 (id=271): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000), 0x4) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 29m37.278682436s ago: executing program 0 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x1, 0x0, &(0x7f0000000a40)="82"}) syz_emit_ethernet(0xc5, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff884700000000000000000000000000000000401a00a7006500000e219078e0000002e0000001860a346715960ce5e061445433c1e00000017fffffff0a010100000000080000000000000007ac1414aa000089880a016e9ab6960008e000000100000003ac1414bb0000008a0000000000000006ac14140a7eaa00010001ac1414bb00000005890bed0a010102e00000020000004e204e2204519078c84753b9081af4edab9464977e1a668761d696a7c692", @ANYRES16=r2], &(0x7f0000000180)={0x1, 0x1, [0x929, 0x19e, 0x221, 0x66f]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r9, &(0x7f0000000000)='2', 0x1, 0x4fed0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 29m36.247743961s ago: executing program 0 (id=276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000540)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x20008, 0xc, 0x8, 0x574, 0x1, 0x0, 0x0, 0x80, 0x5}}, 0x50) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x40200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x4000) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0xff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x644}, 0x1, 0x0, 0x0, 0x48100}, 0x8045) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f00000009c0)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x30, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x80) 29m33.470215544s ago: executing program 0 (id=280): syz_open_dev$cec(0x0, 0x0, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0xa) sendmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e7f035a00"], 0x10}}], 0x1, 0x400c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) open_tree(0xffffffffffffffff, 0x0, 0x89101) 29m18.351351197s ago: executing program 33 (id=280): syz_open_dev$cec(0x0, 0x0, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0xa) sendmmsg(r2, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e7f035a00"], 0x10}}], 0x1, 0x400c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) open_tree(0xffffffffffffffff, 0x0, 0x89101) 27m12.202091803s ago: executing program 5 (id=500): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0xfe, 0x1222, &(0x7f00000024c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) gettid() syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x14, r2, 0x301, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000100), 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x4d, 0x3, 0x8}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffd}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x6}) write$tcp_mem(r4, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 27m9.934305957s ago: executing program 5 (id=503): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x800, 0x11) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 27m8.774205205s ago: executing program 5 (id=506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f00000000c0)=0x446, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) unlink(&(0x7f00000003c0)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 27m7.82984407s ago: executing program 5 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4000800) 27m6.670329007s ago: executing program 5 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000002480)={[{@numtail}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_lower}, {@utf8no}]}, 0x23, 0x34c, &(0x7f0000002100)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26}, 0x28) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) getdents64(r1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x80) ioctl$AUTOFS_IOC_READY(r0, 0xc0049364, 0x800000000000001) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, &(0x7f0000000340)) fanotify_init(0x202, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xc0800, 0x0) 27m2.336312594s ago: executing program 5 (id=519): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) unshare(0x2040400) r1 = eventfd(0x3) sync_file_range(r1, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x4, "000000000000de6bd7e000000009000000f01800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x4, "a9780d4dc37a1d5c99c42eafb2723b49e4ed00a0172578e35bde00010000ff00"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="0bc5b80c73989ba81a2582ea1e95ae2bc973321561d3bce45d1dc75ce1a9dbfccc39950a7fe9b5c34653513d77a1b3e5964e434a3d3d420a2c9daf87d5c2199cea3038c11ad29f7e8875a9c71f67e492b2df1d34b513064b3772f0e03c90c6fd4c7bb2add7765809db75f3c34c7dfbf3b84fef8e23c6da74e3d0675621bc37dd6299ffa8982048b851ff43f35f5bfafa7adee8aff2a7fc7a9edbe81a5ce87b548e1e16476a534ba57acf499507e26eff44b180cd1dbac8fdc3506cd4cc4141c3042ea132cc2685c81a81f17646cbfd58672c7f569f72f6", 0xd7, r6) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 26m46.347914111s ago: executing program 34 (id=519): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) unshare(0x2040400) r1 = eventfd(0x3) sync_file_range(r1, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x4, "000000000000de6bd7e000000009000000f01800"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x4, "a9780d4dc37a1d5c99c42eafb2723b49e4ed00a0172578e35bde00010000ff00"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r4, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="0bc5b80c73989ba81a2582ea1e95ae2bc973321561d3bce45d1dc75ce1a9dbfccc39950a7fe9b5c34653513d77a1b3e5964e434a3d3d420a2c9daf87d5c2199cea3038c11ad29f7e8875a9c71f67e492b2df1d34b513064b3772f0e03c90c6fd4c7bb2add7765809db75f3c34c7dfbf3b84fef8e23c6da74e3d0675621bc37dd6299ffa8982048b851ff43f35f5bfafa7adee8aff2a7fc7a9edbe81a5ce87b548e1e16476a534ba57acf499507e26eff44b180cd1dbac8fdc3506cd4cc4141c3042ea132cc2685c81a81f17646cbfd58672c7f569f72f6", 0xd7, r6) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 24m17.201768727s ago: executing program 6 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000540)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x20008, 0xc, 0x8, 0x574, 0x1, 0x0, 0x0, 0x80, 0x5}}, 0x50) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x40200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x1, 0x4000) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0xff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x644}, 0x1, 0x0, 0x0, 0x48100}, 0x8045) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10) getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f00000009c0)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x30, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x80) 24m16.190874203s ago: executing program 6 (id=765): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x3b3c03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000040), 0x0, 0x300}) 24m14.763403394s ago: executing program 6 (id=767): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) syz_clone(0x25d94400, 0x0, 0x0, 0x0, 0x0, 0x0) 24m11.033828782s ago: executing program 6 (id=773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) read$dsp(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000900)={0x1d, r6, 0x1}, 0x18) sendmmsg$unix(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)="bd", 0x1}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x2, 0x1d3) 24m9.690734212s ago: executing program 6 (id=776): syz_clone3(&(0x7f0000000500)={0x280002000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x100000000006, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000280)=@short={0xb, @remote, @rose, 0x1, @rose}, &(0x7f0000000340)=0x1c, 0x1800) accept4(r4, 0x0, &(0x7f00000003c0), 0x800) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x600}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000000) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x28) syz_mount_image$xfs(&(0x7f0000000380), &(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200c00, &(0x7f0000000040)={[{@lazytime}, {@uqnoenforce}, {}, {@prjquota}, {@grpquota}, {@gquota}, {@nogrpid}]}, 0xb, 0x96e3, &(0x7f0000009640)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="f7"], 0x0, 0x199, &(0x7f0000000000)="$eJzs0b9rE2Ecx/H397nLJS1UOC0iEWzAYrxQbS5VB6fDKUIPHBwNesSzKSZoeh1sseAiglT9F3Sq4KJCnUQUnIuD4KDn0k2aQZwc5CR3j/0nfF5wfPh+uR8Pn+slw6QM/KHSJSBncYBPCDYwI8VOqSLf6PmHzntFcEHPmzqf66wma+s3o34/Xqmdr+HCi9L+QuBXvtu/J3nFYcVICJAvP+92I7kWkgUM1PUQd5HGI6wOQ+8xVXuK6atYZPVNLiqGjj7I4PZ8srZ+ankQLcVLMbQWzjXPNJtnW/M3lvtxcxvxHoriKRt4IeUjTHgblDrc37EnmRPE66nUksYIp8OTHevk8blxP3tkCO/rI8rf7F5NXeYElSu427Q5JDzDCpldZEJhk3+ojVxSr8Wf/GxDUcbp7i1gWslvZyuQvYr4u5TqPq2Gz4ILVQ7ygQcpsyntlK2U3e/MyNtxRf96tfPCX+rpKMfA4U60urriO/BR6iGt8eXCVP46lZ/LhXf6mTwy+Kr/qGEYhmEYhmEYhvE/+BsAAP//6BheVg==") 24m6.684334658s ago: executing program 6 (id=782): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) kexec_load(0x8, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000040)="d56f03a7d2e62a63ee1675d1aed9ff55f638eeaec89e20b769322901420c5c2157ea8a52a440d2e46521e1eab287cf5d88064a03eeb7cb3bad450e4a7e41f28327616be7667193ea71484831cb38bee749c4514e28ab0a7bacd0e9ec07106e1cc636b1f3af9206c77f77d71a5c1872e7339179b99527e137b8f42b3da1c2510164f26c776f5651582ece949aa6a704", 0x8f, 0x9, 0x7fffffff}, {&(0x7f0000000100)="e1430afa96a385535d56303c2c74b30277623d417138f33aba1204b056e6aa8d973d6ea81c62bc089098", 0x2a, 0x7, 0x1}, {&(0x7f0000000240)="abafafdfa95badb79dd898ab1e951e7b6c467f2e547196c5b50a361348b233e9c3cdbf8f17e8b85d802b22c805c73355bb93e7ed7aca79e49642ad2ff7d726e0bd03dbedccc6bd890bd71be74f1d02cd927e70c147d9b6c329ee71b818fa60f3fb811012073806da83695e", 0x6b, 0xd, 0x7}, {&(0x7f0000000340)="b78492fbf01425dcf615abd5633a90a98ee9211d8bc6ec4c8482e0b48937824946a83d894430ab61efe396bb80d75e0d4b1a7b813049a7a0570474cf02f996ae4a095a964261ae5f09564961f6ca79a4a6a8bea8ebcd63e043a52c6c94a3e058a2c07bb1afcd525d19b14fb3f42baa", 0x6f, 0x8, 0xfffffffffffffffc}, {&(0x7f00000003c0)="4e7fa1cf8cb5f9f2ad22dc170f5d0a7e46f271409b23c1cd631c10f1817364fa233a8677018503843012d168e9db27e0353f6e07c1317966fc7ca4c01dd54fb74abb77c341ef4f1a3db7894b7dcca271684a591fa6f672b5568056e426e9a65b61ff7f274946618139c60a5c57a568bf01e363dc57c69db9a483a7abf7f3c6feb9a570120a9d1da08295f9b97940d7c22e16e2fd805a1ccf478280ea95e09de792ffc729a61e6098fa1ce0bc253b324a7ed441a0b57248ea49e5658796ec4287d78e653d7fef35cd02508dd2adea5af32b9b3ea6dbbc94879b88", 0xda, 0x5, 0x7b}, {&(0x7f00000004c0)="73f766d217283291cdd776104fb1418ec78b20cb94880f0c60e2b9bcaa22d31c82a5addf1151867fbd022fb65ac3b7f39bb5fe23400a7bd47ad4984aa00e2fbd67746857248af5c6c03e590b41357bb0e5c73b0d670b6e2e8537667b9a7c7433f0c93abd15f911100ac94f6bcda9eb7ce657ab60a6ae39d432099401d23df0d35edaff3bc18fd6988604bcad37c522de0d9fcee586c99d249614737a299262fcb00156b7916ec4b25516a25dce9235c0e5a649c94f740d28c43cf990c794c2084bc71fa960a898bb8bb459bc50357d3a47e8171fad4ea3ab", 0xd8, 0xa0, 0x1}], 0x280000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x2) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) 23m51.296386974s ago: executing program 35 (id=782): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) kexec_load(0x8, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000040)="d56f03a7d2e62a63ee1675d1aed9ff55f638eeaec89e20b769322901420c5c2157ea8a52a440d2e46521e1eab287cf5d88064a03eeb7cb3bad450e4a7e41f28327616be7667193ea71484831cb38bee749c4514e28ab0a7bacd0e9ec07106e1cc636b1f3af9206c77f77d71a5c1872e7339179b99527e137b8f42b3da1c2510164f26c776f5651582ece949aa6a704", 0x8f, 0x9, 0x7fffffff}, {&(0x7f0000000100)="e1430afa96a385535d56303c2c74b30277623d417138f33aba1204b056e6aa8d973d6ea81c62bc089098", 0x2a, 0x7, 0x1}, {&(0x7f0000000240)="abafafdfa95badb79dd898ab1e951e7b6c467f2e547196c5b50a361348b233e9c3cdbf8f17e8b85d802b22c805c73355bb93e7ed7aca79e49642ad2ff7d726e0bd03dbedccc6bd890bd71be74f1d02cd927e70c147d9b6c329ee71b818fa60f3fb811012073806da83695e", 0x6b, 0xd, 0x7}, {&(0x7f0000000340)="b78492fbf01425dcf615abd5633a90a98ee9211d8bc6ec4c8482e0b48937824946a83d894430ab61efe396bb80d75e0d4b1a7b813049a7a0570474cf02f996ae4a095a964261ae5f09564961f6ca79a4a6a8bea8ebcd63e043a52c6c94a3e058a2c07bb1afcd525d19b14fb3f42baa", 0x6f, 0x8, 0xfffffffffffffffc}, {&(0x7f00000003c0)="4e7fa1cf8cb5f9f2ad22dc170f5d0a7e46f271409b23c1cd631c10f1817364fa233a8677018503843012d168e9db27e0353f6e07c1317966fc7ca4c01dd54fb74abb77c341ef4f1a3db7894b7dcca271684a591fa6f672b5568056e426e9a65b61ff7f274946618139c60a5c57a568bf01e363dc57c69db9a483a7abf7f3c6feb9a570120a9d1da08295f9b97940d7c22e16e2fd805a1ccf478280ea95e09de792ffc729a61e6098fa1ce0bc253b324a7ed441a0b57248ea49e5658796ec4287d78e653d7fef35cd02508dd2adea5af32b9b3ea6dbbc94879b88", 0xda, 0x5, 0x7b}, {&(0x7f00000004c0)="73f766d217283291cdd776104fb1418ec78b20cb94880f0c60e2b9bcaa22d31c82a5addf1151867fbd022fb65ac3b7f39bb5fe23400a7bd47ad4984aa00e2fbd67746857248af5c6c03e590b41357bb0e5c73b0d670b6e2e8537667b9a7c7433f0c93abd15f911100ac94f6bcda9eb7ce657ab60a6ae39d432099401d23df0d35edaff3bc18fd6988604bcad37c522de0d9fcee586c99d249614737a299262fcb00156b7916ec4b25516a25dce9235c0e5a649c94f740d28c43cf990c794c2084bc71fa960a898bb8bb459bc50357d3a47e8171fad4ea3ab", 0xd8, 0xa0, 0x1}], 0x280000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x2) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) 18m11.755699298s ago: executing program 1 (id=1335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) chmod(&(0x7f0000001140)='./file1\x00', 0x80) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x70c1, @empty, 0x7}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x376060b0}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) syz_open_dev$MSR(&(0x7f0000000180), 0x300, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 18m11.394368024s ago: executing program 1 (id=1336): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x18041, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000540)=0xe8) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000400)=@nullb, r2, &(0x7f0000000580)={0x7fff, 0x8, 0x1, 0x1}) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, r2, &(0x7f0000000240)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@loopback, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040346, r5}) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x800, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r7, &(0x7f0000000040)=""/4109, 0x100d) 18m10.31836863s ago: executing program 1 (id=1339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(0x0, 0x89, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/15, 0xf, 0x3) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000080)=0x6, 0x4) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x8000) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000003c0)={0x8005, 0xffffffffffffffff, 0x1}) pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffc, 0x10000007, 0x0, 0x9, 0x4, 0x1, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x470c, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) 18m6.466009099s ago: executing program 1 (id=1340): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18m5.09394874s ago: executing program 1 (id=1346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) chmod(&(0x7f0000001140)='./file1\x00', 0x80) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x70c1, @empty, 0x7}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x376060b0}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) close(r4) syz_open_dev$MSR(&(0x7f0000000180), 0x300, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 18m3.16816332s ago: executing program 1 (id=1351): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 18m2.029050027s ago: executing program 3 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) kexec_load(0x8, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000040)="d56f03a7d2e62a63ee1675d1aed9ff55f638eeaec89e20b769322901420c5c2157ea8a52a440d2e46521e1eab287cf5d88064a03eeb7cb3bad450e4a7e41f28327616be7667193ea71484831cb38bee749c4514e28ab0a7bacd0e9ec07106e1cc636b1f3af9206c77f77d71a5c1872e7339179b99527e137b8f42b3da1c2510164f26c776f5651582ece949aa6a704", 0x8f, 0x9, 0x7fffffff}, {&(0x7f0000000100)="e1430afa96a385535d56303c2c74b30277623d417138f33aba1204b056e6aa8d973d6ea81c62bc089098", 0x2a, 0x7, 0x1}, {&(0x7f0000000240)="abafafdfa95badb79dd898ab1e951e7b6c467f2e547196c5b50a361348b233e9c3cdbf8f17e8b85d802b22c805c73355bb93e7ed7aca79e49642ad2ff7d726e0bd03dbedccc6bd890bd71be74f1d02cd927e70c147d9b6c329ee71b818fa60f3fb811012073806da83695e", 0x6b, 0xd, 0x7}, {&(0x7f0000000340)="b78492fbf01425dcf615abd5633a90a98ee9211d8bc6ec4c8482e0b48937824946a83d894430ab61efe396bb80d75e0d4b1a7b813049a7a0570474cf02f996ae4a095a964261ae5f09564961f6ca79a4a6a8bea8ebcd63e043a52c6c94a3e058a2c07bb1afcd525d19b14fb3f42baa", 0x6f, 0x8, 0xfffffffffffffffc}, {&(0x7f00000003c0)="4e7fa1cf8cb5f9f2ad22dc170f5d0a7e46f271409b23c1cd631c10f1817364fa233a8677018503843012d168e9db27e0353f6e07c1317966fc7ca4c01dd54fb74abb77c341ef4f1a3db7894b7dcca271684a591fa6f672b5568056e426e9a65b61ff7f274946618139c60a5c57a568bf01e363dc57c69db9a483a7abf7f3c6feb9a570120a9d1da08295f9b97940d7c22e16e2fd805a1ccf478280ea95e09de792ffc729a61e6098fa1ce0bc253b324a7ed441a0b57248ea49e5658796ec4287d78e653d7fef35cd02508dd2adea5af32b9b3ea6dbbc94879b88", 0xda, 0x5, 0x7b}, {&(0x7f00000004c0)="73f766d217283291cdd776104fb1418ec78b20cb94880f0c60e2b9bcaa22d31c82a5addf1151867fbd022fb65ac3b7f39bb5fe23400a7bd47ad4984aa00e2fbd67746857248af5c6c03e590b41357bb0e5c73b0d670b6e2e8537667b9a7c7433f0c93abd15f911100ac94f6bcda9eb7ce657ab60a6ae39d432099401d23df0d35edaff3bc18fd6988604bcad37c522de0d9fcee586c99d249614737a299262fcb00156b7916ec4b25516a25dce9235c0e5a649c94f740d28c43cf990c794c2084bc71fa960a898bb8bb459bc50357d3a47e8171fad4ea3ab", 0xd8, 0xa0, 0x1}], 0x280000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x2) 18m1.86040719s ago: executing program 3 (id=1356): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000001030002"], 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000a80)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8937, &(0x7f0000000000)={'batadv_slave_1\x00', @random="0100002010ff"}) accept(r0, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x737, '\x00', 0x0, r3, 0x0, 0x2}, 0x50) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) openat$mice(0xffffff9c, &(0x7f0000000080), 0x8000) close_range(r5, 0xffffffffffffffff, 0x0) 17m58.158369627s ago: executing program 3 (id=1360): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40014) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x200) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write(r1, &(0x7f0000000680)="ee40a7761e9508745cec1b9be97aad5d8294e67b2eea7a92394b60c0a8de0b3316420e5a67c226d9addeb539cecafbd707699bf7882f5d95480f74d161cb12172e7951b3095b5912c5e5c97d3f248b37088a70bb5b81cd9399da9098787d745719f4193182806bf456be76f5e5f6e3c03ae0f3419c8cbe00000000000000051d4bbfbdd4cf45ce7500041e1d0919d008b1e7fd732ce672f4dcc700c66451dbf3c3ad34c64188b6cfd06d4d6919de7c3dbd41d9e6c0deffbe205fdc4d640f7383a344a26ca2c8bef66840a090ff75bb2ec60a9690b7bf29f40d976ef55a", 0xdd) r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(r3, &(0x7f0000000400)=[{{}, 0x14, 0x1}], 0x18) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) read$alg(r5, &(0x7f00000012c0)=""/4109, 0x100d) 17m56.073590508s ago: executing program 3 (id=1365): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) r5 = epoll_create(0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)='n7', 0x2}], 0x1}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001580)=[{}]}) 17m54.433463014s ago: executing program 3 (id=1368): syz_clone3(&(0x7f0000000500)={0x280002000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x100000000006, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000280)=@short={0xb, @remote, @rose, 0x1, @rose}, &(0x7f0000000340)=0x1c, 0x1800) accept4(r4, 0x0, &(0x7f00000003c0), 0x800) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x600}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x28) syz_mount_image$xfs(&(0x7f0000000380), &(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200c00, &(0x7f0000000040)={[{@lazytime}, {@uqnoenforce}, {}, {@prjquota}, {@grpquota}, {@gquota}, {@nogrpid}]}, 0xb, 0x96e3, &(0x7f0000009640)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="f7"], 0x0, 0x199, &(0x7f0000000000)="$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") 17m48.81451437s ago: executing program 3 (id=1377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 17m47.809371305s ago: executing program 36 (id=1351): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 17m33.090209891s ago: executing program 37 (id=1377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 1m38.289691262s ago: executing program 7 (id=3268): socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 1m38.048984476s ago: executing program 7 (id=3270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m35.817945591s ago: executing program 7 (id=3275): ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) socket$packet(0x11, 0x2, 0x300) 1m34.361636203s ago: executing program 7 (id=3279): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500"/51], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m29.690160146s ago: executing program 7 (id=3291): socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, 0x0, 0x0, 0x182, 0x0) 1m28.950067878s ago: executing program 7 (id=3293): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m13.427625239s ago: executing program 38 (id=3293): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 24.624938597s ago: executing program 2 (id=3383): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000280)=0x68) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f0000000040)={0x3fffffff, 0x0, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) write$sysctl(r5, 0x0, 0x0) syz_emit_ethernet(0x469, &(0x7f0000000400)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x433, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [{0x0, 0x9, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}, {0x0, 0x22, "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"}, {0x3, 0xe, "41489859faad6b7894fe1137424008d432183a0113681c77fc82aec87a233d898a11c5cd98182e0722cd47409df61e0bba337962ebd666210dc03bdacde3052d2e9c5aa731b244867e503ea12228ee0be34e90eb3bf9d5935a7bf990cfb04124927b9452145135264a5e76623102"}]}}}}}}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) r6 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000c80)={0x2, @sliced={0x8, [0x4, 0x7fff, 0x8, 0xf800, 0x2, 0x9, 0x2, 0x7, 0x1, 0xfff9, 0x401, 0xa9ef, 0x6, 0x2, 0x4, 0x6, 0x2, 0x38, 0x1, 0xffff, 0x8, 0x7, 0x3, 0xfffd, 0x5, 0xacb, 0x3, 0x7, 0x5f, 0x40, 0x4, 0xfc00, 0x2, 0x2, 0x0, 0xfffc, 0x2, 0x972, 0x1ff, 0x8, 0xc00, 0xddb, 0x4, 0x4, 0xd477, 0x9, 0x8], 0x2}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) 14.844687699s ago: executing program 2 (id=3397): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) fdatasync(r6) 14.445497525s ago: executing program 4 (id=3398): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@nolazytime}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 13.084871927s ago: executing program 4 (id=3402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x1, 0x0, &(0x7f0000000a40)="82"}) syz_emit_ethernet(0xc5, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff884700000000000000000000000000000000401a00a7006500000e219078e0000002e0000001860a346715960ce5e061445433c1e00000017fffffff0a010100000000080000000000000007ac1414aa000089880a016e9ab6960008e000000100000003ac1414bb0000008a0000000000000006ac14140a7eaa00010001ac1414bb00000005890bed0a010102e00000020000004e204e2204519078c84753b9081af4edab9464977e1a668761d696a7c692", @ANYRES16=r2], &(0x7f0000000180)={0x1, 0x1, [0x929, 0x19e, 0x221, 0x66f]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r9, &(0x7f0000000000), 0x0, 0x4fed0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 12.260870219s ago: executing program 2 (id=3404): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3fe, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x34, r7, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 11.981656994s ago: executing program 4 (id=3405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x804}}], 0x1, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c00010000000a000000000008000500", @ANYRES32=r7], 0x38}}, 0x0) r8 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r8, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000900)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40) lstat(&(0x7f00000063c0)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000006480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r2, &(0x7f00000084c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000085c0)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x400c4}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000940), 0x0, &(0x7f0000000b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @rights={{0x10}}], 0x28, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001640)="050bfdca40f3ea7c60ae1eb124081ee8fbdc67b1ed3f4ab7a68cb1d42b759bb2347fec66a2898a3cf2f1a40b0a7660b93595b162899337ca6213bf9357f91fce313389202dc9f571a586bdc5ae5831f13b200b25c92422540daeea08754cbcab5dae12afdefb3ef65d2cc89fd27e380d0fc4517ea6edeb0ca38798e76ce2a5880e412866818dcefd01e35fb52563a7ee1619fc4c78bbbff966e3ad4015176c14c8441716fd5c95854db51ad6ae8cecc395dab762acb0d91eec095d0a429c5ed5ad15572e8fd32771a9c4396b849f1c00", 0xd0}, {&(0x7f0000005080)="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", 0x1000}, {&(0x7f0000001800)="22974aa1cc5f53157ea612f67e8d92bdfda1c36ec2df0aa821a5fe1a1d9599d32593b3690c9c7ac6b6be276fff6eab0e7b6afacf57c93c95c3f585a8b1e567d0a2a7ab730f731355961c3e5f65a40c5f9559430407efd8336976deb8318e80b37a5dccf88f63f234778b3b90856f032db1ac32f14ac4d495098504a43b29794893", 0x81}, {&(0x7f00000018c0)="5291363d2ab71f75bcf74f90d3bf874917bbfbd1f5e0bceb80087567aa76674e4da300b5e0b226d5aba8dc08fae7f8a3ab7aded3570b55214bc3b1bb95cb26f9a73d5c25d0d32275199e5d295b43f5c61b82409b66d1ba4d", 0x58}, {&(0x7f0000001980)="93b4d4234fee07596431c61c6646e6daf4d3c6031c4f1bfcba41317172200bbb14bc5b82e5293a8b1aabf0ee34bd543018fea03f2f47eb5b5f2bb7020d1d4b70fc8902fbb62b93a5f702bbc0a9fe32b282a0f3554c1f48b5e7721a9e5bde2a8c6e63140e81151ec2e5cc19cca7863aab91770b5b3e33d70cfa3ca8e9787b4457464e91f8bb7d713ee39716080c9378b6d3b60515ddc8b032bd41ccd45d544ee28e908fc4", 0xa4}, {&(0x7f0000001740)="b35e2df3f93af82c7d45c7286a3a67ac7bc17b1277aac3ce817f76b11bb7552c7fd5d23095766fce519116c553724e18f68e", 0x32}, {&(0x7f0000001a40)="344d688e7d015c3716ccda6e60599e59e21e0c4825f3ad96e3f30c69faaaa21151eecbd72fd8f7104d7310ef34b668c3c75450da4992cef2b9e9c12ced189bd2b8e10d9c981b42c572c75d9667b510883aaeb6ceb09a650c674dfadd33c61f00624813ea4c565d05e43ba680b5a32fbef1e651b5e6da42348a37de0d03c3fa4a249b32aa3dbe3079c54f4dfa611a6465622f73331272084f37fb5eb234f67e86d435de5f46b813452d8e686a39efba586292", 0xb2}], 0x7, &(0x7f0000001c80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x38, 0x8000}}, {{0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000006340)}], 0x1, &(0x7f0000008540)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, r9, r10}}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r5]}}], 0x60, 0x40000}}], 0x5, 0x4010) mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) 11.044073868s ago: executing program 8 (id=3407): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3fe, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x34, r6, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 9.405508883s ago: executing program 4 (id=3408): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {}]}, @func, @volatile={0x3}, @volatile, @func={0x5, 0x0, 0x0, 0xc, 0x1}, @func_proto, @datasec={0xd, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x1, 0x1000000}, {0x1, 0x2, 0x72800000}, {0x4, 0x5, 0x49e}, {0x1, 0x41a1, 0x2}], "17"}]}}, 0x0, 0xe2}, 0x28) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x400000008000f28, 0x0) splice(r7, 0x0, r6, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) dup3(r3, r2, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0xa100}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000340)=[@request_death, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@fda={0x66646185, 0x5, 0x0, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/144, 0x0, 0x2, 0x14}, @fda={0x66646185, 0xa, 0x0, 0x18}}}}], 0xfffffffffffffe97, 0x1000000, 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0}, 0x94) r10 = epoll_create(0x609f) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x210000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000001740)={0x40000000}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r12}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x20) 9.110927778s ago: executing program 8 (id=3409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d"], 0x5c}}, 0x0) 9.034508159s ago: executing program 9 (id=3410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af000000", 0x17) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 8.219101222s ago: executing program 4 (id=3411): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0xec27, 0x8, 0x20001, 0x40000337}, &(0x7f0000000140), &(0x7f00000001c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x110b, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2000, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f6, &(0x7f0000000080)={'syztnl2\x00', 0x0}) 8.126458863s ago: executing program 9 (id=3412): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) 8.080336784s ago: executing program 2 (id=3413): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3fe, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 7.803132479s ago: executing program 8 (id=3414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000080), 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x1, 0x0, &(0x7f0000000a40)="82"}) syz_emit_ethernet(0xc5, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff884700000000000000000000000000000000401a00a7006500000e219078e0000002e0000001860a346715960ce5e061445433c1e00000017fffffff0a010100000000080000000000000007ac1414aa000089880a016e9ab6960008e000000100000003ac1414bb0000008a0000000000000006ac14140a7eaa00010001ac1414bb00000005890bed0a010102e00000020000004e204e2204519078c84753b9081af4edab9464977e1a668761d696a7c692", @ANYRES16=r2], &(0x7f0000000180)={0x1, 0x1, [0x929, 0x19e, 0x221, 0x66f]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r9, &(0x7f0000000000), 0x0, 0x4fed0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 7.667816281s ago: executing program 9 (id=3415): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 7.507633863s ago: executing program 4 (id=3416): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff", @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080004"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.725760615s ago: executing program 8 (id=3417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0x8, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(0x0, 0x0, 0x0) getrlimit(0xa, &(0x7f0000000180)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) openat$incfs(0xffffffffffffffff, 0x0, 0x2100c0, 0x140) 4.646736447s ago: executing program 9 (id=3418): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) unshare(0x62040200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001640)=""/4096, 0x4, 0x0, 0x15, 0xb4, &(0x7f0000000000)="34e635e979d86c60a0f5dd183e2df077378ee433b9", &(0x7f0000000080)="038595c08d232d0728cb8e35f7cb753f1c11eec64c168492901e8c8837deebc16ffb97ab712a6d54df672944d68f22a933f77babbbc24cdd33eaacfea27dfd150efa80aed3aa8622bc14187a4260f481265adcf27b08fd1659b50e57f6cfba7b0a4eaf4378bc72afe71ccd70e99436f372e259c1216aa6564df015d2abd28d859522881bcdbb9647d54874e656191b42f31cfc9ecf4eb3722ee682e80390fab2967b4ec7a17b027c53c256472cc5d954521c72c4", 0x4, 0x0, 0x200}, 0x50) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0) 2.821178496s ago: executing program 9 (id=3419): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x12) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) close_range(r0, 0xffffffffffffffff, 0x0) 2.705711577s ago: executing program 8 (id=3420): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000440)) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={0x1e0, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x1, 0x0, 0x4000}, [@nested={0x14, 0xbc, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x13, 0x0, 0x0, @fd}]}, @nested={0x1b7, 0x92, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}, @generic="5691c7970d30af800e6500", @typed={0xc, 0x59, 0x0, 0x0, @u64=0x5}, @nested={0xe7, 0x60, 0x0, 0x1, [@generic="686c8f4f8ee6e25904242bef388891bc09ca6717104e7456da9ee685826f21261c8c6b48ed678d1dddcba9d220eb87b3c9b5477501749e0bbaedfb9bc3a1947ded28fb3c4f9730e5bcae9f07e6141cbdd0701e8a5ffd675418a3c5c21ade4eb56cf90e94ad97e37d79eb6e9403d1bc204d7b0b3111577e31260f5b848f93354f70f726e815bee9babcc37337b67f5f8c03366c9b536e29ef62fef1f11380a7bdc70c8b0d91b9a8b9621b515023223263119d65bebdc11329f908ecf1dfc234c037a3c8112f058e5328f84de202f7e82da397ecdaeea840abed3ccaf2db519b0dc86275"]}, @nested={0x4, 0x5c}, @nested={0x6f, 0x20, 0x0, 0x1, [@generic="d411ed0501daff5469bd8d46c366c8a704154edae150c3ad59e548aff8d1ab277eb9d3336f8eed95597b5c2eebc6f48971363999283d4eca1f1b91d5bb5119cda3b1cbbd5817f9f26edc7c8197e830345625403ea6076d919abd87a8f7001008770f81124898bd", @nested={0x4, 0xbc}]}, @generic="b7b73d5bf541ce2c0023c11cd138fb2b04ad3f2147468f42980d6cf57a7014275b92da30594ea619bbfeb3f7"]}]}, 0x1e0}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_TIOCOUTQ(r7, 0x5411, 0x0) 2.653420138s ago: executing program 2 (id=3421): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x1) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3fe, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 1.27681289s ago: executing program 9 (id=3422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) fdatasync(r5) 1.067176103s ago: executing program 8 (id=3423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[r4], 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0xf}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x7351, 0x8001) 0s ago: executing program 2 (id=3424): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) kexec_load(0x8, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000040)="d56f03a7d2e62a63ee1675d1aed9ff55f638eeaec89e20b769322901420c5c2157ea8a52a440d2e46521e1eab287cf5d88064a03eeb7cb3bad450e4a7e41f28327616be7667193ea71484831cb38bee749c4514e28ab0a7bacd0e9ec07106e1cc636b1f3af9206c77f77d71a5c1872e7339179b99527e137b8f42b3da1c2510164f26c776f5651582ece949aa6a704", 0x8f, 0x9, 0x7fffffff}, {&(0x7f0000000100)="e1430afa96a385535d56303c2c74b30277623d417138f33aba1204b056e6aa8d", 0x20, 0x7, 0x1}, {&(0x7f0000000240)="abafafdfa95badb79dd898ab1e951e7b6c467f2e547196c5b50a361348b233e9c3cdbf8f17e8b85d802b22c805c73355bb93e7ed7aca79e49642ad2ff7d726e0bd03dbedccc6bd890bd71be74f1d02cd927e70c147d9b6c329ee71b818fa60f3fb811012073806da83695e", 0x6b, 0xd, 0x7}, {&(0x7f0000000340)="b78492fbf01425dcf615abd5633a90a98ee9211d8bc6ec4c8482e0b48937824946a83d894430ab61efe396bb80d75e0d4b1a7b813049a7a0570474cf02f996ae4a095a964261ae5f09564961f6ca79a4a6a8bea8ebcd63e043a52c6c94a3e058a2c07bb1afcd525d19b14fb3f42baa", 0x6f, 0x8, 0xfffffffffffffffc}, {&(0x7f00000003c0)="4e7fa1cf8cb5f9f2ad22dc170f5d0a7e46f271409b23c1cd631c10f1817364fa233a8677018503843012d168e9db27e0353f6e07c1317966fc7ca4c01dd54fb74abb77c341ef4f1a3db7894b7dcca271684a591fa6f672b5568056e426e9a65b61ff7f274946618139c60a5c57a568bf01e363dc57c69db9a483a7abf7f3c6feb9a570120a9d1da08295f9b97940d7c22e16e2fd805a1ccf478280ea95e09de792ffc729a61e6098fa1ce0bc253b324a7ed441a0b57248ea49e5658796ec4287d78e653d7fef35cd02508dd2adea5af32b9b3ea6dbbc94", 0xd7, 0x5, 0x7b}, {&(0x7f00000004c0)="73f766d217283291cdd776104fb1418ec78b20cb94880f0c60e2b9bcaa22d31c82a5addf1151867fbd022fb65ac3b7f39bb5fe23400a7bd47ad4984aa00e2fbd67746857248af5c6c03e590b41357bb0e5c73b0d670b6e2e8537667b9a7c7433f0c93abd15f911100ac94f6bcda9eb7ce657ab60a6ae39d432099401d23df0d35edaff3bc18fd6988604bcad37c522de0d9fcee586c99d249614737a299262fcb00156b7916ec4b25516a25dce9235c0e5a649c94f740d28c43cf990c794c2084bc71fa960a898bb8bb459bc50357d3a47e8171fad4ea3ab", 0xd8, 0xa0, 0x1}], 0x280000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0x2) 0s ago: executing program 9 (id=3432): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) kernel console output (not intermixed with test programs): t, device number 22 [ 1149.441262][T12958] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1744'. [ 1151.637766][T12976] loop4: detected capacity change from 0 to 1024 [ 1152.114782][T12976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1152.143172][T12976] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.533306][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1153.907119][ T26] audit: type=1326 audit(1751248167.444:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.2.1757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25a198e929 code=0x0 [ 1154.184582][T12985] loop7: detected capacity change from 0 to 32768 [ 1154.199544][T12985] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1154.271115][T12985] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1154.333812][T12985] syz.7.1751: attempt to access beyond end of device [ 1154.333812][T12985] loop7: rw=12288, sector=34359738360, nr_sectors = 8 limit=32768 [ 1154.401025][T12985] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 1154.401025][T12985] inode = 1 19 [ 1154.401025][T12985] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 1154.404993][T13020] loop4: detected capacity change from 0 to 1024 [ 1154.488102][T12985] gfs2: fsid=syz:syz.s: G: s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:3 [ 1154.680980][T12985] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:12985 [syz.7.1751] init_journal+0x1816/0x2300 [ 1154.694183][T13020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1154.791133][T13020] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.491065][T12985] gfs2: fsid=syz:syz.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1155.538043][T12985] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 1155.543939][T13020] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1155.583664][T12985] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 1155.632084][T12985] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 1155.727730][T12985] gfs2: fsid=syz:syz.s: File system withdrawn [ 1156.491347][T13020] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 1156.504467][T13020] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1156.504467][T13020] [ 1156.514361][T13020] EXT4-fs (loop4): Total free blocks count 0 [ 1156.520478][T13020] EXT4-fs (loop4): Free/Dirty block details [ 1156.526554][T13020] EXT4-fs (loop4): free_blocks=4293918720 [ 1156.532039][T12985] CPU: 0 PID: 12985 Comm: syz.7.1751 Not tainted 6.1.142-syzkaller #0 [ 1156.532408][T13020] EXT4-fs (loop4): dirty_blocks=64 [ 1156.540450][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1156.540470][T12985] Call Trace: [ 1156.540478][T12985] [ 1156.540488][T12985] dump_stack_lvl+0x168/0x22e [ 1156.540521][T12985] ? kobject_uevent_env+0x35f/0x8a0 [ 1156.540546][T12985] ? show_regs_print_info+0x12/0x12 [ 1156.540573][T12985] ? load_image+0x3b0/0x3b0 [ 1156.540597][T12985] ? kobject_uevent_env+0x35f/0x8a0 [ 1156.540627][T12985] gfs2_withdraw+0x143f/0x1780 [ 1156.540665][T12985] ? gfs2_lm+0x220/0x220 [ 1156.540688][T12985] ? gfs2_glock_nq+0xcf0/0x14e0 [ 1156.540714][T12985] ? gfs2_consist_inode_i+0xf1/0x110 [ 1156.540737][T12985] gfs2_jdesc_check+0x137/0x290 [ 1156.540771][T12985] check_journal_clean+0x155/0x300 [ 1156.545970][T13020] EXT4-fs (loop4): Block reservation details [ 1156.555975][T12985] ? gfs2_trans_remove_revoke+0x370/0x370 [ 1156.556011][T12985] ? init_journal+0x1816/0x2300 [ 1156.559312][T13020] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 1156.562248][T12985] ? __rwlock_init+0x140/0x140 [ 1156.562285][T12985] ? do_raw_spin_unlock+0x11d/0x230 [ 1156.648730][T12985] ? _raw_spin_unlock+0x24/0x40 [ 1156.653619][T12985] ? gfs2_jdesc_find+0xa7/0xc0 [ 1156.658396][T12985] init_journal+0x1816/0x2300 [ 1156.663093][T12985] ? init_inodes+0xdb/0x320 [ 1156.667623][T12985] ? _compound_head+0x120/0x120 [ 1156.672491][T12985] ? vsnprintf+0x1905/0x1a00 [ 1156.677095][T12985] ? snprintf+0xd7/0x120 [ 1156.681357][T12985] ? init_inodes+0xdb/0x320 [ 1156.685894][T12985] ? vscnprintf+0x80/0x80 [ 1156.690279][T12985] ? gfs2_glock_nq_num+0x17f/0x1c0 [ 1156.695431][T12985] init_inodes+0xdb/0x320 [ 1156.699769][T12985] gfs2_fill_super+0x1718/0x1f80 [ 1156.704727][T12985] ? gfs2_reconfigure+0xcd0/0xcd0 [ 1156.709762][T12985] ? init_locking+0xb8/0x200 [ 1156.714358][T12985] ? sb_set_blocksize+0xa5/0xe0 [ 1156.719217][T12985] get_tree_bdev+0x3f1/0x610 [ 1156.723830][T12985] ? gfs2_reconfigure+0xcd0/0xcd0 [ 1156.728863][T12985] gfs2_get_tree+0x4d/0x1e0 [ 1156.733393][T12985] vfs_get_tree+0x88/0x270 [ 1156.737859][T12985] do_new_mount+0x24a/0xa40 [ 1156.742400][T12985] __se_sys_mount+0x2d6/0x3c0 [ 1156.747094][T12985] ? __x64_sys_mount+0xc0/0xc0 [ 1156.751868][T12985] ? lockdep_hardirqs_on+0x94/0x140 [ 1156.757071][T12985] ? __x64_sys_mount+0x1c/0xc0 [ 1156.761845][T12985] do_syscall_64+0x4c/0xa0 [ 1156.766359][T12985] ? clear_bhb_loop+0x60/0xb0 [ 1156.771038][T12985] ? clear_bhb_loop+0x60/0xb0 [ 1156.775723][T12985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1156.781632][T12985] RIP: 0033:0x7f6ba0d900ca [ 1156.786051][T12985] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.805663][T12985] RSP: 002b:00007f6ba1c37e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1156.814087][T12985] RAX: ffffffffffffffda RBX: 00007f6ba1c37ef0 RCX: 00007f6ba0d900ca [ 1156.822070][T12985] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f6ba1c37eb0 [ 1156.830045][T12985] RBP: 0000200000000400 R08: 00007f6ba1c37ef0 R09: 0000000000200001 [ 1156.838027][T12985] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 1156.846011][T12985] R13: 00007f6ba1c37eb0 R14: 00000000000125bb R15: 0000200000000180 [ 1156.854005][T12985] [ 1157.025536][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1157.122885][T13038] input: syz1 as /devices/virtual/input/input65 [ 1157.316274][T12985] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 1158.904374][ T26] audit: type=1326 audit(1751248172.444:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.9.1772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3ded8e929 code=0x0 [ 1159.189035][T13045] loop4: detected capacity change from 0 to 32768 [ 1159.461720][T13077] loop7: detected capacity change from 0 to 2048 [ 1159.529808][T13077] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1159.559084][T13080] loop8: detected capacity change from 0 to 2048 [ 1159.640755][T13080] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1159.665564][T13085] netlink: 'syz.9.1777': attribute type 3 has an invalid length. [ 1159.728123][T13077] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1159.817566][T13080] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1160.424713][ T8320] EXT4-fs (loop8): unmounting filesystem. [ 1160.451773][ T7018] EXT4-fs (loop7): unmounting filesystem. [ 1160.873236][ T26] audit: type=1326 audit(1751248174.414:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13111 comm="syz.4.1786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2f78e929 code=0x0 [ 1161.510602][T13130] loop4: detected capacity change from 0 to 2048 [ 1161.534089][T13130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1161.707633][T13130] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1162.277838][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1164.016053][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 1164.825503][ T26] audit: type=1326 audit(1751248178.364:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13164 comm="syz.8.1799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd539b8e929 code=0x0 [ 1165.165709][T13147] loop7: detected capacity change from 0 to 32768 [ 1165.200820][T13147] XFS: ikeep mount option is deprecated. [ 1166.771138][ T4326] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1166.961616][ T4326] usb 8-1: Using ep0 maxpacket: 32 [ 1166.982599][ T4326] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 1166.991313][ T4326] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1167.000013][ T4326] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.013541][ T4326] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1167.024398][ T4326] usb 8-1: config 1 has no interface number 0 [ 1167.031614][ T4326] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1167.044260][ T4326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.104780][ T4326] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 1167.196064][T13187] loop4: detected capacity change from 0 to 2048 [ 1167.197603][T13185] loop8: detected capacity change from 0 to 512 [ 1167.272397][T13187] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1167.373821][T13185] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1167.454215][T13187] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1167.486951][T13185] EXT4-fs (loop8): 1 truncate cleaned up [ 1167.552473][T13185] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1167.674751][ T4326] snd_usb_pod 8-1:1.1: set_interface failed [ 1167.723719][ T4326] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 1167.760566][ T4326] snd_usb_pod: probe of 8-1:1.1 failed with error -71 [ 1167.995751][ T4326] usb 8-1: USB disconnect, device number 15 [ 1168.317223][ T8320] EXT4-fs (loop8): unmounting filesystem. [ 1168.690210][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1170.266279][T13243] loop9: detected capacity change from 0 to 2048 [ 1170.615210][T13243] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1170.690996][T13248] loop8: detected capacity change from 0 to 64 [ 1170.779684][T13248] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 1170.807714][T13213] loop7: detected capacity change from 0 to 32768 [ 1170.882070][T13250] loop4: detected capacity change from 0 to 512 [ 1170.939141][T13250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1171.221423][T13239] binder: 13236:13239 ioctl c0306201 200000000780 returned -11 [ 1171.246709][T13250] EXT4-fs (loop4): 1 truncate cleaned up [ 1171.252678][T13250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1171.294390][ T4523] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1171.377227][ T4523] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 416 with error 28 [ 1171.439719][ T4523] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1171.439719][ T4523] [ 1171.461296][T13260] virtio-fs: tag not found [ 1171.466825][ T4523] EXT4-fs (loop9): Total free blocks count 0 [ 1171.515015][ T4523] EXT4-fs (loop9): Free/Dirty block details [ 1171.533982][ T4523] EXT4-fs (loop9): free_blocks=2415919504 [ 1171.539809][ T4523] EXT4-fs (loop9): dirty_blocks=416 [ 1171.558736][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1171.601357][ T4523] EXT4-fs (loop9): Block reservation details [ 1171.607653][ T4523] EXT4-fs (loop9): i_reserved_data_blocks=26 [ 1171.648303][T11160] EXT4-fs (loop9): unmounting filesystem. [ 1173.389465][T13284] loop7: detected capacity change from 0 to 64 [ 1174.897596][T13284] overlayfs: filesystem on './file2' not supported [ 1174.954480][ T26] audit: type=1804 audit(1751248188.494:57): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1825" name="/newroot/237/file1/file0" dev="loop7" ino=21 res=1 errno=0 [ 1174.976186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1175.963810][T13239] Set syz1 is full, maxelem 65536 reached [ 1176.736858][T13322] loop4: detected capacity change from 0 to 64 [ 1176.775752][T13322] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 1177.206254][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.213558][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.579629][T13336] loop4: detected capacity change from 0 to 512 [ 1177.626399][T13336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1177.709731][T13336] EXT4-fs (loop4): 1 truncate cleaned up [ 1177.736817][T13336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1178.108461][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1178.326050][T13318] loop7: detected capacity change from 0 to 32768 [ 1179.269312][T13363] loop4: detected capacity change from 0 to 64 [ 1180.346794][T13363] overlayfs: filesystem on './file2' not supported [ 1180.408782][ T26] audit: type=1804 audit(1751248193.944:58): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1839" name="/newroot/55/file1/file0" dev="loop4" ino=21 res=1 errno=0 [ 1182.200394][T13374] loop4: detected capacity change from 0 to 32768 [ 1182.207541][T13374] XFS: noikeep mount option is deprecated. [ 1182.477607][T13384] binder: 13375:13384 ioctl c0306201 200000000780 returned -11 [ 1182.554478][T13385] virtio-fs: tag not found [ 1182.990320][T13384] Set syz1 is full, maxelem 65536 reached [ 1183.201873][T13374] XFS (loop4): Mounting V5 Filesystem [ 1183.308665][T13374] XFS (loop4): Ending clean mount [ 1183.316814][T13374] XFS (loop4): Quotacheck needed: Please wait. [ 1183.447283][T13374] XFS (loop4): Quotacheck: Done. [ 1184.139464][T13381] loop9: detected capacity change from 0 to 32768 [ 1184.230940][T13381] JBD2: Ignoring recovery information on journal [ 1184.277824][T11657] XFS (loop4): Unmounting Filesystem [ 1184.488553][T13381] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1184.770975][T13381] OCFS2: ERROR (device loop9): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 1184.872537][T13381] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1184.990976][T13381] OCFS2: File system is now read-only. [ 1185.018486][T13381] (syz.9.1845,13381,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 1185.072508][T13381] (syz.9.1845,13381,0):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -30 [ 1185.184265][T13381] (syz.9.1845,13381,0):ocfs2_local_alloc_reserve_for_window:1123 ERROR: status = -30 [ 1185.232434][T13381] (syz.9.1845,13381,0):ocfs2_local_alloc_reserve_for_window:1139 ERROR: status = -30 [ 1185.267962][T13381] (syz.9.1845,13381,0):ocfs2_local_alloc_slide_window:1254 ERROR: status = -30 [ 1185.308661][T13381] (syz.9.1845,13381,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 1185.369737][T13381] (syz.9.1845,13381,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 1185.416839][T13381] (syz.9.1845,13381,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 1185.452450][T13381] (syz.9.1845,13381,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 1185.474094][T13381] (syz.9.1845,13381,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 1185.505943][T13381] (syz.9.1845,13381,0):ocfs2_symlink:1911 ERROR: status = -30 [ 1185.522050][T13381] (syz.9.1845,13381,0):ocfs2_symlink:2065 ERROR: status = -30 [ 1185.748176][T11160] ocfs2: Unmounting device (7,9) on (node local) [ 1187.651668][T13427] loop9: detected capacity change from 0 to 64 [ 1187.708850][T13427] overlayfs: filesystem on './file2' not supported [ 1187.766974][ T26] audit: type=1804 audit(1751248201.304:59): pid=13428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1852" name="/newroot/83/file1/file0" dev="loop9" ino=21 res=1 errno=0 [ 1189.940035][T13445] ptrace attach of "./syz-executor exec"[7018] was attempted by ""[13445] [ 1190.039376][T13448] binder: 13439:13448 ioctl c0306201 200000000780 returned -11 [ 1190.065120][T13448] loop9: detected capacity change from 0 to 128 [ 1190.966683][T13446] virtio-fs: tag not found [ 1191.060506][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1860'. [ 1192.623278][T13477] loop8: detected capacity change from 0 to 64 [ 1192.681686][T13477] overlayfs: filesystem on './file2' not supported [ 1192.738828][ T26] audit: type=1804 audit(1751248206.274:60): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1867" name="/newroot/214/file1/file0" dev="loop8" ino=21 res=1 errno=0 [ 1194.192262][T13501] loop4: detected capacity change from 0 to 512 [ 1194.217742][T13504] binder: 13492:13504 ioctl c0306201 200000000780 returned -11 [ 1194.243251][T13504] loop9: detected capacity change from 0 to 128 [ 1194.805611][T13504] virtio-fs: tag not found [ 1195.040360][T13501] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1195.074707][T13501] EXT4-fs (loop4): 1 truncate cleaned up [ 1195.080511][T13501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1195.261773][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1195.644001][T13493] loop8: detected capacity change from 0 to 32768 [ 1197.258691][T13513] loop7: detected capacity change from 0 to 32768 [ 1197.323320][T13513] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1197.370965][T13513] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 1197.464718][T13513] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 1197.464718][T13513] inode = 1 19 [ 1197.464718][T13513] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 1197.551134][T13513] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:6 [ 1197.590702][T13513] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 1197.642351][T13513] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1197.707422][T13513] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1197.750980][T13513] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1197.809028][T13513] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1197.882455][T13513] gfs2: fsid=syz:syz.0: File system withdrawn [ 1197.888673][T13513] CPU: 0 PID: 13513 Comm: syz.7.1876 Not tainted 6.1.142-syzkaller #0 [ 1197.896857][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1197.906954][T13513] Call Trace: [ 1197.910264][T13513] [ 1197.913229][T13513] dump_stack_lvl+0x168/0x22e [ 1197.917955][T13513] ? kobject_uevent_env+0x35f/0x8a0 [ 1197.923200][T13513] ? show_regs_print_info+0x12/0x12 [ 1197.928457][T13513] ? load_image+0x3b0/0x3b0 [ 1197.933024][T13513] ? kobject_uevent_env+0x35f/0x8a0 [ 1197.938283][T13513] gfs2_withdraw+0x143f/0x1780 [ 1197.943105][T13513] ? gfs2_lm+0x220/0x220 [ 1197.947398][T13513] ? gfs2_glock_nq+0xcf0/0x14e0 [ 1197.952300][T13513] ? gfs2_consist_inode_i+0xf1/0x110 [ 1197.957630][T13513] gfs2_jdesc_check+0x137/0x290 [ 1197.962534][T13513] init_journal+0xcad/0x2300 [ 1197.967172][T13513] ? format_decode+0xb3b/0x1330 [ 1197.972062][T13513] ? init_inodes+0xdb/0x320 [ 1197.976612][T13513] ? _compound_head+0x120/0x120 [ 1197.981506][T13513] ? vsnprintf+0x1905/0x1a00 [ 1197.986145][T13513] ? snprintf+0xd7/0x120 [ 1197.990437][T13513] ? init_inodes+0xdb/0x320 [ 1197.994975][T13513] ? vscnprintf+0x80/0x80 [ 1197.999326][T13513] ? gfs2_glock_nq_num+0x17f/0x1c0 [ 1198.004460][T13513] init_inodes+0xdb/0x320 [ 1198.008812][T13513] gfs2_fill_super+0x1718/0x1f80 [ 1198.013777][T13513] ? gfs2_reconfigure+0xcd0/0xcd0 [ 1198.018818][T13513] ? init_locking+0xb8/0x200 [ 1198.023428][T13513] ? sb_set_blocksize+0xa5/0xe0 [ 1198.028299][T13513] get_tree_bdev+0x3f1/0x610 [ 1198.032905][T13513] ? gfs2_reconfigure+0xcd0/0xcd0 [ 1198.037942][T13513] gfs2_get_tree+0x4d/0x1e0 [ 1198.042460][T13513] vfs_get_tree+0x88/0x270 [ 1198.046898][T13513] do_new_mount+0x24a/0xa40 [ 1198.051419][T13513] __se_sys_mount+0x2d6/0x3c0 [ 1198.056123][T13513] ? __x64_sys_mount+0xc0/0xc0 [ 1198.060904][T13513] ? lockdep_hardirqs_on+0x94/0x140 [ 1198.066116][T13513] ? __x64_sys_mount+0x1c/0xc0 [ 1198.070901][T13513] do_syscall_64+0x4c/0xa0 [ 1198.075338][T13513] ? clear_bhb_loop+0x60/0xb0 [ 1198.080033][T13513] ? clear_bhb_loop+0x60/0xb0 [ 1198.084728][T13513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1198.090680][T13513] RIP: 0033:0x7f6ba0d900ca [ 1198.095109][T13513] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.114734][T13513] RSP: 002b:00007f6ba1c58e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1198.123165][T13513] RAX: ffffffffffffffda RBX: 00007f6ba1c58ef0 RCX: 00007f6ba0d900ca [ 1198.131152][T13513] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007f6ba1c58eb0 [ 1198.139140][T13513] RBP: 0000200000000400 R08: 00007f6ba1c58ef0 R09: 0000000000200401 [ 1198.147122][T13513] R10: 0000000000200401 R11: 0000000000000246 R12: 0000200000000000 [ 1198.155111][T13513] R13: 00007f6ba1c58eb0 R14: 00000000000125bb R15: 0000200000000080 [ 1198.163115][T13513] [ 1198.492399][T13513] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 1198.642147][T13558] ptrace attach of "./syz-executor exec"[11657] was attempted by "./syz-executor exec"[13558] [ 1198.886992][T13557] loop8: detected capacity change from 0 to 512 [ 1198.914658][T13557] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1199.013802][T13557] EXT4-fs (loop8): 1 truncate cleaned up [ 1199.019603][T13557] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1199.395168][ T8320] EXT4-fs (loop8): unmounting filesystem. [ 1200.032057][T13576] loop8: detected capacity change from 0 to 1024 [ 1202.096999][ T4398] hfsplus: b-tree write err: -5, ino 3 [ 1203.066453][ T8320] hfsplus: node 4:3 still has 1 user(s)! [ 1206.444004][T13614] loop7: detected capacity change from 0 to 512 [ 1206.516243][T13614] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1206.608512][T13617] ptrace attach of "./syz-executor exec"[4252] was attempted by "./syz-executor exec"[13617] [ 1207.107095][T13614] EXT4-fs (loop7): 1 truncate cleaned up [ 1207.130064][T13614] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1207.443752][ T7018] EXT4-fs (loop7): unmounting filesystem. [ 1207.710744][T13625] loop4: detected capacity change from 0 to 32768 [ 1207.818589][T13625] JBD2: Ignoring recovery information on journal [ 1207.899134][T13625] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1209.267458][T11657] ocfs2: Unmounting device (7,4) on (node local) [ 1213.117690][T13680] loop9: detected capacity change from 0 to 512 [ 1213.221491][T13680] EXT4-fs: Ignoring removed bh option [ 1213.285760][T13680] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1213.340078][T13680] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1213.653354][T13680] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1213.679548][T13680] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1213.738485][T13680] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1213.841188][T13687] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 1214.545785][T11160] EXT4-fs (loop9): unmounting filesystem. [ 1214.611044][ T5323] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1214.854342][ T5323] usb 3-1: Using ep0 maxpacket: 8 [ 1214.873958][ T5323] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1214.903097][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.929061][ T5323] usb 3-1: Product: syz [ 1214.934132][ T5323] usb 3-1: Manufacturer: syz [ 1214.938784][ T5323] usb 3-1: SerialNumber: syz [ 1214.973148][ T5323] usb 3-1: config 0 descriptor?? [ 1214.999716][ T5323] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1215.803317][ T5323] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1216.506084][ T5323] sq905: probe of 3-1:0.0 failed with error -71 [ 1216.605852][ T5323] usb 3-1: USB disconnect, device number 23 [ 1216.869528][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1928'. [ 1217.305274][T13723] device ipvlan2 entered promiscuous mode [ 1218.053800][T13721] delete_channel: no stack [ 1219.072594][T13727] delete_channel: no stack [ 1219.201306][T13746] loop4: detected capacity change from 0 to 2048 [ 1219.356130][T13746] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1219.793239][T13746] NILFS (loop4): mounting unchecked fs [ 1219.851115][T13746] NILFS (loop4): recovery complete [ 1219.972525][T13761] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1221.230454][T13758] delete_channel: no stack [ 1221.382659][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 1222.344867][T11491] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1222.681137][T11491] usb 3-1: Using ep0 maxpacket: 8 [ 1222.773981][T11491] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1223.148801][T11491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.519843][T11491] usb 3-1: Product: syz [ 1223.524639][T11491] usb 3-1: Manufacturer: syz [ 1223.529297][T11491] usb 3-1: SerialNumber: syz [ 1223.583660][T11491] usb 3-1: config 0 descriptor?? [ 1223.615276][T11491] usb 3-1: can't set config #0, error -71 [ 1223.631732][T11491] usb 3-1: USB disconnect, device number 24 [ 1223.642322][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1950'. [ 1223.682242][T13804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.689727][T13804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.730598][T13804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.751717][T13804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.805316][T13808] loop4: detected capacity change from 0 to 2048 [ 1223.881015][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1953'. [ 1223.903712][T13805] device ipvlan2 entered promiscuous mode [ 1223.934364][T13808] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1223.976357][T13808] NILFS (loop4): mounting unchecked fs [ 1224.046193][T13811] loop2: detected capacity change from 0 to 32768 [ 1224.097043][T13811] JBD2: Ignoring recovery information on journal [ 1224.135938][T13808] NILFS (loop4): recovery complete [ 1224.181470][T13811] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1224.210609][T13818] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1224.376082][ T4252] ocfs2: Unmounting device (7,2) on (node local) [ 1224.611964][ T26] audit: type=1800 audit(1751248238.084:61): pid=13824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1954" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1224.813540][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'. [ 1225.592881][ T4260] Bluetooth: hci4: command 0x1003 tx timeout [ 1225.640127][ T4268] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1227.447230][T13862] loop9: detected capacity change from 0 to 32768 [ 1227.476603][T13862] JBD2: Ignoring recovery information on journal [ 1227.510236][T13862] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1227.975876][T13867] loop4: detected capacity change from 0 to 32768 [ 1227.995190][T13867] XFS: noikeep mount option is deprecated. [ 1228.061921][T11160] ocfs2: Unmounting device (7,9) on (node local) [ 1228.143312][T13867] XFS (loop4): Mounting V5 Filesystem [ 1228.428485][T12410] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1228.561276][T13896] binder: 13890:13896 ioctl c0306201 200000000780 returned -11 [ 1229.563535][T12410] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.577151][T12410] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1229.587245][T12410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.615025][T13896] loop9: detected capacity change from 0 to 128 [ 1229.685175][T13896] virtio-fs: tag not found [ 1229.706122][T13867] XFS (loop4): Ending clean mount [ 1229.715497][T13867] XFS (loop4): Quotacheck needed: Please wait. [ 1229.754888][T13867] XFS (loop4): Quotacheck: Done. [ 1229.783631][T12410] usb 3-1: config 0 descriptor?? [ 1229.849111][T12410] pwc: Askey VC010 type 2 USB webcam detected. [ 1230.124361][T11657] XFS (loop4): Unmounting Filesystem [ 1231.091239][T12410] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1231.134631][T12410] pwc: recv_control_msg error -32 req 02 val 2700 [ 1231.341837][T12410] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1232.217259][T13899] loop8: detected capacity change from 0 to 32768 [ 1232.242295][T13899] XFS: noikeep mount option is deprecated. [ 1232.367085][T13899] XFS (loop8): Mounting V5 Filesystem [ 1232.551553][T13899] XFS (loop8): Ending clean mount [ 1232.578620][T13899] XFS (loop8): Quotacheck needed: Please wait. [ 1232.723373][T13899] XFS (loop8): Quotacheck: Done. [ 1232.846976][ T8320] XFS (loop8): Unmounting Filesystem [ 1233.161711][T13939] loop9: detected capacity change from 0 to 32768 [ 1233.182449][T12410] pwc: recv_control_msg error -71 req 04 val 1000 [ 1233.222187][T12410] pwc: recv_control_msg error -71 req 04 val 1300 [ 1233.246448][T13939] JBD2: Ignoring recovery information on journal [ 1233.273247][T12410] pwc: recv_control_msg error -71 req 04 val 1400 [ 1233.302342][T12410] pwc: recv_control_msg error -71 req 02 val 2000 [ 1233.320382][T12410] pwc: recv_control_msg error -71 req 02 val 2100 [ 1233.340237][T12410] pwc: recv_control_msg error -71 req 04 val 1500 [ 1233.361931][T12410] pwc: recv_control_msg error -71 req 02 val 2500 [ 1233.395002][T12410] pwc: recv_control_msg error -71 req 02 val 2400 [ 1233.490672][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 1233.548905][T13939] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1233.643115][T12410] pwc: recv_control_msg error -71 req 02 val 2600 [ 1233.769090][T12410] pwc: recv_control_msg error -71 req 02 val 2900 [ 1233.895158][T12410] pwc: recv_control_msg error -71 req 02 val 2800 [ 1234.043874][T12410] pwc: recv_control_msg error -71 req 04 val 1100 [ 1234.247111][T12410] pwc: recv_control_msg error -71 req 04 val 1200 [ 1234.299724][T12410] pwc: Registered as video103. [ 1234.349071][T12410] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 1234.538207][T12410] usb 3-1: USB disconnect, device number 25 [ 1234.621690][T11160] ocfs2: Unmounting device (7,9) on (node local) [ 1234.899369][T13958] binder: 13954:13958 ioctl c0306201 200000000780 returned -11 [ 1234.981724][T13959] loop2: detected capacity change from 0 to 128 [ 1236.284809][T13958] Set syz1 is full, maxelem 65536 reached [ 1236.641922][T13957] virtio-fs: tag not found [ 1238.636622][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.644804][T13952] delete_channel: no stack [ 1238.649819][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.161095][ T27] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1240.335613][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1997'. [ 1241.034198][ T27] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.073232][ T27] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1241.840929][ T27] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.862266][T14004] overlayfs: unrecognized mount option "verity=off" or missing value [ 1241.872460][ T27] usb 10-1: config 0 descriptor?? [ 1241.906267][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 1242.415699][ T27] pwc: send_video_command error -71 [ 1242.425051][ T27] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1242.497333][T14015] binder: 14011:14015 ioctl c0306201 200000000780 returned -11 [ 1242.522899][T14015] loop8: detected capacity change from 0 to 128 [ 1243.407725][T14014] virtio-fs: tag not found [ 1243.419079][ T27] Philips webcam: probe of 10-1:0.0 failed with error -71 [ 1243.438740][ T27] usb 10-1: USB disconnect, device number 7 [ 1244.464843][T14031] loop7: detected capacity change from 0 to 64 [ 1244.583047][T14031] overlayfs: filesystem on './file2' not supported [ 1244.639375][ T26] audit: type=1804 audit(1751248258.174:62): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2006" name="/newroot/269/file1/file0" dev="loop7" ino=21 res=1 errno=0 [ 1246.652610][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2010'. [ 1249.211249][T11491] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1249.536918][T14068] binder: 14062:14068 ioctl c0306201 200000000780 returned -11 [ 1249.563335][T14068] loop9: detected capacity change from 0 to 128 [ 1249.601038][T12410] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1250.312542][T14068] virtio-fs: tag not found [ 1250.382601][T11491] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.450905][T11491] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1250.501845][T11491] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1250.597893][T11491] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.622656][T12410] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.668942][T11491] usb 8-1: config 0 descriptor?? [ 1250.670946][T12410] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1250.721427][T12410] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.733017][T12410] usb 9-1: config 0 descriptor?? [ 1250.817462][T12410] pwc: Askey VC010 type 2 USB webcam detected. [ 1251.153423][ T5323] usb 8-1: USB disconnect, device number 16 [ 1254.438533][T14097] delete_channel: no stack [ 1254.591280][T12410] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1254.601095][T12410] pwc: recv_control_msg error -71 req 02 val 2700 [ 1254.641265][T12410] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1254.691259][T12410] pwc: recv_control_msg error -71 req 04 val 1000 [ 1254.721595][T12410] pwc: recv_control_msg error -71 req 04 val 1300 [ 1254.758417][T12410] pwc: recv_control_msg error -71 req 04 val 1400 [ 1254.794660][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2024'. [ 1254.937833][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2023'. [ 1255.780554][T12410] pwc: recv_control_msg error -71 req 02 val 2000 [ 1255.918714][T14115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.949792][T14115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.001337][T12410] pwc: recv_control_msg error -71 req 02 val 2100 [ 1256.031614][T12410] pwc: recv_control_msg error -71 req 04 val 1500 [ 1256.047244][T12410] pwc: recv_control_msg error -71 req 02 val 2500 [ 1256.061902][T14115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.082514][T14115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.089897][T12410] pwc: recv_control_msg error -71 req 02 val 2400 [ 1256.158623][T12410] pwc: recv_control_msg error -71 req 02 val 2600 [ 1256.183348][T12410] pwc: recv_control_msg error -71 req 02 val 2900 [ 1256.191751][T12410] pwc: recv_control_msg error -71 req 02 val 2800 [ 1256.200395][T12410] pwc: recv_control_msg error -71 req 04 val 1100 [ 1256.212879][T12410] pwc: recv_control_msg error -71 req 04 val 1200 [ 1256.239982][T12410] pwc: Registered as video103. [ 1256.254736][T12410] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input70 [ 1256.284135][T12410] usb 9-1: USB disconnect, device number 14 [ 1256.710980][ T4268] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1256.711054][ T4260] Bluetooth: hci4: command 0x1003 tx timeout [ 1257.015345][T14110] delete_channel: no stack [ 1257.670450][T14120] delete_channel: no stack [ 1258.511187][ T3585] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1259.511488][ T3585] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.536503][ T3585] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1259.546781][ T3585] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1259.556975][ T3585] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.723197][ T3585] usb 10-1: config 0 descriptor?? [ 1260.376059][ T3585] usb 10-1: USB disconnect, device number 8 [ 1260.975517][T14166] loop7: detected capacity change from 0 to 64 [ 1261.040877][T14166] overlayfs: filesystem on './file2' not supported [ 1261.051656][ T26] audit: type=1804 audit(1751248274.594:63): pid=14166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2036" name="/newroot/275/file1/file0" dev="loop7" ino=21 res=1 errno=0 [ 1262.016881][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 1264.358072][T14193] overlayfs: unrecognized mount option "verity=off" or missing value [ 1264.567380][T14190] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1264.577285][T14190] gfs2: error 10 reading superblock [ 1265.270283][T14179] delete_channel: no stack [ 1268.292508][T14224] overlayfs: unrecognized mount option "verity=off" or missing value [ 1268.781099][ T3585] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1268.988662][ T3585] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.004087][ T3585] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1269.013497][ T3585] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1269.031206][ T3585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.047500][ T3585] usb 3-1: config 0 descriptor?? [ 1269.123914][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2052'. [ 1269.154144][T14238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.259663][T12913] usb 3-1: USB disconnect, device number 26 [ 1269.317495][T14238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.941658][T14238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.989866][T14238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.046155][T14245] loop8: detected capacity change from 0 to 512 [ 1270.113302][T14245] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1271.216457][T14125] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1271.617049][T14245] EXT4-fs (loop8): 1 truncate cleaned up [ 1271.772842][T14245] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1271.963127][T14268] fuse: Bad value for 'group_id' [ 1272.116369][ T8320] EXT4-fs (loop8): unmounting filesystem. [ 1273.101683][T14291] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2068'. [ 1273.580889][ T5323] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1274.805368][ T5323] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1274.858335][ T5323] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.949405][ T5323] usb 10-1: config 0 descriptor?? [ 1274.955196][T14313] loop8: detected capacity change from 0 to 512 [ 1275.020345][T14313] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1275.132869][T14313] EXT4-fs (loop8): 1 truncate cleaned up [ 1275.146980][T14313] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1275.178776][ T27] usb 10-1: USB disconnect, device number 9 [ 1275.978114][T14329] loop7: detected capacity change from 0 to 1024 [ 1278.185201][ T4966] hfsplus: b-tree write err: -5, ino 3 [ 1278.191241][ T8320] EXT4-fs (loop8): unmounting filesystem. [ 1278.280189][T14333] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2079'. [ 1278.457089][T14343] loop8: detected capacity change from 0 to 16384 [ 1278.464687][ T7018] hfsplus: node 4:3 still has 1 user(s)! [ 1278.482992][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 1278.550956][T14344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.588903][T14344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.644612][T14344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.656462][T14344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.820742][T14348] loop7: detected capacity change from 0 to 32768 [ 1279.111110][T14345] loop8: detected capacity change from 16384 to 16320 [ 1279.112856][T14354] overlayfs: unrecognized mount option "verity=off" or missing value [ 1279.296050][T12909] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1279.602218][T12909] usb 8-1: Using ep0 maxpacket: 8 [ 1279.667147][T12909] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1279.857235][T12909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.897071][T14361] /dev/loop8: Can't open blockdev [ 1280.143269][T12909] usb 8-1: Product: syz [ 1280.173193][T12909] usb 8-1: Manufacturer: syz [ 1280.195655][T12909] usb 8-1: SerialNumber: syz [ 1280.226238][T12909] usb 8-1: config 0 descriptor?? [ 1280.275605][T12909] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1280.390989][T11162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1280.397770][T14125] Bluetooth: hci4: command 0x1003 tx timeout [ 1280.811127][T12909] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 1281.208961][T12909] sq905: probe of 8-1:0.0 failed with error -110 [ 1281.650215][T14374] overlayfs: failed to resolve './file2': -2 [ 1282.584667][T12911] usb 8-1: USB disconnect, device number 17 [ 1284.594412][T14398] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2095'. [ 1286.641361][T14422] loop9: detected capacity change from 0 to 32768 [ 1287.071636][T14425] loop7: detected capacity change from 0 to 64 [ 1287.287371][T14425] overlayfs: filesystem on './file2' not supported [ 1287.342845][ T26] audit: type=1804 audit(1751248300.884:64): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2102" name="/newroot/283/file1/file0" dev="loop7" ino=21 res=1 errno=0 [ 1287.364561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1287.559792][T14422] JBD2: Ignoring recovery information on journal [ 1287.636374][T14422] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1287.789413][T11160] ocfs2: Unmounting device (7,9) on (node local) [ 1287.941251][ T22] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1288.160992][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 1288.177289][ T22] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1288.186671][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.198050][ T22] usb 3-1: Product: syz [ 1288.372693][ T22] usb 3-1: Manufacturer: syz [ 1288.377689][ T22] usb 3-1: SerialNumber: syz [ 1288.397746][ T22] usb 3-1: config 0 descriptor?? [ 1288.405802][ T22] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1290.805613][ T22] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 1290.814209][ T22] sq905: probe of 3-1:0.0 failed with error -110 [ 1291.421422][ T22] usb 3-1: USB disconnect, device number 27 [ 1291.480077][T14438] delete_channel: no stack [ 1291.853332][T14457] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2110'. [ 1293.437504][T14470] loop9: detected capacity change from 0 to 32768 [ 1293.569477][T14470] JBD2: Ignoring recovery information on journal [ 1293.695959][T14477] loop8: detected capacity change from 0 to 64 [ 1293.711109][T14470] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1293.773783][ T26] audit: type=1804 audit(1751248307.304:65): pid=14477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2116" name="/newroot/261/file1/file0" dev="loop8" ino=21 res=1 errno=0 [ 1293.795571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.236325][T11160] ocfs2: Unmounting device (7,9) on (node local) [ 1297.484387][T14496] delete_channel: no stack [ 1299.015211][T14522] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2127'. [ 1299.212098][T14528] loop8: detected capacity change from 0 to 64 [ 1299.280516][ T26] audit: type=1804 audit(1751248312.814:66): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2128" name="/newroot/265/file1/file0" dev="loop8" ino=21 res=1 errno=0 [ 1300.075475][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.082149][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.340169][T14530] delete_channel: no stack [ 1302.800152][T14540] loop2: detected capacity change from 0 to 128 [ 1302.814352][T14540] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1302.826501][T14540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1305.001085][ T4261] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1305.280306][T14561] loop9: detected capacity change from 0 to 512 [ 1305.385963][T14560] overlayfs: unrecognized mount option "verity=off" or missing value [ 1305.402134][T14561] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1305.718533][T14561] EXT4-fs (loop9): 1 truncate cleaned up [ 1305.732652][T14561] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1305.754249][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2142'. [ 1307.269594][T14586] overlayfs: unrecognized mount option "verity=off" or missing value [ 1308.210723][T14594] loop2: detected capacity change from 0 to 64 [ 1309.565917][T11160] EXT4-fs (loop9): unmounting filesystem. [ 1311.211649][T14594] hfs: unable to open extent tree [ 1311.219024][T14594] hfs: can't find a HFS filesystem on dev loop2 [ 1311.681160][T14611] loop2: detected capacity change from 0 to 1024 [ 1315.082770][ T9] hfsplus: b-tree write err: -5, ino 3 [ 1315.188907][ T4252] hfsplus: node 4:3 still has 1 user(s)! [ 1315.485283][T14627] loop2: detected capacity change from 0 to 1024 [ 1318.419022][T14619] delete_channel: no stack [ 1318.440393][ T33] hfsplus: b-tree write err: -5, ino 3 [ 1318.497244][T14616] delete_channel: no stack [ 1318.653648][ T4252] hfsplus: node 4:3 still has 1 user(s)! [ 1318.770144][T14647] loop8: detected capacity change from 0 to 512 [ 1319.288425][T14647] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1319.645109][T14647] EXT4-fs (loop8): 1 truncate cleaned up [ 1320.737451][T14647] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1321.093591][ T2959] Bluetooth: Error in BCSP hdr checksum [ 1321.272386][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2160'. [ 1321.323484][T14671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1321.404318][T14671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.503139][ T8320] EXT4-fs (loop8): unmounting filesystem. [ 1321.584831][T14671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1321.664572][T14676] loop4: detected capacity change from 0 to 64 [ 1321.737580][T14671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.777172][ T26] audit: type=1804 audit(1751248335.314:67): pid=14678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2161" name="/newroot/125/file1/file0" dev="loop4" ino=21 res=1 errno=0 [ 1322.791468][T14125] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1323.070180][T14692] loop7: detected capacity change from 0 to 32768 [ 1323.164130][T14692] JBD2: Ignoring recovery information on journal [ 1323.201394][T14694] loop2: detected capacity change from 0 to 32768 [ 1323.202061][T14692] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1323.585193][ T4326] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1323.609583][ T7018] ocfs2: Unmounting device (7,7) on (node local) [ 1323.870983][ T4326] usb 3-1: Using ep0 maxpacket: 8 [ 1323.891037][ T4326] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1324.064036][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.135075][ T4326] usb 3-1: Product: syz [ 1324.139327][ T4326] usb 3-1: Manufacturer: syz [ 1324.207903][ T4326] usb 3-1: SerialNumber: syz [ 1324.238893][ T4326] usb 3-1: config 0 descriptor?? [ 1324.280358][ T4326] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1324.884109][T14710] loop8: detected capacity change from 0 to 32768 [ 1325.931436][ T4326] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 1325.961212][ T4326] sq905: probe of 3-1:0.0 failed with error -110 [ 1326.044464][T10365] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1326.119388][T11491] usb 3-1: USB disconnect, device number 29 [ 1327.154759][T10365] usb 9-1: Using ep0 maxpacket: 8 [ 1327.175774][T10365] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1327.197282][T10365] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.205502][T10365] usb 9-1: Product: syz [ 1327.209815][T10365] usb 9-1: Manufacturer: syz [ 1327.214583][T10365] usb 9-1: SerialNumber: syz [ 1327.241269][T10365] usb 9-1: config 0 descriptor?? [ 1327.267361][T10365] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1327.715428][T10365] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1327.733960][T10365] sq905: probe of 9-1:0.0 failed with error -71 [ 1327.781808][T10365] usb 9-1: USB disconnect, device number 15 [ 1328.507993][T14738] loop7: detected capacity change from 0 to 64 [ 1328.614589][ T26] audit: type=1804 audit(1751248342.154:68): pid=14740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2176" name="/newroot/302/file1/file0" dev="loop7" ino=21 res=1 errno=0 [ 1330.125873][T14751] overlayfs: unrecognized mount option "verity=off" or missing value [ 1330.553055][T14755] loop7: detected capacity change from 0 to 32768 [ 1331.582719][T14755] JBD2: Ignoring recovery information on journal [ 1331.621993][T14755] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1331.666887][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 1331.764013][ T7018] ocfs2: Unmounting device (7,7) on (node local) [ 1332.361320][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 1332.502550][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2185'. [ 1333.912238][ T4268] Bluetooth: hci4: command 0x1003 tx timeout [ 1333.912710][T14125] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1334.391063][T11162] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1334.399603][T14125] Bluetooth: hci6: command 0x1003 tx timeout [ 1335.879284][T14813] binder: 14808:14813 ioctl c0306201 200000000780 returned -11 [ 1335.905056][T14813] loop2: detected capacity change from 0 to 128 [ 1335.957980][T14813] virtio-fs: tag not found [ 1336.721785][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2190'. [ 1337.011323][T14820] loop4: detected capacity change from 0 to 64 [ 1337.119805][ T26] audit: type=1804 audit(1751248350.654:69): pid=14822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2192" name="/newroot/130/file1/file0" dev="loop4" ino=21 res=1 errno=0 [ 1338.846979][T14833] loop8: detected capacity change from 0 to 32768 [ 1338.888291][T14833] JBD2: Ignoring recovery information on journal [ 1339.068865][T14833] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1339.311720][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2196'. [ 1339.332854][ T8320] ocfs2: Unmounting device (7,8) on (node local) [ 1340.251331][ T52] block nbd7: Attempted send on invalid socket [ 1340.258645][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1340.272784][T14854] (syz.7.2199,14854,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1340.280549][T14854] (syz.7.2199,14854,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1340.288070][T14854] (syz.7.2199,14854,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1340.296939][T14854] (syz.7.2199,14854,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1342.939348][T14125] Bluetooth: hci0: command 0x0409 tx timeout [ 1343.612625][T14882] loop2: detected capacity change from 0 to 64 [ 1345.158201][T14882] overlayfs: missing 'lowerdir' [ 1345.222705][ T26] audit: type=1804 audit(1751248358.764:70): pid=14884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2207" name="/newroot/483/file1/file0" dev="loop2" ino=21 res=1 errno=0 [ 1345.625047][T14890] overlayfs: unrecognized mount option "verity=off" or missing value [ 1345.881015][T14893] loop2: detected capacity change from 0 to 32768 [ 1345.912602][T14893] JBD2: Ignoring recovery information on journal [ 1346.028269][T14893] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1347.496928][ T4252] ocfs2: Unmounting device (7,2) on (node local) [ 1348.403280][T14916] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1348.413667][T14916] gfs2: error 10 reading superblock [ 1348.602717][T14903] I/O error, dev loop8, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1348.612429][T14903] gfs2: error 10 reading superblock [ 1349.670812][T14914] sctp: failed to load transform for md5: -2 [ 1351.361642][T14948] loop2: detected capacity change from 0 to 64 [ 1351.402327][T14948] overlayfs: missing 'lowerdir' [ 1351.410182][ T26] audit: type=1804 audit(1751248364.944:71): pid=14948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2222" name="/newroot/487/file1/file0" dev="loop2" ino=21 res=1 errno=0 [ 1352.517462][ T52] block nbd7: Attempted send on invalid socket [ 1353.301335][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1353.312856][T14961] (syz.7.2225,14961,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1353.320690][T14961] (syz.7.2225,14961,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1353.328184][T14961] (syz.7.2225,14961,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1353.336914][T14961] (syz.7.2225,14961,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1353.368120][T14954] loop8: detected capacity change from 0 to 16384 [ 1353.495572][T14967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2223'. [ 1353.810464][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2227'. [ 1354.027130][ T4966] Bluetooth: Error in BCSP hdr checksum [ 1354.787506][ T4404] Bluetooth: Error in BCSP hdr checksum [ 1354.871424][T14965] loop8: detected capacity change from 16384 to 16320 [ 1355.214869][ T4625] Bluetooth: Error in BCSP hdr checksum [ 1355.471183][ T4404] Bluetooth: Error in BCSP hdr checksum [ 1355.733342][ T4625] Bluetooth: Error in BCSP hdr checksum [ 1355.751621][T14125] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1356.053234][ T4966] Bluetooth: Error in BCSP hdr checksum [ 1356.292914][ T46] Bluetooth: Error in BCSP hdr checksum [ 1357.369457][ T5742] Bluetooth: Error in BCSP hdr checksum [ 1357.762670][ T4394] Bluetooth: Error in BCSP hdr checksum [ 1358.485247][T15009] Bluetooth: Error in BCSP hdr checksum [ 1358.494501][T15005] gfs2: not a GFS2 filesystem [ 1360.255009][T15036] loop7: detected capacity change from 0 to 64 [ 1361.569833][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.582996][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.393263][T15036] overlayfs: missing 'lowerdir' [ 1362.449853][ T26] audit: type=1804 audit(1751248375.984:72): pid=15041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2236" name="/newroot/314/file1/file0" dev="loop7" ino=21 res=1 errno=0 [ 1362.471506][ C0] vkms_vblank_simulate: vblank timer overrun [ 1369.089386][T15102] overlayfs: unrecognized mount option "verity=off" or missing value [ 1369.869507][T15100] sctp: failed to load transform for md5: -2 [ 1372.122792][ T52] block nbd7: Attempted send on invalid socket [ 1372.129028][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1372.140907][T15133] (syz.7.2258,15133,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1372.148597][T15133] (syz.7.2258,15133,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1372.156085][T15133] (syz.7.2258,15133,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1372.164846][T15133] (syz.7.2258,15133,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1372.485006][T15126] sctp: failed to load transform for md5: -2 [ 1374.153208][T11162] Bluetooth: hci0: command 0x0409 tx timeout [ 1376.221736][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2265'. [ 1376.239080][T15175] overlayfs: unrecognized mount option "verity=off" or missing value [ 1378.274598][ T52] block nbd8: Attempted send on invalid socket [ 1378.274736][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1378.274878][T15203] (syz.8.2271,15203,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1378.274928][T15203] (syz.8.2271,15203,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1378.274971][T15203] (syz.8.2271,15203,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1378.275013][T15203] (syz.8.2271,15203,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1378.955425][T15201] tty tty36: ldisc open failed (-12), clearing slot 35 [ 1379.189954][T15206] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1379.199875][T15206] gfs2: error 10 reading superblock [ 1380.186050][T15220] overlayfs: unrecognized mount option "verity=off" or missing value [ 1381.051226][T14125] Bluetooth: hci2: command 0x0409 tx timeout [ 1381.862151][T15239] 9pnet_fd: Insufficient options for proto=fd [ 1386.917261][T15264] sctp: failed to load transform for md5: -2 [ 1389.373738][ T52] block nbd2: Attempted send on invalid socket [ 1389.380116][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1389.389783][T15297] (syz.2.2291,15297,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1389.397905][T15297] (syz.2.2291,15297,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1389.405377][T15297] (syz.2.2291,15297,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1389.414262][T15297] (syz.2.2291,15297,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1391.328570][T14399] block nbd8: Attempted send on invalid socket [ 1391.526937][T11162] Bluetooth: hci1: command 0x0409 tx timeout [ 1391.541856][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'. [ 1391.780490][T14399] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1391.789824][T15318] (syz.8.2294,15318,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1391.797602][T15318] (syz.8.2294,15318,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1391.805084][T15318] (syz.8.2294,15318,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1391.813881][T15318] (syz.8.2294,15318,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1392.286617][T15335] I/O error, dev loop9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1392.299205][T15335] gfs2: error 10 reading superblock [ 1392.995376][T15346] overlayfs: unrecognized mount option "verity=off" or missing value [ 1393.590836][T14125] Bluetooth: hci2: command 0x0409 tx timeout [ 1397.699049][T15401] afs: Unknown parameter '0xffffffffffffffff' [ 1400.681245][T15433] overlayfs: unrecognized mount option "verity=off" or missing value [ 1401.152172][T15435] loop8: detected capacity change from 0 to 164 [ 1404.153173][T15455] overlayfs: unrecognized mount option "verity=off" or missing value [ 1407.221142][T14399] block nbd8: Attempted send on invalid socket [ 1407.227375][T14399] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1407.237083][T15484] (syz.8.2338,15484,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1407.244854][T15484] (syz.8.2338,15484,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1407.252308][T15484] (syz.8.2338,15484,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1407.261002][T15484] (syz.8.2338,15484,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1409.321275][T11162] Bluetooth: hci2: command 0x0409 tx timeout [ 1409.614050][T15501] loop4: detected capacity change from 0 to 164 [ 1409.892321][T13944] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1411.381852][T15519] 9pnet_fd: Insufficient options for proto=fd [ 1419.979347][T15609] overlayfs: unrecognized mount option "verity=off" or missing value [ 1421.090379][T15619] loop7: detected capacity change from 0 to 1024 [ 1421.823222][T15628] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1421.833097][T15628] gfs2: error 10 reading superblock [ 1422.208587][ T5467] hfsplus: b-tree write err: -5, ino 3 [ 1422.965615][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.972085][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.049892][T15682] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1426.059776][T15682] gfs2: error 10 reading superblock [ 1426.474987][T15685] loop2: detected capacity change from 0 to 32768 [ 1427.431239][T12909] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1427.900948][T12909] usb 3-1: Using ep0 maxpacket: 8 [ 1427.910330][T12909] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1428.114147][T12909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.157095][T12909] usb 3-1: Product: syz [ 1428.218814][T15708] netlink: 452 bytes leftover after parsing attributes in process `syz.8.2389'. [ 1429.114835][T12909] usb 3-1: Manufacturer: syz [ 1429.119528][T12909] usb 3-1: SerialNumber: syz [ 1429.140845][T12410] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1429.183278][T12909] usb 3-1: config 0 descriptor?? [ 1429.216247][T12909] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1429.338019][T15711] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2391'. [ 1429.361251][T12909] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1429.362897][T12410] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1429.382691][T12909] sq905: probe of 3-1:0.0 failed with error -71 [ 1429.397114][T12909] usb 3-1: USB disconnect, device number 30 [ 1429.428820][T12410] usb 10-1: config 0 has no interface number 0 [ 1429.474816][T12410] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1429.520844][T12410] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.562479][T12410] usb 10-1: config 0 descriptor?? [ 1429.573301][T12410] usb 10-1: selecting invalid altsetting 1 [ 1429.588751][T12410] dvb_ttusb_budget: ttusb_init_controller: error [ 1429.617463][T12410] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1430.125316][T15728] netlink: 452 bytes leftover after parsing attributes in process `syz.7.2394'. [ 1430.843768][T12410] DVB: Unable to find symbol cx22700_attach() [ 1432.127988][T15748] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2398'. [ 1433.067992][T12410] DVB: Unable to find symbol tda10046_attach() [ 1433.160812][T12410] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1433.170598][T12410] usb 10-1: USB disconnect, device number 10 [ 1433.804916][T15761] afs: Unknown parameter '0xffffffffffffffff' [ 1436.694134][T15783] delete_channel: no stack [ 1436.800830][T12410] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1436.810975][ T4321] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 1437.012583][ T4321] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1437.051741][ T4321] usb 5-1: config 0 has no interface number 0 [ 1437.078267][ T4321] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1437.171097][T12410] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.930826][T12410] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1437.939924][T12410] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.944526][T15804] loop9: detected capacity change from 0 to 32768 [ 1437.973706][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.007332][T12410] usb 9-1: config 0 descriptor?? [ 1438.021002][ T4321] usb 5-1: config 0 descriptor?? [ 1438.022912][T12410] pwc: Askey VC010 type 2 USB webcam detected. [ 1438.039213][ T4321] usb 5-1: selecting invalid altsetting 1 [ 1438.112443][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 1438.245548][ T4321] dvb_ttusb_budget: ttusb_init_controller: error [ 1438.407194][ T4321] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1438.672942][T12410] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1438.690538][T12410] pwc: recv_control_msg error -32 req 02 val 2700 [ 1438.699821][T15810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.708357][T15810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.737208][T12410] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1438.821072][T11491] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1438.866373][T15816] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2417'. [ 1438.966787][ T4321] DVB: Unable to find symbol cx22700_attach() [ 1439.011068][T11491] usb 10-1: Using ep0 maxpacket: 8 [ 1439.022801][T11491] usb 10-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1439.522917][T11491] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.570817][T11491] usb 10-1: Product: syz [ 1439.604638][T12410] pwc: recv_control_msg error -71 req 04 val 1000 [ 1439.604729][T11491] usb 10-1: Manufacturer: syz [ 1439.630851][T12410] pwc: recv_control_msg error -71 req 04 val 1300 [ 1439.650822][T11491] usb 10-1: SerialNumber: syz [ 1439.661962][ T4321] DVB: Unable to find symbol tda10046_attach() [ 1439.669400][ T4321] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1439.688930][T12410] pwc: recv_control_msg error -71 req 04 val 1400 [ 1439.709616][T11491] usb 10-1: config 0 descriptor?? [ 1439.744084][T11491] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1439.758652][T12410] pwc: recv_control_msg error -71 req 02 val 2000 [ 1439.760265][ T4321] usb 5-1: USB disconnect, device number 2 [ 1439.797565][T12410] pwc: recv_control_msg error -71 req 02 val 2100 [ 1439.842155][T12410] pwc: recv_control_msg error -71 req 04 val 1500 [ 1439.862320][T12410] pwc: recv_control_msg error -71 req 02 val 2500 [ 1439.916289][T12410] pwc: recv_control_msg error -71 req 02 val 2400 [ 1440.106716][T12410] pwc: recv_control_msg error -71 req 02 val 2600 [ 1440.123171][T12410] pwc: recv_control_msg error -71 req 02 val 2900 [ 1440.137504][T12410] pwc: recv_control_msg error -71 req 02 val 2800 [ 1440.183116][T12410] pwc: recv_control_msg error -71 req 04 val 1100 [ 1440.193224][T12410] pwc: recv_control_msg error -71 req 04 val 1200 [ 1440.207163][T12410] pwc: Registered as video103. [ 1440.213932][T12410] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input74 [ 1440.286217][T15838] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2422'. [ 1440.330783][ C1] hrtimer: interrupt took 60491 ns [ 1440.480109][T12410] usb 9-1: USB disconnect, device number 16 [ 1441.487197][T11491] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 1441.522477][T15840] delete_channel: no stack [ 1441.541904][T11491] sq905: probe of 10-1:0.0 failed with error -110 [ 1441.755944][T11491] usb 10-1: USB disconnect, device number 11 [ 1443.461691][T11491] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1443.638387][T15876] loop7: detected capacity change from 0 to 1024 [ 1445.238382][T11491] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1446.146398][T11491] usb 9-1: config 0 has no interface number 0 [ 1446.152713][T11491] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1446.170939][T11491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.187116][T11491] usb 9-1: config 0 descriptor?? [ 1446.256368][T11491] usb 9-1: can't set config #0, error -71 [ 1446.271532][T11491] usb 9-1: USB disconnect, device number 17 [ 1447.045525][ T33] hfsplus: b-tree write err: -5, ino 3 [ 1447.086516][ T7018] hfsplus: node 4:3 still has 1 user(s)! [ 1449.193506][T15907] overlayfs: unrecognized mount option "verity=off" or missing value [ 1449.829041][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 1451.718395][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2445'. [ 1452.013504][T15933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.020704][T15933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.182688][T15937] loop9: detected capacity change from 0 to 1024 [ 1455.818878][ T4398] hfsplus: b-tree write err: -5, ino 3 [ 1455.859084][T11160] hfsplus: node 4:3 still has 1 user(s)! [ 1456.469917][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2451'. [ 1457.555444][T15966] afs: Unknown parameter '0xffffffffffffffff' [ 1459.493874][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2458'. [ 1459.591753][T15982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.599263][T15982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.634212][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2459'. [ 1460.703094][T15987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.710271][T15987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.980366][T15994] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2460'. [ 1461.674196][T16004] loop7: detected capacity change from 0 to 1024 [ 1464.868869][ T11] hfsplus: b-tree write err: -5, ino 3 [ 1464.882129][ T7018] hfsplus: node 4:3 still has 1 user(s)! [ 1468.823968][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2469'. [ 1468.887446][T16046] loop4: detected capacity change from 0 to 164 [ 1470.232233][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2473'. [ 1471.541278][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2477'. [ 1472.753445][T16084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2480'. [ 1473.931278][T16077] I/O error, dev loop8, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1473.941086][T16077] gfs2: error 10 reading superblock [ 1475.655313][T16114] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1475.667312][T16114] gfs2: error 10 reading superblock [ 1476.056739][T16119] loop9: detected capacity change from 0 to 164 [ 1476.149372][T16121] loop8: detected capacity change from 0 to 16384 [ 1476.336817][T16130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2492'. [ 1476.720254][T16125] loop8: detected capacity change from 16384 to 16320 [ 1477.524533][T16125] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2489'. [ 1477.590825][T15419] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1477.802751][T15419] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.836124][T15419] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1477.869043][T15419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.895294][T15419] usb 5-1: config 0 descriptor?? [ 1478.915952][T15419] pwc: Askey VC010 type 2 USB webcam detected. [ 1479.340593][T15419] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1479.347307][ T22] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1479.371355][T15419] pwc: recv_control_msg error -32 req 02 val 2700 [ 1479.406525][T15419] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1479.560888][ T22] usb 9-1: Using ep0 maxpacket: 8 [ 1479.574970][ T22] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1479.640995][ T22] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.680692][ T22] usb 9-1: Product: syz [ 1479.685214][ T22] usb 9-1: Manufacturer: syz [ 1479.719474][ T22] usb 9-1: SerialNumber: syz [ 1479.739549][ T22] usb 9-1: config 0 descriptor?? [ 1479.754276][ T22] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1480.044071][T15419] pwc: recv_control_msg error -71 req 04 val 1000 [ 1480.058794][T15419] pwc: recv_control_msg error -71 req 04 val 1300 [ 1480.118155][T15419] pwc: recv_control_msg error -71 req 04 val 1400 [ 1480.130256][T15419] pwc: recv_control_msg error -71 req 02 val 2000 [ 1480.219649][T15419] pwc: recv_control_msg error -71 req 02 val 2100 [ 1480.261906][T15419] pwc: recv_control_msg error -71 req 04 val 1500 [ 1480.327128][T15419] pwc: recv_control_msg error -71 req 02 val 2500 [ 1480.341145][T15419] pwc: recv_control_msg error -71 req 02 val 2400 [ 1480.350186][T15419] pwc: recv_control_msg error -71 req 02 val 2600 [ 1480.368470][T15419] pwc: recv_control_msg error -71 req 02 val 2900 [ 1480.379132][T15419] pwc: recv_control_msg error -71 req 02 val 2800 [ 1480.389330][T15419] pwc: recv_control_msg error -71 req 04 val 1100 [ 1480.396334][T15419] pwc: recv_control_msg error -71 req 04 val 1200 [ 1480.404550][T15419] pwc: Registered as video103. [ 1480.411288][T15419] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input75 [ 1480.490861][T15419] usb 5-1: USB disconnect, device number 3 [ 1480.848966][ T22] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1480.878542][ T22] sq905: probe of 9-1:0.0 failed with error -71 [ 1480.962206][T16188] Bluetooth: MGMT ver 1.22 [ 1481.722557][ T22] usb 9-1: USB disconnect, device number 18 [ 1481.808433][T16191] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2503'. [ 1482.022302][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2504'. [ 1484.394024][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.400324][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.527681][T16239] overlayfs: unrecognized mount option "verity=off" or missing value [ 1487.444721][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 1491.010522][T16271] loop8: detected capacity change from 0 to 16384 [ 1491.211168][T16271] loop8: detected capacity change from 16384 to 16320 [ 1491.273951][T16271] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2522'. [ 1494.445733][T16313] loop8: detected capacity change from 0 to 16384 [ 1495.011059][T16323] loop8: detected capacity change from 16384 to 16320 [ 1495.052177][T16325] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2527'. [ 1501.406282][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2538'. [ 1502.077657][T16362] overlayfs: unrecognized mount option "verity=off" or missing value [ 1505.037891][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1505.577732][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2547'. [ 1506.020090][T16400] ptrace attach of "./syz-executor exec"[8320] was attempted by ""[16400] [ 1507.132297][T16408] loop7: detected capacity change from 0 to 1024 [ 1511.281326][ T4523] hfsplus: b-tree write err: -5, ino 3 [ 1511.322841][ T7018] hfsplus: node 4:3 still has 1 user(s)! [ 1511.794361][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2556'. [ 1513.006738][T16436] I/O error, dev loop9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1513.029371][T16436] gfs2: error 10 reading superblock [ 1515.487721][T16456] ptrace attach of "./syz-executor exec"[4252] was attempted by ""[16456] [ 1517.251541][T16468] loop8: detected capacity change from 0 to 1024 [ 1519.915453][ T4523] hfsplus: b-tree write err: -5, ino 3 [ 1520.516332][ T8320] hfsplus: node 4:3 still has 1 user(s)! [ 1521.147814][T16482] loop7: detected capacity change from 0 to 164 [ 1521.894509][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2570'. [ 1525.454448][T16509] I/O error, dev loop8, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1525.464278][T16509] gfs2: error 10 reading superblock [ 1527.122396][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2586'. [ 1527.491925][T16522] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1527.501587][T16522] gfs2: error 10 reading superblock [ 1528.401915][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2588'. [ 1529.904256][T16555] Malformed UNC in devname [ 1529.904256][T16555] [ 1529.911140][T16555] CIFS: VFS: Malformed UNC in devname [ 1533.685410][T16564] overlayfs: missing 'lowerdir' [ 1534.461646][T16587] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2600'. [ 1540.011759][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 1540.077170][T16595] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.084725][T16595] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.439628][T16611] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2605'. [ 1541.560462][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2607'. [ 1542.175608][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2609'. [ 1542.220766][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2610'. [ 1542.669720][T16632] I/O error, dev loop8, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1542.679982][T16632] gfs2: error 10 reading superblock [ 1543.835925][T16647] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1543.846045][T16647] gfs2: error 10 reading superblock [ 1545.444170][T16657] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2619'. [ 1545.834947][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.263658][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.455228][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2622'. [ 1548.874432][T16682] Malformed UNC in devname [ 1548.874432][T16682] [ 1548.881113][T16682] CIFS: VFS: Malformed UNC in devname [ 1550.710950][T16696] overlayfs: missing 'lowerdir' [ 1550.928669][T16699] loop8: detected capacity change from 0 to 16384 [ 1552.031084][T16706] loop8: detected capacity change from 16384 to 16320 [ 1553.600964][T16706] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2629'. [ 1553.779187][T16726] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2635'. [ 1556.057952][T16750] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1556.067743][T16750] gfs2: error 10 reading superblock [ 1556.827126][T16757] I/O error, dev loop9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1556.836938][T16757] gfs2: error 10 reading superblock [ 1557.811631][T16765] overlayfs: missing 'lowerdir' [ 1560.657356][T16790] Malformed UNC in devname [ 1560.657356][T16790] [ 1560.664094][T16790] CIFS: VFS: Malformed UNC in devname [ 1561.815439][T16798] overlayfs: missing 'lowerdir' [ 1563.325390][T16802] netlink: 452 bytes leftover after parsing attributes in process `syz.8.2653'. [ 1565.180299][T16826] overlayfs: missing 'lowerdir' [ 1565.601849][T16815] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1565.611520][T16815] gfs2: error 10 reading superblock [ 1565.848478][T16830] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2662'. [ 1566.397016][T16842] overlayfs: missing 'lowerdir' [ 1575.467417][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2678'. [ 1578.866850][T16931] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1578.878006][T16931] gfs2: error 10 reading superblock [ 1579.854496][T16953] I/O error, dev loop9, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1579.864558][T16953] gfs2: error 10 reading superblock [ 1580.656146][T16957] use of bytesused == 0 is deprecated and will be removed in the future, [ 1580.665429][T16957] use the actual size instead. [ 1581.231733][T16962] I/O error, dev loop2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1581.241684][T16962] gfs2: error 10 reading superblock [ 1584.404615][T16982] loop8: detected capacity change from 0 to 16384 [ 1584.644207][T16986] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2701'. [ 1584.646960][T16999] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1584.663624][T16999] gfs2: error 10 reading superblock [ 1587.311994][T17015] ptrace attach of "./syz-executor exec"[8320] was attempted by ""[17015] [ 1588.933604][T17027] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1588.946083][T17027] gfs2: error 10 reading superblock [ 1589.275930][T17034] loop2: detected capacity change from 0 to 1024 [ 1591.990155][ T11] hfsplus: b-tree write err: -5, ino 3 [ 1592.145196][ T4252] hfsplus: node 4:3 still has 1 user(s)! [ 1592.286563][T17048] loop8: detected capacity change from 0 to 16384 [ 1592.753994][T17052] loop8: detected capacity change from 16384 to 16320 [ 1593.062447][T17059] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2717'. [ 1596.365555][T17092] ptrace attach of "./syz-executor exec"[4252] was attempted by ""[17092] [ 1596.827818][T17094] loop7: detected capacity change from 0 to 1024 [ 1599.499241][ T4491] hfsplus: b-tree write err: -5, ino 3 [ 1599.529314][ T7018] hfsplus: node 4:3 still has 1 user(s)! [ 1599.712047][T17104] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2734'. [ 1599.724060][T17108] binder: 17097:17108 ioctl c0306201 200000000540 returned -14 [ 1599.809856][T17113] loop9: detected capacity change from 0 to 164 [ 1602.459612][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2739'. [ 1603.189320][T17146] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2742'. [ 1606.150996][T17152] ptrace attach of "./syz-executor exec"[11160] was attempted by ""[17152] [ 1608.016935][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.023400][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.230983][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2748'. [ 1608.321718][T17175] loop7: detected capacity change from 0 to 164 [ 1610.675584][T17192] binder: 17184:17192 ioctl c0306201 200000000540 returned -14 [ 1610.955465][T17192] capability: warning: `syz.7.2753' uses deprecated v2 capabilities in a way that may be insecure [ 1610.964859][T17191] futex_wake_op: syz.8.2754 tries to shift op by 535; fix this program [ 1614.049441][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2760'. [ 1614.430474][T16590] udevd[16590]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 1614.481167][T17217] loop8: detected capacity change from 0 to 16384 [ 1615.444421][T17228] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1615.926325][T17223] loop8: detected capacity change from 16384 to 16320 [ 1621.192248][T17258] gfs2: not a GFS2 filesystem [ 1621.695701][T17273] program syz.7.2772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1621.706796][T17273] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1622.053695][T17295] loop7: detected capacity change from 0 to 164 [ 1622.140440][T17296] netlink: 452 bytes leftover after parsing attributes in process `syz.8.2775'. [ 1623.708545][T17290] futex_wake_op: syz.4.2774 tries to shift op by 535; fix this program [ 1624.205294][T17308] futex_wake_op: syz.8.2778 tries to shift op by 535; fix this program [ 1632.152012][T17341] binder: 17334:17341 ioctl c0306201 200000000540 returned -14 [ 1633.394223][T17345] futex_wake_op: syz.2.2787 tries to shift op by 535; fix this program [ 1633.608596][T17362] loop9: detected capacity change from 0 to 164 [ 1638.681160][T17329] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1638.728758][T17376] loop8: detected capacity change from 0 to 16384 [ 1640.052258][T17379] loop8: detected capacity change from 16384 to 16320 [ 1641.656365][T17402] binder: 17398:17402 ioctl c0306201 200000000540 returned -14 [ 1643.037814][T17420] program syz.4.2807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1643.114112][T17420] program syz.4.2807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1643.124180][T17420] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1643.521058][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2808'. [ 1644.105497][T17431] loop9: detected capacity change from 0 to 164 [ 1645.807983][T17444] program syz.9.2814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1645.855481][T17444] program syz.9.2814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1645.865566][T17444] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1648.001153][T17455] loop8: detected capacity change from 0 to 16384 [ 1648.222943][T17456] loop8: detected capacity change from 16384 to 16320 [ 1654.169492][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 1656.137024][T17514] loop8: detected capacity change from 0 to 1024 [ 1662.078599][T17517] program syz.2.2834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1662.132402][T17517] program syz.2.2834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1662.142649][T17517] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1662.578592][T17514] hfsplus: failed to load extents file [ 1665.273990][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2838'. [ 1665.942233][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2842'. [ 1666.049733][T17543] program syz.7.2843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1666.223397][T17543] program syz.7.2843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1666.251687][T17543] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1666.857305][T17553] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1666.868704][T17553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1666.877668][T17553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1666.887055][T17553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1666.894809][T17553] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1666.915184][T17553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1668.741004][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.747358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.212546][T17553] Bluetooth: hci1: command 0x0409 tx timeout [ 1669.729267][ T4405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.910308][ T4405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.272474][T14125] Bluetooth: hci1: command 0x041b tx timeout [ 1672.033086][ T4405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.155091][ T4405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.232788][T17551] chnl_net:caif_netlink_parms(): no params data found [ 1673.360776][T14125] Bluetooth: hci1: command 0x040f tx timeout [ 1674.686416][T17605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2858'. [ 1674.883914][T17609] program syz.7.2859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.952003][T17609] program syz.7.2859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1674.962182][T17609] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1675.430780][T14125] Bluetooth: hci1: command 0x0419 tx timeout [ 1675.659026][T17551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.731908][T17551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.753919][T17551] device bridge_slave_0 entered promiscuous mode [ 1675.966268][T17551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.978014][T17551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.028229][T17551] device bridge_slave_1 entered promiscuous mode [ 1676.309225][T17551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.332566][T17551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.523031][T17551] team0: Port device team_slave_0 added [ 1676.547644][T17551] team0: Port device team_slave_1 added [ 1677.486453][T17639] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1677.500455][T17639] gfs2: error 10 reading superblock [ 1677.955747][T17551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.977993][T17632] futex_wake_op: syz.8.2863 tries to shift op by 535; fix this program [ 1677.986629][T17551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.110091][T17551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.227073][T17647] program syz.4.2866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1678.256586][T17647] program syz.4.2866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1678.257204][T17647] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1678.727606][T17649] program syz.7.2867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1678.755279][T17649] program syz.7.2867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1678.765011][T17649] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1679.301014][T17551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.319366][T17551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1679.567453][T17551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.489250][T17669] program syz.8.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1680.557511][T17669] program syz.8.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1680.567571][T17669] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1680.921298][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 1681.219868][T17551] device hsr_slave_0 entered promiscuous mode [ 1681.253636][T17551] device hsr_slave_1 entered promiscuous mode [ 1681.261510][ T4405] IPVS: stopping backup sync thread 11684 ... [ 1681.296305][T17551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1681.320500][T17551] Cannot create hsr debugfs directory [ 1682.827473][ T4405] device hsr_slave_0 left promiscuous mode [ 1682.866268][T17690] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2875'. [ 1682.884374][ T4405] device hsr_slave_1 left promiscuous mode [ 1682.912036][ T4405] device bridge_slave_1 left promiscuous mode [ 1682.920077][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.934531][ T4405] device bridge_slave_0 left promiscuous mode [ 1682.949432][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.164317][ T4405] device veth1_macvtap left promiscuous mode [ 1684.170498][ T4405] device veth0_macvtap left promiscuous mode [ 1684.188406][ T4405] device veth1_vlan left promiscuous mode [ 1684.233556][ T4405] device veth0_vlan left promiscuous mode [ 1685.460180][T17706] futex_wake_op: syz.8.2878 tries to shift op by 535; fix this program [ 1685.709203][ T4405] bond2 (unregistering): Released all slaves [ 1685.759218][ T4405] bond1 (unregistering): Released all slaves [ 1688.692610][ T4405] team0 (unregistering): Port device team_slave_1 removed [ 1688.764044][ T4405] team0 (unregistering): Port device team_slave_0 removed [ 1688.835602][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.920205][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1689.600777][ T4405] bond0 (unregistering): Released all slaves [ 1689.800136][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2885'. [ 1690.170928][T17742] program syz.4.2889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.236584][T17742] program syz.4.2889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.246673][T17742] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1690.551630][T17739] program syz.9.2888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.597982][T17739] program syz.9.2888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1690.662963][T17739] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1692.255775][T17551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1692.285408][T17551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1692.322828][T17551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1692.395337][T17551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1692.590393][T17551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1692.669953][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1692.710331][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1692.803083][T17551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.823386][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1692.857799][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1692.894104][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.901357][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1692.941288][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1692.983875][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1693.017465][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1693.056592][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.063916][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1693.238450][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1693.308639][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1693.344013][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1694.321210][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1694.329930][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1694.338834][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1694.347941][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1694.364584][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1694.386811][T17551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1694.399206][T17551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1694.414892][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1694.432381][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1694.458746][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1699.425422][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1699.582090][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1699.595062][T17551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.215973][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2905'. [ 1700.468169][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1700.573136][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1700.935487][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1700.945294][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1701.003680][T17551] device veth0_vlan entered promiscuous mode [ 1701.013989][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1701.042563][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1701.086517][T17551] device veth1_vlan entered promiscuous mode [ 1701.136187][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1701.161611][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1701.195404][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1701.214269][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1701.360430][T17862] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2906'. [ 1701.510383][T17551] device veth0_macvtap entered promiscuous mode [ 1701.564022][T17551] device veth1_macvtap entered promiscuous mode [ 1701.624936][T17551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.661007][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1701.692620][ T9065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1701.929410][T17551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.942712][T17551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.951518][T17551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.960238][T17551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.970263][T17551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.726069][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1702.824259][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1702.977648][T17867] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2909'. [ 1703.225007][ T4523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.248573][ T4523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.484517][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1704.782952][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.806742][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.844515][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1705.975577][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 1706.149074][T17893] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1706.201090][T17893] overlayfs: failed to set xattr on upper [ 1706.229327][T17893] overlayfs: ...falling back to index=off,metacopy=off. [ 1706.296616][T17893] overlayfs: failed to resolve './file0': -2 [ 1715.609647][T17944] futex_wake_op: syz.2.2927 tries to shift op by 535; fix this program [ 1719.743969][T17977] xt_l2tp: v2 sid > 0xffff: 262144 [ 1723.176403][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'. [ 1726.147888][T18010] futex_wake_op: syz.8.2944 tries to shift op by 535; fix this program [ 1726.756751][T18035] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2948'. [ 1726.790475][T18029] program syz.2.2946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1726.834271][T18029] program syz.2.2946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1727.355951][T18029] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1729.710978][T18064] xt_l2tp: v2 sid > 0xffff: 262144 [ 1730.165671][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.173099][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.448624][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1730.989083][T18076] program syz.8.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1731.951973][T18081] program syz.8.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1731.982674][T18081] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1735.091064][T18107] futex_wake_op: syz.9.2965 tries to shift op by 535; fix this program [ 1736.556202][T18101] futex_wake_op: syz.7.2966 tries to shift op by 535; fix this program [ 1737.454894][T18123] xt_l2tp: v2 sid > 0xffff: 262144 [ 1739.932489][T18148] program syz.7.2978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1739.949786][T18148] program syz.7.2978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1739.978847][T18148] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1740.037794][T18140] futex_wake_op: syz.9.2975 tries to shift op by 535; fix this program [ 1748.307003][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2991'. [ 1748.723613][T18207] xt_l2tp: v2 sid > 0xffff: 262144 [ 1750.519925][T18221] binder: 18217:18221 ioctl c0306201 200000000540 returned -14 [ 1751.042955][T18229] futex_wake_op: syz.9.2996 tries to shift op by 535; fix this program [ 1752.643753][T18235] program syz.4.2998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1752.812070][T18239] program syz.4.2998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1752.829592][T18239] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1753.030632][T18243] futex_wake_op: syz.8.3001 tries to shift op by 535; fix this program [ 1754.423355][T18250] futex_wake_op: syz.9.3003 tries to shift op by 535; fix this program [ 1758.026864][T18268] futex_wake_op: syz.7.3008 tries to shift op by 535; fix this program [ 1761.689140][T18306] binder: 18301:18306 ioctl c0306201 200000000540 returned -14 [ 1762.595325][T18319] xt_l2tp: v2 sid > 0xffff: 262144 [ 1765.195238][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 1766.054062][T18343] binder: 18339:18343 ioctl c0306201 200000000540 returned -14 [ 1766.275495][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3025'. [ 1768.318672][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3031'. [ 1768.525621][T18369] program syz.7.3032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1768.787451][T18369] program syz.7.3032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1768.796942][T18369] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1773.073451][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3039'. [ 1775.641216][T18414] program syz.9.3044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1775.672181][T18414] program syz.9.3044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1775.682251][T18414] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1779.731880][T18436] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1780.312150][T18443] xt_l2tp: v2 sid > 0xffff: 262144 [ 1780.317190][T18441] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1780.737340][T18441] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1780.746825][T18427] program syz.8.3047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1780.759631][T18427] program syz.8.3047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1780.769207][T18427] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1782.780713][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3057'. [ 1784.018445][T18470] xt_l2tp: v2 sid > 0xffff: 262144 [ 1785.097283][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1785.281593][T18478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.291426][T18478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.292769][T18482] program syz.7.3064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1786.303097][T18482] program syz.7.3064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1786.312577][T18482] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1791.605446][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.618395][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.135541][T14125] Bluetooth: hci1: command 0x0406 tx timeout [ 1798.072572][T18555] program syz.4.3087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1798.107789][T18555] program syz.4.3087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1798.117938][T18555] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1799.595491][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3094'. [ 1806.769116][T18626] binder: 18623:18626 ioctl c0306201 200000000540 returned -14 [ 1808.019909][T18634] binder: 18630:18634 ioctl c0306201 200000000540 returned -14 [ 1812.026062][T18671] binder: 18666:18671 ioctl c0306201 200000000780 returned -11 [ 1812.051840][T18671] loop7: detected capacity change from 0 to 128 [ 1812.258994][T18672] virtio-fs: tag not found [ 1818.902446][T18711] binder: 18706:18711 ioctl c0306201 200000000780 returned -11 [ 1819.076542][T18711] loop7: detected capacity change from 0 to 128 [ 1819.453042][T18709] virtio-fs: tag not found [ 1822.950152][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 1827.590876][T18783] binder: 18778:18783 ioctl c0306201 200000000780 returned -11 [ 1827.615280][T18783] loop7: detected capacity change from 0 to 128 [ 1827.836467][T18780] virtio-fs: tag not found [ 1828.550678][T18786] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3145'. [ 1837.129684][T18837] binder: 18826:18837 ioctl c0306201 200000000780 returned -11 [ 1837.142682][T18837] loop2: detected capacity change from 0 to 128 [ 1837.224933][T18833] virtio-fs: tag not found [ 1841.523073][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3168'. [ 1843.430141][T18884] binder: 18882:18884 ioctl c0306201 200000000540 returned -14 [ 1853.237760][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.261078][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.634894][T18960] netlink: 244 bytes leftover after parsing attributes in process `syz.8.3192'. [ 1860.980825][T18975] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3197'. [ 1863.027291][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3201'. [ 1871.004419][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3216'. [ 1872.893348][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3222'. [ 1878.655849][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1879.451303][T19103] binder: 19098:19103 ioctl c0306201 200000000780 returned -11 [ 1879.477030][T19103] loop9: detected capacity change from 0 to 128 [ 1880.110973][T19100] virtio-fs: tag not found [ 1885.345855][T19124] binder: 19121:19124 ioctl c0306201 200000000540 returned -14 [ 1888.529124][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3245'. [ 1889.028220][T19171] binder: 19161:19171 ioctl c0306201 200000000540 returned -14 [ 1889.249554][T19182] No buffer was provided with the request [ 1895.507744][T19212] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3256'. [ 1897.379494][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 1898.171883][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3261'. [ 1901.593541][T19259] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3270'. [ 1902.991127][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3274'. [ 1907.319840][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3279'. [ 1907.617908][T19312] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3286'. [ 1907.834655][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3287'. [ 1908.987457][T19320] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1910.361725][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3293'. [ 1910.485770][T19338] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1913.236164][T19363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3301'. [ 1915.688850][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.695334][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.964436][T19391] loop4: detected capacity change from 0 to 512 [ 1918.071581][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1918.548300][T19391] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1918.633909][T19391] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1918.750506][T19391] EXT4-fs (loop4): 1 truncate cleaned up [ 1918.757562][T19391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1918.880629][T19391] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 1919.115118][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1922.218927][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3314'. [ 1927.015856][T19431] binder: 19424:19431 ioctl c0306201 200000000540 returned -14 [ 1933.633253][T19456] No buffer was provided with the request [ 1933.748024][T17553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1933.759841][T17553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1933.769017][T17553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1933.800037][T17553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1933.808019][T17553] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1933.834821][T17553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1937.275486][T14125] Bluetooth: hci4: command 0x0409 tx timeout [ 1938.476732][ T9065] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.663290][T14125] Bluetooth: hci4: command 0x041b tx timeout [ 1940.375034][ T9065] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.795747][T14125] Bluetooth: hci4: command 0x040f tx timeout [ 1943.038131][ T9065] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.858084][T17553] Bluetooth: hci4: command 0x0419 tx timeout [ 1943.898492][T19517] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1944.879914][ T9065] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.913338][T19453] chnl_net:caif_netlink_parms(): no params data found [ 1945.104028][T19531] binder: 19522:19531 ioctl c0306201 200000000540 returned -14 [ 1945.130335][T19453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.156418][T19453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1945.185819][T19453] device bridge_slave_0 entered promiscuous mode [ 1945.405098][T19453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.416166][T19453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.474462][T19453] device bridge_slave_1 entered promiscuous mode [ 1947.230392][T19453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1947.286314][T19453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1948.587471][T19453] team0: Port device team_slave_0 added [ 1949.443007][T19453] team0: Port device team_slave_1 added [ 1950.027027][T19573] loop9: detected capacity change from 0 to 2048 [ 1950.041850][T19453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1950.048878][T19453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1950.301460][T19453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1950.322957][T19453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1950.331235][T19453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1950.424076][T19453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1950.591439][T19453] device hsr_slave_0 entered promiscuous mode [ 1950.600815][T19453] device hsr_slave_1 entered promiscuous mode [ 1950.610023][T19453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1950.648411][T19453] Cannot create hsr debugfs directory [ 1951.328151][T19573] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1951.446857][T19573] EXT4-fs (loop9): can't enable nombcache during remount [ 1952.048251][T11160] EXT4-fs (loop9): unmounting filesystem. [ 1960.688457][T19453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1960.885286][T19453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1962.006370][ T9065] device hsr_slave_0 left promiscuous mode [ 1962.028591][ T9065] device hsr_slave_1 left promiscuous mode [ 1962.111463][ T9065] device bridge_slave_1 left promiscuous mode [ 1962.129946][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.158962][ T9065] device bridge_slave_0 left promiscuous mode [ 1962.185942][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.330019][ T9065] device veth1_macvtap left promiscuous mode [ 1962.640039][ T9065] device veth0_macvtap left promiscuous mode [ 1962.694027][ T9065] device veth1_vlan left promiscuous mode [ 1962.758054][ T9065] device veth0_vlan left promiscuous mode [ 1963.454752][T19682] binder: 19681:19682 ioctl 4018620d 0 returned -22 [ 1963.832766][T19684] binder: 19681:19684 ioctl c0306201 200000000540 returned -14 [ 1969.368760][ T9065] team0 (unregistering): Port device team_slave_1 removed [ 1969.495025][ T9065] team0 (unregistering): Port device team_slave_0 removed [ 1970.100670][ T9065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1970.194993][ T9065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.993739][T19731] loop9: detected capacity change from 0 to 2048 [ 1973.012140][T19731] EXT4-fs: Ignoring removed mblk_io_submit option [ 1973.067031][T19731] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1973.206681][T19731] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3381: bg 0: block 234: padding at end of block bitmap is not set [ 1973.297001][T19731] EXT4-fs (loop9): Remounting filesystem read-only [ 1973.349801][ T9065] bond0 (unregistering): Released all slaves [ 1973.471329][T19453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1973.481392][T19453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1973.587603][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1974.287899][T11160] EXT4-fs (loop9): unmounting filesystem. [ 1974.423207][T19453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1974.556495][T19453] 8021q: adding VLAN 0 to HW filter on device team0 [ 1974.588785][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1974.612466][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1974.638510][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1974.860940][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1974.940836][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1974.948021][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1974.993825][T19453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1975.050550][T19453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1975.097207][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1975.123403][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1975.262651][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1975.319600][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.326803][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1975.392806][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1975.427345][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1975.495983][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1975.622468][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1975.633406][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1975.645215][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1975.654187][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1975.670353][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1975.679798][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1975.688559][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1975.724760][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1975.745804][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1975.923876][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.930233][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.671066][T19794] binder: 19789:19794 ioctl c0306201 200000000540 returned -14 [ 1980.217562][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1980.296463][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1980.455346][T19453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1981.058595][T19806] loop4: detected capacity change from 0 to 2048 [ 1981.074585][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1981.112653][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1981.181937][T19806] EXT4-fs: Ignoring removed mblk_io_submit option [ 1982.142035][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1982.166447][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1982.203652][T19806] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1982.328274][T19453] device veth0_vlan entered promiscuous mode [ 1982.340353][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1982.378619][T19807] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3391: bg 0: block 234: padding at end of block bitmap is not set [ 1982.388947][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1982.454397][T19807] EXT4-fs (loop4): Remounting filesystem read-only [ 1982.455706][T19453] device veth1_vlan entered promiscuous mode [ 1984.453623][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1984.838155][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1984.871542][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1984.970275][T19846] loop9: detected capacity change from 0 to 1024 [ 1984.973311][T19849] loop4: detected capacity change from 0 to 1024 [ 1984.991959][T19837] loop2: detected capacity change from 0 to 2048 [ 1985.011464][T19849] EXT4-fs: Ignoring removed oldalloc option [ 1985.017507][T19849] EXT4-fs: Ignoring removed bh option [ 1985.027878][T19846] EXT4-fs: Ignoring removed oldalloc option [ 1985.041562][T19846] EXT4-fs: Ignoring removed bh option [ 1985.047596][T19839] binder: 19838:19839 ioctl c0306201 200000000540 returned -14 [ 1985.060019][T19453] device veth0_macvtap entered promiscuous mode [ 1985.079740][T19846] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1985.081417][T19837] EXT4-fs: Ignoring removed mblk_io_submit option [ 1985.125236][T19849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1985.150227][T19453] device veth1_macvtap entered promiscuous mode [ 1985.195454][T19837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1985.207766][T19846] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1985.227679][T19849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1985.259468][T19453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1985.322580][T19453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1985.387316][T19453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1985.408238][T19844] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3397: bg 0: block 234: padding at end of block bitmap is not set [ 1985.475225][T19844] EXT4-fs (loop2): Remounting filesystem read-only [ 1985.483953][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1985.494972][T11160] EXT4-fs (loop9): unmounting filesystem. [ 1985.557071][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1985.571689][T11657] EXT4-fs (loop4): unmounting filesystem. [ 1985.600797][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1986.282588][T19872] binder: 19866:19872 ioctl c0306201 200000000780 returned -11 [ 1986.295560][T19872] loop4: detected capacity change from 0 to 128 [ 1986.348120][T19871] virtio-fs: tag not found [ 1986.482031][T17551] EXT4-fs (loop2): unmounting filesystem. [ 1989.619997][T17553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1989.631131][T17553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1989.640252][T17553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1989.650268][T17553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1989.662045][T17553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1989.670114][T17553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1989.700336][T19901] binder: 19893:19901 ioctl c0306201 200000000540 returned -14 [ 1991.299567][T19930] binder: 19925:19930 ioctl c0306201 200000000780 returned -11 [ 1991.324559][T19930] loop8: detected capacity change from 0 to 128 [ 1991.354744][T19930] virtio-fs: tag not found [ 1991.972393][T14125] Bluetooth: hci0: command 0x0409 tx timeout [ 1992.278706][T19938] No buffer was provided with the request [ 1993.901856][T19939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3416'. [ 1993.990793][T14125] Bluetooth: hci0: command 0x041b tx timeout [ 1994.703431][T19898] chnl_net:caif_netlink_parms(): no params data found [ 1996.081021][T14125] Bluetooth: hci0: command 0x040f tx timeout [ 1997.656648][T19971] loop9: detected capacity change from 0 to 2048 [ 1997.692975][T19971] EXT4-fs: Ignoring removed mblk_io_submit option [ 1997.783935][T19971] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1997.871375][T19977] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.3422: bg 0: block 234: padding at end of block bitmap is not set [ 1997.908681][T19977] EXT4-fs (loop9): Remounting filesystem read-only [ 1998.061228][T19898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.080692][T19898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1998.741962][T19898] device bridge_slave_0 entered promiscuous mode [ 1998.835932][T19898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.868762][T19898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.376631][T19898] device bridge_slave_1 entered promiscuous mode [ 1999.626261][T11160] EXT4-fs (loop9): unmounting filesystem. [ 2000.227243][T19898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2000.530768][T19898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2001.579783][T20004] loop8: detected capacity change from 0 to 1024 [ 2001.631468][T20004] EXT4-fs: Ignoring removed oldalloc option [ 2001.652913][T20004] EXT4-fs: Ignoring removed bh option [ 2001.658311][T19898] team0: Port device team_slave_0 added [ 2001.841396][T20004] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2004.383213][T20004] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2004.593513][ T8320] EXT4-fs (loop8): unmounting filesystem. [ 2004.628496][T20018] loop9: detected capacity change from 0 to 512 [ 2004.649386][T19898] team0: Port device team_slave_1 added [ 2004.650098][T20018] EXT4-fs: Ignoring removed i_version option [ 2004.744355][T20018] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2004.838617][T20020] loop8: detected capacity change from 0 to 1024 [ 2004.863260][T20018] EXT4-fs (loop9): 1 truncate cleaned up [ 2004.868939][T20018] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2004.909113][T20020] EXT4-fs: Ignoring removed oldalloc option [ 2004.915326][T20020] EXT4-fs: Ignoring removed bh option [ 2004.935804][T20020] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2004.975488][T20018] [ 2004.977878][T20018] ====================================================== [ 2004.984919][T20018] WARNING: possible circular locking dependency detected [ 2004.991979][T20018] 6.1.142-syzkaller #0 Not tainted [ 2004.997117][T20018] ------------------------------------------------------ [ 2005.004168][T20018] syz.9.3432/20018 is trying to acquire lock: [ 2005.010258][T20018] ffff8880256f5440 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 2005.022169][T20018] [ 2005.022169][T20018] but task is already holding lock: [ 2005.029566][T20018] ffff888073e85cd0 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 2005.038930][T20018] [ 2005.038930][T20018] which lock already depends on the new lock. [ 2005.038930][T20018] [ 2005.049342][T20018] [ 2005.049342][T20018] the existing dependency chain (in reverse order) is: [ 2005.058373][T20018] [ 2005.058373][T20018] -> #1 (&ei->i_data_sem/3){++++}-{3:3}: [ 2005.066212][T20018] down_write+0x36/0x60 [ 2005.070912][T20018] ext4_xattr_inode_lookup_create+0x15c4/0x1d10 [ 2005.077696][T20018] ext4_xattr_ibody_set+0x1fe/0x690 [ 2005.083430][T20018] ext4_xattr_set_handle+0xa7c/0x12b0 [ 2005.089340][T20018] ext4_xattr_set+0x22a/0x320 [ 2005.094549][T20018] __vfs_setxattr+0x3e0/0x420 [ 2005.099758][T20018] __vfs_setxattr_noperm+0x129/0x5e0 [ 2005.105575][T20018] vfs_setxattr+0x168/0x2f0 [ 2005.110625][T20018] setxattr+0x2b2/0x2d0 [ 2005.115303][T20018] path_setxattr+0x142/0x280 [ 2005.120414][T20018] __x64_sys_lsetxattr+0xb4/0xd0 [ 2005.125887][T20018] do_syscall_64+0x4c/0xa0 [ 2005.130837][T20018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2005.137266][T20018] [ 2005.137266][T20018] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}: [ 2005.146076][T20018] __lock_acquire+0x2cf8/0x7c50 [ 2005.151478][T20018] lock_acquire+0x1b4/0x490 [ 2005.156511][T20018] down_write+0x36/0x60 [ 2005.161198][T20018] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 2005.167991][T20018] ext4_xattr_block_set+0x23a/0x32a0 [ 2005.173828][T20018] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 2005.180267][T20018] __ext4_expand_extra_isize+0x301/0x3e0 [ 2005.186429][T20018] __ext4_mark_inode_dirty+0x47f/0x770 [ 2005.192413][T20018] ext4_setattr+0x1457/0x19f0 [ 2005.197609][T20018] notify_change+0xc74/0xf40 [ 2005.202731][T20018] do_truncate+0x197/0x220 [ 2005.207675][T20018] path_openat+0x27f2/0x2e70 [ 2005.212791][T20018] do_filp_open+0x1c1/0x3c0 [ 2005.217831][T20018] do_sys_openat2+0x142/0x490 [ 2005.223046][T20018] __x64_sys_openat+0x135/0x160 [ 2005.228433][T20018] do_syscall_64+0x4c/0xa0 [ 2005.233381][T20018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2005.239809][T20018] [ 2005.239809][T20018] other info that might help us debug this: [ 2005.239809][T20018] [ 2005.250044][T20018] Possible unsafe locking scenario: [ 2005.250044][T20018] [ 2005.257490][T20018] CPU0 CPU1 [ 2005.262865][T20018] ---- ---- [ 2005.268257][T20018] lock(&ei->i_data_sem/3); [ 2005.272870][T20018] lock(&sb->s_type->i_mutex_key#8/1); [ 2005.280958][T20018] lock(&ei->i_data_sem/3); [ 2005.288089][T20018] lock(&sb->s_type->i_mutex_key#8/1); [ 2005.293660][T20018] [ 2005.293660][T20018] *** DEADLOCK *** [ 2005.293660][T20018] [ 2005.301807][T20018] 5 locks held by syz.9.3432/20018: [ 2005.307008][T20018] #0: ffff88807da8e460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 2005.316173][T20018] #1: ffff888073e85e48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x183/0x220 [ 2005.326460][T20018] #2: ffff888073e85fe8 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xe6f/0x19f0 [ 2005.336645][T20018] #3: ffff888073e85cd0 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 2005.346401][T20018] #4: ffff888073e85b10 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 2005.356671][T20018] [ 2005.356671][T20018] stack backtrace: [ 2005.362559][T20018] CPU: 1 PID: 20018 Comm: syz.9.3432 Not tainted 6.1.142-syzkaller #0 [ 2005.370719][T20018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2005.380778][T20018] Call Trace: [ 2005.384072][T20018] [ 2005.387025][T20018] dump_stack_lvl+0x168/0x22e [ 2005.391857][T20018] ? load_image+0x3b0/0x3b0 [ 2005.396370][T20018] ? show_regs_print_info+0x12/0x12 [ 2005.401587][T20018] ? print_circular_bug+0x12b/0x1a0 [ 2005.406799][T20018] check_noncircular+0x274/0x310 [ 2005.411746][T20018] ? add_chain_block+0x940/0x940 [ 2005.416724][T20018] ? lockdep_lock+0xdc/0x1e0 [ 2005.421346][T20018] ? verify_lock_unused+0x140/0x140 [ 2005.426555][T20018] ? _find_first_zero_bit+0xcf/0x100 [ 2005.431852][T20018] __lock_acquire+0x2cf8/0x7c50 [ 2005.436714][T20018] ? __lock_acquire+0x7c50/0x7c50 [ 2005.441754][T20018] ? verify_lock_unused+0x140/0x140 [ 2005.446968][T20018] ? mark_buffer_dirty+0x2d8/0x7a0 [ 2005.452132][T20018] lock_acquire+0x1b4/0x490 [ 2005.456643][T20018] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 2005.463069][T20018] ? __might_sleep+0xd0/0xd0 [ 2005.467679][T20018] ? read_lock_is_recursive+0x10/0x10 [ 2005.473062][T20018] ? __ext4_mark_inode_dirty+0x4eb/0x770 [ 2005.478709][T20018] down_write+0x36/0x60 [ 2005.482893][T20018] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 2005.489333][T20018] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 2005.495600][T20018] ? ext4_xattr_ibody_set+0x690/0x690 [ 2005.501026][T20018] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 2005.507021][T20018] ? lock_chain_count+0x20/0x20 [ 2005.511890][T20018] ext4_xattr_block_set+0x23a/0x32a0 [ 2005.517190][T20018] ? __might_sleep+0xd0/0xd0 [ 2005.521813][T20018] ? __getblk_gfp+0x4f/0xb20 [ 2005.526429][T20018] ? xattr_find_entry+0x12b/0x2f0 [ 2005.531478][T20018] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 2005.536950][T20018] ? ext4_xattr_block_find+0x241/0x2b0 [ 2005.542421][T20018] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 2005.548341][T20018] __ext4_expand_extra_isize+0x301/0x3e0 [ 2005.553988][T20018] __ext4_mark_inode_dirty+0x47f/0x770 [ 2005.559453][T20018] ext4_setattr+0x1457/0x19f0 [ 2005.564136][T20018] ? ext4_write_inode+0x5e0/0x5e0 [ 2005.569162][T20018] notify_change+0xc74/0xf40 [ 2005.573765][T20018] do_truncate+0x197/0x220 [ 2005.578195][T20018] ? aa_get_current_label+0x110/0x1d0 [ 2005.583573][T20018] ? put_page_bootmem+0x2c0/0x2c0 [ 2005.588614][T20018] ? ima_bprm_check+0x1f0/0x1f0 [ 2005.593469][T20018] ? bpf_lsm_path_truncate+0x5/0x10 [ 2005.598682][T20018] path_openat+0x27f2/0x2e70 [ 2005.603284][T20018] ? do_sys_openat2+0xcf/0x490 [ 2005.608069][T20018] ? __x64_sys_openat+0x135/0x160 [ 2005.613118][T20018] ? do_filp_open+0x3c0/0x3c0 [ 2005.617821][T20018] do_filp_open+0x1c1/0x3c0 [ 2005.622346][T20018] ? vfs_tmpfile+0x480/0x480 [ 2005.626955][T20018] ? _raw_spin_unlock+0x24/0x40 [ 2005.631813][T20018] ? alloc_fd+0x58f/0x630 [ 2005.636166][T20018] do_sys_openat2+0x142/0x490 [ 2005.640896][T20018] ? do_sys_open+0xe0/0xe0 [ 2005.645334][T20018] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 2005.651334][T20018] ? lock_chain_count+0x20/0x20 [ 2005.656200][T20018] __x64_sys_openat+0x135/0x160 [ 2005.661075][T20018] do_syscall_64+0x4c/0xa0 [ 2005.665502][T20018] ? clear_bhb_loop+0x60/0xb0 [ 2005.670183][T20018] ? clear_bhb_loop+0x60/0xb0 [ 2005.674879][T20018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2005.680788][T20018] RIP: 0033:0x7fd3ded8e929 [ 2005.685206][T20018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2005.704817][T20018] RSP: 002b:00007fd3dfc8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2005.713239][T20018] RAX: ffffffffffffffda RBX: 00007fd3defb5fa0 RCX: 00007fd3ded8e929 [ 2005.721231][T20018] RDX: 0000000000000242 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 2005.729217][T20018] RBP: 00007fd3dee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2005.737184][T20018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2005.745155][T20018] R13: 0000000000000000 R14: 00007fd3defb5fa0 R15: 00007ffd6b08b158 [ 2005.753135][T20018] [ 2005.759303][T19898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2005.789798][T19898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2005.832600][T20020] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 2005.943588][T19898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2006.081545][T20020] EXT4-fs (loop8): unmounting filesystem. [ 2006.680380][ T4966] device hsr_slave_0 left promiscuous mode [ 2006.688114][ T4966] device hsr_slave_1 left promiscuous mode [ 2006.694575][ T4966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2006.703289][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.711773][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.719503][ T4966] device bridge_slave_1 left promiscuous mode [ 2006.726890][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.735536][ T4966] device bridge_slave_0 left promiscuous mode [ 2006.742229][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.752557][ T4966] device veth1_macvtap left promiscuous mode [ 2006.758567][ T4966] device veth0_macvtap left promiscuous mode [ 2006.765237][ T4966] device veth1_vlan left promiscuous mode [ 2006.771626][ T4966] device veth0_vlan left promiscuous mode [ 2006.823487][T20018] EXT4-fs (loop9): unmounting filesystem. [ 2006.944811][ T4966] team0 (unregistering): Port device team_slave_1 removed [ 2006.978502][ T4966] team0 (unregistering): Port device team_slave_0 removed [ 2006.990059][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2007.003976][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2007.055469][ T4966] bond0 (unregistering): Released all slaves [ 2007.470319][ T4966] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.514772][ T4966] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.554902][ T4966] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.614471][ T4966] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.728155][ T4966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.775972][ T4966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.815084][ T4966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.855197][ T4966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.948111][ T4966] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.994895][ T4966] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.034672][ T4966] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.097545][ T4966] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.204013][ T4966] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.256135][ T4966] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.295466][ T4966] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.368254][ T4966] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.973911][ T4966] device hsr_slave_0 left promiscuous mode [ 2009.980228][ T4966] device hsr_slave_1 left promiscuous mode [ 2009.987363][ T4966] device bridge_slave_1 left promiscuous mode [ 2009.995340][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.005214][ T4966] device bridge_slave_0 left promiscuous mode [ 2010.012998][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.024114][ T4966] device hsr_slave_0 left promiscuous mode [ 2010.030442][ T4966] device hsr_slave_1 left promiscuous mode [ 2010.037717][ T4966] device bridge_slave_1 left promiscuous mode [ 2010.044201][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.052920][ T4966] device bridge_slave_0 left promiscuous mode [ 2010.059114][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.069961][ T4966] device hsr_slave_0 left promiscuous mode [ 2010.077245][ T4966] device hsr_slave_1 left promiscuous mode [ 2010.083975][ T4966] device bridge_slave_1 left promiscuous mode [ 2010.090167][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.099494][ T4966] device bridge_slave_0 left promiscuous mode [ 2010.106214][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.115188][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2010.123050][ T4966] device bridge_slave_1 left promiscuous mode [ 2010.129193][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.138008][ T4966] device bridge_slave_0 left promiscuous mode [ 2010.144255][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.155849][ T4966] device hsr_slave_0 left promiscuous mode [ 2010.162409][ T4966] device hsr_slave_1 left promiscuous mode [ 2010.168672][ T4966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2010.176543][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2010.184440][ T4966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2010.192181][ T4966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2010.199809][ T4966] device bridge_slave_1 left promiscuous mode [ 2010.206266][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.214468][ T4966] device bridge_slave_0 left promiscuous mode [ 2010.221246][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.237835][ T4966] device veth1_macvtap left promiscuous mode [ 2010.243971][ T4966] device veth0_macvtap left promiscuous mode [ 2010.250055][ T4966] device veth1_vlan left promiscuous mode [ 2010.256989][ T4966] device veth0_vlan left promiscuous mode [ 2010.263957][ T4966] device veth1_macvtap left promiscuous mode [ 2010.269997][ T4966] device veth0_macvtap left promiscuous mode [ 2010.277140][ T4966] device veth1_vlan left promiscuous mode [ 2010.283127][ T4966] device veth0_vlan left promiscuous mode [ 2010.290075][ T4966] device veth1_macvtap left promiscuous mode [ 2010.297448][ T4966] device veth0_macvtap left promiscuous mode [ 2010.303642][ T4966] device veth1_vlan left promiscuous mode [ 2010.309431][ T4966] device veth0_vlan left promiscuous mode [ 2010.321672][ T4966] device veth1_macvtap left promiscuous mode [ 2010.327804][ T4966] device veth0_macvtap left promiscuous mode [ 2010.334152][ T4966] device veth1_vlan left promiscuous mode [ 2010.339954][ T4966] device veth0_vlan left promiscuous mode [ 2010.749118][ T4966] team0 (unregistering): Port device team_slave_1 removed [ 2010.784993][ T4966] team0 (unregistering): Port device team_slave_0 removed [ 2010.818865][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2010.833150][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2010.903486][ T4966] bond0 (unregistering): Released all slaves [ 2011.032012][ T4966] team0 (unregistering): Port device team_slave_1 removed [ 2011.043553][ T4966] team0 (unregistering): Port device team_slave_0 removed [ 2011.073425][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2011.085967][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2011.137208][ T4966] bond0 (unregistering): Released all slaves [ 2011.310552][ T4966] team0 (unregistering): Port device team_slave_1 removed [ 2011.339279][ T4966] team0 (unregistering): Port device team_slave_0 removed [ 2011.369463][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2011.398606][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2011.446764][ T4966] bond0 (unregistering): Released all slaves [ 2011.508984][ T4966] team0 (unregistering): Port device team_slave_1 removed [ 2011.537525][ T4966] team0 (unregistering): Port device team_slave_0 removed [ 2011.569648][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2011.598658][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2011.642369][ T4966] bond0 (unregistering): Released all slaves [ 2011.762339][ T4966] team0 (unregistering): Port device team_slave_1 removed [ 2011.774310][ T4966] team0 (unregistering): Port device team_slave_0 removed [ 2011.807358][ T4966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2011.837669][ T4966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2011.890060][ T4966] bond0 (unregistering): Released all slaves