last executing test programs: 9m8.670620863s ago: executing program 2 (id=938): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, 0x0, 0x4880) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_io_uring_setup(0x2b06, &(0x7f0000000040), 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf2502000000", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r5 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 9m6.235870802s ago: executing program 2 (id=943): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file2\x00', 0x2204002, &(0x7f0000000300)={[{@fat=@umask={'umask', 0x3d, 0x1}}, {@shortname_lower}, {@shortname_win95}, {@utf8}, {@shortname_win95}, {@rodir}, {@shortname_win95}]}, 0x2, 0x226, &(0x7f0000000600)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) socket$inet6(0xa, 0x3, 0x5) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES64=r2], 0x0) 9m3.252287079s ago: executing program 2 (id=959): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) open(0x0, 0x24a041, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) 9m2.670462599s ago: executing program 2 (id=964): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x92b56000) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000540)="570510", 0x3, 0xfffffffffffffffc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000004000070125bd7000"], 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sched_rr_get_interval(0x0, &(0x7f0000002740)) mlockall(0x1) mlockall(0x7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) connect$802154_dgram(r4, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) 9m0.280312797s ago: executing program 2 (id=972): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2140, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4100c744240000000000c7442402f8000000c7442406000000000f011c2466ba4100b000eeb8e60000000f01c80f21f8350c0070000f01c8f30fc7b0004000000f71e4c4660f38824ffac74424020b000000c7442406000000000f011c24b972080000c4c3f56ec700ba000000000f30c744240001000000c744240200000000c7442406000000000fba110c2424f220d8d8200000000f22d8", 0x9b}], 0x1, 0x74, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)=0x7, 0x4) ioctl$KVM_RUN(r1, 0xae80, 0x0) 8m59.788145873s ago: executing program 2 (id=977): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 8m43.479519896s ago: executing program 32 (id=977): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 3m7.432262626s ago: executing program 1 (id=2054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x57, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m6.834211215s ago: executing program 1 (id=2059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 3m6.723595348s ago: executing program 1 (id=2062): clock_gettime(0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) syz_emit_ethernet(0x46, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) 3m5.422666661s ago: executing program 1 (id=2065): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={0xffffffffffffffff, r4, 0x2}, 0x14) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x16, 0xa3ee, 0xc71e, 0x1}}) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r5 = fsopen(&(0x7f0000000500)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x3, 0x0, &(0x7f00000001c0)='source', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x17ab) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, &(0x7f0000000bc0)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x10, 0x1ff, 0x2, 0x29d7}, 0x80000006, 0x0, 0xfffffffd, 0x5, 0x5, 0x0, 0x1, 0x5, 0x4, 0x401, {0x101, 0xc, 0x5, 0x0, 0x2, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20040084) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "c683faa6825f1a25af3b6191facc8751ba3d8a447a0f359cf181bb0d58924dd9d9b34837a9ef3a3f72c925bbd42a07f3b2f9b25d4e7c08909985c4a4734ae2bd"}, 0x48, 0xfffffffffffffffe) 3m3.867140462s ago: executing program 1 (id=2067): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x2, 0x7}) 3m3.397839577s ago: executing program 1 (id=2069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 2m47.044073192s ago: executing program 33 (id=2069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) 1m3.888781572s ago: executing program 6 (id=2507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x3, 0x3, 0x180, 0x180, 0x10, 0xf1, 0xf, 0x10, 0x20000000000005, 0x0, 0x29, 0x0, 0xa, 0x0, 0xbd9], 0x1000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x3, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0x3000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xe, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x83, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.260344082s ago: executing program 6 (id=2510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_ethernet(0x40, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x4, 0x20000800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m2.374365302s ago: executing program 6 (id=2515): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="fd1f00000008002b5d0122ff6a92aa54f9000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/27], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f0000002600)={0x2020}, 0x2020) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x1, 0x1c4) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)='-', 0x1}], 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0xd2, @mcast2}}}, 0x3a) socket(0x10, 0x3, 0x0) 59.595764072s ago: executing program 6 (id=2522): syz_mount_image$erofs(&(0x7f0000000540), &(0x7f0000000400)='./file1\x00', 0xc, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$eJzslc+q00AUxr+Z1KQVn8CNCy94XZgmqYqbC3XjyoXgn+JCsNi0VFMrbRa2IOITuHfnwscQ6taHkCqIguhGXY/MnyRjaYTW1iw8P+jJN5npmTNn4AsIgvhv+fD+51L8OPpUB3ACB/DM+89OsYZb69/Vvz15c/VK5/mdV2+9pd/4PZu38f41AIvLDlIzFkIIe/7APG+A5/omOM4a3QGDb/RdcNwyOgbDbaPvW3os1/t+f5jE/r1x0pMikCGUIZKhtVrf12cMPas+Zs1PZ/MH3SSJJ3sU6zu3+JLXVweOrPrs+/Khqw2s/oXgCI1ugeG60ZfgZb3RLbHOf7JW5Hf+eH4Xf3nsjwCKN/19dtaVW231d4D9k7vfs3CgRHajldezc4HazhIKD6j6OCXidVvfX17qUz3eLE+7ZMrdMI/pfO6f4iXDGcuftJW8UB+LZjp61JzO5ueGo+4gHsQPo6h1MTgfBBeipjIiHddboMrfUP50vMjfKFvrMhePu2k6CXXMx5GO6xyXK//jODyNY3Is3dRdyfsdQLYpMz+unlIdOqXFEwRBVMgpMOXJypczYb4m+YQQ0bWK6yQIgiAIgiAIgiAIYnt+BQAA//9We18t") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000001080)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xce04, 0x0, 0x1, 0x0, &(0x7f00000007c0)) getpid() sched_setaffinity(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x60000) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0x1ff}, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='attr/prev\x00') read$FUSE(r6, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) 58.14564984s ago: executing program 6 (id=2525): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x908422, &(0x7f0000006480)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 57.802186151s ago: executing program 6 (id=2528): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000008) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x20) fdatasync(r1) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 57.50798564s ago: executing program 34 (id=2528): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000008) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x20) fdatasync(r1) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 35.46438015s ago: executing program 3 (id=2593): syz_mount_image$vfat(&(0x7f0000000bc0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000003740)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0xfc, 0x2b6, &(0x7f0000000100)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 33.770322176s ago: executing program 3 (id=2594): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='net_prio.prioidx\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 31.892089327s ago: executing program 3 (id=2603): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xa, 0x10, 0x830, 0x10, 0xe}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 30.031666648s ago: executing program 3 (id=2608): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x2d}, 0x40004050) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) 29.396508349s ago: executing program 3 (id=2610): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000002c0)='key_or_keyring:\xd6\x7f\x91\xf0\x86\xf2z\xcd\xf5X\xe1VW:\x8f/pe\xc4\xcc\xfb%m\xeaA\xde\xbf\x89*\x14\x90I\xab[\xf8\xec\xd3=\xf2\x8b\xfb\xe1\xa7\xa1\r6\x81\xd7\n\xacY\xcf\x13/\xd6\xa1r.}\x05(\xab\xaf\'\xc83\xef\xac\x02D\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0xb, 0x80000000003}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x1000000000000, &(0x7f00000006c0)="cb4a25cef4c1"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@user_xattr}]}, 0x3, 0x447, &(0x7f0000000380)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x100) 27.683513265s ago: executing program 3 (id=2615): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r6, &(0x7f0000000180)={@val={0x0, 0x886c}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, '\x00\x00'}}}}}}, 0x1e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 11.854971952s ago: executing program 5 (id=2668): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000080)='./bus\x00', 0x3800040, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x2) 11.284967571s ago: executing program 5 (id=2670): r0 = io_uring_setup(0x3edd, &(0x7f0000000080)={0x0, 0xb567, 0x0, 0x0, 0x14f}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 11.226474302s ago: executing program 35 (id=2615): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r6, &(0x7f0000000180)={@val={0x0, 0x886c}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, '\x00\x00'}}}}}}, 0x1e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 11.204278063s ago: executing program 5 (id=2672): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x204880, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8000003, 0x3, 0x452, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4048000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05db71", 0x3, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mlockall(0x7) 8.904848168s ago: executing program 7 (id=2680): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) epoll_create(0x2) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8.56507136s ago: executing program 5 (id=2682): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) writev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 8.462269233s ago: executing program 7 (id=2683): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000200)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@test_dummy_encryption}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") 8.22765064s ago: executing program 7 (id=2688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x29, 0x33e, &(0x7f0000000480)="$eJzs3T1sW1UUAODjPidOIpVkQEIwGTYkVDVBDDAlqopUkQGKLP4WIppAyTOVYmEpDHWzFDGCWJDY2DrAyIwYEGJjYKUDKiAWulVqxUP2e7aff0JThMPf9w3V6bnn+N13cxW/RMnNq+uxe2Eudm7evBELC5Worp9Zj1uVWIkTkUTuSgAA/yW3six+zXJ3r/5gqR/Nz3heAMDs9N7/Xz+Z/yeNiFosTq+8eqzzAgBm54hf/z87NXtpZtMCAGZo4v3/kZHhsW/zVwc/EwAA/Hs9/9LLz2xsRpyv1xcimu+2G+1GPDUcX4y4GGlsx+lYjjsR+YNC/rTQ/ffpc5tnT9e7flyJRrej3YhodtqN/ElhI+n112I1lmOl6M8G/Um3f7XXX4+IK53e9aNZaTfmYqnbvxMXv1+K7ViL5bh/oj/i3ObZtXrxAo1mv78TcRAL/Zvozv9ULMe3r8WlSONCdHuH87+8Wq+fyTZH+tvXar06AAAAAAAAAAAAAAAAAAAAAACYhVP1gZXB+TdZs9O+en68YGXkfJxGPryx0zvf5yA/Hyir9U/neS8ZPx9o9HyedqMaJ/7WOwcAAAAAAAAAAAAAAAAAAIB/jtb+fGyl6fZea/+d3XLQKWXe+vrTLxdjvObNZJiJav5yIzVFLkpdSQzas0F7lozUFEESMSy+9vlgxuWa2uAuJtq7QW1iqFLMaStNTz78w8fTun4bZpKYWJbRoFJcvzTUvC9P/UHX4cHaXWquZ1l2WPvljya7ohJRnfjA/RXBVzfeePDx1gNP9DJfFIc+PPrY8gvXP/zk592tNIqlSdP5vdad7E9fKyntn0qxzpUpO2F6cDDMHOy19reS73558aH3v+nXVPOdkEzfP1k58/bh1/psPDOfB91pHuVO56Zs/unBK7cHu/eeF3O+WLSfjtpV+iThoA4AAAAAAAAAAAAAAAAAADgWpd8VvwdPPje7GQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8Rv+/f9ScDCROUpwuxOTQ7XtvdahF1881lsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7PcAAAD//9Yzc50=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x4000423) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x25) 8.193395092s ago: executing program 5 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) 6.685711691s ago: executing program 5 (id=2690): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88880) unshare(0x28000600) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r5, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) write$P9_RSETATTR(r4, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r6, 0x1000) 6.467768468s ago: executing program 7 (id=2692): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x204880, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8000003, 0x3, 0x452, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4048000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05db71", 0x3, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mlockall(0x7) 5.230260268s ago: executing program 4 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) 3.607039301s ago: executing program 4 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x29, 0x33e, &(0x7f0000000480)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x25) 3.602333922s ago: executing program 0 (id=2702): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2004404, &(0x7f00000007c0)=ANY=[], 0x1, 0x2ce, &(0x7f00000008c0)="$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") ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x2}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) r3 = syz_pidfd_open(r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3a0, 0xe8, 0xe8, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@multicast1, @private=0xa010102, 0xffffff00, 0xffffffff, 0x5, 0xc, {@empty, {[0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x2, 0x9, 0xf9b4, 0x3, 0xaf6, 'team_slave_0\x00', 'wlan0\x00', {0xff}, {0xff}, 0x0, 0x188}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x400}}}, {{@arp={@rand_addr=0x64010102, @empty, 0xff000000, 0xff, 0x1, 0xb, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x101, 0x5, 0x9, 0x5896, 0xa4e, 0x7, 'erspan0\x00', 'bridge_slave_0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) epoll_create(0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c000}, 0x0) write$P9_RLERRORu(r5, 0x0, 0x53) socket$nl_xfrm(0x10, 0x3, 0x6) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 3.370468529s ago: executing program 0 (id=2703): pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.456332099s ago: executing program 4 (id=2704): keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000002c0)='key_or_keyring:\xd6\x7f\x91\xf0\x86\xf2z\xcd\xf5X\xe1VW:\x8f/pe\xc4\xcc\xfb%m\xeaA\xde\xbf\x89*\x14\x90I\xab[\xf8\xec\xd3=\xf2\x8b\xfb\xe1\xa7\xa1\r6\x81\xd7\n\xacY\xcf\x13/\xd6\xa1r.}\x05(\xab\xaf\'\xc83\xef\xac\x02D\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x40}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xb, 0x80000000003}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x1000000000000, &(0x7f00000006c0)="cb4a25cef4c1"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@user_xattr}]}, 0x3, 0x447, &(0x7f0000000380)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x100) 2.204855737s ago: executing program 0 (id=2705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.204520977s ago: executing program 7 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="400f4c060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 1.468229881s ago: executing program 0 (id=2707): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 1.433362313s ago: executing program 0 (id=2708): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 1.381226284s ago: executing program 4 (id=2709): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1c001, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='fd/3\x00') 1.268406128s ago: executing program 0 (id=2710): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getrlimit(0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r4, &(0x7f0000000b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x20000010}], 0x1, 0x24048000) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4095, 0xfff}], 0x1}, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.20759191s ago: executing program 4 (id=2711): ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000080)) truncate(0x0, 0x2fffffd) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000197, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x739d, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000bc0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f0000003740)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b829232fdd05d7b21f9b9941055ed28c37d5e1ec11cdbcabb8a89ebf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565b43a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b50800000000000000893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858c268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d79be4da0fae78339ce15085998a17aaf3158b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e2ffffff7f042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed547448fa00c94a0420da4bf03b7deb1399148b3b77268ab867c2509cfce576a477f96eb5f1bd9d7dacdddcbb80400f33d79c861e453bdaa847455877361253b3a242b5854b0d28b47cf37cd515396839509f4da0d6c19ae9d3a052210a5c1d4c75273fa05693d79a463dcd94e60850043027ad28b52cf82ff6c63aff270e89c3d310e13ef7565a26eab1bcad6b26136dbee95b303851b41b619b7bc15316c83cddc57cfa5540ab542c6f7eda25e0ef2641e34d8a61905f919ce96663c2967cba470bae1e3334bec127870982103357136f6d05b940d6ad32843aa2053e3de1a7fa81b13e482bcc895b9f43fd77e8c6b1c3beb3422b16c6c957bc22e80d70b024597f146147fe0928df427c2b37e406f7eca3e74cd61a83c6959eba6fbe582291faaf44346ccd8a7f4b5f6cc3de36f3a1", @ANYBLOB="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"], 0xfc, 0x2b6, &(0x7f0000000100)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x3) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.134121712s ago: executing program 7 (id=2712): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@cache_none}]}}) 0s ago: executing program 4 (id=2713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x20) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000001400)=ANY=[]) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x4, 0xff, 0x0, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}}, 0x4000054) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6a}, @sadb_lifetime={0x4, 0x2, 0x2, 0x10, 0x8, 0x4}]}, 0x40}}, 0x4) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) kernel console output (not intermixed with test programs): 01,,errors=continue. Quota mode: none. [ 226.480149][ T2304] Bluetooth: hci5: command 0x1001 tx timeout [ 226.509914][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 226.582363][ T6445] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 226.597465][ T6445] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 226.609824][ T6445] EXT4-fs (loop1): This should not happen!! Data will be lost [ 226.609824][ T6445] [ 226.620365][ T6445] EXT4-fs (loop1): Total free blocks count 0 [ 226.626443][ T6445] EXT4-fs (loop1): Free/Dirty block details [ 226.632374][ T6445] EXT4-fs (loop1): free_blocks=2415919504 [ 226.638404][ T6445] EXT4-fs (loop1): dirty_blocks=3856 [ 226.643736][ T6445] EXT4-fs (loop1): Block reservation details [ 226.649827][ T6445] EXT4-fs (loop1): i_reserved_data_blocks=241 [ 226.772022][ T4278] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 2048 with error 28 [ 226.791580][ T4278] EXT4-fs (loop1): This should not happen!! Data will be lost [ 226.791580][ T4278] [ 228.472161][ T6497] loop1: detected capacity change from 0 to 2048 [ 228.567117][ T6499] ubi: mtd0 is already attached to ubi0 [ 228.583383][ T2304] Bluetooth: hci5: command 0x1009 tx timeout [ 228.597173][ T6497] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 228.779325][ T6506] netlink: 'syz.3.705': attribute type 11 has an invalid length. [ 228.815077][ T6506] netlink: 'syz.3.705': attribute type 5 has an invalid length. [ 228.832921][ T6506] netlink: 5096 bytes leftover after parsing attributes in process `syz.3.705'. [ 228.861823][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.948743][ T6496] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 229.963668][ T6496] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 229.975950][ T6496] EXT4-fs (loop1): This should not happen!! Data will be lost [ 229.975950][ T6496] [ 229.985659][ T6496] EXT4-fs (loop1): Total free blocks count 0 [ 229.991963][ T6496] EXT4-fs (loop1): Free/Dirty block details [ 229.997872][ T6496] EXT4-fs (loop1): free_blocks=2415919504 [ 230.003735][ T6496] EXT4-fs (loop1): dirty_blocks=3856 [ 230.009038][ T6496] EXT4-fs (loop1): Block reservation details [ 230.015129][ T6496] EXT4-fs (loop1): i_reserved_data_blocks=241 [ 230.175554][ T4429] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 2048 with error 28 [ 230.210256][ T4429] EXT4-fs (loop1): This should not happen!! Data will be lost [ 230.210256][ T4429] [ 231.166234][ T2304] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 232.258904][ T6538] netlink: 'syz.0.715': attribute type 2 has an invalid length. [ 232.266848][ T6538] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 232.380591][ T6538] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.715'. [ 232.456134][ T2304] usb 5-1: device not accepting address 7, error -71 [ 232.580403][ T6550] ubi: mtd0 is already attached to ubi0 [ 234.912964][ T6592] loop2: detected capacity change from 0 to 1024 [ 234.968449][ T6593] ubi: mtd0 is already attached to ubi0 [ 235.166165][ T6601] netlink: 'syz.1.736': attribute type 13 has an invalid length. [ 235.192219][ T6601] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.736'. [ 235.192953][ T6592] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,nogrpid,,errors=continue. Quota mode: none. [ 235.600400][ T6616] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 235.669086][ T6616] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.721668][ T6616] bond0: (slave team0): Enslaving as an active interface with an up link [ 235.880925][ T6620] netlink: 'syz.0.743': attribute type 29 has an invalid length. [ 235.914758][ T6622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.744'. [ 235.927700][ T6620] netlink: 'syz.0.743': attribute type 29 has an invalid length. [ 235.967687][ T6622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.744'. [ 236.007659][ T6623] netlink: 'syz.0.743': attribute type 29 has an invalid length. [ 236.026462][ T6625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.744'. [ 236.165761][ T6622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.744'. [ 236.688862][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 236.944376][ T6636] netlink: 944 bytes leftover after parsing attributes in process `syz.3.749'. [ 237.069327][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.750'. [ 237.184274][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.750'. [ 237.201579][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.750'. [ 240.942272][ T6715] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 241.074205][ T6715] team0: Port device netdevsim0 added [ 241.094413][ T6716] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 241.187016][ T6716] team0: Port device netdevsim0 removed [ 241.198275][ T6716] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 242.834171][ T6780] netlink: 'syz.0.805': attribute type 29 has an invalid length. [ 242.876848][ T6780] netlink: 'syz.0.805': attribute type 29 has an invalid length. [ 244.364987][ T6801] __nla_validate_parse: 1 callbacks suppressed [ 244.365005][ T6801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 251.907167][ T6949] syz.3.871[6949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.907268][ T6949] syz.3.871[6949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.084472][ T6952] 9pnet: Insufficient options for proto=fd [ 253.568702][ T6971] netlink: 64 bytes leftover after parsing attributes in process `syz.3.881'. [ 254.041199][ T4236] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 254.312837][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 254.325244][ T6987] capability: warning: `syz.4.887' uses deprecated v2 capabilities in a way that may be insecure [ 254.499771][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.624561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.635365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.646193][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.656979][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.667786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.689400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.700216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.711008][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.721810][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 254.732616][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 256.928336][ T7003] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 257.036184][ T4236] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 257.047935][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.055992][ T4236] usb 3-1: Product: syz [ 257.087538][ T4236] usb 3-1: Manufacturer: syz [ 257.105721][ T4236] usb 3-1: config 0 descriptor?? [ 257.144291][ T4236] usb 3-1: can't set config #0, error -71 [ 257.161353][ T4236] usb 3-1: USB disconnect, device number 11 [ 257.278150][ T7017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.186684][ T7027] loop1: detected capacity change from 0 to 128 [ 258.276892][ T7027] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 258.489064][ T7027] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 258.540045][ T7027] FAT-fs (loop1): Filesystem has been set read-only [ 259.862058][ T4191] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 260.098160][ T7060] loop1: detected capacity change from 0 to 1024 [ 260.400911][ T7075] loop2: detected capacity change from 0 to 1024 [ 260.471129][ T7060] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.421080][ T7088] loop1: detected capacity change from 0 to 128 [ 261.461130][ T7088] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 261.462229][ T4429] hfsplus: b-tree write err: -5, ino 3 [ 261.537569][ T7088] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.642570][ T7088] ext2 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.699862][ T7090] hfsplus: xattr search failed [ 261.876565][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.883217][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.560003][ T7104] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 266.604212][ T7104] usb 2-1: Using ep0 maxpacket: 8 [ 266.829638][ T7104] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 266.856000][ T7104] usb 2-1: can't read configurations, error -71 [ 266.953906][ T7131] loop1: detected capacity change from 0 to 512 [ 267.091360][ T7131] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.159689][ T7131] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.646346][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 269.195662][ T1108] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 269.449012][ T7157] loop2: detected capacity change from 0 to 128 [ 269.653262][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.683011][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.703952][ T1108] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 269.724671][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.751745][ T1108] usb 2-1: config 0 descriptor?? [ 269.803272][ T1108] hub 2-1:0.0: USB hub found [ 269.910433][ T4266] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 270.040624][ T1108] hub 2-1:0.0: 1 port detected [ 270.399762][ T1108] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 270.406978][ T1108] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 270.503331][ T4266] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.519202][ T4266] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.625507][ T1108] usbhid 2-1:0.0: can't add hid device: -71 [ 270.631746][ T1108] usbhid: probe of 2-1:0.0 failed with error -71 [ 270.658008][ T4266] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.700052][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.723447][ T1108] usb 2-1: USB disconnect, device number 8 [ 270.761575][ T4266] usb 3-1: SerialNumber: syz [ 271.220521][ T4266] usb 3-1: 0:2 : does not exist [ 271.304901][ T4266] usb 3-1: unit 5: unexpected type 0x09 [ 271.580656][ T4266] usb 3-1: USB disconnect, device number 12 [ 271.711078][ T7190] loop1: detected capacity change from 0 to 1024 [ 271.887225][ T5181] hfsplus: b-tree write err: -5, ino 3 [ 271.910118][ T7190] hfsplus: xattr search failed [ 272.142898][ T7201] loop2: detected capacity change from 0 to 128 [ 272.174265][ T7201] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 272.295701][ T7201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.369661][ T7201] ext2 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.541033][ T7211] sock: sock_set_timeout: `syz.1.963' (pid 7211) tries to set negative timeout [ 272.614301][ T7214] loop2: detected capacity change from 0 to 128 [ 272.670022][ T7214] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.791957][ T7214] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.912135][ T7222] loop4: detected capacity change from 0 to 512 [ 273.102273][ T7222] EXT4-fs (loop4): Ignoring removed nobh option [ 273.869634][ T7222] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 273.959801][ T7222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.037969][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 274.116560][ T7222] EXT4-fs (loop4): 1 truncate cleaned up [ 274.122271][ T7222] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 274.145892][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.968'. [ 274.795864][ T26] audit: type=1800 audit(1780419790.995:4): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.967" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 275.160235][ T7244] 9pnet: Insufficient options for proto=fd [ 275.261618][ T7104] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 275.660633][ T7104] usb 2-1: Using ep0 maxpacket: 16 [ 276.556190][ T7269] loop4: detected capacity change from 0 to 128 [ 277.367025][ T7104] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 277.375494][ T7104] usb 2-1: config 0 has no interface number 0 [ 277.381659][ T7104] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 277.395297][ T7104] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 277.478362][ T7269] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.514616][ T7269] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.739302][ T7104] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 277.748804][ T7104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.758889][ T7104] usb 2-1: Product: syz [ 277.763715][ T7104] usb 2-1: Manufacturer: syz [ 277.768346][ T7104] usb 2-1: SerialNumber: syz [ 277.775921][ T7104] usb 2-1: config 0 descriptor?? [ 277.801048][ T7104] usb 2-1: can't set config #0, error -71 [ 278.651034][ T7104] usb 2-1: USB disconnect, device number 9 [ 278.710282][ T26] audit: type=1326 audit(1780419794.799:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68db23ce59 code=0x7ffc0000 [ 278.798820][ T26] audit: type=1326 audit(1780419794.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68db23ce59 code=0x7ffc0000 [ 278.835717][ T26] audit: type=1326 audit(1780419794.845:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68db23ce59 code=0x7ffc0000 [ 278.865788][ T26] audit: type=1326 audit(1780419794.845:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f68db23ce59 code=0x7ffc0000 [ 278.932686][ T26] audit: type=1326 audit(1780419794.854:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.988" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68db23ce59 code=0x7ffc0000 [ 280.217843][ T7309] loop4: detected capacity change from 0 to 256 [ 281.041186][ T7309] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d) [ 284.918492][ T26] audit: type=1326 audit(1780419800.523:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.1008" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4465a25e59 code=0x7ffc0000 [ 286.428849][ T26] audit: type=1326 audit(1780419800.569:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.1008" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4465a25e59 code=0x7ffc0000 [ 286.515520][ T26] audit: type=1326 audit(1780419800.569:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.1008" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4465a25e59 code=0x7ffc0000 [ 286.602277][ T26] audit: type=1326 audit(1780419800.569:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.1008" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4465a25e59 code=0x7ffc0000 [ 286.671486][ T26] audit: type=1326 audit(1780419800.569:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.1008" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f4465a25e59 code=0x7ffc0000 [ 286.791474][ T26] audit: type=1326 audit(1780419800.569:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.1008" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4465a25e59 code=0x7ffc0000 [ 286.815842][ T26] audit: type=1326 audit(1780419800.569:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.3.1008" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4465a25e59 code=0x7ffc0000 [ 286.954944][ T7365] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 287.735496][ T7371] loop4: detected capacity change from 0 to 128 [ 287.848926][ T7371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.859762][ T7371] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.139034][ T7399] loop4: detected capacity change from 0 to 128 [ 291.174896][ T7399] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 291.206996][ T7399] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.207119][ T7399] ext2 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.462173][ T7404] loop1: detected capacity change from 0 to 512 [ 291.527267][ T7404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 291.734403][ T7404] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1024: invalid indirect mapped block 32768 (level 2) [ 291.759235][ T7404] EXT4-fs (loop1): Remounting filesystem read-only [ 291.814305][ T7404] EXT4-fs (loop1): 1 orphan inode deleted [ 291.821111][ T7404] EXT4-fs (loop1): 1 truncate cleaned up [ 291.889786][ T7404] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 291.910695][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.035034][ T7404] EXT4-fs (loop1): shut down requested (1) [ 293.301317][ T4429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.467672][ T4429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.533736][ T4429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.602172][ T4429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.901615][ T7462] loop1: detected capacity change from 0 to 8 [ 293.979243][ T7462] SQUASHFS error: Unable to read inode 0x0 [ 294.199175][ T7431] chnl_net:caif_netlink_parms(): no params data found [ 294.329183][ T7468] loop4: detected capacity change from 0 to 256 [ 294.361750][ T7468] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 294.436151][ T7474] loop1: detected capacity change from 0 to 128 [ 294.586723][ T26] audit: type=1800 audit(1780419809.459:17): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1046" name="file1" dev="loop4" ino=1048634 res=0 errno=0 [ 295.004636][ T7474] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 295.406564][ T6843] Bluetooth: hci3: command 0x0409 tx timeout [ 295.451180][ T7474] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.488805][ T7474] ext2 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.604246][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.684404][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.696496][ T7431] device bridge_slave_0 entered promiscuous mode [ 295.729517][ T7431] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.737118][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.746026][ T7431] device bridge_slave_1 entered promiscuous mode [ 295.965032][ T7431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.249598][ T7431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.356144][ T7431] team0: Port device team_slave_0 added [ 296.400848][ T7431] team0: Port device team_slave_1 added [ 296.509202][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.524264][ T4290] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 296.574856][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.679406][ T7431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.741650][ T7431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.770701][ T7431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.873808][ T7431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.957772][ T4290] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 296.991016][ T4290] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.044456][ T4290] usb 2-1: config 0 has no interface number 0 [ 297.075637][ T7431] device hsr_slave_0 entered promiscuous mode [ 297.129381][ T7431] device hsr_slave_1 entered promiscuous mode [ 297.151485][ T7431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.171107][ T7431] Cannot create hsr debugfs directory [ 297.217628][ T4290] usb 2-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 297.248816][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 297.281533][ T4290] usb 2-1: Product: syz [ 297.294669][ T4290] usb 2-1: Manufacturer: syz [ 297.299816][ T4290] usb 2-1: SerialNumber: syz [ 297.322757][ T4290] usb 2-1: config 0 descriptor?? [ 297.368794][ T4290] usb 2-1: Found UVC 0.00 device syz (006d:0800) [ 297.388007][ T4290] usb 2-1: No valid video chain found. [ 297.722523][ T4290] usb 2-1: USB disconnect, device number 10 [ 297.852936][ T6843] Bluetooth: hci3: command 0x041b tx timeout [ 297.930972][ T7431] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.942114][ T7431] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.992715][ T7431] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.046813][ T7431] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.427438][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 298.428447][ T7431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.503620][ T7540] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 298.860347][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.877655][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.909001][ T7431] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.067619][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.087900][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.105224][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.112370][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.153301][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.312722][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.361887][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.369066][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.403418][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.420015][ T7534] loop4: detected capacity change from 0 to 512 [ 299.438529][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.453682][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 299.512039][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.585024][ T7534] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 299.678149][ T7534] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.712357][ T7431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.723542][ T7431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.736519][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.748935][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.806862][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.836848][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.871245][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.898656][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.909002][ T6843] Bluetooth: hci3: command 0x040f tx timeout [ 299.961127][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.978266][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.014060][ T4429] device hsr_slave_0 left promiscuous mode [ 300.044750][ T4429] device hsr_slave_1 left promiscuous mode [ 300.070376][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.093263][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.120526][ T4429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.149879][ T4429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.165686][ T4429] device bridge_slave_1 left promiscuous mode [ 300.207293][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.246056][ T4429] device bridge_slave_0 left promiscuous mode [ 300.247535][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.281578][ T4429] device veth1_macvtap left promiscuous mode [ 300.281785][ T4429] device veth0_macvtap left promiscuous mode [ 300.281868][ T4429] device veth1_vlan left promiscuous mode [ 300.281924][ T4429] device veth0_vlan left promiscuous mode [ 300.859359][ T4429] team0 (unregistering): Port device team_slave_1 removed [ 300.886044][ T4429] team0 (unregistering): Port device team_slave_0 removed [ 300.944365][ T4429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.974987][ T4429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.694918][ T4429] bond0 (unregistering): Released all slaves [ 301.984527][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 302.006829][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.019670][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.272771][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.700720][ T7597] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 303.753506][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.075269][ T7431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.901088][ T7631] loop1: detected capacity change from 0 to 256 [ 307.136171][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.171973][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.295090][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.342799][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.458487][ T7431] device veth0_vlan entered promiscuous mode [ 308.116852][ T7631] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 308.138002][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.172901][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.252431][ T7431] device veth1_vlan entered promiscuous mode [ 309.289806][ T7431] device veth0_macvtap entered promiscuous mode [ 309.326705][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.333712][ T7660] loop4: detected capacity change from 0 to 1024 [ 309.342843][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.390286][ T7431] device veth1_macvtap entered promiscuous mode [ 309.416950][ T1324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.478539][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.947302][ T7660] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,nogrpid,,errors=continue. Quota mode: none. [ 310.973755][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.193998][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.220823][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.490337][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.539331][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.589609][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.636933][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.677765][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 311.698724][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.737416][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.789584][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.800565][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.811139][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.821175][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.831763][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.841702][ T7431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.852660][ T7431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.099233][ T7431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.159057][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.332297][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.357381][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.401699][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.478282][ T7431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.523580][ T7431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.534243][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 312.566022][ T7431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.576232][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 312.591131][ T7431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.874526][ T469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.902948][ T469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.943216][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.052019][ T7712] netlink: 'syz.1.1099': attribute type 2 has an invalid length. [ 313.077142][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.209796][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.378755][ T7712] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 313.472853][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.690625][ T7712] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1099'. [ 315.114295][ T1111] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 315.934233][ T1111] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 315.944779][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.953636][ T1111] usb 6-1: Product: syz [ 315.958057][ T1111] usb 6-1: Manufacturer: syz [ 315.962681][ T1111] usb 6-1: SerialNumber: syz [ 316.235830][ T7759] loop1: detected capacity change from 0 to 128 [ 316.869566][ T1111] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 322.820543][ T7790] loop1: detected capacity change from 0 to 8 [ 323.177043][ T1111] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 323.259923][ T1111] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 323.374411][ T1111] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 323.385542][ T1111] lan78xx: probe of 6-1:1.0 failed with error -71 [ 323.406705][ T1111] usb 6-1: USB disconnect, device number 2 [ 323.909825][ T7811] loop4: detected capacity change from 0 to 2048 [ 323.980673][ T7818] loop5: detected capacity change from 0 to 128 [ 324.059770][ T7811] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 324.108347][ T7818] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.120836][ T7818] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.131272][ T7811] EXT4-fs (loop4): Ignoring removed bh option [ 324.481381][ T7811] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,debug_want_extra_isize=0x0000000000000006,bh,bsddf,. Quota mode: none. [ 325.729636][ T7824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 325.844151][ T7824] EXT4-fs (loop4): Remounting filesystem read-only [ 327.373518][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.379902][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.969743][ T7873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 332.890938][ T23] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 334.093856][ T23] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 334.102086][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.179554][ T23] usb 6-1: config 0 has no interface number 0 [ 334.374460][ T23] usb 6-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 334.391515][ T23] usb 6-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 334.417160][ T23] usb 6-1: Product: syz [ 334.421396][ T23] usb 6-1: Manufacturer: syz [ 334.467371][ T23] usb 6-1: SerialNumber: syz [ 334.506766][ T7955] loop4: detected capacity change from 0 to 128 [ 334.516141][ T23] usb 6-1: config 0 descriptor?? [ 334.904712][ T7955] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.970642][ T23] usb 6-1: Found UVC 0.00 device syz (006d:0800) [ 334.977054][ T23] usb 6-1: No valid video chain found. [ 334.983610][ T7955] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 334.985314][ T23] usb 6-1: USB disconnect, device number 3 [ 336.887356][ T7975] loop5: detected capacity change from 0 to 128 [ 336.967511][ T7975] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 338.435290][ T7983] loop4: detected capacity change from 0 to 512 [ 338.487147][ T7975] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.553820][ T7983] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 338.582741][ T7983] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.603821][ T7975] ext2 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.902199][ T7983] loop4: detected capacity change from 0 to 8 [ 339.963358][ T7983] unable to read fragment index table [ 340.300747][ T8020] loop4: detected capacity change from 0 to 128 [ 340.458278][ T8020] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.477428][ T8020] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.476000][ T8038] loop1: detected capacity change from 0 to 128 [ 342.311574][ T8052] loop1: detected capacity change from 0 to 128 [ 342.336795][ T8052] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 342.525490][ T8052] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.525609][ T8052] ext2 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.869330][ T8059] loop1: detected capacity change from 0 to 8 [ 342.948369][ T8059] unable to read fragment index table [ 343.522817][ T8067] loop5: detected capacity change from 0 to 512 [ 344.217530][ T8067] EXT4-fs (loop5): Ignoring removed orlov option [ 344.378914][ T8067] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1187: bad orphan inode 67108864 [ 344.390150][ T8067] EXT4-fs (loop5): Remounting filesystem read-only [ 344.396689][ T8067] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,orlov,. Quota mode: writeback. [ 344.417695][ T8067] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.112506][ T8094] binder: 8087:8094 ioctl c0306201 200000000680 returned -14 [ 345.147111][ T8094] loop4: detected capacity change from 0 to 512 [ 345.833748][ T8094] EXT4-fs (loop4): Ignoring removed oldalloc option [ 345.840915][ T8094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.938765][ T8094] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 345.952599][ T8094] EXT4-fs (loop4): 1 truncate cleaned up [ 345.958358][ T8094] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 345.990533][ T8097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1181'. [ 345.994506][ T8093] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 346.229861][ T8101] loop1: detected capacity change from 0 to 1024 [ 346.366005][ T8101] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,nogrpid,,errors=continue. Quota mode: none. [ 346.417157][ T8108] loop4: detected capacity change from 0 to 128 [ 346.621443][ T8108] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 346.651599][ T8112] loop5: detected capacity change from 0 to 512 [ 346.656463][ T8108] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.682018][ T8108] ext2 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.414727][ T8112] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 347.458754][ T8112] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.659009][ T8126] loop4: detected capacity change from 0 to 2048 [ 347.804163][ T8138] loop1: detected capacity change from 0 to 16 [ 347.920753][ T8138] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 20, please upgrade kernel version [ 347.922841][ T8126] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 350.091633][ T8126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.219875][ T8191] loop4: detected capacity change from 0 to 1024 [ 353.378047][ T8191] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,nogrpid,,errors=continue. Quota mode: none. [ 354.709546][ T8225] loop5: detected capacity change from 0 to 256 [ 354.789900][ T8225] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.828065][ T8225] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 354.840675][ T8225] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 354.868743][ T2304] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 354.983477][ T8232] dns_resolver: Unsupported server list version (55) [ 355.327052][ T2304] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 355.352581][ T2304] usb 2-1: config 0 has no interface number 0 [ 355.391330][ T2304] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 355.470413][ T2304] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 355.673562][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 355.770772][ T2304] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 355.796980][ T2304] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 355.827449][ T2304] usb 2-1: Product: syz [ 355.831679][ T2304] usb 2-1: Manufacturer: syz [ 355.865178][ T2304] usb 2-1: SerialNumber: syz [ 355.895639][ T2304] usb 2-1: config 0 descriptor?? [ 355.968912][ T2304] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 355.998312][ T2304] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 356.038687][ T2304] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 356.237319][ T2304] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 356.276166][ T2304] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 357.299971][ T2304] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 357.378383][ T2304] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 357.456066][ T2304] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 357.465755][ T2304] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 357.528168][ T8280] loop1: detected capacity change from 0 to 512 [ 357.536000][ T2304] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 357.558202][ T2304] usb 2-1: USB disconnect, device number 11 [ 357.605414][ T2304] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 357.766691][ T2304] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 357.783243][ T2304] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 357.833953][ T8280] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1248: iget: bad i_size value: 38620345925642 [ 357.847902][ T2304] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 357.987058][ T8280] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1248: couldn't read orphan inode 15 (err -117) [ 358.030873][ T8280] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 358.049803][ T2304] keyspan 2-1:0.107: device disconnected [ 358.144049][ T8295] loop5: detected capacity change from 0 to 1024 [ 358.290336][ T8295] hfsplus: invalid length 32517 has been corrected to 255 [ 358.619703][ T8290] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 359.155419][ T8314] loop5: detected capacity change from 0 to 16 [ 361.594169][ T8328] loop1: detected capacity change from 0 to 512 [ 361.675412][ T8314] erofs: (device loop5): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 361.714593][ T8328] EXT4-fs (loop1): orphan cleanup on readonly fs [ 362.456177][ T8328] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1257: ea_inode with extended attributes [ 362.579345][ T8328] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1257: error while reading EA inode 11 err=-117 [ 362.643617][ T8328] EXT4-fs (loop1): 1 orphan inode deleted [ 362.724755][ T8328] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,dioread_lock,debug_want_extra_isize=0x0000000000000006,nojournal_checksum,resgid=0x0000000000000000,acl,barrier,,errors=continue. Quota mode: none. [ 362.773303][ T8339] loop5: detected capacity change from 0 to 512 [ 363.200495][ T8339] EXT4-fs (loop5): Test dummy encryption mode enabled [ 363.277700][ T8339] EXT4-fs (loop5): Test dummy encryption mode enabled [ 363.367050][ T8339] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 363.899464][ T8367] loop5: detected capacity change from 0 to 8 [ 363.998546][ T8367] SQUASHFS error: lzo decompression failed, data probably corrupt [ 364.584653][ T8367] SQUASHFS error: Failed to read block 0x91: -5 [ 364.636508][ T8367] SQUASHFS error: Unable to read metadata cache entry [8f] [ 364.644309][ T8367] SQUASHFS error: Unable to read inode 0x11f [ 364.676447][ T8346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.338984][ T26] audit: type=1326 audit(1780419882.519:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 371.503892][ T26] audit: type=1326 audit(1780419882.556:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 371.576188][ T8452] loop1: detected capacity change from 0 to 512 [ 371.595201][ T8452] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 371.608553][ T26] audit: type=1326 audit(1780419882.556:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 371.835828][ T26] audit: type=1326 audit(1780419882.556:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 371.851039][ T8452] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1278: invalid indirect mapped block 1025 (level 0) [ 371.891804][ T26] audit: type=1326 audit(1780419882.556:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 371.899815][ T8452] EXT4-fs (loop1): 1 truncate cleaned up [ 371.916338][ T26] audit: type=1326 audit(1780419882.556:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 371.992461][ T26] audit: type=1326 audit(1780419882.556:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 372.007521][ T8452] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 372.255414][ T26] audit: type=1326 audit(1780419882.574:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 372.280081][ T26] audit: type=1326 audit(1780419882.574:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 372.435886][ T26] audit: type=1326 audit(1780419882.574:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.1.1276" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8e29ebbe59 code=0x7ffc0000 [ 374.745936][ T8483] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 378.970103][ T8543] loop4: detected capacity change from 0 to 128 [ 383.908919][ T8560] loop5: detected capacity change from 0 to 8 [ 384.701676][ T8560] SQUASHFS error: zlib decompression failed, data probably corrupt [ 384.710320][ T8560] SQUASHFS error: Failed to read block 0x4de: -5 [ 384.717127][ T8560] SQUASHFS error: Failed to read block 0x4e2: -5 [ 384.723654][ T8560] SQUASHFS error: Failed to read block 0x9ca: -5 [ 384.730977][ T8560] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 384.737637][ T8560] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 384.744357][ T8560] SQUASHFS error: Failed to read block 0x535f2: -5 [ 384.753905][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 384.753979][ T26] audit: type=1800 audit(1780419894.899:37): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1306" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 387.313075][ T13] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 388.308792][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1309'. [ 388.385626][ T13] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 388.406066][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.424108][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.635318][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1321'. [ 389.897961][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.014854][ T8595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.049043][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.088063][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.189995][ T13] usb 2-1: config 0 descriptor?? [ 390.308750][ T13] usb 2-1: can't set config #0, error -71 [ 390.319624][ T13] usb 2-1: USB disconnect, device number 12 [ 391.822118][ T8648] loop5: detected capacity change from 0 to 512 [ 391.954856][ T8648] EXT4-fs (loop5): Ignoring removed nobh option [ 391.976309][ T8648] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 392.076322][ T8648] EXT4-fs (loop5): 1 truncate cleaned up [ 392.107311][ T8648] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 392.590881][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.597461][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.952162][ T26] audit: type=1800 audit(1780419902.460:38): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1332" name="bus" dev="loop5" ino=19 res=0 errno=0 [ 393.499342][ T8671] loop5: detected capacity change from 0 to 128 [ 393.518364][ T8672] netlink: 'syz.4.1340': attribute type 2 has an invalid length. [ 393.544735][ T8672] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1340'. [ 393.663532][ T8671] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 393.693263][ T8671] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.386996][ T8682] netlink: 'syz.1.1331': attribute type 2 has an invalid length. [ 395.423265][ T8682] netlink: 'syz.1.1331': attribute type 4 has an invalid length. [ 395.584606][ T8684] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 395.591714][ T8684] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 395.655871][ T8684] vhci_hcd vhci_hcd.0: Device attached [ 396.010983][ T4266] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 397.246415][ T8703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.034981][ T8744] netlink: 'syz.5.1364': attribute type 2 has an invalid length. [ 399.060165][ T8744] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1364'. [ 399.286486][ T8686] vhci_hcd: connection reset by peer [ 399.319211][ T4429] vhci_hcd: stop threads [ 399.323569][ T4429] vhci_hcd: release socket [ 399.345164][ T4429] vhci_hcd: disconnect device [ 402.087743][ T4266] vhci_hcd: vhci_device speed not set [ 402.638042][ T8792] loop4: detected capacity change from 0 to 8 [ 402.751149][ T8791] netlink: 'syz.3.1383': attribute type 3 has an invalid length. [ 402.759001][ T8791] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1383'. [ 402.788712][ T8792] SQUASHFS error: lzo decompression failed, data probably corrupt [ 402.796765][ T8792] SQUASHFS error: Failed to read block 0x91: -5 [ 402.803149][ T8792] SQUASHFS error: Unable to read metadata cache entry [8f] [ 402.810868][ T8792] SQUASHFS error: Unable to read inode 0x11f [ 403.568862][ T8796] loop5: detected capacity change from 0 to 8 [ 405.508068][ T8807] fuse: Bad value for 'fd' [ 407.326283][ T8848] loop5: detected capacity change from 0 to 8 [ 407.385140][ T8848] squashfs: Unknown parameter 'þ' [ 414.696631][ T8892] binder: 8881:8892 ioctl c0306201 200000000680 returned -14 [ 414.869374][ T4266] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 415.270379][ T4266] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 415.324065][ T4266] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.434951][ T4266] usb 6-1: config 0 has no interface number 0 [ 415.483906][ T8890] netlink: 'syz.1.1422': attribute type 3 has an invalid length. [ 415.497890][ T8890] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1422'. [ 415.649547][ T4266] usb 6-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 415.658680][ T4266] usb 6-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 415.722321][ T4266] usb 6-1: Product: syz [ 415.744216][ T4266] usb 6-1: Manufacturer: syz [ 415.755142][ T4266] usb 6-1: SerialNumber: syz [ 415.786460][ T4266] usb 6-1: config 0 descriptor?? [ 415.880596][ T4266] usb 6-1: Found UVC 0.00 device syz (006d:0800) [ 415.887100][ T4266] usb 6-1: No valid video chain found. [ 415.993358][ T8898] binder: 8894:8898 ioctl c0306201 200000000680 returned -14 [ 416.029311][ T8898] loop4: detected capacity change from 0 to 512 [ 416.107334][ T4266] usb 6-1: USB disconnect, device number 4 [ 416.833173][ T8898] EXT4-fs (loop4): Ignoring removed oldalloc option [ 416.839996][ T8898] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 416.931038][ T8898] EXT4-fs (loop4): 1 truncate cleaned up [ 416.936812][ T8898] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 416.956904][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.855328][ T8921] loop5: detected capacity change from 0 to 8 [ 422.356840][ T8944] binder: 8936:8944 ioctl c0306201 200000000680 returned -14 [ 423.376110][ T8959] netlink: 'syz.0.1441': attribute type 3 has an invalid length. [ 423.425152][ T8959] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1441'. [ 424.042897][ T8970] fuse: Bad value for 'fd' [ 425.855742][ T8949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.463612][ T8985] loop4: detected capacity change from 0 to 512 [ 428.527304][ T8999] loop5: detected capacity change from 0 to 512 [ 428.536917][ T8998] netlink: 'syz.0.1454': attribute type 3 has an invalid length. [ 428.585026][ T8985] EXT4-fs (loop4): Ignoring removed oldalloc option [ 428.614664][ T8985] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 428.662994][ T8998] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1454'. [ 428.678473][ T8999] EXT4-fs (loop5): Test dummy encryption mode enabled [ 428.724958][ T8999] EXT4-fs (loop5): Ignoring removed oldalloc option [ 428.759027][ T8985] EXT4-fs (loop4): 1 truncate cleaned up [ 428.796959][ T8985] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 428.832053][ T8999] EXT4-fs (loop5): 1 truncate cleaned up [ 428.893302][ T8999] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,bsdgroups,nouid32,i_version,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 429.001928][ T8985] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 429.174316][ T8999] EXT4-fs error (device loop5): ext4_ind_map_blocks:604: inode #13: comm syz.5.1436: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 429.214513][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 429.259922][ T8999] EXT4-fs error (device loop5): ext4_free_branches:1043: inode #13: block 234881024: comm syz.5.1436: Read failure [ 433.952824][ T9028] overlayfs: failed to clone lowerpath [ 435.888149][ T9041] loop5: detected capacity change from 0 to 4096 [ 435.917564][ T9045] netlink: 'syz.3.1465': attribute type 3 has an invalid length. [ 435.925444][ T9045] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1465'. [ 436.051233][ T9037] device syzkaller0 entered promiscuous mode [ 436.119191][ T9041] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 436.402628][ T9057] fuse: Bad value for 'fd' [ 437.661366][ T9068] loop4: detected capacity change from 0 to 1024 [ 438.913458][ T9068] EXT4-fs (loop4): Ignoring removed bh option [ 440.021898][ T9068] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000002,bh,init_itable,. Quota mode: none. [ 440.796613][ T4236] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 442.360673][ T4236] usb 6-1: device descriptor read/all, error -71 [ 443.260717][ T9103] netlink: 'syz.0.1483': attribute type 3 has an invalid length. [ 443.286988][ T9103] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1483'. [ 443.306274][ T9105] Invalid argument reading file caps for ./file0 [ 443.698100][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1486'. [ 443.783635][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1486'. [ 444.351054][ T9121] netlink: 'syz.3.1477': attribute type 2 has an invalid length. [ 444.370072][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1477'. [ 446.798481][ T9152] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 448.461431][ T9168] netlink: 'syz.5.1504': attribute type 2 has an invalid length. [ 448.469248][ T9168] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1504'. [ 451.710441][ T9205] loop5: detected capacity change from 0 to 256 [ 451.804748][ T9206] binder: 9197:9206 ioctl c0306201 200000000680 returned -14 [ 451.818280][ T9206] loop4: detected capacity change from 0 to 512 [ 451.850144][ T9205] FAT-fs (loop5): Directory bread(block 64) failed [ 451.856779][ T9205] FAT-fs (loop5): Directory bread(block 65) failed [ 451.894298][ T9206] EXT4-fs (loop4): Ignoring removed oldalloc option [ 451.901036][ T9206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 451.914609][ T9205] FAT-fs (loop5): Directory bread(block 66) failed [ 451.924851][ T9205] FAT-fs (loop5): Directory bread(block 67) failed [ 452.024975][ T9206] EXT4-fs (loop4): 1 truncate cleaned up [ 452.030681][ T9206] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 452.064910][ T9206] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 452.110008][ T9205] FAT-fs (loop5): Directory bread(block 68) failed [ 452.126885][ T9205] FAT-fs (loop5): Directory bread(block 69) failed [ 452.136854][ T9205] FAT-fs (loop5): Directory bread(block 70) failed [ 452.148091][ T9205] FAT-fs (loop5): Directory bread(block 71) failed [ 452.157675][ T9205] FAT-fs (loop5): Directory bread(block 72) failed [ 452.164843][ T9205] FAT-fs (loop5): Directory bread(block 73) failed [ 452.483793][ T9220] netlink: 'syz.5.1518': attribute type 2 has an invalid length. [ 452.518508][ T9220] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1518'. [ 454.268098][ T9226] loop5: detected capacity change from 0 to 8 [ 454.980879][ T9235] Illegal XDP return value 4294967274, expect packet loss! [ 455.134695][ T9226] squashfs: Unknown parameter 'þ' [ 458.422212][ T9262] loop5: detected capacity change from 0 to 512 [ 458.444736][ T9264] netlink: 'syz.0.1531': attribute type 2 has an invalid length. [ 458.476433][ T9264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1531'. [ 458.680478][ T9262] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 458.692606][ T9262] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.562917][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.569328][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.589832][ T9311] netlink: 'syz.0.1543': attribute type 2 has an invalid length. [ 465.616773][ T9311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1543'. [ 466.486914][ T9324] fuse: Bad value for 'fd' [ 468.133107][ T9337] team_slave_1: mtu greater than device maximum [ 469.707108][ T9334] loop4: detected capacity change from 0 to 8 [ 476.365260][ T9386] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1567'. [ 476.384484][ T9388] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1568'. [ 480.553181][ T9425] loop4: detected capacity change from 0 to 8 [ 480.567784][ T9427] mmap: syz.0.1577 (9427) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 482.231162][ T9425] SQUASHFS error: zlib decompression failed, data probably corrupt [ 482.239281][ T9425] SQUASHFS error: Failed to read block 0x4de: -5 [ 482.246120][ T9425] SQUASHFS error: Failed to read block 0x4e2: -5 [ 482.252582][ T9425] SQUASHFS error: Failed to read block 0x9ca: -5 [ 482.259501][ T9425] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 482.266089][ T9425] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 482.272796][ T9425] SQUASHFS error: Failed to read block 0x535f2: -5 [ 482.391585][ T26] audit: type=1800 audit(1780419985.040:39): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1576" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 482.775657][ T9445] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1586'. [ 483.888773][ T9450] device syzkaller0 entered promiscuous mode [ 484.279471][ T9460] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1581'. [ 486.441573][ T9465] loop5: detected capacity change from 0 to 40427 [ 486.893389][ T9465] F2FS-fs (loop5): invalid crc value [ 486.918525][ T9465] F2FS-fs (loop5): Found nat_bits in checkpoint [ 487.224688][ T9465] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 487.779319][ T9493] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1603'. [ 488.147757][ T9499] binder: 9495:9499 ioctl c0306201 200000000680 returned -14 [ 488.216699][ T9499] loop5: detected capacity change from 0 to 512 [ 496.735230][ T9534] loop5: detected capacity change from 0 to 512 [ 497.389428][ T9534] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 497.577469][ T9546] loop4: detected capacity change from 0 to 512 [ 498.601425][ T9546] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 498.709611][ T9546] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 498.972265][ T9546] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.210980][ T9557] loop5: detected capacity change from 0 to 512 [ 499.605591][ T9557] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 499.617553][ T9557] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.627200][ T9557] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 499.627445][ T9557] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 499.627570][ T9557] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1618: Failed to acquire dquot type 0 [ 499.814500][ T9557] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 515.441933][ T9655] 9pnet: Insufficient options for proto=fd [ 525.705366][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.711783][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.966989][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 527.012480][ T9782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.420394][ T9974] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1763'. [ 544.985399][T10057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 551.532464][T10134] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 551.559124][T10134] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 554.051682][T10197] netlink: 'syz.4.1852': attribute type 13 has an invalid length. [ 554.102129][T10197] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1852'. [ 554.350307][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 554.361131][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1856'. [ 554.370886][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 554.379941][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 554.934850][T10220] dns_resolver: Unsupported server list version (55) [ 556.987329][T10248] device sit0 entered promiscuous mode [ 557.047701][T10248] netlink: 'syz.5.1871': attribute type 1 has an invalid length. [ 557.077266][T10248] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1871'. [ 558.453531][T10266] netlink: 'syz.4.1877': attribute type 3 has an invalid length. [ 558.488609][T10266] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1877'. [ 560.065089][T10301] dns_resolver: Unsupported server list version (55) [ 561.576620][T10310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1893'. [ 561.769979][T10313] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1893'. [ 564.895947][T10380] dns_resolver: Unsupported server list version (55) [ 571.594117][T10452] bridge0: port 3(syz_tun) entered blocking state [ 571.602417][T10452] bridge0: port 3(syz_tun) entered disabled state [ 571.612064][T10452] rdma_rxe: ignoring netdev event = 20 for syz_tun [ 571.624044][T10452] rdma_rxe: ignoring netdev event = 26 for syz_tun [ 571.633383][T10452] rdma_rxe: ignoring netdev event = 21 for syz_tun [ 571.640047][T10452] device syz_tun entered promiscuous mode [ 571.650415][T10452] bridge0: port 3(syz_tun) entered blocking state [ 571.657344][T10452] bridge0: port 3(syz_tun) entered forwarding state [ 583.793396][T10476] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 585.217159][T10491] netlink: 'syz.1.1943': attribute type 13 has an invalid length. [ 585.232714][T10491] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1943'. [ 586.789246][T10500] device syzkaller1 entered promiscuous mode [ 588.835690][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'. [ 593.977747][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.985402][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.688535][T10574] overlayfs: './file0' not a directory [ 601.311217][T10599] raw_sendmsg: syz.0.1980 forgot to set AF_INET. Fix it! [ 601.491198][T10596] ipt_CLUSTERIP: Please specify destination IP [ 622.502267][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2040'. [ 626.665243][T10809] netlink: 'syz.0.2053': attribute type 49 has an invalid length. [ 627.696512][T10809] device ip6gretap0 entered promiscuous mode [ 628.019514][T10820] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 628.075980][T10820] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 638.961439][T10957] tipc: Started in network mode [ 638.991886][T10957] tipc: Node identity ac14140f, cluster identity 4711 [ 638.999572][T10957] tipc: New replicast peer: 255.255.255.255 [ 639.077574][T10957] tipc: Enabled bearer , priority 10 [ 640.538039][ T4266] tipc: Node number set to 2886997007 [ 642.210092][T10989] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 651.251553][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 651.818044][T11060] chnl_net:caif_netlink_parms(): no params data found [ 652.823327][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.861687][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.906529][T11060] device bridge_slave_0 entered promiscuous mode [ 652.943683][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.984141][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.041943][T11060] device bridge_slave_1 entered promiscuous mode [ 653.193007][T11060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.275631][T11060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.465308][T11060] team0: Port device team_slave_0 added [ 653.480219][ T1111] Bluetooth: hci5: command 0x041b tx timeout [ 653.545495][T11060] team0: Port device team_slave_1 added [ 653.686072][T11060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.693065][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.794007][T11060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.819470][T11060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.978347][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.050817][T11060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.295825][T11060] device hsr_slave_0 entered promiscuous mode [ 654.318474][T11060] device hsr_slave_1 entered promiscuous mode [ 654.343634][T11060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.370695][T11060] Cannot create hsr debugfs directory [ 654.438045][T11156] netlink: 'syz.3.2150': attribute type 3 has an invalid length. [ 654.470020][T11156] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2150'. [ 654.811744][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 654.919295][T11178] bond0: (slave bond_slave_0): Releasing backup interface [ 654.944270][T11181] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 655.154191][T11060] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 655.180929][T11060] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 655.198267][T11060] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 655.221458][T11060] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 655.328851][T11060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.357587][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.390191][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.460952][T11060] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.557058][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.587471][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.611339][T11192] netlink: 'syz.4.2164': attribute type 3 has an invalid length. [ 655.626186][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.633332][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.660448][T11192] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2164'. [ 655.684181][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.702108][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.733906][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.734293][ T1111] Bluetooth: hci5: command 0x040f tx timeout [ 655.741047][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.795975][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.840472][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.865106][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.906953][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.949400][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.983777][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.012359][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.044230][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.094050][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 656.125615][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.156400][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.187490][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.215798][T11060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.596946][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.607759][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.635376][T11060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.251563][T11225] netlink: 'syz.0.2175': attribute type 3 has an invalid length. [ 657.306369][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.317303][T11227] overlayfs: failed to clone upperpath [ 657.324494][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.335136][T11225] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2175'. [ 657.372638][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.407415][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.438611][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.463755][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.487600][T11060] device veth0_vlan entered promiscuous mode [ 657.549334][T11060] device veth1_vlan entered promiscuous mode [ 657.596701][ T4278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.674731][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.683260][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2180'. [ 657.688555][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.729874][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 657.752214][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.988239][T11090] Bluetooth: hci5: command 0x0419 tx timeout [ 659.010356][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.034446][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.281795][ T4278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.337322][T11060] device veth0_macvtap entered promiscuous mode [ 659.385835][T11060] device veth1_macvtap entered promiscuous mode [ 659.414766][T11252] netlink: 'syz.0.2188': attribute type 3 has an invalid length. [ 659.422800][T11252] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2188'. [ 659.437059][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 659.470721][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 659.515760][ T4278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.593438][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.613176][ T26] audit: type=1326 audit(1780422726.587:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.4.2190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ea7ac4e59 code=0x0 [ 659.614832][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.658830][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.677443][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.687763][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.715218][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.734983][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.752709][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.771810][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.785388][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.805115][T11060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.826898][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 659.839308][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 659.864824][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.890504][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.909566][T11269] overlayfs: failed to clone lowerpath [ 659.911365][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.933615][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.945750][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.963036][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.980123][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.999183][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.010818][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.030470][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.055268][T11060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.087771][ T4278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.109599][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.307716][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.407933][T11060] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.441634][T11060] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.472724][T11060] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.493513][T11060] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.716952][ T6585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.745410][ T6585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.838214][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.854538][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.100533][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 662.120631][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 664.136877][T11337] netlink: 'syz.3.2213': attribute type 3 has an invalid length. [ 664.176243][T11337] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2213'. [ 666.635745][T11391] netlink: 'syz.4.2225': attribute type 3 has an invalid length. [ 666.695985][T11391] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2225'. [ 667.626374][T11399] loop6: detected capacity change from 0 to 512 [ 667.801742][T11399] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 668.151465][T11399] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.2229: invalid indirect mapped block 4294967295 (level 0) [ 669.673170][T11399] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.2229: invalid indirect mapped block 4294967295 (level 1) [ 669.725649][T11399] EXT4-fs (loop6): 1 orphan inode deleted [ 669.731638][T11399] EXT4-fs (loop6): 1 truncate cleaned up [ 669.737496][T11399] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 669.772474][T11399] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 671.206096][ T4278] device hsr_slave_0 left promiscuous mode [ 671.438102][ T4278] device hsr_slave_1 left promiscuous mode [ 671.604555][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.622150][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.883002][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.912549][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.923182][ T4278] device bridge_slave_1 left promiscuous mode [ 672.929464][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.118521][ T4278] device bridge_slave_0 left promiscuous mode [ 673.135761][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.683670][ T4278] device veth1_macvtap left promiscuous mode [ 674.710890][ T4278] device veth0_macvtap left promiscuous mode [ 674.749803][ T4278] device veth1_vlan left promiscuous mode [ 674.755690][ T4278] device veth0_vlan left promiscuous mode [ 674.855353][T11475] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 675.202116][T11479] overlayfs: invalid origin (0000) [ 675.337781][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 675.363502][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 675.378814][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.418118][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.605531][ T4278] bond0 (unregistering): (slave team0): Releasing backup interface [ 675.659613][ T4278] bond0 (unregistering): Released all slaves [ 676.484059][T11442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 676.505344][T11442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.637115][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2260'. [ 677.095316][T11537] netlink: 'syz.6.2268': attribute type 4 has an invalid length. [ 677.103287][T11537] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2268'. [ 679.299232][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'. [ 682.477110][T11594] fuse: Bad value for 'group_id' [ 685.298586][ T26] audit: type=1326 audit(1780422750.282:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 685.596655][ T26] audit: type=1326 audit(1780422750.319:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 686.501374][ T26] audit: type=1326 audit(1780422750.319:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 686.703032][T11634] binder: 11602:11634 ioctl c0306201 200000000680 returned -14 [ 686.729876][ T26] audit: type=1326 audit(1780422750.319:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 686.873223][ T26] audit: type=1326 audit(1780422750.319:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 686.941271][T11639] loop6: detected capacity change from 0 to 512 [ 686.952496][ T26] audit: type=1326 audit(1780422750.319:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 687.059521][ T26] audit: type=1326 audit(1780422750.319:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 687.315181][ T26] audit: type=1326 audit(1780422750.319:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 687.344227][T11639] EXT4-fs (loop6): Ignoring removed oldalloc option [ 687.363732][T11639] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 687.493523][ T26] audit: type=1326 audit(1780422750.319:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 687.557973][T11639] EXT4-fs (loop6): 1 truncate cleaned up [ 687.629652][ T26] audit: type=1326 audit(1780422750.319:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.5.2291" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9e1cbe59 code=0x7ffc0000 [ 687.676904][T11639] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 692.736555][T11693] fuse: Bad value for 'group_id' [ 697.895634][T11752] device syz_tun entered promiscuous mode [ 697.901518][T11752] device vlan2 entered promiscuous mode [ 698.949943][T11768] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 698.971194][T11768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.979452][T11768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 698.999471][T11768] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 700.327858][T11775] overlayfs: failed to clone upperpath [ 700.431156][T11778] netlink: 'syz.0.2325': attribute type 49 has an invalid length. [ 705.840907][T11845] netlink: 'syz.5.2337': attribute type 49 has an invalid length. [ 708.747979][T11886] loop6: detected capacity change from 0 to 512 [ 708.974702][T11886] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 709.008620][T11886] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.615097][T11906] netlink: 'syz.4.2361': attribute type 49 has an invalid length. [ 710.517312][T11917] fuse: Bad value for 'fd' [ 711.384800][T11940] loop6: detected capacity change from 0 to 256 [ 711.871068][T11940] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 711.932780][T11940] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 711.951647][T11940] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 713.038659][T11960] loop6: detected capacity change from 0 to 128 [ 713.110669][T11960] FAT-fs (loop6): Unrecognized mount option "ÿÿ0x000000000000ee00" or missing value [ 714.376485][T11996] netlink: 'syz.5.2379': attribute type 49 has an invalid length. [ 719.607137][T12057] fuse: Unknown parameter 'grou00000000000000000000' [ 719.683251][T12061] netlink: 'syz.5.2396': attribute type 49 has an invalid length. [ 721.399123][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2407'. [ 721.411598][T12084] netlink: 'syz.4.2407': attribute type 7 has an invalid length. [ 721.419421][T12084] netlink: 'syz.4.2407': attribute type 8 has an invalid length. [ 722.824934][T12103] fuse: Unknown parameter 'grou00000000000000000000' [ 722.903633][T12104] loop6: detected capacity change from 0 to 1024 [ 723.965248][T12104] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 725.790584][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 725.796979][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.833670][T12119] netlink: 'syz.6.2413': attribute type 49 has an invalid length. [ 726.697018][T12141] fuse: Unknown parameter 'grou00000000000000000000' [ 728.288567][T12163] netlink: 'syz.3.2432': attribute type 49 has an invalid length. [ 729.122045][T12203] fuse: Bad value for 'fd' [ 730.176498][T12224] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 730.186091][T12224] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 730.195677][T12224] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 730.209943][T12224] syz.5.2441 (12224) used greatest stack depth: 18224 bytes left [ 730.225875][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 730.225891][ T26] audit: type=1800 audit(1780422791.693:108): pid=12224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2441" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 731.356174][T12234] loop6: detected capacity change from 0 to 128 [ 731.384438][T12234] EXT4-fs (loop6): Test dummy encryption mode enabled [ 731.453847][T12244] fuse: Bad value for 'fd' [ 731.477504][T12234] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 731.566064][T12234] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 733.649906][T12270] netlink: 'syz.5.2453': attribute type 3 has an invalid length. [ 733.863406][T12270] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2453'. [ 734.922768][T12285] netlink: 'syz.5.2454': attribute type 49 has an invalid length. [ 736.704349][T12306] fuse: Unknown parameter 'group_i00000000000000000000' [ 737.652576][T12321] fuse: Bad value for 'fd' [ 740.377313][T12362] fuse: Unknown parameter 'group_id00000000000000000000' [ 740.442670][T12366] netlink: 'syz.5.2464': attribute type 3 has an invalid length. [ 740.509020][T12366] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2464'. [ 742.754400][T12419] fuse: Bad value for 'fd' [ 745.433400][T12428] netlink: 'syz.0.2488': attribute type 49 has an invalid length. [ 745.593563][T12432] loop6: detected capacity change from 0 to 1024 [ 745.644112][T12432] EXT4-fs (loop6): Ignoring removed orlov option [ 745.850667][T12432] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 746.064981][T12432] EXT4-fs (loop6): shut down requested (1) [ 746.661043][T12456] fuse: Unknown parameter 'group_id00000000000000000000' [ 749.963895][T12469] netlink: 'syz.4.2501': attribute type 3 has an invalid length. [ 749.998396][T12469] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2501'. [ 750.930546][T12470] netlink: 'syz.0.2502': attribute type 49 has an invalid length. [ 751.808752][T12490] fuse: Bad value for 'fd' [ 752.734344][T12501] fuse: Bad value for 'user_id' [ 753.686872][T12514] netlink: 'syz.3.2516': attribute type 3 has an invalid length. [ 753.899119][T12514] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2516'. [ 755.579567][T12531] loop6: detected capacity change from 0 to 16 [ 755.687645][T12531] erofs: (device loop6): mounted with root inode @ nid 36. [ 756.974637][T11060] erofs: (device loop6): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 757.048864][T11060] erofs: (device loop6): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 757.151883][T12541] fuse: Bad value for 'fd' [ 757.584187][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.691811][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.860573][T12554] netlink: 'syz.4.2530': attribute type 3 has an invalid length. [ 757.903150][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.945737][T12554] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2530'. [ 758.033583][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.150606][ T4233] Bluetooth: hci1: command 0x0409 tx timeout [ 761.291438][T12580] fuse: Bad value for 'user_id' [ 761.384436][T12583] dns_resolver: Unsupported server list version (55) [ 762.052175][T12594] netlink: 'syz.4.2536': attribute type 49 has an invalid length. [ 763.284398][T12556] chnl_net:caif_netlink_parms(): no params data found [ 763.613538][ T2304] Bluetooth: hci1: command 0x041b tx timeout [ 765.845576][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 766.138417][T12556] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.162420][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.216901][T12556] device bridge_slave_0 entered promiscuous mode [ 766.239450][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.345933][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.376336][T12556] device bridge_slave_1 entered promiscuous mode [ 766.512603][T12556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.564983][ T9] device hsr_slave_0 left promiscuous mode [ 766.578493][ T9] device hsr_slave_1 left promiscuous mode [ 766.602162][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.651671][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.678954][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.704320][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.735380][ T9] device bridge_slave_1 left promiscuous mode [ 766.741744][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.822337][ T9] device bridge_slave_0 left promiscuous mode [ 766.828710][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.127507][T12664] cgroup: Unknown subsys name 'nofavordynmods' [ 767.172325][ T9] device veth1_macvtap left promiscuous mode [ 767.183877][ T9] device veth0_macvtap left promiscuous mode [ 767.291280][ T9] device veth1_vlan left promiscuous mode [ 767.389725][ T9] device veth0_vlan left promiscuous mode [ 768.100240][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 769.452001][ T9] team0 (unregistering): Port device team_slave_1 removed [ 769.492095][ T9] team0 (unregistering): Port device team_slave_0 removed [ 769.518739][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.557850][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.004371][ T9] bond0 (unregistering): Released all slaves [ 770.124566][T12556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.249285][T12556] team0: Port device team_slave_0 added [ 770.285091][T12556] team0: Port device team_slave_1 added [ 770.400743][T12556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.430434][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.553100][T12556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.588036][T12674] bridge0: port 3(veth0_to_bond) entered blocking state [ 770.607945][T12674] bridge0: port 3(veth0_to_bond) entered disabled state [ 770.633138][T12674] device veth0_to_bond entered promiscuous mode [ 770.684610][T12674] bridge0: port 3(veth0_to_bond) entered blocking state [ 770.691672][T12674] bridge0: port 3(veth0_to_bond) entered forwarding state [ 770.730945][T12556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.780884][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.840049][T12556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.992559][T12556] device hsr_slave_0 entered promiscuous mode [ 771.194673][T12556] device hsr_slave_1 entered promiscuous mode [ 771.210467][T12556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.218069][T12556] Cannot create hsr debugfs directory [ 771.529450][T12556] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 772.658302][T12556] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 772.685621][T12556] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 772.820175][T12556] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.309557][T12556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.429891][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 773.449642][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 773.525224][T12556] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.573831][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 773.609950][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 773.736836][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.744007][ T4409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.806879][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 773.864918][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 773.882688][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 773.911442][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.918604][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.786924][T12556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.556012][T12556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.592264][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 775.612375][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 775.632972][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 775.682348][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 776.511630][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 776.568926][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 776.619110][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 776.640256][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.594572][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 777.603683][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 777.650481][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 777.691987][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 779.141239][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 779.215552][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 779.262477][T12556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.673955][T12829] 9pnet: Insufficient options for proto=fd [ 781.702638][T10731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 781.742473][T10731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 781.808585][T10731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 781.886579][T10731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 781.925250][T10731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 781.951263][T10731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 782.120429][T12556] device veth0_vlan entered promiscuous mode [ 782.546297][T12556] device veth1_vlan entered promiscuous mode [ 782.998174][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 783.139505][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 783.154334][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 783.209133][T12556] device veth0_macvtap entered promiscuous mode [ 783.277003][T12556] device veth1_macvtap entered promiscuous mode [ 783.379191][T12851] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2602'. [ 783.409556][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.456860][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.466725][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.505932][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.549229][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.575233][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.597976][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.641177][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.685512][T12556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.701390][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 783.734777][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 783.884542][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 783.915398][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 783.950936][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.833052][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.063232][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.074175][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.084612][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.104609][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.125936][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.136528][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.278066][T12556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.786450][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 785.920575][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 786.189642][T12556] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.238393][T12556] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.274088][T12556] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.285033][T12556] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.625017][T10731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.705337][T10731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.733651][T10731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 787.815144][T10731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.823053][T10731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.839385][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 790.516730][T12941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 790.533289][T12941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 790.541743][T12941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 791.969471][T12954] netem: change failed [ 792.090855][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 792.097264][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 796.363220][T13000] loop7: detected capacity change from 0 to 16 [ 796.472981][T13000] erofs: (device loop7): mounted with root inode @ nid 36. [ 796.732719][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 796.743757][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 796.753066][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 356351 of nid 36 [ 796.763137][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 796.773234][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 352255 of nid 36 [ 796.783629][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 796.792821][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 796.803108][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 796.812283][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 796.821559][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 339967 of nid 36 [ 796.831673][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 796.840828][T13011] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 80 of nid 36 [ 796.850675][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 796.859901][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 331775 of nid 36 [ 796.870042][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 796.886998][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 796.896228][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 796.905470][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 796.915770][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 796.925430][T13011] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 72 of nid 36 [ 796.934960][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 796.944143][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 299007 of nid 36 [ 796.954264][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 796.963634][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 796.972811][T13011] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 796.982384][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 796.991538][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 286719 of nid 36 [ 797.001654][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 797.010833][T13011] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 797.020462][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 797.029778][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 67 @ nid 36 [ 797.039005][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 797.048235][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 797.058291][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 797.071133][T13011] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 62 of nid 36 [ 797.080796][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 797.089960][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 258047 of nid 36 [ 797.100123][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 797.109217][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 797.119420][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 797.128530][T13011] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 797.138037][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 797.147246][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 797.156379][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 797.165502][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 797.174596][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 797.183682][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 797.193713][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 797.202785][T13011] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 797.212121][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 797.221201][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 797.236711][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 797.247103][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 797.256248][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 797.265655][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 797.274741][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 797.284820][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 797.294562][T13011] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 797.304046][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 797.313148][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 797.323252][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 797.332421][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 797.342748][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 797.351915][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 797.360991][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 797.370128][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 797.379818][T13011] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 797.389289][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 797.398938][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 797.408149][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 797.417226][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 797.426461][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 797.435645][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 797.444978][T13011] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 28 of nid 36 [ 797.454409][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 29 @ nid 36 [ 797.463501][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 118783 of nid 36 [ 797.473557][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 797.482667][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 797.492370][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 110591 of nid 36 [ 797.502554][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 797.512198][T13011] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 797.522469][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 797.531546][T13011] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 797.540880][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 797.549983][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 797.559117][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 797.568341][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 797.577369][T13011] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 797.587030][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 797.596311][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 797.605429][T13011] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 797.614884][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 797.624348][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 797.633427][T13011] erofs: (device loop7): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 797.642786][T13011] attempt to access beyond end of device [ 797.642786][T13011] loop7: rw=524288, want=13478624080, limit=16 [ 797.654494][T13011] attempt to access beyond end of device [ 797.654494][T13011] loop7: rw=524288, want=56, limit=16 [ 797.665618][T13011] attempt to access beyond end of device [ 797.665618][T13011] loop7: rw=524288, want=40, limit=16 [ 797.676552][T13011] attempt to access beyond end of device [ 797.676552][T13011] loop7: rw=524288, want=96, limit=16 [ 797.687906][T13011] attempt to access beyond end of device [ 797.687906][T13011] loop7: rw=524288, want=32, limit=16 [ 797.698842][T13011] attempt to access beyond end of device [ 797.698842][T13011] loop7: rw=524288, want=15495015312, limit=16 [ 797.711166][T13011] attempt to access beyond end of device [ 797.711166][T13011] loop7: rw=524288, want=15495015288, limit=16 [ 800.723870][T13032] loop7: detected capacity change from 0 to 512 [ 800.808508][T13032] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 801.026112][T13032] EXT4-fs (loop7): 1 truncate cleaned up [ 801.031788][T13032] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 801.421663][T13060] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2663'. [ 803.301193][T13075] loop7: detected capacity change from 0 to 1024 [ 803.364737][T13075] EXT4-fs (loop7): Ignoring removed nobh option [ 803.411585][T13075] EXT4-fs (loop7): inline encryption not supported [ 803.438800][T13075] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 803.504075][T13085] fuse: Bad value for 'fd' [ 803.551005][T13075] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 803.551005][T13075] [ 806.692519][T13140] loop7: detected capacity change from 0 to 512 [ 806.792047][T13140] EXT4-fs (loop7): test_dummy_encryption requires encrypt feature [ 806.873209][T10731] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.034446][T10731] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.048648][T13157] loop7: detected capacity change from 0 to 256 [ 807.203141][T13157] FAT-fs (loop7): Directory bread(block 64) failed [ 807.209822][T13157] FAT-fs (loop7): Directory bread(block 65) failed [ 807.216517][T13157] FAT-fs (loop7): Directory bread(block 66) failed [ 807.223081][T13157] FAT-fs (loop7): Directory bread(block 67) failed [ 807.229850][T13157] FAT-fs (loop7): Directory bread(block 68) failed [ 807.236453][T13157] FAT-fs (loop7): Directory bread(block 69) failed [ 807.243052][T13157] FAT-fs (loop7): Directory bread(block 70) failed [ 807.249678][T13157] FAT-fs (loop7): Directory bread(block 71) failed [ 807.256648][T13157] FAT-fs (loop7): Directory bread(block 72) failed [ 807.263206][T13157] FAT-fs (loop7): Directory bread(block 73) failed [ 808.498374][T10731] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.767578][T10731] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.844569][T13171] loop7: detected capacity change from 0 to 2048 [ 809.512404][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 809.598246][T13171] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 809.680285][T13171] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.868735][T13199] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2698'. [ 810.397186][T13136] chnl_net:caif_netlink_parms(): no params data found [ 811.716786][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 812.705783][T13228] 9pnet: Insufficient options for proto=fd [ 812.749542][T13136] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.907813][T13136] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.938682][T13136] device bridge_slave_0 entered promiscuous mode [ 812.959749][T13136] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.967027][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.987666][T13136] device bridge_slave_1 entered promiscuous mode [ 813.161773][T13136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.186884][T13136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.396719][T13136] team0: Port device team_slave_0 added [ 813.415584][T13136] team0: Port device team_slave_1 added [ 813.522165][T13136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.529636][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.557753][T13136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.760546][T13136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.767534][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.905880][T13136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.965893][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 814.552534][T13136] device hsr_slave_0 entered promiscuous mode [ 814.571761][T13136] device hsr_slave_1 entered promiscuous mode [ 815.120067][T13136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.131628][T13255] ------------[ cut here ]------------ [ 815.140170][T13136] Cannot create hsr debugfs directory [ 815.172884][T13255] WARNING: CPU: 1 PID: 13255 at mm/page_alloc.c:5476 __alloc_pages+0x39f/0x480 [ 815.225854][T13255] Modules linked in: [ 815.230105][T13255] CPU: 0 PID: 13255 Comm: syz.7.2712 Not tainted syzkaller #0 [ 815.245609][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.276512][T13255] RIP: 0010:__alloc_pages+0x39f/0x480 [ 815.282169][T13255] Code: 31 ff e9 b1 fe ff ff e8 cf e4 08 08 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fd ff ff 4c 89 e7 e8 d6 cc 09 00 e9 42 fd ff ff <0f> 0b 45 31 ff e9 ee fe ff ff 65 44 8b 2d d7 7f 4d 7e 41 83 fd 08 [ 815.338728][T13255] RSP: 0018:ffffc9000321fb20 EFLAGS: 00010246 [ 815.344952][T13255] RAX: ffffc9000321fb60 RBX: 1ffff92000643f68 RCX: 0000000000000000 [ 815.357518][T13255] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000321fb88 [ 815.374298][T13255] RBP: ffffc9000321fc18 R08: ffffc9000321fb87 R09: ffffc9000321fb60 [ 815.396600][T13255] R10: dffffc0000000000 R11: fffff52000643f71 R12: dffffc0000000000 [ 815.526660][T13255] R13: 0000000000000000 R14: 0000000000040d40 R15: 0000000000000014 [ 816.269539][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 816.275658][T13255] FS: 00007ff222efd6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 816.379325][T13255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.431754][T13255] CR2: 000000110c2520bc CR3: 00000000634a2000 CR4: 00000000003506f0 [ 816.457949][T13255] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 816.486491][T13255] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 816.510954][T13255] Call Trace: [ 816.525670][T13255] [ 816.539459][T13255] ? zone_statistics+0x170/0x170 [ 816.556487][T13255] ? v9fs_fid_xattr_get+0x1e3/0x260 [ 816.580880][T13255] ? refcount_inc+0x70/0x70 [ 817.221522][T13255] ? alloc_pages+0x438/0x550 [ 817.243197][T13255] kmalloc_order+0x40/0x150 [ 817.276077][T13255] ? __v9fs_get_acl+0xfc/0x110 [ 817.300070][T13255] kmalloc_order_trace+0x14/0xf0 [ 817.324182][T13255] __v9fs_get_acl+0x40/0x110 [ 817.346793][T13255] v9fs_get_acl+0xa9/0x260 [ 817.351878][T13255] v9fs_mount+0x6c0/0x850 [ 817.370759][T13255] legacy_get_tree+0xe6/0x180 [ 817.392161][T13255] ? xfs_fs_commit_blocks+0x6f0/0x6f0 [ 817.407871][T13255] vfs_get_tree+0x88/0x270 [ 817.417489][T13255] do_new_mount+0x24a/0xa40 [ 817.427873][T13255] __se_sys_mount+0x2e3/0x3d0 [ 817.441203][T13255] ? __x64_sys_mount+0xc0/0xc0 [ 817.459630][T13255] ? lockdep_hardirqs_on+0x94/0x140 [ 817.475324][T13136] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 817.481448][T13255] ? __x64_sys_mount+0x1c/0xc0 [ 817.494495][T13255] do_syscall_64+0x4c/0xa0 [ 817.500595][T13255] ? clear_bhb_loop+0x30/0x80 [ 817.505439][T13255] ? clear_bhb_loop+0x30/0x80 [ 817.510665][T13255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 817.516690][T13255] RIP: 0033:0x7ff224ca3e59 [ 817.527962][T13255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.580764][T13255] RSP: 002b:00007ff222efd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 817.583200][T13136] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 817.590587][T13255] RAX: ffffffffffffffda RBX: 00007ff224f1cfa0 RCX: 00007ff224ca3e59 [ 817.605325][T13255] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 817.637040][T13255] RBP: 00007ff224d39d6f R08: 0000200000000ac0 R09: 0000000000000000 [ 817.649454][T13136] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 817.656256][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.656282][T13255] R13: 00007ff224f1d038 R14: 00007ff224f1cfa0 R15: 00007fff162e9338 [ 817.656318][T13255] [ 817.656329][T13255] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 817.656342][T13255] CPU: 0 PID: 13255 Comm: syz.7.2712 Not tainted syzkaller #0 [ 817.656364][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 817.656376][T13255] Call Trace: [ 817.656384][T13255] [ 817.656393][T13255] dump_stack_lvl+0x188/0x250 [ 817.710991][T13255] ? show_regs_print_info+0x20/0x20 [ 817.716197][T13255] ? load_image+0x400/0x400 [ 817.720738][T13255] panic+0x2e5/0x810 [ 817.724771][T13255] ? bpf_jit_dump+0xd0/0xd0 [ 817.729288][T13255] ? __alloc_pages+0x39f/0x480 [ 817.734145][T13255] __warn+0x248/0x2b0 [ 817.738129][T13255] ? __alloc_pages+0x39f/0x480 [ 817.742898][T13255] report_bug+0x1b7/0x2e0 [ 817.747314][T13255] handle_bug+0x3a/0x70 [ 817.751477][T13255] exc_invalid_op+0x16/0x40 [ 817.756101][T13255] asm_exc_invalid_op+0x16/0x20 [ 817.760974][T13255] RIP: 0010:__alloc_pages+0x39f/0x480 [ 817.766350][T13255] Code: 31 ff e9 b1 fe ff ff e8 cf e4 08 08 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fd ff ff 4c 89 e7 e8 d6 cc 09 00 e9 42 fd ff ff <0f> 0b 45 31 ff e9 ee fe ff ff 65 44 8b 2d d7 7f 4d 7e 41 83 fd 08 [ 817.785980][T13255] RSP: 0018:ffffc9000321fb20 EFLAGS: 00010246 [ 817.792051][T13255] RAX: ffffc9000321fb60 RBX: 1ffff92000643f68 RCX: 0000000000000000 [ 817.800024][T13255] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000321fb88 [ 817.807998][T13255] RBP: ffffc9000321fc18 R08: ffffc9000321fb87 R09: ffffc9000321fb60 [ 817.815988][T13255] R10: dffffc0000000000 R11: fffff52000643f71 R12: dffffc0000000000 [ 817.823958][T13255] R13: 0000000000000000 R14: 0000000000040d40 R15: 0000000000000014 [ 817.831944][T13255] ? zone_statistics+0x170/0x170 [ 817.836886][T13255] ? v9fs_fid_xattr_get+0x1e3/0x260 [ 817.842089][T13255] ? refcount_inc+0x70/0x70 [ 817.846595][T13255] ? alloc_pages+0x438/0x550 [ 817.851193][T13255] kmalloc_order+0x40/0x150 [ 817.855699][T13255] ? __v9fs_get_acl+0xfc/0x110 [ 817.860489][T13255] kmalloc_order_trace+0x14/0xf0 [ 817.865428][T13255] __v9fs_get_acl+0x40/0x110 [ 817.870031][T13255] v9fs_get_acl+0xa9/0x260 [ 817.874462][T13255] v9fs_mount+0x6c0/0x850 [ 817.878796][T13255] legacy_get_tree+0xe6/0x180 [ 817.883480][T13255] ? xfs_fs_commit_blocks+0x6f0/0x6f0 [ 817.888854][T13255] vfs_get_tree+0x88/0x270 [ 817.893276][T13255] do_new_mount+0x24a/0xa40 [ 817.897790][T13255] __se_sys_mount+0x2e3/0x3d0 [ 817.902477][T13255] ? __x64_sys_mount+0xc0/0xc0 [ 817.907247][T13255] ? lockdep_hardirqs_on+0x94/0x140 [ 817.912475][T13255] ? __x64_sys_mount+0x1c/0xc0 [ 817.917245][T13255] do_syscall_64+0x4c/0xa0 [ 817.921662][T13255] ? clear_bhb_loop+0x30/0x80 [ 817.926338][T13255] ? clear_bhb_loop+0x30/0x80 [ 817.931015][T13255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 817.936908][T13255] RIP: 0033:0x7ff224ca3e59 [ 817.941329][T13255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.961028][T13255] RSP: 002b:00007ff222efd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 817.969534][T13255] RAX: ffffffffffffffda RBX: 00007ff224f1cfa0 RCX: 00007ff224ca3e59 [ 817.977510][T13255] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 817.985481][T13255] RBP: 00007ff224d39d6f R08: 0000200000000ac0 R09: 0000000000000000 [ 817.993477][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.001450][T13255] R13: 00007ff224f1d038 R14: 00007ff224f1cfa0 R15: 00007fff162e9338 [ 818.009441][T13255] [ 818.012674][T13255] Kernel Offset: disabled [ 818.017244][T13255] Rebooting in 86400 seconds..