last executing test programs: 21m57.066194989s ago: executing program 3 (id=79): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xa, 0x0, 0x80000001, 0x1, 0x3e0, 0x6}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 21m56.521258426s ago: executing program 3 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800200000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee6ffb0bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x2) 21m54.1771925s ago: executing program 3 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) 21m53.077281764s ago: executing program 3 (id=92): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) 21m50.794787585s ago: executing program 3 (id=99): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) 21m47.705100573s ago: executing program 3 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close(0x3) 21m32.208740589s ago: executing program 32 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close(0x3) 19m3.710459924s ago: executing program 2 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 19m2.292283908s ago: executing program 2 (id=508): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) msgget$private(0x0, 0x31) socket$packet(0x11, 0x2, 0x300) socket(0x2a, 0x3, 0x80009) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f00000031c0)={0x2020}, 0x2020) write$FUSE_STATX(r2, 0x0, 0x0) 19m0.082729677s ago: executing program 2 (id=520): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "f40f08"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x0, 0x80}}, @nested_vmresume={0x130, 0x18}], 0xb3}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20002) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 18m58.523390856s ago: executing program 2 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) unshare(0x20000600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a80), 0x1007, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r3, &(0x7f0000001b80), 0x0}, 0x20) 18m55.979348886s ago: executing program 2 (id=532): mlockall(0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) read$FUSE(r3, &(0x7f0000000f40)={0x2020}, 0x3c00) 18m51.235803455s ago: executing program 2 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18m36.089227701s ago: executing program 33 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m38.759379286s ago: executing program 6 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setparam(0xffffffffffffffff, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0x100) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 13m37.917053353s ago: executing program 6 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 13m36.41435351s ago: executing program 6 (id=1258): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000440)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x6d5, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 13m35.364792623s ago: executing program 6 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = msgget$private(0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000001f80)=""/4096) 13m34.339808225s ago: executing program 6 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d00d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) syz_emit_ethernet(0xae, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd601200"], 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x731, 0x0, 0x25dfdbfe, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x4c044}, 0x4000010) 13m33.51129128s ago: executing program 6 (id=1261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f00000001c0)) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2000cc0}, 0x38) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x664}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d1d, &(0x7f00000001c0)) 13m17.228561652s ago: executing program 34 (id=1261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f00000001c0)) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2000cc0}, 0x38) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x664}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d1d, &(0x7f00000001c0)) 13m13.927744735s ago: executing program 1 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xc, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000011c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 13m8.339374031s ago: executing program 1 (id=1310): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001100)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000000)={r7, 0x3976, 0x7, 0x80, 0x5d1c01c55bbfadc9, [], [0x0, 0x5, 0x401], [0x0, 0x401, 0x9d], [0x9, 0x9, 0x1c00000000000000, 0x7]}) 13m5.567552788s ago: executing program 1 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x40}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x4000) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 13m3.133947425s ago: executing program 1 (id=1316): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000000600)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc0, &(0x7f0000000080)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ftruncate(r0, 0x10001) sendfile(r0, r0, 0x0, 0x800000009) 12m59.856153358s ago: executing program 1 (id=1321): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40800) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x13, 0x80000001, 0x35b3, 0x2, 0x800, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) 12m53.948530653s ago: executing program 1 (id=1332): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591"}}) r2 = semget$private(0x0, 0x2, 0x410) semctl$SETVAL(r2, 0x1, 0x8, 0x0) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000200)) ptrace(0x10, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 12m51.258015378s ago: executing program 35 (id=1332): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="e2e15cbebc064b26984da94db1a0293b4923c90b88f0f6caddee92328660df1adb0487cb420591"}}) r2 = semget$private(0x0, 0x2, 0x410) semctl$SETVAL(r2, 0x1, 0x8, 0x0) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000000200)) ptrace(0x10, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 19.194814333s ago: executing program 4 (id=2974): bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', 0x0, 0xffffffffffffff9c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r5 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f00000005c0)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8no}, {@shortname_lower}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x89, 0x2c4, &(0x7f0000000b00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f00000021c0)=""/4086, 0xff6) 16.976464244s ago: executing program 7 (id=2978): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x44, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x8, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) socket$netlink(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000)) io_uring_setup(0x30aa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = io_uring_setup(0x5830, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0x1f5, 0x0, r1}) r3 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x18f9, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x40) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000200)=r4, 0x1) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000340)=0x400008) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) accept4(r0, &(0x7f00000003c0)=@phonet, 0x0, 0x80800) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x9e0, 0x5, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x4007, 0x7ff8, 0xf02, 0x3, 0x3, 0xe, 0x100, 0x6, 0x7, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) 16.975056484s ago: executing program 4 (id=2979): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r1) ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYBLOB], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x24048801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 16.312169495s ago: executing program 7 (id=2982): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r5, &(0x7f00000002c0)={0x130, 0x0, r6, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0x6, 0x6, 0x0, r7, 0xa000, '\x00', 0x7, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) 14.798108952s ago: executing program 7 (id=2985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) capset(0x0, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(0x0, r0) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, 0x0) 12.01912128s ago: executing program 4 (id=2989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000000002010200000000000000000a00e100040003803c0002802c0001800a000300fc00000000000000000000000000000114000400fe8000000000000000000000000000130c0002800500010000000000040001"], 0x58}}, 0x14) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, 0x0, 0x0) listen(r4, 0x3) accept4(r4, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000005b40)={&(0x7f0000004680)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000004700)=""/4082, 0x1000}, {0x0, 0x55}], 0x47}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 11.618549853s ago: executing program 7 (id=2991): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x40010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fchown(r4, 0xee00, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x80019) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) 10.11523928s ago: executing program 5 (id=2996): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x10000, 0x4) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 9.536753559s ago: executing program 4 (id=2997): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', 0x0, 0x5, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) 7.679626337s ago: executing program 4 (id=3000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) ioctl$TCFLSH(r3, 0x8910, 0xffffffffffff7ffe) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000c40)={[{@quota}, {@errors_remount}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$eJzs3MtvG8UfAPDv2nn28Ut+pTxaWggURMUjadIHPXABceAAAgkORZxCklalaYOaINGqogWkIsQBVeKOOCLxFyAOcEHACYkr3FElhHppgcuitXfTJLVL4qzjgD8fye3Mzq5nvp4dezIjO4CuNZL9k0Rsi4ifI2Konl1+wkj9vxvXLkz9ce3CVBJp+vLvSe2869cuTOVPsXjd1vqBNM3z/Q3qvfxaxOTs7MzZPD+2cPrNsflz5584eXryxMyJmTMTR48eOri378jE4VLizOK6vvuduT27nnv1ygtTx668/v0XWXu35eVFHBHxVSkV1l62kaZlD5dVySaxfUk66elgQ1iTrN+y7uqtjf+hqMbgYtlQ9L/X0cYBbZWmadro8zl3KQX+w5JYTFY72hBggxUf9Nnfv8Vjg6Yem8JvT9f/AMrivpE/6iU9UcnP6Y34a3ub6t8WEccu/flp9ojl6xAAAG3xdTb/ebzR/K8Sdy0573/5HspwRPw/InZExB0RsTMi7oyonXt3RNyzxvpX7pDcOv+pXG0psFXK5n9P5Xtby+d/xewvhqt5bnst/t7k+MnZmQP5a7I/evuz/PiyS5b75tmfPl557KN8mX1kyfwve2T1F3PBvB1Xe1Ys0E1PLkyWEnwW/7sRu3saxZ9EsY2TRMSuiNjdYh0nH/18T7Oyf47/NkrYZ0o/i3ik3v+XYkX8haTp/uT4k0cmDo8NxOzMgbHirrjVDz9efqlZ/euKvwRZ/29peP8nvfkpaTIQMX/u/Knafu382uu4/MsHU0mTsp0t3v99ySu1dF9+7O3JhYWz4xF9yfNZdnDZ8Ymb1xb54vws/v37Go//HREDkff/vRGR3cR7I+K+iLg/77sHIuLBiNh3m/i/e+ahN5qVNe//26zKlyiLf7px/xenDGepm/2/9kT11LdfNqs/XVX/H6ql9udHVvP+t9oGrue1AwAAgH+LSm0POqmMLqYrldHR9/PSLZXZufmFx47PvXVmur5XPRy9lWKla2jJeuh4vjZc5CdW5A/m68afVAdr+dGpudnpDscO3W5rw/FfL/u12unWAW3n+1rQvYx/6F7GP3Qv4x+6l/EPXaqv8eGLG90OoCPW/vk/0JZ2ABvP/B+6l/EP3cv4h67U9LvxlXV95b/kRPFTFG2vq6fUJ7wYEeU94WDZIVcjovXLo9J67cVvW2yCW+tm4sUP643aLO0pEj2r/jGLFhP9DYtueasYG9q4tyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS/B0AAP//KWna6A==") 7.355410567s ago: executing program 5 (id=3001): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, r1, 0x3) r2 = syz_pidfd_open(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 6.804881695s ago: executing program 8 (id=3002): syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000004047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xc}, 0x94) 5.335739331s ago: executing program 8 (id=3004): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") creat(&(0x7f0000000140)='./file1\x00', 0x13c) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xc00e}, 0x0) r1 = creat(0x0, 0x1) fallocate(r1, 0x0, 0x63db, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x5}) close_range(r5, 0xffffffffffffffff, 0x0) 5.107103029s ago: executing program 0 (id=3005): socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5d99, 0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 5.000685672s ago: executing program 8 (id=3006): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x3}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.951252524s ago: executing program 0 (id=3007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, 0xffffffffffffffff, 0x4a028000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) getsockname$packet(r5, 0x0, 0x0) bind$alg(r3, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x400, 0x80000000}, 0x10) 3.999408293s ago: executing program 7 (id=3008): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x41, "d20700000000000000f99acdcb1e9b121154f690944e879f34e0b6772808d36f71dea6cdd5b72d88698b9459dd7a6d35b98a5bd59be8660300000000000000432b"}}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000280)={0x1, 0x7, 0x7, &(0x7f0000000240)={0x2, "d405b67d476f8986e099a843f43272dd1d7ed09d7aba50be886c5707218730cc63"}}) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) writev(r3, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)="06fb99e683b0605dade242255ede1d11468129b60d8b2887f4a3a49be52e589c580b2bd4f8361407e1584558b58981a5958ed5f113a85c43b7a6413a3ac6a478061d6d0ccd4c77f0f1b92ca9bc5cd389e13974", 0x53}], 0x2) 3.998845544s ago: executing program 8 (id=3009): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchmod(r0, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4000001) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00"], 0x70}}, 0x20008800) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 3.944846635s ago: executing program 0 (id=3010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='Z!', 0x2}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) r5 = accept(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x24000801) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403000000dc770000ab39"], 0xf) syz_emit_ethernet(0x6c, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1, 0x3468]}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 2.731425694s ago: executing program 0 (id=3011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x26}, 0x28) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, 0x0, 0x0) close(r3) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x3, @SEQ_NOTEON=@note=0x7e, 0xa, 0x7f, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4020000}, 0x800) 2.474374972s ago: executing program 5 (id=3012): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000000940)={[{@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.295329517s ago: executing program 4 (id=3013): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r1) ioctl$UBLK_U_CMD_ADD_DEV(0xffffffffffffffff, 0xc0207504, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYBLOB], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x24048801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1.670096947s ago: executing program 8 (id=3014): setrlimit(0x40000000000008, &(0x7f0000000000)) io_setup(0x9, &(0x7f0000000040)) set_mempolicy(0x4005, 0x0, 0x4) r0 = socket(0x28, 0x801, 0xfffffffe) connect$vsock_stream(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x400}, 0x8) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000000c0), 0xfdef) 1.483952223s ago: executing program 0 (id=3015): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000000940)={[{@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$eJzs3c9rXNUeAPDvnfxq077XPHjw2rdpVloonbQ1tgqCERciWCjoVtswmYaYSaZkJqUJWbSIIIigxYWgG9dV686t6Nq/wY2ItFRNgxUXMnLnR5Lmd9KZTNt8PnCTc+6cO+d87517z5m5h5kA9qz+9E8m4khEfJhEHKqvTyKiq5rqjBiqlbs/P5dLlyQqldd/S6plFubncrFsm9SBeuZwRHz3bsTxzOp6SzOz48OFQn6qnh8oT1weKM3MnhibGB7Nj+Ynz5waHDx99tmzZ5oX6x8/zB6889ErT3819Nc7/7v1wfdJDMXB+mPL42iW/uiv75OudBc+4OVmV9ZmSbsbwI6kp2ZH7SyPI3EoOqopAOBJlvb/FQBgj0n0/wCwxzQ+B1iYn8s1lvZ+IrG77r4UEftq8Tfub9Ye6azfs9tXvQ/au5BEZ/2OaOrNJtXfHxGfffPWF+mS5hc6bzbpmQE2du16RFzs6199/U9WzVnYrpNbKNO/Ir/X+h9op2/T8c9za43/Movjn1gc/yzpWePc3Yn+iO7l+dXnf+b2mhu+2ITK6+O/F2pz29JA6+O/5FrtzlhVX0f9Ptm/0szRiBgr5NNr278j4lh09VwaK+RPbVDHsXt/31vvseXjv99vvH0zrT/9v1Qic7uz58FtRobLww8Z9qK71yP+37k0t68afzX02vV/f31u18rjn647v9ETH11Kvvr8e5+uVyyNP423sayOv7Uqn0c8FSvir1qa0ZZsOD9xID38J2t/167j658+6V2v/uXHP13S+hvvBdbRvfNoV0uPf+/G8fcly+drlppZ+1biX/v13528UU03dsbV4XJ56lREd/La6vWnl7Zt5Bvl0/hrka6Mf+n6t9brP30neHGLMXbe+fXLnce/qCVTLNP4R7Z1/LefuHV/vGPn8afHf7CaOlZfs5Xr31Yb+DD7DgAAAAAAAAAAAAAAAAAAAAAAAAC2KhMRByPJZBfTmUw2W/sN7/9Gb6ZQLJWPXypOT45E9bey+6Ir0/iqy0O1fNL4/tO+ZfnTK/LPRMR/IuLjnv3VfDZXLIy0O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDuwzu//p37paXfrAICW2bdpiXv5B7KVSqXSwvYAAK23ef8PADxpNuj/9+9mOwCA3eP9PwDsPfp/ANh79P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC02Plz59Kl8uf8XC7Nj1yZmR4vXjkxki+NZyemc9lccepydrRYHC3ks7nixGbPVygWLw/G5PTVgXK+VB4ozcxemChOT5YvjE0Mj+Yv5Lt2JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7SzOz4cKGQn3oiEu9HxCPQjFYkkngkmtGWxM8nfjy8UZkbm7yMhx6JKB6zRLuvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPh38CAAD//4BhJWs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0x21, 0x0, &(0x7f0000000380)="88000000000000002a5b8b6ccd1a751d5378188aa558445d1f410adcbeeb7808a6", 0x0, 0x3ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.437158205s ago: executing program 5 (id=3016): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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") creat(&(0x7f0000000140)='./file1\x00', 0x13c) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000500)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xc00e}, 0x0) r1 = creat(0x0, 0x1) fallocate(r1, 0x0, 0x63db, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x5}) close_range(r5, 0xffffffffffffffff, 0x0) 1.223753441s ago: executing program 5 (id=3017): socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x5d99, 0x0, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.171298653s ago: executing program 7 (id=3018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r2 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x34, 0x1, 0x2, "1c13ebdaf2f20d55802b21b14fd75a206da058e85b2197edb143991cc200", 0x32314d48}) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x3) epoll_create1(0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x5c, 0x160, 0x1a0, 0x3e0, 0x290, 0x228, 0x25a, 0x290, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0xffffffff], [0xff000000], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xe8, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf9, 0x7, {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0xff, 0x7deb, 'netbios-ns\x00', {0x141a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}]}]}], {0x14}}, 0x80}}, 0x0) 1.170787673s ago: executing program 8 (id=3019): r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x100) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x8, @time={0x9, 0x5ee}, 0x40, {0xb, 0xf8}, 0x7, 0x1, 0x5}) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) readv(r4, &(0x7f0000001800)=[{&(0x7f0000000400)=""/198, 0xc6}], 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x210000, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x27, &(0x7f00000002c0)={0x0, 0x38, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x1001}], 0x1, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940), 0x4004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3.28376ms ago: executing program 0 (id=3020): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) close(0xffffffffffffffff) io_setup(0x800, &(0x7f0000000440)=0x0) io_submit(r2, 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r3, &(0x7f0000000400)=0x7fffffffffffffff, 0x12) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=3021): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, 0x0, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd64875ba4665cc0184c6eef9eb1b3138f21b17b019a344eded35fad5c9b826aa0258495d1f4f4c9aa59a7eba8aabf481e79a1893e010de8302d3252b5563c1fa90ce42d4dc316648e16e58a1", 0x97}, {&(0x7f0000000380)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000800)=[{0xb0, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800ab"}, {0x30, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0x10, 0x10f, 0x4}, {0x10, 0x101, 0x5}, {0x10, 0x108, 0x8fa}], 0x110}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, 0x0, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x20000040) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x402, 0x3, 0xda4d}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000b5c0)=ANY=[], 0x5bec}}, 0x2004c000) kernel console output (not intermixed with test programs): o 2048 [ 675.140173][T10307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 675.912582][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 676.935726][ T4508] team0 (unregistering): Port device team_slave_1 removed [ 677.566186][ T4508] team0 (unregistering): Port device team_slave_0 removed [ 678.657265][ T4508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.772232][ T4508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.336696][T10113] libceph: connect (1)[c::]:6789 error -101 [ 679.360507][T10113] libceph: mon0 (1)[c::]:6789 connect error [ 679.437100][T10346] ceph: No mds server is up or the cluster is laggy [ 680.747671][ T4290] Bluetooth: hci0: Malformed Event: 0x02 [ 681.229030][ T4508] bond0 (unregistering): Released all slaves [ 682.140776][T10180] chnl_net:caif_netlink_parms(): no params data found [ 682.736822][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.103491][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.217191][T10180] device bridge_slave_0 entered promiscuous mode [ 683.295905][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.372265][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.381011][T10180] device bridge_slave_1 entered promiscuous mode [ 683.410496][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.428223][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.662627][T10009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 683.773465][T10009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 684.084183][T10009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 684.294656][T10180] team0: Port device team_slave_0 added [ 684.340734][T10180] team0: Port device team_slave_1 added [ 684.660510][T10009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 686.006633][T10426] loop4: detected capacity change from 0 to 1024 [ 687.031477][T10426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 687.041233][T10426] EXT4-fs (loop4): unmounting filesystem. [ 687.104539][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.112931][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.140409][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.291817][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.298849][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.335870][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.476166][T10180] device hsr_slave_0 entered promiscuous mode [ 687.494908][T10180] device hsr_slave_1 entered promiscuous mode [ 687.503267][T10437] loop4: detected capacity change from 0 to 2048 [ 687.510108][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.519611][T10180] Cannot create hsr debugfs directory [ 687.668558][T10437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 687.731160][T10009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.908430][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 687.927338][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.062176][T10009] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.215579][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.304470][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.502436][ T4508] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.509641][ T4508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.528326][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.541662][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 688.562127][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.589931][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.597170][ T4508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.803905][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 689.798437][T10451] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 689.808036][T10451] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 689.820091][T10451] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 690.467015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 690.587478][T10009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.599019][T10009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.638223][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 690.684847][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 690.732113][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.740960][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 690.754039][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.763334][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 690.772876][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 690.784126][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 690.793417][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 690.890601][T10180] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 691.551340][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 691.741433][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 691.761110][T10180] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 691.802361][T10180] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 691.857950][T10180] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 692.654619][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.672397][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 692.703007][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 692.759105][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.836444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 692.874050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 692.911118][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.918621][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.935156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 693.161478][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 693.170997][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 693.181884][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.189023][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.331423][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 693.643033][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 693.652848][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 693.667350][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 693.679146][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 693.701054][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 693.731337][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 693.784524][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 693.819780][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 693.829710][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 693.840693][T10180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 693.870443][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 693.909282][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 693.927875][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 693.987259][T10009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.434190][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 697.441851][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 697.489091][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.222326][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.232679][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.584616][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.602273][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.611503][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.619550][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.632333][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 702.639951][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 702.781157][T10591] lo speed is unknown, defaulting to 1000 [ 704.606055][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 705.025480][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 705.070650][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 705.257677][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 705.299579][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 705.315016][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 705.327816][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 705.344468][T10180] device veth0_vlan entered promiscuous mode [ 705.348061][T10632] loop4: detected capacity change from 0 to 2048 [ 705.959180][T10591] chnl_net:caif_netlink_parms(): no params data found [ 706.182083][T10180] device veth1_vlan entered promiscuous mode [ 706.686635][T10632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 707.227479][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 708.486448][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 708.854375][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 708.883615][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 708.905872][T10663] loop4: detected capacity change from 0 to 2048 [ 708.919107][T10180] device veth0_macvtap entered promiscuous mode [ 708.976070][T10180] device veth1_macvtap entered promiscuous mode [ 709.846481][T10591] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.864057][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 709.904473][T10591] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.940703][T10591] device bridge_slave_0 entered promiscuous mode [ 709.954608][T10591] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.083445][T10591] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.091796][T10663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 710.117963][T10591] device bridge_slave_1 entered promiscuous mode [ 710.127774][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.144755][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.157007][T10180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.164837][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 710.174273][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 710.183269][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 710.204254][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 711.103674][T10591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.116305][T10591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.149748][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.153961][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 711.193321][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.236166][T10180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.266248][T10180] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.275764][T10180] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.317304][T10180] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.340186][T10180] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.850456][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 713.063340][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 713.149343][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 713.567450][T10708] loop4: detected capacity change from 0 to 2048 [ 713.717961][T10591] team0: Port device team_slave_0 added [ 714.423601][T10591] team0: Port device team_slave_1 added [ 714.445545][T10708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 715.239458][T10680] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 716.313355][ T5152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.335389][T10591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.343413][ T4510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.367472][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 716.384323][ T4510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.402662][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.440363][ T5152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.459280][T10591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.496989][T10591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.503977][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.672605][T10591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.318138][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 717.336697][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 717.696205][T10591] device hsr_slave_0 entered promiscuous mode [ 717.704104][T10591] device hsr_slave_1 entered promiscuous mode [ 717.710907][T10591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 717.718866][T10591] Cannot create hsr debugfs directory [ 717.905498][T10748] loop4: detected capacity change from 0 to 32768 [ 718.229748][T10748] XFS (loop4): Mounting V5 Filesystem [ 719.059115][T10748] XFS (loop4): Ending clean mount [ 719.086365][T10748] XFS (loop4): Quotacheck needed: Please wait. [ 719.274506][T10748] XFS (loop4): Quotacheck: Done. [ 720.269519][T10781] Cannot find del_set index 14804 as target [ 720.362322][ T4277] XFS (loop4): Unmounting Filesystem [ 721.249307][T10789] loop8: detected capacity change from 0 to 128 [ 721.311859][T10789] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 721.325640][ T4368] device hsr_slave_0 left promiscuous mode [ 721.338234][T10789] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 721.455884][ T4368] device hsr_slave_1 left promiscuous mode [ 721.468219][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.503923][ T4368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.682882][T10794] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 722.247837][ T4368] device bridge_slave_1 left promiscuous mode [ 722.256850][T10180] EXT4-fs (loop8): unmounting filesystem. [ 722.267382][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.345631][ T4368] device bridge_slave_0 left promiscuous mode [ 722.363871][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.270002][T10805] loop4: detected capacity change from 0 to 2048 [ 723.615032][T10805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 724.159927][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 725.025703][ T4368] team0 (unregistering): Port device team_slave_1 removed [ 726.024501][ T4368] team0 (unregistering): Port device team_slave_0 removed [ 726.166972][ T4368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.080592][ T4368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.278851][T10853] loop8: detected capacity change from 0 to 2048 [ 728.612904][ T4368] bond0 (unregistering): Released all slaves [ 728.703756][T10853] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 729.127209][T10861] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 730.593428][T10180] EXT4-fs (loop8): unmounting filesystem. [ 734.389434][T10591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 734.420645][T10591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 734.477246][T10591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 734.502704][T10591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 734.812081][T10591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.840330][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 734.870478][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 734.883551][T10591] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.910442][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 734.947221][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 734.975842][T10849] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.984475][T10849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.004756][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 735.013325][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 735.028175][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 735.037719][T10849] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.044865][T10849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.053450][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 735.075743][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 735.090937][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 735.105591][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 735.129746][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 735.139431][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 735.149973][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 735.160124][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 735.174040][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 735.187535][T10591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.200848][T10591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 735.210876][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 735.220368][T10849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 735.319841][T10917] loop8: detected capacity change from 0 to 2048 [ 735.383997][T10917] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 735.746601][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 735.758963][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 735.772334][T10591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.150962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 736.163194][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 736.219205][T10591] device veth0_vlan entered promiscuous mode [ 736.235102][T10591] device veth1_vlan entered promiscuous mode [ 736.262874][T10591] device veth0_macvtap entered promiscuous mode [ 736.281748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 736.291524][T10180] EXT4-fs (loop8): unmounting filesystem. [ 736.341141][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 736.364018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 736.524102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 736.536189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 737.032872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 737.086632][T10591] device veth1_macvtap entered promiscuous mode [ 737.109844][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 737.124269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 737.135267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 737.148447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 738.079960][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.096216][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.108865][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 738.119992][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.138757][T10591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.151951][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.162641][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.172779][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.184343][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.195897][T10591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.224373][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 738.266270][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 738.290503][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 738.511570][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 739.145148][T10591] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.182463][T10591] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.277276][T10591] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.290728][T10591] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.523312][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.556325][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.770373][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 739.819172][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.827209][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.207527][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 740.536625][T10996] loop4: detected capacity change from 0 to 2048 [ 741.590785][T10996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 743.470485][T11026] NILFS (nullb0): couldn't find nilfs on the device [ 743.529037][T11014] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 743.614929][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 745.105989][T11044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 745.372413][T11044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 748.193491][T11084] Cannot find del_set index 14804 as target [ 749.110658][T11083] can0: slcan on ttyS3. [ 749.304802][T11055] can0 (unregistered): slcan off ttyS3. [ 749.532662][T11096] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 751.119817][T11114] overlayfs: failed to clone lowerpath [ 751.354648][T11121] block device autoloading is deprecated and will be removed. [ 757.718953][T11184] loop4: detected capacity change from 0 to 2048 [ 758.654781][T11184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 759.289761][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 762.360454][T11232] overlayfs: failed to clone upperpath [ 766.786662][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 766.793294][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.469202][T11295] loop8: detected capacity change from 0 to 256 [ 768.433768][T11295] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 768.444777][T11295] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 769.249100][T11295] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 770.897925][T11316] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 771.838373][T11327] loop7: detected capacity change from 0 to 2048 [ 771.987031][T11327] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 772.846881][T11336] overlayfs: overlapping lowerdir path [ 773.537781][T10591] EXT4-fs (loop7): unmounting filesystem. [ 777.494774][T11384] overlayfs: failed to clone lowerpath [ 778.224525][T11382] loop8: detected capacity change from 0 to 512 [ 778.392255][T11382] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 778.401958][T11382] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.848413][T11396] loop4: detected capacity change from 0 to 2048 [ 778.852326][T11402] netlink: 'syz.8.1582': attribute type 3 has an invalid length. [ 779.156067][T10180] EXT4-fs (loop8): unmounting filesystem. [ 779.168988][T11396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 779.852152][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 782.986561][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1580'. [ 786.733365][T11481] loop7: detected capacity change from 0 to 4096 [ 786.826997][T11481] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 786.972014][T11481] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 789.123889][T11514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 789.132827][T11514] overlayfs: missing 'lowerdir' [ 796.122459][T11588] loop8: detected capacity change from 0 to 256 [ 796.177668][T11588] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 797.118992][T11590] loop4: detected capacity change from 0 to 2048 [ 797.542928][T11604] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 798.303933][T11590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 798.697056][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 799.724421][T11627] loop7: detected capacity change from 0 to 512 [ 800.009226][T11627] EXT4-fs error (device loop7): ext4_quota_enable:7049: comm syz.7.1628: inode #100663296: comm syz.7.1628: iget: illegal inode # [ 800.023572][T11627] EXT4-fs error (device loop7): ext4_quota_enable:7052: comm syz.7.1628: Bad quota inode: 100663296, type: 2 [ 800.035882][T11627] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix. [ 800.053803][T11627] EXT4-fs (loop7): mount failed [ 803.038798][T11670] loop7: detected capacity change from 0 to 1024 [ 806.892551][T11704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.305959][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 807.504632][T11720] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 807.549145][T11720] overlayfs: missing 'lowerdir' [ 811.381632][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 811.392231][T11753] netlink: 'syz.4.1652': attribute type 2 has an invalid length. [ 811.400754][T11753] netlink: 'syz.4.1652': attribute type 1 has an invalid length. [ 813.102487][T11763] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 814.212928][T11771] loop4: detected capacity change from 0 to 8192 [ 814.393116][T11771] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 814.400634][T11771] UDF-fs: Scanning with blocksize 512 failed [ 814.409671][T11771] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 814.417219][T11771] UDF-fs: Scanning with blocksize 1024 failed [ 814.426446][T11771] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 814.434174][T11771] UDF-fs: Scanning with blocksize 2048 failed [ 814.444113][T11771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 814.717322][T11778] netlink: 'syz.5.1659': attribute type 10 has an invalid length. [ 814.754303][T11778] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1659'. [ 814.918507][T11778] team0: Port device geneve0 added [ 817.286753][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 817.286769][ T27] audit: type=1400 audit(2000000409.663:238): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11792 comm="syz.8.1663" [ 818.194101][T11799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 818.379233][T11799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 824.418251][T11867] loop4: detected capacity change from 0 to 2048 [ 824.744267][T11885] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by " [ 825.200132][T11867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 825.546549][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 826.940991][T11905] loop7: detected capacity change from 0 to 2048 [ 827.097383][T11905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 827.549330][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 827.559357][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 827.580881][T10591] EXT4-fs (loop7): unmounting filesystem. [ 827.586852][T11915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 828.762427][T11926] Process accounting resumed [ 829.523124][T11945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 829.604715][T11945] loop7: detected capacity change from 0 to 2048 [ 829.670617][T11945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.095816][T11944] loop4: detected capacity change from 0 to 4096 [ 830.104192][T11944] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 830.296758][T11944] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 830.749110][ T4281] Bluetooth: Unknown LE signaling command 0x1d [ 830.756968][ T4281] Bluetooth: Wrong link type (-22) [ 831.609752][T11969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 831.619470][T11969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 831.692499][T11970] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 832.177697][T11969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 832.442456][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 832.448804][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.441018][T11982] device syzkaller0 entered promiscuous mode [ 833.454438][T11982] tipc: Enabled bearer , priority 0 [ 833.476858][T11982] tipc: Resetting bearer [ 833.501652][T11981] tipc: Resetting bearer [ 833.627272][T11981] tipc: Disabling bearer [ 834.984014][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 836.058345][T12003] loop8: detected capacity change from 0 to 2048 [ 836.166238][T12003] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 836.654660][T12006] loop4: detected capacity change from 0 to 2048 [ 836.769504][T12006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 836.962681][T12006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 836.982504][T12014] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1711'. [ 837.038310][ T27] audit: type=1800 audit(2000000428.754:239): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1710" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 837.997866][T12031] tipc: Enabling of bearer rejected, failed to enable media [ 838.056592][ T4879] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 838.928471][ T4879] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 838.941360][ T4879] EXT4-fs (loop4): This should not happen!! Data will be lost [ 838.941360][ T4879] [ 838.951084][ T4879] EXT4-fs (loop4): Total free blocks count 0 [ 838.976749][T12034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 838.984393][T12034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 839.060727][ T4879] EXT4-fs (loop4): Free/Dirty block details [ 839.115571][ T4879] EXT4-fs (loop4): free_blocks=2415919504 [ 839.154132][ T4879] EXT4-fs (loop4): dirty_blocks=16 [ 839.188586][ T4879] EXT4-fs (loop4): Block reservation details [ 839.251431][ T4879] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 839.270415][T12034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 839.340019][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 839.579581][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 840.412671][T12061] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 840.421524][T12061] overlayfs: missing 'lowerdir' [ 841.086424][T12010] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 842.969884][T12083] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 842.991421][T12083] UDF-fs: Scanning with blocksize 512 failed [ 843.012050][T12083] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 843.023794][T12083] UDF-fs: Scanning with blocksize 1024 failed [ 843.040482][T12083] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 843.056204][T12083] UDF-fs: Scanning with blocksize 2048 failed [ 843.067546][T12083] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 843.075887][T12083] UDF-fs: Scanning with blocksize 4096 failed [ 843.251961][T10180] EXT4-fs (loop8): unmounting filesystem. [ 843.573131][T12087] xt_hashlimit: max too large, truncated to 1048576 [ 844.340049][T12098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 844.416594][T12098] loop8: detected capacity change from 0 to 2048 [ 844.627991][T12098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 845.320582][T12102] ipt_REJECT: ECHOREPLY no longer supported. [ 848.182837][T12110] loop4: detected capacity change from 0 to 131072 [ 848.223089][T12110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 848.234327][T12110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 849.009000][T12128] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 849.017924][T12128] overlayfs: missing 'lowerdir' [ 849.127855][T12110] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 849.142856][ T4323] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 849.234979][ T4323] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 849.666952][T12142] loop7: detected capacity change from 0 to 2048 [ 849.688218][ T4323] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 424ms [ 849.717688][ T4323] gfs2: fsid=syz:syz.0: jid=0: Done [ 849.732400][T12142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.800611][ T4323] gfs2: fsid=syz:syz.0: jid=1: Trying to acquire journal glock... [ 850.648132][ T4323] gfs2: fsid=syz:syz.0: jid=1: Looking at journal... [ 850.684732][ T4323] gfs2: fsid=syz:syz.0: journal 1 mapped with 1 extents in 0ms [ 851.106390][ T4323] gfs2: fsid=syz:syz.0: jid=1: Journal head lookup took 428ms [ 851.190662][ T4323] gfs2: fsid=syz:syz.0: jid=1: Done [ 851.196044][T12110] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 851.215026][T12110] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 853.157577][T12174] loop8: detected capacity change from 0 to 4096 [ 856.439315][T12204] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 856.448369][T12204] overlayfs: missing 'lowerdir' [ 857.035082][T12206] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 858.035057][ T27] audit: type=1326 audit(2000000448.387:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12210 comm="syz.4.1743" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa548d9ce59 code=0x0 [ 860.771264][T12229] loop7: detected capacity change from 0 to 2048 [ 860.895741][T12229] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 862.967834][T12232] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 863.924450][T12242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.458932][T12272] autofs4:pid:12272:autofs_fill_super: called with bogus options [ 867.691303][T12274] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 867.700417][T12274] overlayfs: missing 'lowerdir' [ 869.757572][T12285] tipc: Started in network mode [ 869.762685][T12285] tipc: Node identity eeed9711e505, cluster identity 4711 [ 870.514064][T12285] tipc: Enabled bearer , priority 0 [ 870.522761][T12291] device syzkaller0 entered promiscuous mode [ 870.568128][T12285] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 870.712846][T12285] tipc: Resetting bearer [ 870.762369][T12283] tipc: Resetting bearer [ 870.891871][T12283] tipc: Disabling bearer [ 872.908414][T10591] EXT4-fs (loop7): unmounting filesystem. [ 874.982950][T12330] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 874.991746][T12330] overlayfs: missing 'lowerdir' [ 875.316455][T12325] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1783'. [ 875.381241][T12340] netlink: 'syz.8.1783': attribute type 1 has an invalid length. [ 875.390918][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1786'. [ 875.458088][T12341] loop7: detected capacity change from 0 to 2048 [ 877.535656][T12341] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 877.797704][T12360] xt_CONNSECMARK: invalid mode: 66 [ 878.625554][ T27] audit: type=1326 audit(2000000467.674:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 878.725455][ T27] audit: type=1326 audit(2000000467.674:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 878.781316][ T27] audit: type=1326 audit(2000000467.674:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 878.854241][ T27] audit: type=1326 audit(2000000467.674:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 878.911669][ T27] audit: type=1326 audit(2000000467.674:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 878.912772][T10591] EXT4-fs (loop7): unmounting filesystem. [ 878.944886][ T27] audit: type=1326 audit(2000000467.674:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 878.999070][ T27] audit: type=1326 audit(2000000467.674:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 879.055941][ T27] audit: type=1326 audit(2000000467.674:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 879.156592][ T27] audit: type=1326 audit(2000000467.674:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 879.255386][ T27] audit: type=1326 audit(2000000467.674:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.5.1786" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714ad5d68e code=0x7ffc0000 [ 880.728093][T12387] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 880.737047][T12387] overlayfs: missing 'lowerdir' [ 884.164739][T12406] loop8: detected capacity change from 0 to 4096 [ 884.265103][T12406] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 886.160537][T10180] EXT4-fs (loop8): unmounting filesystem. [ 886.762621][T12439] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 886.771671][T12439] overlayfs: missing 'lowerdir' [ 889.168936][T12461] autofs4:pid:12461:autofs_fill_super: called with bogus options [ 889.675941][T12464] loop4: detected capacity change from 0 to 32768 [ 889.897182][T12464] XFS (loop4): Mounting V5 Filesystem [ 890.275338][T12464] XFS (loop4): Ending clean mount [ 891.011761][ T4277] XFS (loop4): Unmounting Filesystem [ 892.046800][T12486] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 892.055561][T12486] overlayfs: missing 'lowerdir' [ 896.265841][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 896.265857][ T27] audit: type=1326 audit(2000000484.172:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.0.1829" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feab5f9ce59 code=0x0 [ 897.042741][T12546] ipt_REJECT: ECHOREPLY no longer supported. [ 897.752940][ T4290] Bluetooth: hci1: command 0x0405 tx timeout [ 897.881716][T12551] loop7: detected capacity change from 0 to 2048 [ 898.096253][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 898.102845][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 898.845649][T12551] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 900.365362][T12570] loop8: detected capacity change from 0 to 2048 [ 900.415484][T12570] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 901.873653][T10591] EXT4-fs (loop7): unmounting filesystem. [ 902.283088][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 902.420479][T10180] EXT4-fs (loop8): unmounting filesystem. [ 906.129097][T12635] loop7: detected capacity change from 0 to 2048 [ 906.149585][T12636] loop8: detected capacity change from 0 to 2048 [ 906.502905][T12635] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 906.513313][T12636] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 906.806013][T12645] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 909.599982][T12664] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 909.611912][T10180] EXT4-fs (loop8): unmounting filesystem. [ 909.626167][T10591] EXT4-fs (loop7): unmounting filesystem. [ 910.236390][T12675] loop8: detected capacity change from 0 to 8 [ 911.234657][T12682] loop8: detected capacity change from 0 to 4096 [ 911.297167][T12684] mmap: syz.5.1875 (12684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 911.381530][T12682] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 912.367954][T10180] EXT4-fs (loop8): unmounting filesystem. [ 912.575238][T12700] loop8: detected capacity change from 0 to 2048 [ 912.699079][T12700] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 915.434122][T10180] EXT4-fs (loop8): unmounting filesystem. [ 919.698822][T12774] loop7: detected capacity change from 0 to 2048 [ 920.652861][T12774] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 920.736952][T12780] bridge0: port 3(vlan2) entered blocking state [ 920.746065][T12780] bridge0: port 3(vlan2) entered disabled state [ 920.780624][T12780] device vlan2 entered promiscuous mode [ 920.811256][T12780] device geneve0 entered promiscuous mode [ 921.477888][T12781] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 923.617612][T10591] EXT4-fs (loop7): unmounting filesystem. [ 923.832223][T12820] loop7: detected capacity change from 0 to 512 [ 923.858615][ T26] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 923.902181][T12820] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 923.962254][T12820] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.085691][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.118932][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.448703][T12828] loop4: detected capacity change from 0 to 40427 [ 924.524901][T12828] F2FS-fs (loop4): invalid crc value [ 924.550419][ T26] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 924.601269][T12828] F2FS-fs (loop4): Found nat_bits in checkpoint [ 924.657333][T12828] F2FS-fs (loop4): Start checkpoint disabled! [ 924.701841][T12828] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 924.883798][ T26] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 924.894484][ T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.926492][ T26] usb 9-1: config 0 descriptor?? [ 925.003864][T12838] openvswitch: netlink: EtherType 0 is less than min 600 [ 925.290472][T10591] EXT4-fs (loop7): unmounting filesystem. [ 925.746044][T12843] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 925.755025][T12843] overlayfs: missing 'lowerdir' [ 925.850867][ T26] usbhid 9-1:0.0: can't add hid device: -71 [ 925.860499][ T26] usbhid: probe of 9-1:0.0 failed with error -71 [ 925.903892][ T26] usb 9-1: USB disconnect, device number 2 [ 925.932925][ T4510] kworker/u4:14: attempt to access beyond end of device [ 925.932925][ T4510] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 928.967148][T12880] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 928.976064][T12880] overlayfs: missing 'lowerdir' [ 930.251413][T12893] loop4: detected capacity change from 0 to 2048 [ 931.532356][T12893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 934.585723][T12937] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 934.594498][T12937] overlayfs: missing 'lowerdir' [ 935.910137][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 938.690645][T12971] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 939.519996][T12985] loop4: detected capacity change from 0 to 2048 [ 939.554246][T12984] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 939.563123][T12984] overlayfs: missing 'lowerdir' [ 939.597003][T12985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 941.431011][T13019] loop8: detected capacity change from 0 to 4096 [ 941.498300][T13019] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 943.628898][T10180] EXT4-fs (loop8): unmounting filesystem. [ 944.254850][T12991] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 944.630211][T13042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 945.510336][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 945.973477][T13057] NILFS (nullb0): couldn't find nilfs on the device [ 947.050924][T13068] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 947.059769][T13068] overlayfs: missing 'lowerdir' [ 947.833758][T13072] loop4: detected capacity change from 0 to 4096 [ 947.942243][T13072] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 950.804851][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 952.870357][T13115] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 952.879551][T13115] overlayfs: missing 'lowerdir' [ 955.325527][T13129] loop8: detected capacity change from 0 to 4096 [ 956.079981][T13129] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 956.732008][T10180] EXT4-fs (loop8): unmounting filesystem. [ 956.864620][T13136] kvm [13135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 957.295441][T13160] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 957.304472][T13160] overlayfs: missing 'lowerdir' [ 959.483264][T13167] loop7: detected capacity change from 0 to 64 [ 959.855104][T13167] hfs: unable to locate alternate MDB [ 959.861700][T13167] hfs: continuing without an alternate MDB [ 959.878804][T13167] hfs: inconsistency in B*Tree (3,2,0,3,0) [ 959.885776][T13167] hfs: get root inode failed [ 959.938559][T10225] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 961.888164][T13174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.995162][T13188] loop7: detected capacity change from 0 to 4096 [ 962.078772][T13193] bridge0: port 4(vlan3) entered blocking state [ 962.113423][T13193] bridge0: port 4(vlan3) entered disabled state [ 962.148700][T13188] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 962.170649][T13193] device vlan3 entered promiscuous mode [ 962.201811][T13193] device geneve0 entered promiscuous mode [ 962.370448][T13192] loop8: detected capacity change from 0 to 65536 [ 962.892151][T13192] XFS (loop8): Mounting V5 Filesystem [ 962.968232][T13192] XFS (loop8): Ending clean mount [ 963.112864][T10591] EXT4-fs (loop7): unmounting filesystem. [ 963.745315][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 963.751734][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 964.616176][T10180] XFS (loop8): Unmounting Filesystem [ 968.970972][T13247] loop7: detected capacity change from 0 to 2048 [ 969.116305][T13247] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 969.131584][T13247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 969.233843][T13257] ipt_REJECT: ECHOREPLY no longer supported. [ 971.213701][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2037'. [ 971.230306][T13275] loop8: detected capacity change from 0 to 512 [ 971.620641][T13275] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 972.255546][T13282] loop8: detected capacity change from 0 to 40427 [ 972.327881][T13282] F2FS-fs (loop8): invalid crc value [ 972.381406][T13282] F2FS-fs (loop8): Found nat_bits in checkpoint [ 972.591683][T13282] F2FS-fs (loop8): Start checkpoint disabled! [ 973.057249][T13282] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 973.505945][T13300] openvswitch: netlink: EtherType 0 is less than min 600 [ 975.425069][T13304] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 975.715371][ T6239] kworker/u4:22: attempt to access beyond end of device [ 975.715371][ T6239] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 976.180347][T13316] overlayfs: failed to clone upperpath [ 978.425214][T13337] ipt_REJECT: ECHOREPLY no longer supported. [ 979.781267][T13353] loop7: detected capacity change from 0 to 2048 [ 981.303308][T13353] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 981.895269][T13362] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 983.689972][T13379] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2064'. [ 983.938644][T10591] EXT4-fs (loop7): unmounting filesystem. [ 984.361507][T13397] bridge0: port 3(vlan2) entered blocking state [ 984.375436][T13397] bridge0: port 3(vlan2) entered disabled state [ 984.517585][T13402] ipt_REJECT: ECHOREPLY no longer supported. [ 985.002632][T13397] device vlan2 entered promiscuous mode [ 985.050573][T13397] device geneve0 entered promiscuous mode [ 987.198338][T13424] loop8: detected capacity change from 0 to 4096 [ 987.262031][T13426] binder_alloc: 13416: binder_alloc_buf, no vma [ 987.528485][T13424] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 987.839046][T13434] loop7: detected capacity change from 0 to 4096 [ 988.685730][T13434] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 988.752766][T10180] EXT4-fs (loop8): unmounting filesystem. [ 990.290287][T10591] EXT4-fs (loop7): unmounting filesystem. [ 992.471234][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2088'. [ 992.484697][T13467] loop7: detected capacity change from 0 to 512 [ 992.504283][T13467] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 999.394693][T13509] loop4: detected capacity change from 0 to 2048 [ 999.665985][T13509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1000.939072][T13531] lo speed is unknown, defaulting to 1000 [ 1001.865213][T13522] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1002.812837][T13544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2107'. [ 1008.691989][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1008.903452][T13600] loop4: detected capacity change from 0 to 4096 [ 1008.972911][T13600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1009.204210][T13605] loop7: detected capacity change from 0 to 4096 [ 1009.662037][T13605] ntfs: volume version 3.1. [ 1010.438558][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1010.506236][T13615] loop8: detected capacity change from 0 to 4096 [ 1011.612047][T13615] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1011.737473][ T27] audit: type=1800 audit(2001049168.234:257): pid=13627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2128" name="bus" dev="ramfs" ino=59358 res=0 errno=0 [ 1013.091490][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1013.457921][T13644] NILFS (nullb0): couldn't find nilfs on the device [ 1014.051688][T13645] loop8: detected capacity change from 0 to 2048 [ 1014.118945][T13645] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1014.798595][T13662] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2137'. [ 1016.189780][T13678] loop4: detected capacity change from 0 to 4096 [ 1016.249289][T13652] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1016.392887][T10256] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1018.378577][T13689] loop7: detected capacity change from 0 to 4096 [ 1018.482990][T13689] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1020.069506][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1020.134490][T13697] loop4: detected capacity change from 0 to 2048 [ 1021.364992][T13697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1021.541398][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1022.910754][T13728] I/O error, dev loop17, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 1022.920587][T13728] hfsplus: unable to find HFS+ superblock [ 1023.736899][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1024.116638][T13736] tipc: Started in network mode [ 1024.121728][T13736] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1024.140778][T13736] tipc: Enabled bearer , priority 10 [ 1024.309563][T13738] siw: device registration error -23 [ 1024.329940][ T27] audit: type=1326 audit(2001049180.026:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1024.705269][ T27] audit: type=1326 audit(2001049180.026:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1025.205057][T13740] loop8: detected capacity change from 0 to 2048 [ 1025.213222][ T27] audit: type=1326 audit(2001049180.026:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1025.245769][ T27] audit: type=1326 audit(2001049180.026:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1025.273556][ T27] audit: type=1326 audit(2001049180.036:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1025.332369][ T4320] tipc: Node number set to 4269801488 [ 1025.388118][ T27] audit: type=1326 audit(2001049180.036:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1025.414940][ T27] audit: type=1326 audit(2001049180.036:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1025.756503][ T27] audit: type=1326 audit(2001049180.036:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1025.782605][ T27] audit: type=1326 audit(2001049180.036:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1025.822424][T13747] loop7: detected capacity change from 0 to 4096 [ 1025.934866][ T27] audit: type=1326 audit(2001049180.036:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13732 comm="syz.0.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1026.038044][T13747] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1026.049362][T13740] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1028.223018][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1028.710411][T13776] netlink: 'syz.7.2163': attribute type 21 has an invalid length. [ 1028.719967][T13776] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2163'. [ 1029.307948][T13758] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1029.391650][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1029.398052][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.457762][T13780] loop4: detected capacity change from 0 to 2048 [ 1029.482820][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1029.573443][T13780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1030.848175][T13785] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1031.059320][T13801] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:0 [ 1031.502476][T13803] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2171'. [ 1031.905433][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1034.207828][T13832] block device autoloading is deprecated and will be removed. [ 1035.044491][T13835] loop8: detected capacity change from 0 to 2048 [ 1035.115540][T13835] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1036.985464][T13838] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1039.204513][T13867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2184'. [ 1039.589302][T13869] loop7: detected capacity change from 0 to 2048 [ 1039.735440][T13869] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1040.903269][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1041.046347][T13884] loop4: detected capacity change from 0 to 16 [ 1041.356699][T10256] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1042.670045][T13878] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1043.196850][T13912] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1043.222264][T13913] IPVS: stopping master sync thread 13912 ... [ 1043.858120][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1044.926226][T13926] loop7: detected capacity change from 0 to 2048 [ 1045.036149][T13926] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1047.479701][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1047.547118][T13947] loop8: detected capacity change from 0 to 256 [ 1048.554003][T13958] loop4: detected capacity change from 0 to 256 [ 1048.592856][T13960] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1048.602445][T13960] overlayfs: missing 'lowerdir' [ 1048.630672][T13958] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 1052.071518][T13998] NILFS (nullb0): couldn't find nilfs on the device [ 1054.772106][T14022] loop7: detected capacity change from 0 to 1024 [ 1056.498719][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1056.498879][ T27] audit: type=1804 audit(2001049210.269:270): pid=14019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2223" name="/newroot/151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop7" ino=2 res=1 errno=0 [ 1056.702359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1059.213931][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1059.223663][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1059.240981][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1059.249009][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1059.266825][T14046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1061.635506][T14071] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1061.644455][T14071] overlayfs: missing 'lowerdir' [ 1062.667692][T14089] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:0 [ 1067.261399][T14133] loop7: detected capacity change from 0 to 4096 [ 1067.780064][T14133] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1068.100037][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1073.022776][T14171] fuse: Unknown parameter 'GPL' [ 1078.236014][T14216] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1078.245126][T14216] overlayfs: missing 'lowerdir' [ 1080.803297][T14248] loop8: detected capacity change from 0 to 512 [ 1080.812149][T14248] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1080.831047][T14248] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2279: invalid indirect mapped block 9 (level 0) [ 1080.851127][T14248] EXT4-fs (loop8): 1 truncate cleaned up [ 1080.856971][T14248] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1081.552286][ T4281] Bluetooth: hci5: unexpected event 0x03 length: 12 > 11 [ 1082.592616][T14263] loop7: detected capacity change from 0 to 2048 [ 1082.612034][T14263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1082.633833][ T27] audit: type=1800 audit(2001049234.565:271): pid=14263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2282" name="bus" dev="loop7" ino=1367 res=0 errno=0 [ 1083.374246][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1084.916908][T14289] loop4: detected capacity change from 0 to 2048 [ 1085.842353][T14289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1086.858791][T14314] loop8: detected capacity change from 0 to 4096 [ 1087.585172][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1087.666559][T14314] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1087.743816][T14319] loop7: detected capacity change from 0 to 2048 [ 1087.998363][T14319] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1088.250340][T14319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1088.791382][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1088.871844][T14338] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1088.881144][T14338] overlayfs: missing 'lowerdir' [ 1093.296842][T14367] loop4: detected capacity change from 0 to 2048 [ 1093.421659][T14369] loop8: detected capacity change from 0 to 2048 [ 1093.500427][T14376] loop7: detected capacity change from 0 to 4096 [ 1093.636111][T14367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1093.651987][T14376] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1093.663106][T14369] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1093.910278][T14387] netlink: 'syz.0.2309': attribute type 21 has an invalid length. [ 1093.918253][T14387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2309'. [ 1094.447813][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1094.460336][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1095.444644][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1095.451081][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.628195][T14404] loop4: detected capacity change from 0 to 2048 [ 1095.705688][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1095.713506][T14404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1096.431656][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1099.594320][T14437] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1099.603216][T14437] overlayfs: missing 'lowerdir' [ 1100.160821][T14439] loop4: detected capacity change from 0 to 2048 [ 1100.253794][T14439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1100.504470][T14445] loop8: detected capacity change from 0 to 2048 [ 1100.726917][T14445] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1101.050356][T14443] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1101.121358][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1101.123092][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1101.904560][T14461] device bridge1 entered promiscuous mode [ 1102.471241][T14463] ceph: No mds server is up or the cluster is laggy [ 1102.482711][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1102.499062][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1105.302138][ T27] audit: type=1326 audit(2001049253.371:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1105.326611][ C1] vkms_vblank_simulate: vblank timer overrun [ 1105.401903][T14472] loop8: detected capacity change from 0 to 2048 [ 1105.482456][ T27] audit: type=1326 audit(2001049253.371:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1105.560488][ T27] audit: type=1326 audit(2001049253.398:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1107.305423][T14472] EXT4-fs: error -4 creating inode table initialization thread [ 1107.368159][T14472] EXT4-fs (loop8): mount failed [ 1108.154374][ T27] audit: type=1326 audit(2001049253.398:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1108.254611][ T27] audit: type=1326 audit(2001049253.417:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1108.279340][ T27] audit: type=1326 audit(2001049253.481:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1108.304949][ T27] audit: type=1326 audit(2001049253.481:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1108.718468][T14500] loop7: detected capacity change from 0 to 2048 [ 1108.851063][ T27] audit: type=1326 audit(2001049253.481:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1109.230948][ T27] audit: type=1326 audit(2001049253.537:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1109.470333][T14500] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1110.269215][T14514] loop4: detected capacity change from 0 to 2048 [ 1110.358740][ T27] audit: type=1326 audit(2001049253.537:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1110.400287][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1110.461192][T14514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1111.498622][ T27] audit: type=1326 audit(2001049253.546:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1111.565632][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1111.824396][ T27] audit: type=1326 audit(2001049253.592:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1112.008130][T14539] hub 8-0:1.0: USB hub found [ 1112.019113][T14539] hub 8-0:1.0: 1 port detected [ 1113.254184][ T27] audit: type=1326 audit(2001049253.592:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1113.430605][ C1] Adjusting tsc more than 11% (6078878 vs 8464067) [ 1113.575577][ T27] audit: type=1326 audit(2001049253.592:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14467 comm="syz.4.2328" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1114.886315][T14555] loop7: detected capacity change from 0 to 256 [ 1117.714185][T14574] loop4: detected capacity change from 0 to 2048 [ 1117.779783][T14574] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1118.470440][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2356'. [ 1118.622397][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1118.947971][T14594] loop4: detected capacity change from 0 to 512 [ 1118.972459][T14594] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1119.020880][T14594] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1119.131771][T14594] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.2357: Invalid inode table block 1 in block_group 0 [ 1119.165438][T14594] EXT4-fs (loop4): get root inode failed [ 1119.421188][T14594] EXT4-fs (loop4): mount failed [ 1120.066475][ T4320] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1120.166738][T14609] ubi0: attaching mtd0 [ 1120.175567][T14609] ubi0: scanning is finished [ 1120.411682][T14609] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1120.691993][ T4320] usb 9-1: Using ep0 maxpacket: 16 [ 1120.699156][ T4320] usb 9-1: config 222 has an invalid interface number: 31 but max is 0 [ 1120.782496][ T4320] usb 9-1: config 222 has an invalid descriptor of length 255, skipping remainder of the config [ 1120.865633][ T4320] usb 9-1: config 222 has no interface number 0 [ 1120.919691][ T4320] usb 9-1: config 222 interface 31 altsetting 11 endpoint 0x8E has an invalid bInterval 255, changing to 11 [ 1120.957397][ T4320] usb 9-1: config 222 interface 31 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1120.998725][ T4320] usb 9-1: config 222 interface 31 has no altsetting 0 [ 1121.167398][ T4320] usb 9-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 1121.277641][ T4320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.289402][ T4320] usb 9-1: Product: syz [ 1121.458871][ T4320] usb 9-1: Manufacturer: syz [ 1121.491477][ T4320] usb 9-1: SerialNumber: syz [ 1121.626005][T14619] loop7: detected capacity change from 0 to 2048 [ 1122.742327][ T4320] ldusb 9-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 1122.758945][T14619] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1122.761954][ T4320] ldusb 9-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 1122.790451][ T4320] usb 9-1: USB disconnect, device number 3 [ 1122.802827][ T4320] ldusb 9-1:222.31: LD USB Device #0 now disconnected [ 1124.355999][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1124.660450][T14646] loop8: detected capacity change from 0 to 2048 [ 1124.823388][T14646] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1125.124272][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2370'. [ 1125.849353][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1128.186296][T14692] loop4: detected capacity change from 0 to 1024 [ 1128.422241][T14692] hfsplus: cannot replace xattr [ 1129.543848][T14699] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1129.578021][T14699] overlayfs: missing 'lowerdir' [ 1130.043128][T14708] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1130.073532][T14708] overlayfs: failed to look up (tracing) for ino (-66) [ 1130.995363][T14713] loop7: detected capacity change from 0 to 2048 [ 1132.009697][T14713] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1133.057616][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1133.133354][T14730] loop8: detected capacity change from 0 to 512 [ 1133.223106][T14730] EXT4-fs error (device loop8): ext4_iget_extra_inode:4763: inode #15: comm syz.8.2384: corrupted in-inode xattr [ 1133.259706][T14730] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.2384: couldn't read orphan inode 15 (err -117) [ 1133.309274][T14730] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1134.532041][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1134.901097][T14743] loop8: detected capacity change from 0 to 2048 [ 1135.150352][T14743] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1136.311679][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1138.494369][ T27] audit: type=1326 audit(2001049289.754:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1138.703300][ T27] audit: type=1326 audit(2001049289.754:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1138.738125][ T27] audit: type=1326 audit(2001049289.855:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1138.938886][ T27] audit: type=1326 audit(2001049289.855:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1138.966014][ T27] audit: type=1326 audit(2001049289.855:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1138.999529][ T27] audit: type=1326 audit(2001049289.957:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1140.946320][T14776] loop8: detected capacity change from 0 to 512 [ 1140.976526][ T27] audit: type=1326 audit(2001049289.957:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1141.001565][ T27] audit: type=1326 audit(2001049289.957:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1141.026021][ T27] audit: type=1326 audit(2001049290.049:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1141.051579][ T27] audit: type=1326 audit(2001049290.049:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14759 comm="syz.0.2394" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab5f9ce59 code=0x7ffc0000 [ 1141.103685][T14776] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1141.114526][T14776] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1141.126259][T14776] EXT4-fs error (device loop8): __ext4_get_inode_loc:4520: comm syz.8.2393: Invalid inode table block 1 in block_group 0 [ 1141.148564][T14776] EXT4-fs (loop8): get root inode failed [ 1141.154355][T14776] EXT4-fs (loop8): mount failed [ 1141.711313][T14793] ubi0: attaching mtd0 [ 1141.716454][T14793] ubi0: scanning is finished [ 1142.388054][T14793] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1144.880741][T14807] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1144.940549][T14807] overlayfs: missing 'lowerdir' [ 1145.616110][T14827] netlink: 'syz.8.2408': attribute type 24 has an invalid length. [ 1145.624362][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2408'. [ 1145.641824][T14827] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1146.743935][T14841] netlink: 'syz.8.2411': attribute type 1 has an invalid length. [ 1146.751839][T14841] netlink: 'syz.8.2411': attribute type 2 has an invalid length. [ 1147.189219][T14852] loop7: detected capacity change from 0 to 2048 [ 1148.278368][T14852] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1149.918670][T14876] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1149.927536][T14876] overlayfs: missing 'lowerdir' [ 1150.550158][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1150.809214][T14887] loop7: detected capacity change from 0 to 512 [ 1150.844933][T14887] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1150.906884][T14890] loop4: detected capacity change from 0 to 2048 [ 1151.059256][T14887] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1151.128041][T14887] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1151.162985][T14890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1151.987160][T14887] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1151.995684][T14887] System zones: 0-2, 18-18, 34-35 [ 1152.009075][T14887] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1152.811905][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1155.895374][T14863] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 1159.424363][T14949] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1159.433472][T14949] overlayfs: missing 'lowerdir' [ 1160.184295][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1163.627446][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1163.647493][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1164.333325][T14983] loop8: detected capacity change from 0 to 2048 [ 1164.511594][T14983] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1165.220186][T14995] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1165.229722][T14995] overlayfs: missing 'lowerdir' [ 1165.837212][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1166.065276][T15001] loop8: detected capacity change from 0 to 2048 [ 1166.161056][T15001] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1167.067164][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1169.973185][T15026] loop4: detected capacity change from 0 to 2048 [ 1171.517948][T15045] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1171.526924][T15045] overlayfs: missing 'lowerdir' [ 1172.896577][T15026] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4. [ 1173.325924][T15056] netlink: 'syz.4.2465': attribute type 1 has an invalid length. [ 1173.334280][T15056] netlink: 'syz.4.2465': attribute type 2 has an invalid length. [ 1174.433577][T15054] loop7: detected capacity change from 0 to 2048 [ 1174.607635][T15054] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1175.397204][T15061] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1175.610740][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1175.932445][T15070] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2467'. [ 1177.075396][T15077] loop4: detected capacity change from 0 to 4096 [ 1180.786694][T15107] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1180.796240][T15107] overlayfs: missing 'lowerdir' [ 1181.887828][T15102] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2475'. [ 1183.696710][T15131] loop8: detected capacity change from 0 to 1024 [ 1184.415673][T15130] hfsplus: cannot replace xattr [ 1187.525139][T15166] overlayfs: failed to clone upperpath [ 1188.359207][T15164] loop8: detected capacity change from 0 to 4096 [ 1188.412120][T15164] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1188.736815][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1189.383022][T15186] rdma_op ffff88807f2ac1f0 conn xmit_rdma 0000000000000000 [ 1191.282969][T15198] netlink: 'syz.4.2500': attribute type 12 has an invalid length. [ 1192.908489][T15215] loop8: detected capacity change from 0 to 4096 [ 1192.984786][T15215] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1193.004465][T15219] loop4: detected capacity change from 0 to 2048 [ 1193.214392][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1193.854632][T15222] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1194.648376][T15229] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2509'. [ 1194.742080][T15226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1194.988022][ T4281] Bluetooth: hci2: hcon ffff888059a7c000 sent 1 < count 10 [ 1194.998169][ T4281] Bluetooth: hci2: hcon ffff888026476000 sent 1 < count 16 [ 1195.966079][T15240] qnx6: unable to read the first superblock [ 1196.105929][T15247] loop7: detected capacity change from 0 to 4096 [ 1196.201018][T15247] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1196.354786][T15256] xt_l2tp: v2 doesn't support IP mode [ 1197.768063][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1197.790388][ T4281] CPU: 1 PID: 4281 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1197.799052][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1197.809251][ T4281] Workqueue: hci0 hci_rx_work [ 1197.814959][ T4281] Call Trace: [ 1197.818281][ T4281] [ 1197.821316][ T4281] dump_stack_lvl+0x188/0x24e [ 1197.826471][ T4281] ? show_regs_print_info+0x12/0x12 [ 1197.832074][ T4281] ? load_image+0x400/0x400 [ 1197.836988][ T4281] sysfs_create_dir_ns+0x26a/0x290 [ 1197.842303][ T4281] ? sysfs_warn_dup+0xa0/0xa0 [ 1197.847036][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 1197.852348][ T4281] kobject_add_internal+0x61c/0xcc0 [ 1197.858119][ T4281] kobject_add+0x160/0x230 [ 1197.862847][ T4281] ? kobject_init+0x1d0/0x1d0 [ 1197.867617][ T4281] ? klist_children_get+0x50/0x50 [ 1197.873822][ T4281] ? get_device_parent+0x121/0x3f0 [ 1197.879050][ T4281] device_add+0x48c/0x1000 [ 1197.883665][ T4281] ? kmem_cache_free+0xf7/0x290 [ 1197.888711][ T4281] hci_conn_add_sysfs+0xd1/0x1e0 [ 1197.893705][ T4281] le_conn_complete_evt+0x1062/0x1670 [ 1197.899761][ T4281] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1197.906221][ T4281] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1197.911871][ T4281] ? skb_pull_data+0xf7/0x200 [ 1197.916770][ T4281] hci_le_conn_complete_evt+0x183/0x440 [ 1197.922342][ T4281] ? hci_remote_host_features_evt+0x270/0x270 [ 1197.929063][ T4281] hci_event_packet+0x7b9/0x1280 [ 1197.934553][ T4281] ? bis_list+0x280/0x280 [ 1197.939269][ T4281] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1197.945314][ T4281] ? kcov_remote_start+0x4c7/0x7e0 [ 1197.951125][ T4281] ? mt_dump_node+0x750/0x1920 [ 1197.956639][ T4281] ? hci_send_to_monitor+0x9c/0x4a0 [ 1197.962228][ T4281] hci_rx_work+0x3eb/0xd40 [ 1197.966932][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 1197.972229][ T4281] ? process_one_work+0x7b0/0x1160 [ 1197.977861][ T4281] process_one_work+0x8a2/0x1160 [ 1197.984703][ T4281] ? worker_detach_from_pool+0x240/0x240 [ 1197.992889][ T4281] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1197.998903][ T4281] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1198.005601][ T4281] ? kthread_data+0x4b/0xc0 [ 1198.010185][ T4281] worker_thread+0xaa2/0x1270 [ 1198.015095][ T4281] kthread+0x29d/0x330 [ 1198.019986][ T4281] ? worker_clr_flags+0x1a0/0x1a0 [ 1198.025205][ T4281] ? kthread_blkcg+0xd0/0xd0 [ 1198.029894][ T4281] ret_from_fork+0x1f/0x30 [ 1198.036191][ T4281] [ 1198.041282][ T4281] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1198.055993][ T4281] Bluetooth: hci0: failed to register connection device [ 1198.265930][T15271] loop8: detected capacity change from 0 to 2048 [ 1198.493619][T15272] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1199.062093][T15288] device bridge3 entered promiscuous mode [ 1199.654789][T15286] loop8: detected capacity change from 0 to 2048 [ 1199.823711][T15286] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1200.612268][T15302] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2527'. [ 1200.618311][T15294] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1200.694810][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1200.817316][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1204.873978][T15357] program syz.4.2538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1204.887769][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 1205.042998][T15364] loop8: detected capacity change from 0 to 4096 [ 1205.263817][T15364] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1213.973132][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1216.801763][T15472] loop8: detected capacity change from 0 to 2048 [ 1216.879607][ T9330] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1216.944542][T15474] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1217.090396][ T9330] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1217.117746][ T9330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.149294][ T9330] usb 5-1: Product: syz [ 1217.169064][ T9330] usb 5-1: Manufacturer: syz [ 1217.190824][ T9330] usb 5-1: SerialNumber: syz [ 1217.438725][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1217.680287][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1217.714948][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1217.752662][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1217.782865][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1217.834603][ T9330] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1217.863827][ T9330] usb 5-1: USB disconnect, device number 10 [ 1219.781599][T15499] loop7: detected capacity change from 0 to 4096 [ 1219.900905][T15499] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1220.788112][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1220.788128][ T27] audit: type=1326 audit(2001049374.940:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15500 comm="syz.5.2577" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 1220.824150][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2577'. [ 1220.834667][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2577'. [ 1220.980383][ T27] audit: type=1326 audit(2001049374.940:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15500 comm="syz.5.2577" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714ad9ce59 code=0x7ffc0000 [ 1221.294228][T15529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2581'. [ 1222.674090][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.937091][T15539] loop8: detected capacity change from 0 to 4096 [ 1224.254232][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2585'. [ 1227.424812][T15559] loop4: detected capacity change from 0 to 32768 [ 1227.609363][T15559] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2588 (15559) [ 1228.805186][T15559] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1228.815931][T15559] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1228.825659][T15559] BTRFS info (device loop4): using free space tree [ 1229.093665][T15559] BTRFS info (device loop4): enabling ssd optimizations [ 1230.144604][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1230.287377][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1230.294294][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1230.387029][ T4320] hid-generic 0003:0000:0006.0001: unknown main item tag 0x0 [ 1230.411121][ T4320] hid-generic 0003:0000:0006.0001: unknown main item tag 0x0 [ 1230.434402][ T4320] hid-generic 0003:0000:0006.0001: unknown main item tag 0x0 [ 1230.465724][ T4320] hid-generic 0003:0000:0006.0001: unknown main item tag 0x0 [ 1230.474378][ T4320] hid-generic 0003:0000:0006.0001: unknown main item tag 0x0 [ 1230.485402][ T4320] hid-generic 0003:0000:0006.0001: unknown main item tag 0x0 [ 1230.495731][ T4320] hid-generic 0003:0000:0006.0001: item fetching failed at offset 8/99 [ 1230.507329][ T4320] hid-generic: probe of 0003:0000:0006.0001 failed with error -22 [ 1231.124459][T15611] loop7: detected capacity change from 0 to 512 [ 1231.309097][T15610] syz.7.2594 (15610): drop_caches: 2 [ 1231.398562][T15611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1231.803428][T15611] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.2594: iget: bad i_size value: 38620345925642 [ 1231.821833][T15611] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.2594: couldn't read orphan inode 15 (err -117) [ 1231.843179][T15611] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1231.922604][ T4277] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1232.166335][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1232.285871][T15620] loop8: detected capacity change from 0 to 2048 [ 1233.441043][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 1233.511396][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2606'. [ 1235.340229][T15630] fuse: Bad value for 'fd' [ 1235.773496][T15620] EXT4-fs: error -4 creating inode table initialization thread [ 1235.781396][T15620] EXT4-fs (loop8): mount failed [ 1235.987933][T15640] netlink: 23 bytes leftover after parsing attributes in process `syz.5.2598'. [ 1236.215736][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 1236.244044][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 1236.273966][T15640] ceph: No mds server is up or the cluster is laggy [ 1236.431103][T15638] loop8: detected capacity change from 0 to 4096 [ 1236.522521][T15638] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1236.550487][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 1236.557008][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 1238.901184][T15688] loop4: detected capacity change from 0 to 4096 [ 1239.007277][T15688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1239.204466][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1240.513890][T15704] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2608'. [ 1242.103737][T15715] qnx6: unable to read the first superblock [ 1242.115895][T15715] random: crng reseeded on system resumption [ 1243.046263][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 1243.084364][T15731] loop8: detected capacity change from 0 to 512 [ 1244.726453][T15731] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2615: invalid indirect mapped block 4294967295 (level 1) [ 1245.832347][T15731] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2615: invalid indirect mapped block 4294967295 (level 1) [ 1245.856269][T15731] EXT4-fs (loop8): 2 truncates cleaned up [ 1245.872623][T15731] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1246.013924][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2619'. [ 1246.735452][T15741] loop7: detected capacity change from 0 to 4096 [ 1246.860732][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1246.890596][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1246.995606][T15741] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1248.584940][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1248.900731][T15774] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1248.911994][T15774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1249.834382][T15786] netlink: 23 bytes leftover after parsing attributes in process `syz.8.2627'. [ 1249.886046][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1249.896068][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1249.993489][T15786] ceph: No mds server is up or the cluster is laggy [ 1250.343226][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 1250.490629][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 1251.687000][T15809] loop4: detected capacity change from 0 to 4096 [ 1251.735475][T15809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1252.983506][T15824] loop7: detected capacity change from 0 to 4096 [ 1252.998172][T15829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2634'. [ 1253.127215][T15832] : renamed from ipvlan0 [ 1253.805591][T15824] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1255.333779][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1256.893405][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1264.001811][T15921] loop4: detected capacity change from 0 to 4096 [ 1264.707936][T15921] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1264.893701][T15937] loop8: detected capacity change from 0 to 512 [ 1265.050922][T15937] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1265.140863][T15940] loop7: detected capacity change from 0 to 1024 [ 1265.155138][T15937] EXT4-fs error (device loop8): xattr_find_entry:297: inode #15: comm syz.8.2659: corrupted xattr entries [ 1265.209537][T15937] EXT4-fs (loop8): Remounting filesystem read-only [ 1265.217118][T15937] EXT4-fs (loop8): 1 truncate cleaned up [ 1265.267661][T15937] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1266.288790][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1266.516575][T15957] loop8: detected capacity change from 0 to 512 [ 1268.246736][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1268.390976][T15957] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1268.404828][T15957] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1269.843337][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1269.943775][T15995] loop4: detected capacity change from 0 to 16 [ 1270.006902][T15995] erofs: Unknown parameter 'ãé' [ 1270.398074][T16006] loop4: detected capacity change from 0 to 256 [ 1270.408727][T16006] exfat: Deprecated parameter 'utf8' [ 1270.414553][T16006] exfat: Deprecated parameter 'namecase' [ 1270.612779][T16006] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1270.756041][T16006] : renamed from ipvlan0 [ 1271.015125][T16002] loop8: detected capacity change from 0 to 2048 [ 1271.506267][T16002] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1272.415281][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1272.520138][T16032] xt_limit: Overflow, try lower: 324382443/0 [ 1276.238055][T16058] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1276.245409][T16058] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1276.256957][T16060] vhci_hcd: connection closed [ 1276.262281][T16058] vhci_hcd vhci_hcd.0: Device attached [ 1276.290137][T14833] vhci_hcd: stop threads [ 1276.312928][T14833] vhci_hcd: release socket [ 1276.346050][T14833] vhci_hcd: disconnect device [ 1277.658763][T16069] loop8: detected capacity change from 0 to 2048 [ 1277.790345][T16069] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1279.039862][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1285.622082][T16144] loop4: detected capacity change from 0 to 2048 [ 1286.725045][T16144] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1286.748783][T16144] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1286.759850][T16144] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1286.768183][T16144] UDF-fs: Scanning with blocksize 512 failed [ 1286.803314][T16144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1289.358438][T15269] Bluetooth: hci4: command 0x1003 tx timeout [ 1289.997754][ T4290] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1292.171122][T16186] loop4: detected capacity change from 0 to 2048 [ 1292.289353][T16190] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1292.552989][T16194] loop8: detected capacity change from 0 to 2048 [ 1293.369551][T16194] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1293.611397][T16207] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1293.637626][T16208] loop7: detected capacity change from 0 to 4096 [ 1294.422918][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1294.524308][T16208] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1296.804962][T16246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2730'. [ 1296.929871][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1296.938370][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1297.570840][T16257] loop8: detected capacity change from 0 to 4096 [ 1298.247025][T16257] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1298.280840][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1299.291334][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1299.897138][T16274] loop7: detected capacity change from 0 to 2048 [ 1300.129615][T16281] loop8: detected capacity change from 0 to 2048 [ 1300.328789][T16274] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1300.799302][T16281] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1301.768511][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1301.916160][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1305.285825][T16322] loop7: detected capacity change from 0 to 2048 [ 1305.431028][T16322] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1307.099261][T16328] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1307.862415][T16349] loop8: detected capacity change from 0 to 2048 [ 1307.977275][ T4320] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1307.986828][T16349] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1308.213761][ T4320] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1308.226643][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1308.275338][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.314021][ T4320] usb 5-1: Product: syz [ 1308.388265][ T4320] usb 5-1: Manufacturer: syz [ 1308.472392][ T4320] usb 5-1: SerialNumber: syz [ 1309.313167][T16352] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1309.508741][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1309.525941][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1309.549599][ T4320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1309.609111][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1309.663341][ T4320] lan78xx: probe of 5-1:1.0 failed with error -32 [ 1312.403802][T16387] loop8: detected capacity change from 0 to 512 [ 1312.419779][T16387] EXT4-fs: Ignoring removed bh option [ 1312.433832][T15657] usb 5-1: USB disconnect, device number 11 [ 1312.452105][T16387] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1313.370331][T16387] EXT4-fs (loop8): 1 truncate cleaned up [ 1313.512736][T16387] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1313.710249][T16396] loop4: detected capacity change from 0 to 2048 [ 1315.278922][T16396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1315.310670][T16409] loop7: detected capacity change from 0 to 2048 [ 1316.355961][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1316.445553][T16409] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1317.928861][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 1317.945089][T16393] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1318.752547][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1318.842003][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1319.324156][T16433] loop4: detected capacity change from 0 to 4096 [ 1319.379591][T16433] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1321.330868][T16452] loop7: detected capacity change from 0 to 2048 [ 1321.502244][T16458] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1321.617390][T16456] loop8: detected capacity change from 0 to 32768 [ 1322.773551][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1323.969539][T16472] loop4: detected capacity change from 0 to 2048 [ 1324.246621][T16479] binder: Unknown parameter 'rootcontext' [ 1324.948116][T16472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1326.218200][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1328.410168][T16509] loop8: detected capacity change from 0 to 128 [ 1328.472365][T16509] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1328.512375][T16509] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.651179][T16513] loop4: detected capacity change from 0 to 4096 [ 1329.455342][T16513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1329.945464][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1330.881463][ T4290] Bluetooth: Unknown LE signaling command 0x1d [ 1330.887817][ T4290] Bluetooth: Wrong link type (-22) [ 1330.993220][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1333.270338][T16569] loop8: detected capacity change from 0 to 2048 [ 1333.302623][T16569] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1334.586899][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1335.872429][T16598] loop7: detected capacity change from 0 to 2048 [ 1335.982861][T16601] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1336.946038][T16610] loop7: detected capacity change from 0 to 512 [ 1337.046000][T16610] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1337.072562][T16610] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 1338.635688][T16610] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.2818: Invalid inode table block 1 in block_group 0 [ 1338.742500][T16610] EXT4-fs (loop7): get root inode failed [ 1338.748347][T16610] EXT4-fs (loop7): mount failed [ 1339.427816][T16630] ubi0: attaching mtd0 [ 1339.432966][T16630] ubi0: scanning is finished [ 1339.627193][T16630] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1339.635775][T16630] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1339.643837][T16630] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1339.651534][T16630] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1339.659404][T16630] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1339.666545][T16630] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1339.675468][T16630] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 262846526 [ 1339.686131][T16630] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1339.724470][T16631] ubi0: background thread "ubi_bgt0d" started, PID 16631 [ 1340.909042][T15657] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1341.127688][T15657] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.162680][T15657] usb 8-1: config 2 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1341.242596][T15657] usb 8-1: config 2 interface 0 has no altsetting 0 [ 1341.294402][T15657] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1341.349213][T15657] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.508264][T15657] usbhid 8-1:2.0: couldn't find an input interrupt endpoint [ 1344.637152][ T7992] usb 8-1: USB disconnect, device number 2 [ 1346.095369][T16679] serio: Serial port ptm0 [ 1346.803469][T16684] loop8: detected capacity change from 0 to 2048 [ 1347.001677][T16684] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1347.225820][T16699] netlink: 'syz.5.2837': attribute type 4 has an invalid length. [ 1347.733423][ T26] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1347.763561][T10180] EXT4-fs (loop8): unmounting filesystem. [ 1347.961584][ T26] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1348.007241][ T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.074500][ T26] usb 8-1: Product: syz [ 1348.117323][ T26] usb 8-1: Manufacturer: syz [ 1348.157356][ T26] usb 8-1: SerialNumber: syz [ 1348.408955][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'. [ 1348.433821][ T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1348.544919][ T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1348.592905][T16712] loop8: detected capacity change from 0 to 2048 [ 1348.617630][ T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1348.718344][ T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1348.742285][T16714] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1348.814472][ T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1349.563557][ T26] lan78xx: probe of 8-1:1.0 failed with error -71 [ 1349.653517][ T26] usb 8-1: USB disconnect, device number 3 [ 1350.924908][T16733] loop7: detected capacity change from 0 to 2048 [ 1351.784675][T16733] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1352.013358][T16744] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1352.616284][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1352.972543][T16753] netlink: 'syz.7.2851': attribute type 1 has an invalid length. [ 1353.867750][T16755] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1355.176857][T16779] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1355.187347][T16755] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1355.331886][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2851'. [ 1355.377692][T16758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1355.457354][T16753] bond1: (slave gretap1): making interface the new active one [ 1355.498285][T16781] loop4: detected capacity change from 0 to 4096 [ 1355.533832][T16753] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1355.652225][T14830] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1355.689707][T16781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1357.902740][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1360.152293][T16816] loop7: detected capacity change from 0 to 2048 [ 1360.274855][T16816] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1361.105433][T16838] loop4: detected capacity change from 0 to 256 [ 1361.967733][T16823] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1363.166576][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1364.011647][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1364.018162][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.130894][T16869] loop7: detected capacity change from 0 to 4096 [ 1365.191392][T16869] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1365.226970][T16874] loop4: detected capacity change from 0 to 2048 [ 1365.367444][T16874] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1366.480849][T10591] EXT4-fs (loop7): unmounting filesystem. [ 1366.666110][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1367.559357][T16893] xt_CONNSECMARK: invalid mode: 66 [ 1367.566752][T16893] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1369.347155][T16896] lo speed is unknown, defaulting to 1000 [ 1372.027448][T16925] loop4: detected capacity change from 0 to 4096 [ 1372.142726][T16925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1374.980517][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2895'. [ 1374.989503][T16955] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2895'. [ 1377.133264][T16976] fuse: Bad value for 'fd' [ 1378.330914][T16990] futex_wake_op: syz.8.2906 tries to shift op by 144; fix this program [ 1378.428901][T16990] lo speed is unknown, defaulting to 1000 [ 1379.150315][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1380.378008][T14829] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1382.356473][T17022] atomic_op ffff888054c8b198 conn xmit_atomic 0000000000000000 [ 1382.880919][T17031] loop4: detected capacity change from 0 to 8 [ 1382.942116][T17031] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1382.953027][T17031] SQUASHFS error: Failed to read block 0x91: -5 [ 1382.960264][T17031] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1382.967745][T17031] SQUASHFS error: Unable to read inode 0x13f [ 1389.689761][T17081] loop4: detected capacity change from 0 to 4096 [ 1389.856530][T17081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1391.850702][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1399.819722][T17164] hugetlbfs: syz.5.2952 (17164): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1408.360199][T17245] ipt_REJECT: ECHOREPLY no longer supported. [ 1408.380615][T17245] IPv6: NLM_F_CREATE should be specified when creating new route [ 1408.632866][T17239] loop4: detected capacity change from 0 to 2048 [ 1409.289779][T17239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1409.582523][T17247] ceph: No mds server is up or the cluster is laggy [ 1409.592421][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1409.612434][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1410.011744][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1410.080362][ C1] vkms_vblank_simulate: vblank timer overrun [ 1410.454347][T17264] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1411.308392][T17272] atomic_op ffff88803a4d0998 conn xmit_atomic 0000000000000000 [ 1412.810154][T17283] process '/newroot/636/file0' started with executable stack [ 1412.855899][ T9330] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1414.119113][ T9330] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1414.144342][ T9330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.156243][ T9330] usb 5-1: Product: syz [ 1414.161841][ T9330] usb 5-1: Manufacturer: syz [ 1414.166559][ T9330] usb 5-1: SerialNumber: syz [ 1416.168540][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1417.165833][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1417.178513][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1417.191722][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1417.203673][ T9330] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1417.249636][T17328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2989'. [ 1417.546750][ T9330] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1417.558485][ T9330] usb 5-1: USB disconnect, device number 12 [ 1419.969406][T17356] set match dimension is over the limit! [ 1421.483685][ T27] audit: type=1326 audit(2001049816.840:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1421.594830][ T27] audit: type=1326 audit(2001049816.840:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1421.818998][ T27] audit: type=1326 audit(2001049816.858:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1421.845950][ T27] audit: type=1326 audit(2001049816.858:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1421.871137][ T27] audit: type=1326 audit(2001049816.858:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1422.059071][ T27] audit: type=1326 audit(2001049816.876:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1422.091913][ T27] audit: type=1326 audit(2001049816.886:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1422.389711][ T27] audit: type=1326 audit(2001049816.886:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1422.417855][ T27] audit: type=1326 audit(2001049816.895:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1422.476710][T17374] lo speed is unknown, defaulting to 1000 [ 1422.512681][ T27] audit: type=1326 audit(2001049816.895:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17358 comm="syz.4.2997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa548d9ce59 code=0x7ffc0000 [ 1422.924036][T17381] tipc: Enabling of bearer rejected, failed to enable media [ 1423.923736][T17382] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3003'. [ 1424.403293][ T4290] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1424.412581][ T4290] Bluetooth: hci5: Injecting HCI hardware error event [ 1424.427369][ T4290] Bluetooth: hci5: hardware error 0x00 [ 1424.500709][T17393] Device name cannot be null; rc = [-22] [ 1424.970037][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3006'. [ 1425.719168][T17411] loop4: detected capacity change from 0 to 512 [ 1425.948594][T15269] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 1425.955598][T17411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1426.295485][T17411] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3000: invalid indirect mapped block 4294967295 (level 1) [ 1426.316779][T17408] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3009'. [ 1426.338733][T17411] EXT4-fs (loop4): Remounting filesystem read-only [ 1426.345333][T17411] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3000: invalid indirect mapped block 4294967295 (level 1) [ 1426.362670][T17411] EXT4-fs (loop4): Remounting filesystem read-only [ 1426.369584][T17411] EXT4-fs (loop4): 2 truncates cleaned up [ 1426.375758][T17411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1427.055289][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1427.509981][ T4290] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1427.888127][T15662] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1428.108052][T15662] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1428.166590][T15662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.232565][T15662] usb 5-1: Product: syz [ 1428.263095][T15662] usb 5-1: Manufacturer: syz [ 1428.458146][T15662] usb 5-1: SerialNumber: syz [ 1428.519602][T17441] tipc: Enabling of bearer rejected, failed to enable media [ 1429.154396][T15662] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1429.211739][T17445] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1429.255245][T15662] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1429.279753][T14830] [ 1429.282142][T14830] ============================================ [ 1429.288301][T14830] WARNING: possible recursive locking detected [ 1429.294753][T14830] syzkaller #0 Not tainted [ 1429.300224][T14830] -------------------------------------------- [ 1429.303555][T17445] tipc: Enabled bearer , priority 10 [ 1429.306540][T14830] kworker/u4:31/14830 is trying to acquire lock: [ 1429.306557][T14830] ffffe8ffffd9a808 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x62b/0xaa0 [ 1429.329961][T14830] [ 1429.329961][T14830] but task is already holding lock: [ 1429.338048][T14830] ffffe8ffffc9bb68 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0 [ 1429.348346][T14830] [ 1429.348346][T14830] other info that might help us debug this: [ 1429.356787][T14830] Possible unsafe locking scenario: [ 1429.356787][T14830] [ 1429.365237][T14830] CPU0 [ 1429.368555][T14830] ---- [ 1429.371953][T14830] lock(&pd_list->lock); [ 1429.376483][T14830] lock(&pd_list->lock); [ 1429.380835][T14830] [ 1429.380835][T14830] *** DEADLOCK *** [ 1429.380835][T14830] [ 1429.389261][T14830] May be due to missing lock nesting notation [ 1429.389261][T14830] [ 1429.397584][T14830] 3 locks held by kworker/u4:31/14830: [ 1429.403208][T14830] #0: ffff888019ae8938 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1429.414754][T14830] #1: ffffc9000467fd00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1429.426090][T14830] #2: ffffe8ffffc9bb68 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0 [ 1429.435917][T14830] [ 1429.435917][T14830] stack backtrace: [ 1429.441975][T14830] CPU: 0 PID: 14830 Comm: kworker/u4:31 Not tainted syzkaller #0 [ 1429.449826][T14830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1429.459944][T14830] Workqueue: pencrypt_parallel padata_parallel_worker [ 1429.466833][T14830] Call Trace: [ 1429.470152][T14830] [ 1429.473432][T14830] dump_stack_lvl+0x188/0x24e [ 1429.478124][T14830] ? show_regs_print_info+0x12/0x12 [ 1429.484015][T14830] ? load_image+0x400/0x400 [ 1429.488558][T14830] __lock_acquire+0x123e/0x7d10 [ 1429.493539][T14830] ? __rwlock_init+0x140/0x140 [ 1429.498520][T14830] ? verify_lock_unused+0x140/0x140 [ 1429.503830][T14830] ? __queue_work+0xbc1/0xfb0 [ 1429.508638][T14830] ? mark_lock+0x94/0x320 [ 1429.513454][T14830] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1429.520072][T14830] lock_acquire+0x1bb/0x4a0 [ 1429.524735][T14830] ? padata_do_serial+0x62b/0xaa0 [ 1429.529844][T14830] ? queue_work_on+0x196/0x1f0 [ 1429.534627][T14830] ? read_lock_is_recursive+0x10/0x10 [ 1429.540187][T14830] ? wq_worker_last_func+0x40/0x40 [ 1429.545446][T14830] ? __rwlock_init+0x140/0x140 [ 1429.550214][T14830] ? _find_next_bit+0x87/0x130 [ 1429.555042][T14830] _raw_spin_lock+0x2a/0x40 [ 1429.560174][T14830] ? padata_do_serial+0x62b/0xaa0 [ 1429.565196][T14830] padata_do_serial+0x62b/0xaa0 [ 1429.570153][T14830] ? padata_parallel_worker+0x40/0x1c0 [ 1429.575623][T14830] padata_parallel_worker+0x6b/0x1c0 [ 1429.580913][T14830] ? process_one_work+0x7b0/0x1160 [ 1429.586042][T14830] process_one_work+0x8a2/0x1160 [ 1429.591088][T14830] ? worker_detach_from_pool+0x240/0x240 [ 1429.597045][T14830] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1429.602331][T14830] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1429.608319][T14830] ? kthread_data+0x4b/0xc0 [ 1429.612836][T14830] worker_thread+0xaa2/0x1270 [ 1429.617533][T14830] kthread+0x29d/0x330 [ 1429.621682][T14830] ? worker_clr_flags+0x1a0/0x1a0 [ 1429.626721][T14830] ? kthread_blkcg+0xd0/0xd0 [ 1429.631312][T14830] ret_from_fork+0x1f/0x30 [ 1429.636129][T14830] [ 1430.080744][T15662] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1430.106948][T15662] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1430.117700][T15662] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1430.130870][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.138082][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.159960][T15662] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1430.175031][T15662] usb 5-1: USB disconnect, device number 13 [ 1430.384095][T15655] tipc: Node number set to 199792401