last executing test programs: 14m11.585880271s ago: executing program 32 (id=27): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = getpid() close(0x3) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 13m11.561907845s ago: executing program 33 (id=112): r0 = userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r6 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r6, 0x0, 0x0, 0x20000054) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c68000/0x2000)=nil, 0x2000) 9m18.396603231s ago: executing program 4 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) write$binfmt_register(r3, 0x0, 0x0) 9m16.836175972s ago: executing program 4 (id=602): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080), 0x1, 0x78a, &(0x7f0000000fc0)="$eJzs2M1rXOUeB/DfOZnkJm3unfTeu7i9m15uL7Rw6eStDU0vXFoXgiBYKLhSMdhJGjJpSiZFk1WKS124EFRE0G5ciDQLoRupEcF/wI39FwRR0YW7kTOZvJDOJKkmfWj6+cAz53mZk+/vSTKHcyaAJ9a/ipcsoj8ihiKi3JrPI6Kn2euNWF57353RlWtFy6LRuPJDVpwWt0dXrq3/rKx1PBrNU+J0RDz1dBZ/e/3B3Pri0sxErVadb40HF2ZvDNYXl85Mz05MVaeq10dGzp8bPzs8Nja+b3sdHoyXvvrs4vPLl25+OvTC3ExRb39rbes+9lPWZq4UES8eRFgCXa39dG2Zy0oJCwIAYEfFff5fI+LfzXu4cnTF5s1bOe5/kbQ4AAAAYF80TjQAAACAQy719w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADweGo0sGgAAAMChlvr7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHi+3R1eurbdHmfv9pYgYWMu/02prK6VYbh57ozsijvycRWnLeVlEDO1D/vKtiPhHu/1nzfyB6G2OtufnEXE5cf7L+5APT7LV4vpzsd3nL9+4/kSbz19p7bQ/bP36d+eB699mfleH69+NPWZ8/M1zb3bMvxXxz1K7/GwjP9ua372Zv7zH/HvPHn+v01rjo4hT0T5/XdEbXJi9MVhfXDozPTsxVZ2qXh8ZOX9u/Ozw2Nj44OR0rTq09to244NP3vh6p/0f6ZSfxY6//7f2uP+Tx/73+Yc75J8+ufPfP2uTX9S0UnQau+f/lHdeK/Kvdtj/TvnF3Oru0U3P3L18d49vBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMgjoj+yvLLRz/NKJeJoRPw9juS1ufrCfyfnbl6/WqxFDER3Pjldqw5FRHltnBXj4WZ/czyybTwaEcci4u1yX3NceWWudjX15gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhwtCeiP7K8EhF5RPxSzvNKJXVVAAAAwL4bSF0AAAAAcOA8/wMAAMDht+vz/73/P5pCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKyOnVi9n0XE8oW+Ziv0tNa6k1YGHLQ8dQFAMl2pCwCSKaUuAEjGMz6Q7bLeu32ir+MKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIfYqeOr97OIWL7Q12yFntZad9LKgIOWpy4ASKYrdQFAMqUsdQVAKp7xgd1uA3p/xwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh09/s2V5JSLyZj/PK5WIP0fEQHRnk9O16lBE/CUivi13/6kYD6cuGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH1XX1yamajVqvM6Oo9H50v/tI+ik/rKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABACvXFpZmJWq06X09dCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGnl32URUbRT5f/0b1/tyX4tN48R8er7V955bWJhYX64mP9xY37h3db8SIr6AQAAgO3Wn9PXn+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2qr64NDNRq1Xn23SyiOiw9FCd1HsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7ObwEAAP//+WefLA==") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r1, 0xfffffffffffffffd, 0xbb) 9m16.205479624s ago: executing program 4 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5515, &(0x7f0000001300)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000014c0)={0x28, 0x0, 0x2711, @local}, 0x10) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xe7c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 9m11.06653361s ago: executing program 4 (id=616): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x88e, &(0x7f0000000140)={[{@errors_remount}, {@mblk_io_submit}, {@mblk_io_submit}, {@quota}, {@barrier}, {@mblk_io_submit}, {@user_xattr}]}, 0x3, 0x445, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8) 9m9.331218119s ago: executing program 4 (id=619): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x840000000002, 0x3, 0xff) syz_mount_image$ext4(&(0x7f00000022c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x840, &(0x7f0000001780)={[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0x15}}]}, 0x0, 0x543, &(0x7f0000001200)="$eJzs3e9rJGcdAPDvzGbvcnepyanIWbAttnJX9HaTxrZRpD1B1DcFtb4/Y7IXQjbZI7upl1A0xT9AEFFB3/tG8A8QSsF/QISCvhcVReSqL/VGZmfS5sduNpdLsr3N5wPDPM/8+n6fITuZXzwTwLn1TETciohKRDwfEZPl9LQcbueV7WK59+6/uZAPSWTZ6/9KIimn7Wwrr49FxJVilRiPiG99LeK7ycG47c2tlflms7Fe1uud1bv19ubWzeXV+aXGUmNtdnbmpbmX516cm85KxYLbx2vnVES88pW//fRHv/rqK29/7nt/vv2PG9/P0/rSJ4q8I2LheFs+XLHtandf7Mj30fppBBuSvD3VyrCzAADgKPJz/I9GxKe75/+TUemezQEAAACjJHt1Iv6bRGQP7+pxVgIAAADOXhoRE5GktfJdgIlI01qteIf343E5bbbanc/eaW2sLebzIqaimt5ZbjamI+JiUU/y+kz5ju1O/YV99dmIuBoRP5m81K3XFlrNxWHf/AAAAIBz4srTe6///zOZ5uWLw84LAAAAOGFTfSsAAADAqHDJDwAAAKPP9T8AAACMtG+89lo+ZDvf8V58Y3NjpfXGzcVGe6W2urFQW2it360ttVpL3T77Vgdtr9lq3f18rG3cq3ca7U69vbl1e7W1sda5vbznE9gAAADAGbr69Dt/SiJi+4uXukOU/QD2cOFsMwM+VP467ASAk1QZdgLA0IwNOwFgaKoDl3CEgFGXDJh/8OWd4l5h/P508gEAAE7e9U/uff5/ade8wfcGgMdZn3d9AIAR5ukenF/V474BeO2kMwGG5SPF6GK/+X077+jz/P+Xu8rFPYYsO3ZyAADAiZjoDklaK8/TJyJNa7WIJ7qfBagmd5abjeny+uCPk9WLeX2mu2Yy8J1hAAAAAAAAAAAAAAAAAAAAAAAAAKCQZUlkg1W6iwIAAACPpYj070m3N/+I65PPTey9O7Dvq1+/eP1n9+Y7nfWZiAtfL77qdSEiOj8vp7+Q+SQAAAAADNNKMSqu08vxzLCTAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDUvHf/zYWd4Szj/vPLETHVK/5YjHfH41GNiMv/TmJs13pJRFROIP72WxFxrVf8JB5kWTZVZtEr/qVTjj/V3TW946cRceUE4sN59k5+/LnV6/eXxjPdce/f31g5PKr+x7/0/eNfpc/x54l99X6efPc39b7x34p4cqz38WcnflLE3xMirzx7xDZ+59tbWz1n7Npkr/i7Y9U7q3fr7c2tm8ur80uNpcba7OzMS3Mvz704N12/s9xsZElEszHdM8yPP/XbB4e1/3Kf+FN7239g/z93pNZn8b93793/WFGp9op/49ne/3+v9Ymflv/7PlOW8/nXd8rbRXm3p379h6cOa/9in/aPD2j/jSO1P77w/Dd/+Jeecw7sDQDgLLQ3t1bmm83G+iGF8fen3IqIAQufTeHVoUY/jUJ8ONIYViH7QfH3+FBrPcj2TXm41QcXskdZfSwePY0LB3+nlTjuBpOI7XxbR/yDBAAARswHJ/2HPUECAAAAAAAAAAAAAAAAAAAATtMROg97+3dxoMux8YfpCHB/zO3hNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FD/DwAA////o8rt") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r4, &(0x7f0000000f40)=""/243, 0xf3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$802154_raw(r0, 0x0, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 9m6.110155456s ago: executing program 4 (id=625): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 9m5.090770788s ago: executing program 34 (id=625): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7m35.739100071s ago: executing program 6 (id=796): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x80) r5 = epoll_create1(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0xfffff2d4, 0x16a, 0x7, 0xffff7ff2, 0x0, "4d6b5ccb000000000000000000000000000004", 0x8}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001340)={[{@shortname_lower}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@uni_xlate}, {@rodir}, {@fat=@nocase}, {@rodir}]}, 0x1, 0x227, &(0x7f0000001100)="$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") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x8}) 7m34.59060416s ago: executing program 6 (id=797): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000005c0), 0x4) r5 = socket(0x1, 0x803, 0x0) bind$unix(r5, 0x0, 0x0) 7m33.212024131s ago: executing program 6 (id=801): syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 7m32.137440107s ago: executing program 6 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000008c0)={'veth0_to_batadv\x00', &(0x7f00000005c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x5, 0xe80, 0x1000, 0x5, 0x4, 0xc, 0x8, 0x8, 0x2, 0x2, 0x5, 0x5, 0x7fff, 0xffff, 0x5, 0x10, 0x6, 0x90000, 0x4b19, 0x6, 0x1, 0x2, 0xd7, 0xb, 0x0, 0x101, 0xfffffffc, 0x73, 0x2, 0xc, 0xe0, 0x9, 0x1, 0x8, 0xfffffff7, 0x0, 0x10001, 0xd, 0x3, 0x10, 0x10, 0x3, 0x5, 0x7, 0x9, 0x8, 0xd, 0x105f, 0x4, 0x7, 0x3, 0x8, 0xe170, 0x1, 0xffff0001, 0x3, 0x10000, 0x7ff, 0x8fc7, 0x0, 0xb74f, 0x9, 0x53, 0x1a, 0xffffffff, 0x1ff, 0xff, 0x8001, 0x4, 0xd, 0x40, 0x7, 0x9, 0x53e, 0x5, 0x8, 0x0, 0x100, 0x0, 0xfffffbc6, 0x8, 0x1, 0x800, 0xfffffffc, 0xfff, 0x464, 0xffffff60, 0x7fffffff, 0x2, 0x9, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x6, 0xdcd, 0x9, 0x8fe, 0x5, 0x10000, 0x8, 0x0, 0x6, 0x5, 0x7d, 0xffffffff, 0x2, 0x4, 0x4, 0x4, 0x6, 0x9, 0xffff5ca2, 0x1, 0x543c, 0xf1, 0x5, 0x8, 0x7, 0x819d, 0x28, 0x3ff, 0x7, 0x9, 0x8, 0x8, 0x40], "a9bb72f2dfbd6486c252668a65d8030618d9e7ca3b2ec1ad99cf67919cb729745d49c45ff48fc42b5923fcff32ad039e40849843e3f1ffba1f4dd39d284e814b642fe2305b8c780e3e6193b5cab222646e55bb7755b1f4e95c068db8763632d624cb4026d74bef0db77ad25923fa5481b1ede5c1467549b253c174e17daa23658472d1903498056fa66000d3766f0c34c5a6825bee03370d03616c10fdec64a71b519771a03fcf59c5407198f0ade8bcb4c00fc16b44046f112f7bbb73b844e555ef"}}) 7m31.151311028s ago: executing program 6 (id=805): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) 7m30.14924147s ago: executing program 6 (id=806): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) 7m29.441213947s ago: executing program 7 (id=810): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f0000000780)={[{@gid}, {@errors_continue}, {@gid}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x1}}, {@fmask={'fmask', 0x3d, 0xc7a7}}, {@discard}, {@utf8}, {@discard}, {@discard}, {@umask={'umask', 0x3d, 0x6}}, {@utf8}]}, 0x7, 0x152f, &(0x7f00000037c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 7m28.749103842s ago: executing program 7 (id=812): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000b6e000/0x1000)=nil, 0x1000, 0x19) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x1840c0, 0x42) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8921, &(0x7f0000000040)={'veth1_vlan\x00', @remote}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) socket(0x5, 0x4, 0x10) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m27.720430285s ago: executing program 7 (id=814): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) sched_getattr(r0, &(0x7f0000000180)={0x38}, 0x38, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) unlink(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="338687cfd8df", @broadcast, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x10, 0x0, 0x0, @empty, @mcast2, {[@hopopts={0x29, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}]}}}}}, 0x0) 7m25.257741332s ago: executing program 7 (id=815): rename(&(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000540)='./cgroup.cpu/cpuset.cpus\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000380)=""/74, &(0x7f0000000400)=0x4a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)="20eb503c5f", 0x5}], 0x1, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x8000}}], 0x2, 0x24004800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000a8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 7m23.443846546s ago: executing program 7 (id=818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, 0x0, 0x20040) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=@getsa={0x34, 0x12, 0x1, 0x70bd28, 0x25dfdbfd, {@in=@remote, 0x4d6, 0x2, 0xff}, [@mark={0xc, 0x15, {0x35075c, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44901}, 0x20048080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_int(r0, 0x29, 0x43, 0x0, &(0x7f00000000c0)) 7m21.207920911s ago: executing program 7 (id=820): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7m14.655491309s ago: executing program 35 (id=806): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) 7m4.78061288s ago: executing program 36 (id=820): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m13.412458319s ago: executing program 5 (id=1052): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db28709050201200003100d090585"], 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00222200000096231306e53f270c00d1192a94010701000000377f0f6e460b09007a15b3"], 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000008e704090000000000000109022400010200a008090400fe01030004000921fffffd0122050009058103"], 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c0210"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m9.857620322s ago: executing program 5 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) close_range(r5, 0xffffffffffffffff, 0x200000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x4, 0x5}]}) r6 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r6, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 5m8.783234968s ago: executing program 5 (id=1062): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x18, 0x8, 0xffffffff, 0x4, 0x5}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5m3.106170561s ago: executing program 5 (id=1076): syz_create_resource$binfmt(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x1d, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000002080)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 5m1.147897182s ago: executing program 5 (id=1081): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r5, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 4m59.363970124s ago: executing program 5 (id=1084): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e224e227f0000089210a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffe0f7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4m42.769511951s ago: executing program 37 (id=1084): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e224e227f0000089210a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffe0f7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3m40.81075403s ago: executing program 8 (id=1215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x1, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf5, 0x210, &(0x7f00000001c0)="$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") write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000", 0x13) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0), 0x0, 0x111, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0xfffffffc, @local, 0x1}, 0x1c) 3m39.584866653s ago: executing program 8 (id=1217): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x400, 0x0, 0xfd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xb8, r4, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x1a}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc, 0xc5, "402cbae7e0807f7d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x36, 0xc5, "6936a7952e1e3b2ae969c244f4af09834172cd41c9810edac31e74a8a9e4dc3abdd9596200f82adb17f7a55c7c1d4ccc7fa0"}, @NL80211_ATTR_VENDOR_DATA={0x34, 0xc5, "69406d395fc2fdb06370c3a0dd68aa4db82152b0d13b0759a9785d3108d1e5977f7e701311cc42b9cff9c56cd7a2c370"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) fsopen(0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x5, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x20, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)) 3m35.486397854s ago: executing program 8 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff09"], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x50, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472d36e733d66642c72667f6e6fbd", @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r5, @ANYBLOB]) getxattr(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x18ac028, 0x0, 0x3e, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) 3m33.981438572s ago: executing program 8 (id=1229): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x80) epoll_create1(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000180)={0xfffff2d4, 0x16a, 0x7, 0xffff7ff2, 0x0, "4d6b5ccb000000000000000000000000000004", 0x8}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001340)={[{@shortname_lower}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@uni_xlate}, {@rodir}, {@fat=@nocase}, {@rodir}]}, 0x1, 0x227, &(0x7f0000001100)="$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") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x8}) 3m30.827019385s ago: executing program 8 (id=1231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getattr(r0, &(0x7f0000000180)={0x38}, 0x38, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) unlink(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r3, 0x0, 0x40008c0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="338687cfd8df", @broadcast, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x10, 0x0, 0x0, @empty, @mcast2, {[@hopopts={0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0xffff}]}]}}}}}, 0x0) 3m29.138601342s ago: executing program 8 (id=1235): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x400, 0x0, 0xfd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xb8, r4, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x1a}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc, 0xc5, "402cbae7e0807f7d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x36, 0xc5, "6936a7952e1e3b2ae969c244f4af09834172cd41c9810edac31e74a8a9e4dc3abdd9596200f82adb17f7a55c7c1d4ccc7fa0"}, @NL80211_ATTR_VENDOR_DATA={0x34, 0xc5, "69406d395fc2fdb06370c3a0dd68aa4db82152b0d13b0759a9785d3108d1e5977f7e701311cc42b9cff9c56cd7a2c370"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) fsopen(0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x5, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x20, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)) 3m11.458409235s ago: executing program 38 (id=1235): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', 0x400, 0x0, 0xfd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xb8, r4, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x1a}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc, 0xc5, "402cbae7e0807f7d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x36, 0xc5, "6936a7952e1e3b2ae969c244f4af09834172cd41c9810edac31e74a8a9e4dc3abdd9596200f82adb17f7a55c7c1d4ccc7fa0"}, @NL80211_ATTR_VENDOR_DATA={0x34, 0xc5, "69406d395fc2fdb06370c3a0dd68aa4db82152b0d13b0759a9785d3108d1e5977f7e701311cc42b9cff9c56cd7a2c370"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) fsopen(0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x5, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x20, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)) 24.106304255s ago: executing program 1 (id=1589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x1, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf5, 0x210, &(0x7f00000001c0)="$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") write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000", 0x13) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) 22.815823802s ago: executing program 1 (id=1592): rename(&(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000540)='./cgroup.cpu/cpuset.cpus\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000380)=""/74, &(0x7f0000000400)=0x4a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r7 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000240)="20eb503c5f", 0x5}], 0x1, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x8000}}], 0x2, 0x24004800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0xffffffffffffffff, 0x3, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000a8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) 18.543949772s ago: executing program 0 (id=1600): syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x1d, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$inet(0x2, 0x4000000000000001, 0x40) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r4) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r6, r7, 0x2c, 0x10000) io_uring_enter(r5, 0x15fe, 0x20, 0x0, 0x0, 0x0) 18.418543299s ago: executing program 3 (id=1602): syz_create_resource$binfmt(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x1d, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000002080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$inet(0x2, 0x4000000000000001, 0x40) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r4) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r6, r7, 0x2c, 0x10000) io_uring_enter(r5, 0x15fe, 0x20, 0x0, 0x0, 0x0) 17.386473132s ago: executing program 0 (id=1603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x1, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf5, 0x210, &(0x7f00000001c0)="$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") write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000", 0x13) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) 15.396663374s ago: executing program 0 (id=1605): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f"], 0x28}}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 14.455490913s ago: executing program 2 (id=1606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x4, 0x5}]}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 14.405135736s ago: executing program 9 (id=1607): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) sched_getattr(r0, &(0x7f0000000180)={0x38}, 0x38, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) unlink(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xfffffff7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="338687cfd8df", @broadcast, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x10, 0x0, 0x0, @empty, @mcast2, {[@hopopts={0x29, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}]}}}}}, 0x0) 13.3559694s ago: executing program 2 (id=1608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0xa}, {}, 0x2, 0x0, 0x2, 0x4, 0x0, 0x2b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 13.268015425s ago: executing program 3 (id=1609): r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="757466383d302c757466383d312c7379735f696d6d757461626c652c757466383d792c757466383d112c696f636861727365743d63703835322c696f636861727365743d69736f383835392d372c73686f72746e616d653d77696e39352c756e695f786c6174653d302c757466383d302c726f6469722c757466383d312c757466383d302c73686f72746e616d653d6d697865642c726f6469722c00"], 0x1, 0x376, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x55f5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x60040000) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/34, 0x22) getdents(r2, 0x0, 0xbb) open(0x0, 0x179cc2, 0x9fd6fb031326140d) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)={'nat\x00', 0x0, [0x81, 0x7, 0xffff, 0xb41, 0xfffffffd]}, 0x0) r3 = fsopen(&(0x7f0000000800)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x24000000) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 13.15600331s ago: executing program 9 (id=1610): prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 12.875867565s ago: executing program 1 (id=1611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x4, 0x5}]}) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 12.045314038s ago: executing program 1 (id=1612): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008402, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x4068}}, {@bh}, {@jqfmt_vfsold}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@noacl}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000001ac0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [{0x2, 0x1, "8d1c4a7247d6"}]}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={0xffffffffffffffff, &(0x7f0000000a00), 0x0}, 0x20) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000340)={[0x6]}, 0x8) 11.913774694s ago: executing program 2 (id=1613): syz_create_resource$binfmt(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) fcntl$setownex(r0, 0xf, &(0x7f0000002080)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$inet(0x2, 0x4000000000000001, 0x40) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r5) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r7, r8, 0x2c, 0x10000) io_uring_enter(r6, 0x15fe, 0x20, 0x0, 0x0, 0x0) 11.820002559s ago: executing program 3 (id=1614): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x500, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x8}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x800, 0x0, 0x0) r8 = epoll_create1(0x80000) r9 = dup3(0xffffffffffffffff, r8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, 0x0) 9.743034556s ago: executing program 1 (id=1615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x1, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf5, 0x210, &(0x7f00000001c0)="$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") write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000", 0x13) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) 9.733720887s ago: executing program 2 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x1, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf5, 0x210, &(0x7f00000001c0)="$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") write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000", 0x13) recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0), 0x0, 0x111, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0xfffffffc, @local, 0x1}, 0x1c) 8.91498027s ago: executing program 3 (id=1617): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x500, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x8}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e73"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 8.835993643s ago: executing program 0 (id=1618): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) ioctl$TIOCMGET(r3, 0x5415, 0x0) 8.835643693s ago: executing program 9 (id=1619): syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0x1d, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$inet(0x2, 0x4000000000000001, 0x40) r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r4) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r6, r7, 0x2c, 0x10000) io_uring_enter(r5, 0x15fe, 0x20, 0x0, 0x0, 0x0) 6.720213743s ago: executing program 3 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x4, 0x5}]}) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 6.719241963s ago: executing program 9 (id=1621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x50, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472d36e733d66642c72667f6e6fbd", @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r5, @ANYBLOB]) getxattr(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x18ac028, 0x0, 0x3e, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) 2.328533589s ago: executing program 1 (id=1622): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") r0 = creat(&(0x7f0000000040)='./file1\x00', 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0xffffffac) 2.327978179s ago: executing program 2 (id=1623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) close_range(r4, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x3, 0x2, 0x4, 0x5}]}) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2.186732566s ago: executing program 0 (id=1624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d"], 0x42) 1.908165511s ago: executing program 3 (id=1625): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008402, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x4068}}, {@bh}, {@jqfmt_vfsold}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@noacl}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000001ac0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [{0x2, 0x1, "8d1c4a7247d6"}]}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000bc0)={0xffffffffffffffff, &(0x7f0000000a00), 0x0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000340)={[0x6]}, 0x8) 1.907365771s ago: executing program 9 (id=1626): syz_create_resource$binfmt(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) fcntl$setownex(r0, 0xf, &(0x7f0000002080)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000000000)={0x2020}, 0xfffffc7a) socket$inet(0x2, 0x4000000000000001, 0x40) r5 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r5) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x3, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r7, r8, 0x2c, 0x10000) io_uring_enter(r6, 0x15fe, 0x20, 0x0, 0x0, 0x0) 182.33913ms ago: executing program 2 (id=1627): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x500, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x8}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x800, 0x0, 0x0) r8 = epoll_create1(0x80000) r9 = dup3(0xffffffffffffffff, r8, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r9, 0x800c6613, 0x0) 62.537207ms ago: executing program 9 (id=1628): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x180000f, 0x204031, 0xffffffffffffffff, 0x5b124000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) 0s ago: executing program 0 (id=1629): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0xc, &(0x7f0000000000)={[{@errors_remount}, {@data_err_abort}]}, 0x4, 0x532, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): und [ 615.463200][ T9801] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 615.626633][ T4345] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 615.679100][ T9780] loop5: detected capacity change from 0 to 40427 [ 615.738586][ T9780] F2FS-fs (loop5): invalid crc value [ 615.755727][ T4345] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 615.781868][ T9780] F2FS-fs (loop5): Found nat_bits in checkpoint [ 615.828936][ T4345] usb 3-1: USB disconnect, device number 13 [ 615.961593][ T9780] F2FS-fs (loop5): Start checkpoint disabled! [ 616.060831][ T9780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 616.108853][ T9779] udevd[9779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.114117][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 616.920047][ T26] audit: type=1804 audit(1776971134.002:24): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1039" name="/newroot/197/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 617.546264][ T4550] kworker/u4:16: attempt to access beyond end of device [ 617.546264][ T4550] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 619.599888][ T9855] fuse: Bad value for 'group_id' [ 620.394730][ T9857] netlink: 272 bytes leftover after parsing attributes in process `syz.9.1049'. [ 621.861455][ T8665] EXT4-fs (loop8): unmounting filesystem. [ 621.897614][ T9738] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 622.113180][ T9738] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 622.121445][ T9738] usb 6-1: config 4 has no interface number 0 [ 622.160176][ T9738] usb 6-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 622.195047][ T9738] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 622.226383][ T9738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.247973][ T9738] usb 6-1: Product: syz [ 622.269571][ T9738] usb 6-1: Manufacturer: syz [ 622.288719][ T9738] usb 6-1: SerialNumber: syz [ 622.742857][ T9738] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 622.759629][ T9738] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 622.796794][ T9738] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 622.818121][ T9738] usb 6-1: media controller created [ 622.837587][ T9738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.961653][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.977236][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.005104][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.038974][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.053176][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.220938][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.649210][ T9738] DVB: Unable to find symbol dib7000p_attach() [ 623.667621][ T9738] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 623.697166][ T9890] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 623.849543][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.910122][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.937523][ T9898] loop9: detected capacity change from 0 to 1024 [ 623.953861][ T9898] EXT4-fs: Ignoring removed bh option [ 623.970852][ T9898] ext4: Unknown parameter 'noacl' [ 624.148113][ T9900] loop8: detected capacity change from 0 to 512 [ 624.410776][ T9900] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 624.464335][ T9877] loop2: detected capacity change from 0 to 40427 [ 624.934168][ T9877] F2FS-fs (loop2): invalid crc value [ 624.992801][ T9900] EXT4-fs error (device loop8): xattr_find_entry:297: inode #15: comm syz.8.1059: corrupted xattr entries [ 625.005150][ T9738] rc_core: IR keymap rc-dib0700-rc5 not found [ 625.011950][ T9738] Registered IR keymap rc-empty [ 625.014337][ T9877] F2FS-fs (loop2): Found nat_bits in checkpoint [ 625.017051][ T9738] dvb-usb: could not initialize remote control. [ 625.087969][ T9738] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 625.134273][ T9900] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 625.262563][ T9900] EXT4-fs (loop8): 1 truncate cleaned up [ 625.811572][ T9900] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 625.969128][ T9738] usb 6-1: USB disconnect, device number 8 [ 625.982877][ T9738] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 626.015338][ T9877] F2FS-fs (loop2): Start checkpoint disabled! [ 626.068395][ T9900] EXT4-fs (loop8): shut down requested (1) [ 626.302027][ T8665] EXT4-fs (loop8): unmounting filesystem. [ 626.886573][ T9929] loop8: detected capacity change from 0 to 40427 [ 626.898436][ T9929] F2FS-fs (loop8): invalid crc value [ 627.019531][ T9929] F2FS-fs (loop8): Found nat_bits in checkpoint [ 627.073332][ T9929] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 628.783523][ T9956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1068'. [ 630.286415][ T9974] loop3: detected capacity change from 0 to 16 [ 631.443709][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.471050][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.545062][ T9974] erofs: (device loop3): mounted with root inode @ nid 36. [ 631.584464][ T4345] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 631.999614][ T4345] usb 9-1: config 4 has an invalid interface number: 44 but max is 0 [ 632.104210][ T4345] usb 9-1: config 4 has no interface number 0 [ 632.339413][ T4345] usb 9-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 632.365649][ T4345] usb 9-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 632.406700][ T4345] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.461098][ T4345] usb 9-1: Product: syz [ 632.483924][ T4345] usb 9-1: Manufacturer: syz [ 632.496220][ T4345] usb 9-1: SerialNumber: syz [ 633.080482][ T4345] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 633.108336][ T4345] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 633.148354][ T4345] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 633.166514][ T4345] usb 9-1: media controller created [ 633.194079][ T4345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 633.295651][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.326539][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.412924][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.463962][T10003] loop9: detected capacity change from 0 to 40427 [ 633.556897][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.582003][T10003] F2FS-fs (loop9): invalid crc value [ 633.697018][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.751144][T10003] F2FS-fs (loop9): Found nat_bits in checkpoint [ 633.813126][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.849898][ T4345] DVB: Unable to find symbol dib7000p_attach() [ 633.862335][ T4345] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 633.870735][T10003] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 633.925837][T10014] loop3: detected capacity change from 0 to 512 [ 633.958593][T10014] EXT4-fs (loop3): Test dummy encryption mode enabled [ 634.026330][T10014] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 635.018027][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.030048][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.160132][ T4345] rc_core: IR keymap rc-dib0700-rc5 not found [ 635.167861][ T4345] Registered IR keymap rc-empty [ 635.188425][ T4345] dvb-usb: could not initialize remote control. [ 635.209923][ T4345] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 635.383590][ T4345] usb 9-1: USB disconnect, device number 5 [ 635.399535][T10014] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1080: bad orphan inode 131083 [ 635.443854][ T4345] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 635.531139][T10014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 636.540924][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 636.832871][T10042] No such timeout policy "syz1" [ 636.987026][T10045] loop8: detected capacity change from 0 to 512 [ 637.479625][T10045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 637.488042][T10045] System zones: 1-12 [ 637.523566][T10045] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.1087: missing EA_INODE flag [ 637.666661][T10045] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1087: error while reading EA inode 12 err=-117 [ 637.760796][T10045] EXT4-fs (loop8): 1 orphan inode deleted [ 637.776527][T10045] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 637.881460][ T26] audit: type=1326 audit(1776971153.963:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6979c819 code=0x7ffc0000 [ 638.139081][ T8740] Bluetooth: hci5: command 0x0406 tx timeout [ 638.276585][ T26] audit: type=1326 audit(1776971153.981:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0d6979c819 code=0x7ffc0000 [ 638.350975][ T26] audit: type=1326 audit(1776971153.981:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6979c819 code=0x7ffc0000 [ 638.440650][ T26] audit: type=1326 audit(1776971153.981:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10054 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6979c819 code=0x7ffc0000 [ 639.782184][T10073] loop2: detected capacity change from 0 to 40427 [ 639.832142][T10073] F2FS-fs (loop2): invalid crc value [ 639.894483][T10073] F2FS-fs (loop2): Found nat_bits in checkpoint [ 639.944293][T10073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 639.953024][ T7551] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 640.184556][ T7551] usb 10-1: config 4 has an invalid interface number: 44 but max is 0 [ 640.202969][ T7551] usb 10-1: config 4 has no interface number 0 [ 640.854626][T10091] 9pnet_fd: Insufficient options for proto=fd [ 640.912964][ T7551] usb 10-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 640.926956][ T7551] usb 10-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 640.961672][ T7551] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.006949][ T7551] usb 10-1: Product: syz [ 641.128873][ T7551] usb 10-1: Manufacturer: syz [ 641.133955][ T7551] usb 10-1: SerialNumber: syz [ 641.593800][T10100] loop3: detected capacity change from 0 to 16 [ 642.219043][ T7551] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 642.231161][T10100] erofs: (device loop3): mounted with root inode @ nid 36. [ 642.252398][ T7551] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 642.307762][ T7551] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 642.354134][ T7551] usb 10-1: media controller created [ 642.435857][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.470711][ T7551] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.521996][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.555810][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.622812][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.704881][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.750994][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.130993][ T7551] DVB: Unable to find symbol dib7000p_attach() [ 643.137413][ T7551] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 643.224481][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.255588][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.398219][ T7551] rc_core: IR keymap rc-dib0700-rc5 not found [ 643.404404][ T7551] Registered IR keymap rc-empty [ 643.427556][ T7551] dvb-usb: could not initialize remote control. [ 643.451081][ T7551] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 643.462808][ T8740] Bluetooth: hci1: command 0x0406 tx timeout [ 643.547792][ T7551] usb 10-1: USB disconnect, device number 2 [ 643.570158][ T8665] EXT4-fs (loop8): unmounting filesystem. [ 643.681525][ T7551] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 643.723178][T10120] loop8: detected capacity change from 0 to 512 [ 646.918805][T10150] loop9: detected capacity change from 0 to 2048 [ 646.973380][ T5255] kworker/u4:20: attempt to access beyond end of device [ 646.973380][ T5255] loop8: rw=1, sector=2448, nr_sectors = 1552 limit=512 [ 647.094051][T10150] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 647.588371][T10166] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 648.212974][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 648.503831][T10175] loop9: detected capacity change from 0 to 512 [ 648.511937][T10175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 648.528222][T10175] EXT4-fs (loop9): Test dummy encryption mode enabled [ 648.535660][T10175] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 648.584167][T10175] EXT4-fs (loop9): 1 truncate cleaned up [ 648.709239][T10175] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 650.846835][T10189] loop2: detected capacity change from 0 to 40427 [ 650.866777][T10189] F2FS-fs (loop2): invalid crc value [ 650.940797][T10189] F2FS-fs (loop2): Found nat_bits in checkpoint [ 650.995466][T10189] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 651.094350][T10200] loop3: detected capacity change from 0 to 1024 [ 651.107461][T10200] ext4: Unknown parameter 'noacl' [ 652.000717][T10201] netlink: 272 bytes leftover after parsing attributes in process `syz.8.1109'. [ 652.290417][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 655.042912][T10236] loop2: detected capacity change from 0 to 512 [ 655.133780][T10236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 655.281539][T10236] System zones: 1-12 [ 655.405950][T10236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1112: missing EA_INODE flag [ 655.593410][T10236] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1112: error while reading EA inode 12 err=-117 [ 655.606694][T10236] EXT4-fs (loop2): 1 orphan inode deleted [ 655.612689][T10236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 656.626177][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 657.495951][ T8740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.508009][ T8740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.516994][ T8740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.624156][ T8740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.633827][ T8740] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 657.642160][ T8740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 658.603076][T10263] loop8: detected capacity change from 0 to 40427 [ 658.612093][T10263] F2FS-fs (loop8): invalid crc value [ 658.723459][T10263] F2FS-fs (loop8): Found nat_bits in checkpoint [ 658.792107][T10263] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 658.918327][T10279] loop2: detected capacity change from 0 to 128 [ 658.989496][T10280] loop3: detected capacity change from 0 to 512 [ 658.996815][T10280] EXT4-fs: inline encryption not supported [ 659.020420][T10280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 659.188704][T10280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 659.197125][T10280] System zones: 1-12 [ 659.246104][T10280] EXT4-fs (loop3): 1 truncate cleaned up [ 659.252107][T10280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 659.567977][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 659.865190][ T8740] Bluetooth: hci4: command 0x0409 tx timeout [ 659.911720][T10260] chnl_net:caif_netlink_parms(): no params data found [ 660.543705][T10295] loop3: detected capacity change from 0 to 2048 [ 660.978313][T10295] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 662.087983][ T8740] Bluetooth: hci4: command 0x041b tx timeout [ 662.251760][ T4490] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.068071][T10308] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 663.260746][ T4490] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.370682][T10260] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.390351][T10260] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.423928][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 663.443296][T10260] device bridge_slave_0 entered promiscuous mode [ 663.555024][T10332] loop2: detected capacity change from 0 to 16 [ 663.567213][T10332] erofs: (device loop2): mounted with root inode @ nid 36. [ 663.603438][T10260] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.671968][T10309] loop8: detected capacity change from 0 to 40427 [ 663.690582][T10260] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.716663][T10309] F2FS-fs (loop8): invalid crc value [ 663.760304][T10309] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 663.777638][T10260] device bridge_slave_1 entered promiscuous mode [ 664.023538][T10309] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 664.640586][ T4490] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.763103][ T8740] Bluetooth: hci4: command 0x040f tx timeout [ 664.892739][T10260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.021772][T10347] loop9: detected capacity change from 0 to 2048 [ 665.111148][ T4490] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.154727][T10347] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 665.306434][T10260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.310839][T10349] loop3: detected capacity change from 0 to 40427 [ 665.348679][T10349] F2FS-fs (loop3): invalid crc value [ 665.376651][T10349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 665.533461][T10349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 665.767725][T10358] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 667.321722][ T8740] Bluetooth: hci4: command 0x0419 tx timeout [ 667.422451][T10260] team0: Port device team_slave_0 added [ 667.787972][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 667.802244][T10260] team0: Port device team_slave_1 added [ 667.885918][T10366] x_tables: duplicate underflow at hook 1 [ 667.995834][T10260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.026546][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.139910][T10260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.287567][T10260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.313908][T10260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.038389][ T8740] Bluetooth: hci4: command 0x0411 tx timeout [ 671.168888][T10260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.559402][T10383] loop3: detected capacity change from 0 to 40427 [ 671.709440][T10383] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 671.717511][T10383] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 674.285786][T10390] binfmt_misc: register: failed to install interpreter file ./file0 [ 674.301197][T10390] x_tables: duplicate underflow at hook 1 [ 674.393595][T10383] F2FS-fs (loop3): invalid crc value [ 674.399761][T10383] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 675.398030][T10260] device hsr_slave_0 entered promiscuous mode [ 675.454055][T10260] device hsr_slave_1 entered promiscuous mode [ 677.325842][T10410] loop9: detected capacity change from 0 to 256 [ 678.137970][T10417] loop9: detected capacity change from 0 to 40427 [ 678.177508][T10417] F2FS-fs (loop9): invalid crc value [ 678.250560][T10417] F2FS-fs (loop9): Found nat_bits in checkpoint [ 678.308163][T10417] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 681.509415][ T26] audit: type=1326 audit(1776971194.838:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.2.1151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d6979c819 code=0x0 [ 682.011406][T10439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 682.961758][T10471] binfmt_misc: register: failed to install interpreter file ./file0 [ 683.009688][T10471] x_tables: duplicate underflow at hook 1 [ 683.284206][T10476] loop2: detected capacity change from 0 to 256 [ 684.251464][T10492] x_tables: duplicate underflow at hook 1 [ 684.674183][T10497] loop3: detected capacity change from 0 to 2048 [ 684.793236][T10497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 685.344920][T10510] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 685.978402][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 687.748952][T10519] loop2: detected capacity change from 0 to 512 [ 687.756468][T10519] EXT4-fs: inline encryption not supported [ 687.763461][T10519] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 687.787622][T10519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 687.795836][T10519] System zones: 1-12 [ 687.801996][T10519] EXT4-fs (loop2): 1 truncate cleaned up [ 687.807692][T10519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 688.045226][T10536] loop8: detected capacity change from 0 to 256 [ 688.067912][T10537] binfmt_misc: register: failed to install interpreter file ./file0 [ 688.127684][T10537] x_tables: duplicate underflow at hook 1 [ 688.565457][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 689.742636][T10549] loop2: detected capacity change from 0 to 512 [ 689.751692][T10549] EXT4-fs: inline encryption not supported [ 689.760129][T10549] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 689.773814][T10549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 689.784505][T10549] System zones: 1-12 [ 689.830384][T10549] EXT4-fs (loop2): 1 truncate cleaned up [ 689.840293][T10549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 690.063155][T10567] loop8: detected capacity change from 0 to 256 [ 690.085424][ T4490] device hsr_slave_0 left promiscuous mode [ 690.116251][T10567] FAT-fs (loop8): Directory bread(block 64) failed [ 690.123463][T10567] FAT-fs (loop8): Directory bread(block 65) failed [ 690.130153][T10567] FAT-fs (loop8): Directory bread(block 66) failed [ 690.136814][T10567] FAT-fs (loop8): Directory bread(block 67) failed [ 690.143518][T10567] FAT-fs (loop8): Directory bread(block 68) failed [ 690.150228][T10567] FAT-fs (loop8): Directory bread(block 69) failed [ 690.156877][T10567] FAT-fs (loop8): Directory bread(block 70) failed [ 690.163511][T10567] FAT-fs (loop8): Directory bread(block 71) failed [ 690.170156][T10567] FAT-fs (loop8): Directory bread(block 72) failed [ 690.176878][T10567] FAT-fs (loop8): Directory bread(block 73) failed [ 690.209080][ T4490] device hsr_slave_1 left promiscuous mode [ 690.373482][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.430262][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.714661][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.771265][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.787376][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 690.838544][ T4490] device bridge_slave_1 left promiscuous mode [ 690.885590][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.937282][ T4490] device bridge_slave_0 left promiscuous mode [ 690.951092][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.022746][ T4490] device veth1_macvtap left promiscuous mode [ 691.029322][ T4490] device veth0_macvtap left promiscuous mode [ 691.060591][ T4490] device veth1_vlan left promiscuous mode [ 691.066499][ T4490] device veth0_vlan left promiscuous mode [ 691.280403][T10587] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 693.030904][T10594] x_tables: duplicate underflow at hook 1 [ 694.519126][ T4490] team0 (unregistering): Port device team_slave_1 removed [ 694.644648][ T4490] team0 (unregistering): Port device team_slave_0 removed [ 694.775995][ T4490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.861705][ T4490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.500620][ T4490] bond0 (unregistering): Released all slaves [ 695.943899][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.950300][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.221916][T10616] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1179'. [ 696.372593][T10260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 696.395529][T10621] loop8: detected capacity change from 0 to 512 [ 696.403050][T10621] EXT4-fs: inline encryption not supported [ 696.417006][T10621] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 696.467811][T10621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 696.475988][T10621] System zones: 1-12 [ 696.506754][T10260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 696.539096][T10621] EXT4-fs (loop8): 1 truncate cleaned up [ 696.545678][T10621] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 696.725503][T10260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 696.761917][T10260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 697.115807][ T8665] EXT4-fs (loop8): unmounting filesystem. [ 697.200928][T10260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.351501][T10630] loop2: detected capacity change from 0 to 4096 [ 697.399147][T10630] EXT4-fs: inline encryption not supported [ 697.412020][T10260] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.433219][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 697.464000][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.473388][T10630] EXT4-fs (loop2): Test dummy encryption mode enabled [ 697.526425][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.579569][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.593896][T10630] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 697.648327][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.655731][ T9587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.682285][T10630] System zones: 0-5 [ 697.744279][T10630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 697.844002][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.857186][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.878389][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.896992][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.904311][ T9587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.966007][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 698.022149][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 698.111181][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 698.133204][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 698.175856][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 698.207763][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 698.239270][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 698.248184][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 698.256471][ T7] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 698.283080][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 698.308888][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 698.352271][T10260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 698.382665][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 698.464115][ T7] usb 10-1: Using ep0 maxpacket: 16 [ 698.476359][ T7] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 698.531429][ T7] usb 10-1: config 0 interface 0 has no altsetting 0 [ 698.555237][ T7] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 698.586829][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.611010][ T7] usb 10-1: Product: syz [ 698.630015][ T7] usb 10-1: Manufacturer: syz [ 698.643919][ T7] usb 10-1: SerialNumber: syz [ 698.667863][ T7] usb 10-1: config 0 descriptor?? [ 698.891397][T10658] overlayfs: missing 'lowerdir' [ 698.899202][ C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 698.910099][ T7] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input22 [ 699.007058][ T7] imon:send_packet: packet tx failed (-71) [ 699.029487][ T7] imon 10-1:0.0: panel buttons/knobs setup failed [ 699.276853][ T7] rc_core: IR keymap rc-imon-pad not found [ 699.282839][ T7] Registered IR keymap rc-empty [ 699.318032][ T7] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 699.328372][ T7] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 699.364085][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.382438][ T7] imon:send_packet: packet tx failed (-71) [ 699.389838][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.424967][ T7] imon 10-1:0.0: remote input dev register failed [ 699.431726][ T7] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 699.449401][T10260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.499050][ T7] imon 10-1:0.0: unable to initialize intf0, err 0 [ 699.518727][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 699.527971][ T7] imon:imon_probe: failed to initialize context! [ 699.542678][ T7] imon 10-1:0.0: unable to register, err -19 [ 699.548477][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 699.576164][ T7] usb 10-1: USB disconnect, device number 3 [ 699.644522][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 699.661497][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 699.683493][T10260] device veth0_vlan entered promiscuous mode [ 699.690899][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 699.709303][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 699.742841][T10260] device veth1_vlan entered promiscuous mode [ 699.842761][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 699.868166][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 699.896951][T10260] device veth0_macvtap entered promiscuous mode [ 699.918469][T10260] device veth1_macvtap entered promiscuous mode [ 699.959295][ T7] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 700.066998][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.134093][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.176971][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.194368][ T7] usb 10-1: Using ep0 maxpacket: 16 [ 700.205348][ T7] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.274160][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.294598][ T7] usb 10-1: config 0 interface 0 has no altsetting 0 [ 700.342218][ T7] usb 10-1: string descriptor 0 read error: -22 [ 700.352234][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.370911][ T7] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 700.383575][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.403242][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.415464][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.434836][ T7] usb 10-1: config 0 descriptor?? [ 700.443281][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.482258][ T7] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input24 [ 700.509749][T10260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.558054][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 700.578443][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 700.596943][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 700.608928][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 700.644403][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.665661][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.683431][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.704598][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.731863][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.766198][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.790612][T10260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.873020][T10260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.943906][T10260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.971198][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 701.001296][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 701.017160][ T7] rc_core: IR keymap rc-imon-pad not found [ 701.023048][ T7] Registered IR keymap rc-empty [ 701.030381][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.044032][ T7] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 701.059551][T10260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.069189][ T7] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 701.079607][T10260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.092927][T10689] loop8: detected capacity change from 0 to 256 [ 701.119432][T10689] FAT-fs (loop8): Directory bread(block 64) failed [ 701.126218][T10689] FAT-fs (loop8): Directory bread(block 65) failed [ 701.131146][T10260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.132859][T10689] FAT-fs (loop8): Directory bread(block 66) failed [ 701.147153][ T7] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 701.149093][T10689] FAT-fs (loop8): Directory bread(block 67) failed [ 701.165927][T10689] FAT-fs (loop8): Directory bread(block 68) failed [ 701.172720][T10689] FAT-fs (loop8): Directory bread(block 69) failed [ 701.179389][T10689] FAT-fs (loop8): Directory bread(block 70) failed [ 701.186125][T10689] FAT-fs (loop8): Directory bread(block 71) failed [ 701.192991][T10689] FAT-fs (loop8): Directory bread(block 72) failed [ 701.200091][T10689] FAT-fs (loop8): Directory bread(block 73) failed [ 701.216844][T10260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.247370][ T7] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input25 [ 701.295566][T10691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.378015][T10691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.409268][ T7] imon 10-1:0.0: iMON device (15c2:0041, intf0) on usb<10:4> initialized [ 701.445114][ C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 701.802948][T10694] loop2: detected capacity change from 0 to 1024 [ 701.997241][T10694] EXT4-fs: Ignoring removed mblk_io_submit option [ 702.048934][ T7] usb 10-1: USB disconnect, device number 4 [ 702.070685][T10694] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 702.070685][T10694] [ 702.300321][T10694] loop2: detected capacity change from 0 to 2048 [ 702.428311][T10694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 703.727501][T10694] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 703.806865][ T5255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.881451][T10694] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 703.923884][ T5255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.966895][T10694] EXT4-fs (loop2): This should not happen!! Data will be lost [ 703.966895][T10694] [ 703.992164][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.101162][ T5145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.174154][T10694] EXT4-fs (loop2): Total free blocks count 0 [ 704.205817][ T5145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.214288][T10719] netlink: 272 bytes leftover after parsing attributes in process `syz.9.1191'. [ 704.224417][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 704.248385][T10694] EXT4-fs (loop2): Free/Dirty block details [ 704.254446][T10694] EXT4-fs (loop2): free_blocks=4096 [ 704.285479][T10694] EXT4-fs (loop2): dirty_blocks=160 [ 704.297116][T10694] EXT4-fs (loop2): Block reservation details [ 704.319595][T10694] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 704.454714][ T7137] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 705.412559][T10740] loop2: detected capacity change from 0 to 256 [ 706.220245][T10742] loop8: detected capacity change from 0 to 4096 [ 706.346732][T10742] EXT4-fs: inline encryption not supported [ 706.452930][T10742] EXT4-fs (loop8): Test dummy encryption mode enabled [ 706.519384][T10742] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 706.594474][T10742] System zones: 0-5 [ 706.617942][T10757] loop2: detected capacity change from 0 to 256 [ 706.635970][T10757] FAT-fs (loop2): Directory bread(block 64) failed [ 706.642734][T10757] FAT-fs (loop2): Directory bread(block 65) failed [ 706.649905][T10757] FAT-fs (loop2): Directory bread(block 66) failed [ 706.656986][T10757] FAT-fs (loop2): Directory bread(block 67) failed [ 706.663695][T10757] FAT-fs (loop2): Directory bread(block 68) failed [ 706.670338][T10757] FAT-fs (loop2): Directory bread(block 69) failed [ 706.676971][T10757] FAT-fs (loop2): Directory bread(block 70) failed [ 706.683833][T10757] FAT-fs (loop2): Directory bread(block 71) failed [ 706.690483][T10757] FAT-fs (loop2): Directory bread(block 72) failed [ 706.697126][T10757] FAT-fs (loop2): Directory bread(block 73) failed [ 706.701121][T10742] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 706.974229][T10764] loop9: detected capacity change from 0 to 1024 [ 707.489062][T10764] ext4: Unknown parameter 'noacl' [ 708.540904][T10776] loop9: detected capacity change from 0 to 16 [ 708.582446][T10776] erofs: (device loop9): mounted with root inode @ nid 36. [ 709.241973][T10781] binfmt_misc: register: failed to install interpreter file ./file0 [ 709.252597][T10781] x_tables: duplicate underflow at hook 1 [ 709.354565][ T8665] EXT4-fs (loop8): unmounting filesystem. [ 709.533189][T10784] xt_TPROXY: Can be used only with -p tcp or -p udp [ 709.854936][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 710.121636][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 710.134553][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.175140][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 710.207264][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 710.242860][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.334789][ T27] usb 3-1: config 0 descriptor?? [ 712.244966][T10813] loop8: detected capacity change from 0 to 512 [ 712.252762][T10813] EXT4-fs: inline encryption not supported [ 712.270954][T10813] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 712.299070][T10813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 712.307338][T10813] System zones: 1-12 [ 712.308206][T10814] loop3: detected capacity change from 0 to 256 [ 712.320405][T10813] EXT4-fs (loop8): 1 truncate cleaned up [ 712.326323][T10813] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 712.876088][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 712.885315][ T8665] EXT4-fs (loop8): unmounting filesystem. [ 712.891881][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 712.907024][ T27] usb 3-1: USB disconnect, device number 14 [ 713.118176][T10827] loop8: detected capacity change from 0 to 256 [ 713.177423][T10827] FAT-fs (loop8): Directory bread(block 64) failed [ 713.184367][T10827] FAT-fs (loop8): Directory bread(block 65) failed [ 713.191201][T10827] FAT-fs (loop8): Directory bread(block 66) failed [ 713.198278][T10827] FAT-fs (loop8): Directory bread(block 67) failed [ 713.205050][T10827] FAT-fs (loop8): Directory bread(block 68) failed [ 713.212361][T10827] FAT-fs (loop8): Directory bread(block 69) failed [ 713.219161][T10827] FAT-fs (loop8): Directory bread(block 70) failed [ 713.225982][T10827] FAT-fs (loop8): Directory bread(block 71) failed [ 713.232754][T10827] FAT-fs (loop8): Directory bread(block 72) failed [ 713.239327][T10827] FAT-fs (loop8): Directory bread(block 73) failed [ 714.338755][T10835] loop2: detected capacity change from 0 to 1024 [ 714.447770][T10835] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 714.447770][T10835] [ 714.763064][T10843] loop8: detected capacity change from 0 to 16 [ 714.977295][T10843] erofs: (device loop8): mounted with root inode @ nid 36. [ 715.462269][T10846] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 715.597340][T10849] loop8: detected capacity change from 0 to 4096 [ 715.636595][T10849] EXT4-fs: inline encryption not supported [ 715.698406][T10849] EXT4-fs (loop8): Test dummy encryption mode enabled [ 715.722814][T10849] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 715.812084][T10849] System zones: 0-5 [ 715.839024][T10849] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 718.808670][T10878] loop0: detected capacity change from 0 to 16 [ 718.863168][T10878] erofs: (device loop0): mounted with root inode @ nid 36. [ 719.445566][ T8665] EXT4-fs (loop8): unmounting filesystem. [ 719.754298][T10888] loop3: detected capacity change from 0 to 512 [ 719.830186][T10888] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 720.316704][T10893] loop0: detected capacity change from 0 to 256 [ 721.441731][T10906] loop8: detected capacity change from 0 to 256 [ 724.246091][T10910] loop2: detected capacity change from 0 to 1024 [ 724.569805][T10910] EXT4-fs: Ignoring removed i_version option [ 724.704163][T10910] EXT4-fs: inline encryption not supported [ 724.711545][T10910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 724.793997][T10910] EXT4-fs (loop2): Test dummy encryption mode enabled [ 725.012826][T10916] No such timeout policy "syz1" [ 725.159789][T10910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 725.417415][T10920] loop9: detected capacity change from 0 to 512 [ 725.500210][T10916] loop3: detected capacity change from 0 to 512 [ 725.746655][T10920] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1233: invalid indirect mapped block 256 (level 2) [ 725.789747][T10916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 725.830214][T10916] System zones: 1-12 [ 725.835654][T10916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1232: missing EA_INODE flag [ 725.865979][T10920] EXT4-fs (loop9): 2 truncates cleaned up [ 725.912471][T10910] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 725.915337][T10920] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 726.022820][T10916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1232: error while reading EA inode 12 err=-117 [ 726.138526][T10934] loop8: detected capacity change from 0 to 4096 [ 726.167387][T10916] EXT4-fs (loop3): 1 orphan inode deleted [ 726.204355][T10916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 726.240590][T10934] EXT4-fs: inline encryption not supported [ 726.250853][T10934] EXT4-fs (loop8): Test dummy encryption mode enabled [ 727.459719][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 727.519691][T10934] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 727.546431][T10923] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 727.576856][T10934] System zones: 0-5 [ 727.616814][T10934] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 728.168781][T10946] loop2: detected capacity change from 0 to 256 [ 728.260739][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 728.312083][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 728.366300][T10946] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 729.572568][T10968] loop2: detected capacity change from 0 to 256 [ 734.896594][T10993] loop2: detected capacity change from 0 to 40427 [ 734.940958][T10993] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x3ffff [ 738.957703][T11002] loop9: detected capacity change from 0 to 1024 [ 739.001928][T11002] EXT4-fs: Ignoring removed bh option [ 739.030189][T11002] ext4: Unknown parameter 'noacl' [ 739.285050][T11008] loop0: detected capacity change from 0 to 512 [ 740.352646][T11008] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1251: bg 0: block 473: padding at end of block bitmap is not set [ 740.415794][T11008] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 740.464707][T11008] EXT4-fs (loop0): 1 orphan inode deleted [ 740.492371][ T4376] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 740.504413][T11008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 740.539166][ T4376] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1 [ 740.553995][T11006] xt_TPROXY: Can be used only with -p tcp or -p udp [ 740.569188][T11008] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.906734][ T4322] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 742.824800][T11033] loop9: detected capacity change from 0 to 256 [ 742.833299][T11033] exfat: Deprecated parameter 'utf8' [ 742.838785][T11033] exfat: Deprecated parameter 'namecase' [ 742.845359][T11033] exfat: Deprecated parameter 'namecase' [ 742.851681][T11033] exfat: Deprecated parameter 'namecase' [ 742.983824][T11033] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 743.415755][T10260] EXT4-fs (loop0): unmounting filesystem. [ 743.515507][ T4322] usb 4-1: Using ep0 maxpacket: 16 [ 743.834332][ T8665] EXT4-fs (loop8): unmounting filesystem. [ 743.989106][T11044] binfmt_misc: register: failed to install interpreter file ./file0 [ 744.021756][T11044] x_tables: duplicate underflow at hook 1 [ 745.171293][T11054] loop2: detected capacity change from 0 to 16 [ 745.239799][T11054] erofs: (device loop2): mounted with root inode @ nid 36. [ 746.743428][T11061] loop2: detected capacity change from 0 to 1024 [ 746.757454][T11061] EXT4-fs: Ignoring removed bh option [ 746.762998][T11061] ext4: Unknown parameter 'noacl' [ 747.787171][ T4322] usb 4-1: device descriptor read/all, error -71 [ 748.005177][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 748.021220][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 748.030647][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 748.045112][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 748.055334][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 748.064835][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 748.144200][ T5569] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.305944][ T5569] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.412917][ T8740] Bluetooth: hci2: command 0x0409 tx timeout [ 750.567899][T11099] loop0: detected capacity change from 0 to 512 [ 750.575984][T11099] EXT4-fs: inline encryption not supported [ 750.638698][T11099] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 750.882181][T11099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 750.891917][T11099] System zones: 1-12 [ 750.951561][T11099] EXT4-fs (loop0): 1 truncate cleaned up [ 750.957501][T11099] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 751.442043][T10260] EXT4-fs (loop0): unmounting filesystem. [ 751.478030][ T5569] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.676430][ T8740] Bluetooth: hci2: command 0x041b tx timeout [ 752.810596][ T5569] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.717091][T11140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 754.760264][T11139] loop3: detected capacity change from 0 to 1024 [ 754.769069][T11139] EXT4-fs: Ignoring removed bh option [ 754.775511][T11139] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 754.787436][T11139] EXT4-fs (loop3): barriers disabled [ 754.793045][T11139] JBD2: no valid journal superblock found [ 754.799052][T11139] EXT4-fs (loop3): error loading journal [ 754.835322][ T5056] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 754.853741][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 755.127998][ T4322] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 755.202297][T11068] chnl_net:caif_netlink_parms(): no params data found [ 755.334333][ T4322] usb 10-1: Using ep0 maxpacket: 16 [ 755.342918][ T4322] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.406856][ T4322] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 755.488640][ T4322] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 755.584261][ T4322] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.638666][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.669219][ T4322] usb 10-1: config 0 descriptor?? [ 755.709507][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.718707][T11068] device bridge_slave_0 entered promiscuous mode [ 755.822276][T11156] loop0: detected capacity change from 0 to 512 [ 755.913485][T11156] EXT4-fs: inline encryption not supported [ 756.002439][T11156] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 756.060082][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.081679][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.114111][T11068] device bridge_slave_1 entered promiscuous mode [ 756.133260][T11156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 756.166833][T11156] System zones: 1-12 [ 756.269261][T11156] EXT4-fs (loop0): 1 truncate cleaned up [ 756.290276][T11156] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 756.340261][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.501421][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.027455][T11068] team0: Port device team_slave_0 added [ 757.065542][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 757.205639][T11068] team0: Port device team_slave_1 added [ 757.386489][T11068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.424078][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.514404][T11068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.644768][T11068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.695615][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.789300][T11068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.807290][ T4322] usbhid 10-1:0.0: can't add hid device: -71 [ 757.826908][ T4322] usbhid: probe of 10-1:0.0 failed with error -71 [ 757.857771][ T4322] usb 10-1: USB disconnect, device number 5 [ 758.410185][T11068] device hsr_slave_0 entered promiscuous mode [ 758.608520][T11068] device hsr_slave_1 entered promiscuous mode [ 758.774885][T11068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.821521][T11068] Cannot create hsr debugfs directory [ 760.102781][T10260] EXT4-fs (loop0): unmounting filesystem. [ 760.175055][ T9738] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 760.377886][T11202] loop9: detected capacity change from 0 to 512 [ 760.387625][T11202] EXT4-fs: inline encryption not supported [ 760.400610][T11202] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 761.034279][T11202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 761.042890][T11202] System zones: 1-12 [ 761.062067][ T9738] usb 3-1: Using ep0 maxpacket: 8 [ 761.069017][ T9738] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 761.083715][T11202] EXT4-fs (loop9): 1 truncate cleaned up [ 761.089568][T11202] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 761.115469][ T9738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.163510][ T9738] usb 3-1: config 0 has no interface number 0 [ 761.240451][ T9738] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 761.280543][ T9738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.310032][ T9738] usb 3-1: Product: syz [ 761.324418][ T9738] usb 3-1: Manufacturer: syz [ 761.347837][ T9738] usb 3-1: SerialNumber: syz [ 761.369935][ T9738] usb 3-1: config 0 descriptor?? [ 761.414788][ T5569] device hsr_slave_0 left promiscuous mode [ 761.437600][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 761.445883][ T5569] device hsr_slave_1 left promiscuous mode [ 761.533476][ T5569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.561819][ T5569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.599537][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 761.605696][ T9738] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 761.606070][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.624324][ T5569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.633242][ T5569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.636484][ T9738] usb 3-1: No valid video chain found. [ 761.650808][ T5569] device bridge_slave_1 left promiscuous mode [ 761.657133][ T5569] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.841421][ T7] usb 3-1: USB disconnect, device number 15 [ 761.876139][ T5569] device bridge_slave_0 left promiscuous mode [ 761.882498][ T5569] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.065197][T11218] loop9: detected capacity change from 0 to 16 [ 762.341794][T11218] erofs: (device loop9): mounted with root inode @ nid 36. [ 762.702537][ T5569] device veth1_macvtap left promiscuous mode [ 762.724555][ T5569] device veth0_macvtap left promiscuous mode [ 762.735444][ T5569] device veth1_vlan left promiscuous mode [ 762.757008][ T5569] device veth0_vlan left promiscuous mode [ 762.758223][T11207] loop0: detected capacity change from 0 to 40427 [ 762.813135][T11207] F2FS-fs (loop0): invalid crc value [ 762.841986][T11207] F2FS-fs (loop0): Found nat_bits in checkpoint [ 762.912262][T11207] F2FS-fs (loop0): Start checkpoint disabled! [ 762.949540][T11207] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 763.214311][ T9] kworker/u4:0: attempt to access beyond end of device [ 763.214311][ T9] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 764.320095][T11242] loop0: detected capacity change from 0 to 1024 [ 764.335522][T11242] EXT4-fs: Ignoring removed bh option [ 764.341090][T11242] ext4: Unknown parameter 'noacl' [ 765.930945][ T5569] team0 (unregistering): Port device team_slave_1 removed [ 765.992508][ T5569] team0 (unregistering): Port device team_slave_0 removed [ 766.053443][ T5569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.110496][ T5569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.564796][ T5569] bond0 (unregistering): Released all slaves [ 768.297981][T11268] binfmt_misc: register: failed to install interpreter file ./file0 [ 768.309164][T11268] x_tables: duplicate underflow at hook 1 [ 768.382739][T11272] loop2: detected capacity change from 0 to 1024 [ 768.410271][T11272] EXT4-fs: Ignoring removed bh option [ 768.416265][T11272] ext4: Unknown parameter 'noacl' [ 768.557912][T11275] binder: 11274:11275 ioctl c0306201 200000000480 returned -14 [ 768.827267][T11280] loop0: detected capacity change from 0 to 512 [ 768.850986][T11283] loop2: detected capacity change from 0 to 1024 [ 768.861508][T11280] EXT4-fs: Ignoring removed oldalloc option [ 768.897102][T11283] EXT4-fs: Ignoring removed bh option [ 768.902706][T11283] ext4: Unknown parameter 'noacl' [ 768.908058][T11280] EXT4-fs (loop0): Test dummy encryption mode enabled [ 769.027131][T11280] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 769.072880][ T4418] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 771.082601][T11312] loop9: detected capacity change from 0 to 1024 [ 771.153103][T11312] EXT4-fs: Ignoring removed bh option [ 771.158612][T11312] ext4: Unknown parameter 'noacl' [ 771.641173][T11320] loop2: detected capacity change from 0 to 16 [ 772.237311][T11320] erofs: (device loop2): mounted with root inode @ nid 36. [ 772.513288][ T9779] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 772.595662][T11325] loop3: detected capacity change from 0 to 256 [ 772.618125][T11325] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 772.685424][ T26] audit: type=1800 audit(1776971280.127:30): pid=11325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1307" name="file1" dev="loop3" ino=1048649 res=0 errno=0 [ 773.759817][T10260] EXT4-fs (loop0): unmounting filesystem. [ 774.181720][T11333] binfmt_misc: register: failed to install interpreter file ./file0 [ 774.250343][T11333] x_tables: duplicate underflow at hook 1 [ 774.708504][ T6078] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 774.985951][ T6078] usb 3-1: Using ep0 maxpacket: 16 [ 775.002348][ T6078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.048609][ T6078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 775.075674][ T6078] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 775.109734][ T6078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.141477][ T6078] usb 3-1: config 0 descriptor?? [ 775.304440][T11357] loop3: detected capacity change from 0 to 1024 [ 775.314237][T11357] EXT4-fs: Ignoring removed bh option [ 775.321289][T11068] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 775.460377][T11357] ext4: Unknown parameter 'noacl' [ 775.755257][ C1] hrtimer: interrupt took 35662 ns [ 775.991624][T11068] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 776.000192][ T4418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 776.072412][T11068] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 776.107620][T11068] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 776.618914][T11068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.681151][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 776.715902][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.167921][T11068] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.297954][ T6078] usbhid 3-1:0.0: can't add hid device: -71 [ 777.315639][ T6078] usbhid: probe of 3-1:0.0 failed with error -71 [ 777.331994][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 777.337590][ T6078] usb 3-1: USB disconnect, device number 16 [ 777.378178][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 777.395082][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.402363][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.433528][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 777.443230][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 777.465854][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.473458][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.567513][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 777.606545][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 777.622545][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 777.646959][ T9738] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 777.647427][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 777.673240][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 777.683507][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 777.694059][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 777.694362][T11382] loop9: detected capacity change from 0 to 512 [ 777.712034][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 777.729029][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 777.739796][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.754934][T11382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 777.765623][T11382] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 777.780184][T11068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 777.791016][T11382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 777.827017][T11382] EXT4-fs (loop9): couldn't mount RDWR because of unsupported optional features (80) [ 777.851551][ T9738] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 777.868322][ T9738] usb 4-1: config 4 has no interface number 0 [ 777.881987][T11382] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features [ 777.890825][T11382] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 777.893929][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 777.941016][ T9738] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 777.957551][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 778.031110][ T9738] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 778.151221][ T9738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.200841][ T9738] usb 4-1: Product: syz [ 778.219194][ T9738] usb 4-1: Manufacturer: syz [ 778.231240][T11388] binfmt_misc: register: failed to install interpreter file ./file0 [ 778.244470][T11388] x_tables: duplicate underflow at hook 1 [ 778.297868][T11393] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.1319: dx entry: limit 65535 != root limit 120 [ 778.310750][T11393] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1319: Corrupt directory, running e2fsck is recommended [ 778.820215][ T9738] usb 4-1: SerialNumber: syz [ 778.837206][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 779.271807][T11401] loop0: detected capacity change from 0 to 1024 [ 779.430663][T11401] EXT4-fs: Ignoring removed bh option [ 779.589957][T11401] ext4: Unknown parameter 'noacl' [ 779.821837][ T9738] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 779.831954][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.841714][ T9738] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 779.850877][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.863972][ T9738] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 779.871439][ T9779] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 779.882897][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.904220][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.926506][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 779.941775][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 779.944791][ T9738] usb 4-1: media controller created [ 779.962645][ T9738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.974994][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.007264][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.076175][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.242066][T11375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.258243][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 780.266430][T11375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.285937][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 780.465801][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 780.769116][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 781.062332][T11068] device veth0_vlan entered promiscuous mode [ 781.156128][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 781.164451][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.177570][T11068] device veth1_vlan entered promiscuous mode [ 781.297370][ T9738] DVB: Unable to find symbol dib7000p_attach() [ 781.304968][ T9738] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 781.394636][T11420] loop9: detected capacity change from 0 to 512 [ 781.416489][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 781.448959][T11420] EXT4-fs: Ignoring removed mblk_io_submit option [ 781.459418][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 781.480755][T11420] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 781.513821][T11068] device veth0_macvtap entered promiscuous mode [ 781.544739][T11068] device veth1_macvtap entered promiscuous mode [ 781.569349][T11420] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 781.637452][T11420] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (26208!=33349) [ 781.699603][T11420] EXT4-fs (loop9): group descriptors corrupted! [ 781.701075][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.718232][ T9738] rc_core: IR keymap rc-dib0700-rc5 not found [ 781.724370][ T9738] Registered IR keymap rc-empty [ 781.753239][ T9738] dvb-usb: could not initialize remote control. [ 781.834808][T11428] loop0: detected capacity change from 0 to 256 [ 781.846064][T11428] exfat: Deprecated parameter 'utf8' [ 781.851791][T11428] exfat: Deprecated parameter 'namecase' [ 781.858354][T11428] exfat: Deprecated parameter 'namecase' [ 781.864316][T11428] exfat: Deprecated parameter 'namecase' [ 781.896688][T11428] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 782.120529][ T9738] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 782.347590][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.357838][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.369080][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.379697][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.390336][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.406778][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.420455][ T9738] usb 4-1: USB disconnect, device number 11 [ 782.448309][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.539952][T11068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.549122][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 782.577509][ T9738] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 782.680862][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 782.851822][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 782.894520][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 783.080516][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.091509][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.102290][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.113698][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.123613][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.134307][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.172228][T11068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.243057][T11068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.297627][T11443] loop0: detected capacity change from 0 to 16 [ 783.315530][T11443] erofs: (device loop0): mounted with root inode @ nid 36. [ 783.842975][T11068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.901536][T11436] loop9: detected capacity change from 0 to 8192 [ 783.909506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 783.952188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 784.031434][T11068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.189594][T11068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.275325][T11450] No such timeout policy "syz1" [ 784.306105][T11068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.556496][T11068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.999316][T11450] loop0: detected capacity change from 0 to 512 [ 785.090997][T11450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 785.203297][T11450] System zones: 1-12 [ 785.254891][T11450] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1335: missing EA_INODE flag [ 785.393741][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.410515][T11450] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1335: error while reading EA inode 12 err=-117 [ 785.445649][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.495388][T11450] EXT4-fs (loop0): 1 orphan inode deleted [ 785.501480][T11450] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 785.521562][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 785.895667][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.920005][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.986977][T10260] EXT4-fs (loop0): unmounting filesystem. [ 786.015389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 787.260058][ T7] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 787.470114][ T7] usb 10-1: config 4 has an invalid interface number: 44 but max is 0 [ 787.491687][ T7] usb 10-1: config 4 has no interface number 0 [ 787.497949][ T7] usb 10-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 787.545813][ T7] usb 10-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 787.570442][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.571454][T11477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.594837][ T7] usb 10-1: Product: syz [ 787.643238][ T7] usb 10-1: Manufacturer: syz [ 787.665951][ T7] usb 10-1: SerialNumber: syz [ 787.800886][T11477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 787.996801][T11477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.139229][ T7] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 788.174876][ T7] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 788.229118][ T7] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 788.236160][ T7] usb 10-1: media controller created [ 788.243041][T11464] loop1: detected capacity change from 0 to 40427 [ 788.287464][T11464] F2FS-fs (loop1): invalid crc value [ 788.355268][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.366062][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 788.397877][T11464] F2FS-fs (loop1): Found nat_bits in checkpoint [ 788.411860][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.481172][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.518256][T11491] loop2: detected capacity change from 0 to 1024 [ 788.528889][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.573120][T11491] EXT4-fs: Ignoring removed bh option [ 788.582035][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.627810][T11464] F2FS-fs (loop1): Start checkpoint disabled! [ 788.635439][T11491] ext4: Unknown parameter 'noacl' [ 788.681014][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.867693][ T7] DVB: Unable to find symbol dib7000p_attach() [ 788.874021][ T7] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 788.882713][T11464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 788.962616][T11462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.004495][T11462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.754232][ T7] rc_core: IR keymap rc-dib0700-rc5 not found [ 789.760407][ T7] Registered IR keymap rc-empty [ 789.775807][ T7] dvb-usb: could not initialize remote control. [ 789.782118][ T7] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 789.873071][ T7] usb 10-1: USB disconnect, device number 6 [ 789.896931][ T4402] kworker/u4:9: attempt to access beyond end of device [ 789.896931][ T4402] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 789.919251][ T7] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 790.836594][T11496] loop0: detected capacity change from 0 to 256 [ 790.925334][T11496] exfat: Deprecated parameter 'utf8' [ 791.005478][T11496] exfat: Deprecated parameter 'namecase' [ 791.169916][T11496] exfat: Deprecated parameter 'namecase' [ 791.227935][T11496] exfat: Deprecated parameter 'namecase' [ 792.030321][T11496] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 792.169377][T11528] loop9: detected capacity change from 0 to 256 [ 794.903966][ T4345] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 795.289428][ T4345] usb 10-1: Using ep0 maxpacket: 16 [ 795.301844][ T4345] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.359299][ T4345] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 795.427046][ T4345] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 795.447402][ T4345] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.488921][ T4345] usb 10-1: config 0 descriptor?? [ 796.262021][ T9670] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 796.491200][ T9670] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 796.508617][ T9670] usb 2-1: config 4 has no interface number 0 [ 796.541687][ T9670] usb 2-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 796.556177][T11558] loop3: detected capacity change from 0 to 40427 [ 796.584536][ T9670] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 796.615068][T11558] F2FS-fs (loop3): invalid crc value [ 796.628492][T11558] F2FS-fs (loop3): Found nat_bits in checkpoint [ 796.667608][ T9670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.714270][ T9670] usb 2-1: Product: syz [ 796.724241][ T9670] usb 2-1: Manufacturer: syz [ 796.743600][ T9670] usb 2-1: SerialNumber: syz [ 796.784435][T11558] F2FS-fs (loop3): Start checkpoint disabled! [ 796.860557][T11558] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 797.212773][ T4345] usbhid 10-1:0.0: can't add hid device: -71 [ 797.220070][ T4345] usbhid: probe of 10-1:0.0 failed with error -71 [ 797.361007][ T4345] usb 10-1: USB disconnect, device number 7 [ 797.463969][ T9670] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 797.519419][ T9670] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 797.599792][ T9670] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 797.704901][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.775241][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.790218][ T9670] usb 2-1: media controller created [ 797.791522][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.799214][ T9670] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 797.847631][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.887336][T11584] No such timeout policy "syz1" [ 797.896049][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.935370][T11584] loop9: detected capacity change from 0 to 512 [ 797.953798][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.029065][ T4489] kworker/u4:12: attempt to access beyond end of device [ 798.029065][ T4489] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 798.048275][T11584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 798.126529][T11584] System zones: 1-12 [ 798.156568][T11584] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.1356: missing EA_INODE flag [ 798.190662][ T9670] DVB: Unable to find symbol dib7000p_attach() [ 798.201989][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.202694][ T9670] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 798.223462][T11590] loop2: detected capacity change from 0 to 1024 [ 798.230561][T11584] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1356: error while reading EA inode 12 err=-117 [ 798.255739][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.279894][T11584] EXT4-fs (loop9): 1 orphan inode deleted [ 798.286426][T11584] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 798.297989][T11590] EXT4-fs: Ignoring removed bh option [ 798.340637][T11590] ext4: Unknown parameter 'noacl' [ 798.912001][ T9670] rc_core: IR keymap rc-dib0700-rc5 not found [ 798.918163][ T9670] Registered IR keymap rc-empty [ 798.923557][ T9670] dvb-usb: could not initialize remote control. [ 798.929920][ T9670] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 799.369983][ T9670] usb 2-1: USB disconnect, device number 5 [ 799.783802][ T9670] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 801.292184][T11622] loop1: detected capacity change from 0 to 256 [ 801.771016][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 802.501976][T11629] loop0: detected capacity change from 0 to 256 [ 802.512561][T11629] exfat: Deprecated parameter 'utf8' [ 802.518129][T11629] exfat: Deprecated parameter 'namecase' [ 802.524316][T11629] exfat: Deprecated parameter 'namecase' [ 802.530440][T11629] exfat: Deprecated parameter 'namecase' [ 802.762940][T11629] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 803.837401][T11644] loop3: detected capacity change from 0 to 512 [ 804.046873][T11644] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 804.096004][T11644] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 804.130573][T11651] loop9: detected capacity change from 0 to 1024 [ 804.234161][T11651] EXT4-fs: Ignoring removed bh option [ 804.240365][T11651] ext4: Unknown parameter 'noacl' [ 805.038813][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 805.310944][T11641] loop0: detected capacity change from 0 to 40427 [ 805.321306][T11641] F2FS-fs (loop0): invalid crc value [ 805.333551][T11641] F2FS-fs (loop0): Found nat_bits in checkpoint [ 805.400846][T11641] F2FS-fs (loop0): Start checkpoint disabled! [ 805.429817][T11641] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 805.505567][ T7] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 805.537494][ T7551] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 805.710249][ T7] usb 10-1: config 4 has an invalid interface number: 44 but max is 0 [ 805.733952][ T7] usb 10-1: config 4 has no interface number 0 [ 805.772654][ T7551] usb 4-1: Using ep0 maxpacket: 32 [ 805.780765][ T7551] usb 4-1: unable to get BOS descriptor or descriptor too short [ 805.793390][ T7] usb 10-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 806.435682][ T26] audit: type=1804 audit(1776971311.233:31): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1367" name="/newroot/40/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 806.830979][ T7551] usb 4-1: config 2 has an invalid interface number: 142 but max is 0 [ 806.839364][ T7551] usb 4-1: config 2 has no interface number 0 [ 806.847491][ T7] usb 10-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 806.859592][ T4466] kworker/u4:11: attempt to access beyond end of device [ 806.859592][ T4466] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 806.862412][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.882131][ T7551] usb 4-1: config 2 interface 142 altsetting 5 has an invalid endpoint descriptor of length 2, skipping [ 806.893438][ T7551] usb 4-1: config 2 interface 142 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 806.907189][ T7] usb 10-1: Product: syz [ 806.911474][ T7] usb 10-1: Manufacturer: syz [ 806.916825][ T7] usb 10-1: SerialNumber: syz [ 806.921658][ T7551] usb 4-1: config 2 interface 142 has no altsetting 0 [ 806.942527][ T7551] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01b4, bcdDevice= 3.dc [ 806.946325][T11679] No such timeout policy "syz1" [ 806.962141][ T7551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.971108][ T7551] usb 4-1: Product: syz [ 806.975345][ T7551] usb 4-1: Manufacturer: syz [ 806.990664][ T7551] usb 4-1: SerialNumber: syz [ 807.028390][T11679] loop2: detected capacity change from 0 to 512 [ 807.112534][T11679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 807.132888][T11679] System zones: 1-12 [ 807.154403][T11679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1375: missing EA_INODE flag [ 807.183982][T11679] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1375: error while reading EA inode 12 err=-117 [ 807.209020][T11679] EXT4-fs (loop2): 1 orphan inode deleted [ 807.214924][T11679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 807.248269][ T7551] ftdi_sio 4-1:2.142: FTDI USB Serial Device converter detected [ 807.269878][ T7551] ftdi_sio ttyUSB0: unknown device type: 0x3dc [ 807.338671][ T7551] usb 4-1: USB disconnect, device number 12 [ 807.374999][ T7] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 807.422410][ T7551] ftdi_sio 4-1:2.142: device disconnected [ 807.431723][ T7] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 807.502371][ T7] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 807.533278][ T7] usb 10-1: media controller created [ 807.562383][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 807.590397][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.621173][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.664478][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.673228][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.707592][T11692] No such timeout policy "syz1" [ 807.733303][T11693] loop0: detected capacity change from 0 to 512 [ 807.761546][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.787373][T11693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 807.790874][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.839116][ T7] DVB: Unable to find symbol dib7000p_attach() [ 807.845703][ T7] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 807.863887][T11693] System zones: 1-12 [ 807.943531][T11693] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1374: missing EA_INODE flag [ 808.006467][T11693] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1374: error while reading EA inode 12 err=-117 [ 808.032793][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.059652][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.067648][T11693] EXT4-fs (loop0): 1 orphan inode deleted [ 808.074944][T11693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 809.080483][T11706] loop3: detected capacity change from 0 to 256 [ 809.087803][T11706] exfat: Deprecated parameter 'utf8' [ 809.093225][T11706] exfat: Deprecated parameter 'namecase' [ 809.099114][T11706] exfat: Deprecated parameter 'namecase' [ 809.104892][T11706] exfat: Deprecated parameter 'namecase' [ 809.348036][T11706] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 810.021104][ T7] rc_core: IR keymap rc-dib0700-rc5 not found [ 810.577531][ T7] Registered IR keymap rc-empty [ 810.583150][ T7] dvb-usb: could not initialize remote control. [ 810.620915][ T7] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 810.653142][ T7] usb 10-1: USB disconnect, device number 8 [ 810.739160][ T7] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 811.263134][T11725] x_tables: duplicate underflow at hook 1 [ 811.367111][T10260] EXT4-fs (loop0): unmounting filesystem. [ 813.710566][ T48] Bluetooth: hci2: command 0x0411 tx timeout [ 814.100513][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 814.593755][T11756] loop2: detected capacity change from 0 to 16 [ 814.622634][T11756] erofs: (device loop2): mounted with root inode @ nid 36. [ 815.747923][T10252] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 816.027882][T10252] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 816.131346][T10252] usb 3-1: config 4 has no interface number 0 [ 816.288491][T10252] usb 3-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 816.472401][T10252] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 816.512068][T10252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.520231][T10252] usb 3-1: Product: syz [ 816.544082][T10252] usb 3-1: Manufacturer: syz [ 816.554985][T10252] usb 3-1: SerialNumber: syz [ 816.871577][T11775] loop9: detected capacity change from 0 to 512 [ 816.920991][T11778] loop1: detected capacity change from 0 to 256 [ 816.968224][T11778] FAT-fs (loop1): Directory bread(block 64) failed [ 816.975305][T11778] FAT-fs (loop1): Directory bread(block 65) failed [ 816.982538][T11778] FAT-fs (loop1): Directory bread(block 66) failed [ 816.989164][T11778] FAT-fs (loop1): Directory bread(block 67) failed [ 816.996197][T11778] FAT-fs (loop1): Directory bread(block 68) failed [ 817.002798][T11778] FAT-fs (loop1): Directory bread(block 69) failed [ 817.009666][T11778] FAT-fs (loop1): Directory bread(block 70) failed [ 817.017536][T11778] FAT-fs (loop1): Directory bread(block 71) failed [ 817.024411][T11778] FAT-fs (loop1): Directory bread(block 72) failed [ 817.031411][T11778] FAT-fs (loop1): Directory bread(block 73) failed [ 817.115388][T11775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 817.135474][T11775] System zones: 1-12 [ 817.264077][T10252] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 817.310450][T10252] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 817.311936][T11775] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.1391: missing EA_INODE flag [ 817.327679][T10252] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 817.349076][T10252] usb 3-1: media controller created [ 817.357098][T11775] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1391: error while reading EA inode 12 err=-117 [ 817.606823][T11775] EXT4-fs (loop9): 1 orphan inode deleted [ 817.626395][T10252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.712644][T11775] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 818.139457][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.179314][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.276347][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.319740][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.410132][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.436209][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.523601][T10252] DVB: Unable to find symbol dib7000p_attach() [ 818.538146][T10252] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 818.754514][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.763242][T11801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 818.771656][T11801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 818.774421][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.819813][T11801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 819.055389][T10252] rc_core: IR keymap rc-dib0700-rc5 not found [ 819.061563][T10252] Registered IR keymap rc-empty [ 819.098237][T10252] dvb-usb: could not initialize remote control. [ 819.119757][T10252] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 819.160687][T10252] usb 3-1: USB disconnect, device number 17 [ 819.225294][T10252] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 819.454438][T11815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 819.463602][T11815] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 819.475357][T11815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 819.636363][T11818] No such timeout policy "syz1" [ 819.672029][T11818] loop2: detected capacity change from 0 to 512 [ 819.718865][T11818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 819.759107][T11818] System zones: 1-12 [ 819.772686][T11818] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1397: missing EA_INODE flag [ 819.888329][T11818] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1397: error while reading EA inode 12 err=-117 [ 820.015698][T11818] EXT4-fs (loop2): 1 orphan inode deleted [ 820.061802][T11818] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 821.156494][T11836] loop1: detected capacity change from 0 to 16 [ 821.167592][T11836] erofs: (device loop1): mounted with root inode @ nid 36. [ 821.455366][T11839] loop0: detected capacity change from 0 to 2048 [ 821.601999][T11839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 823.621457][T11852] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 824.089781][T10260] EXT4-fs (loop0): unmounting filesystem. [ 824.139861][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 825.842742][T11872] loop0: detected capacity change from 0 to 256 [ 826.105182][T11872] FAT-fs (loop0): Directory bread(block 64) failed [ 826.299660][T11872] FAT-fs (loop0): Directory bread(block 65) failed [ 826.310566][T11872] FAT-fs (loop0): Directory bread(block 66) failed [ 826.336147][T11872] FAT-fs (loop0): Directory bread(block 67) failed [ 826.417676][T11872] FAT-fs (loop0): Directory bread(block 68) failed [ 826.636907][T11872] FAT-fs (loop0): Directory bread(block 69) failed [ 826.847801][T11872] FAT-fs (loop0): Directory bread(block 70) failed [ 826.967923][T11872] FAT-fs (loop0): Directory bread(block 71) failed [ 826.975218][T11872] FAT-fs (loop0): Directory bread(block 72) failed [ 826.981883][T11872] FAT-fs (loop0): Directory bread(block 73) failed [ 827.133105][T11862] loop9: detected capacity change from 0 to 40427 [ 827.144570][T11862] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 827.152028][T11862] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 827.196014][T11872] syz.0.1407: attempt to access beyond end of device [ 827.196014][T11872] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 827.234645][T11862] F2FS-fs (loop9): Unrecognized mount option "whint_mode=user-based" or missing value [ 827.267747][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 827.274380][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 827.288994][T11872] syz.0.1407: attempt to access beyond end of device [ 827.288994][T11872] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 827.308228][ T26] audit: type=1800 audit(1776971331.278:32): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1407" name="file1" dev="loop0" ino=1048655 res=0 errno=0 [ 827.339641][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 828.378246][T11898] loop2: detected capacity change from 0 to 16 [ 828.403650][T11898] erofs: (device loop2): mounted with root inode @ nid 36. [ 829.062780][T11904] loop1: detected capacity change from 0 to 16 [ 829.070599][T11904] erofs: (device loop1): mounted with root inode @ nid 36. [ 829.314940][T11910] loop0: detected capacity change from 0 to 2048 [ 829.413897][T11910] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 829.474082][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 831.484240][T11923] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 831.957435][T10260] EXT4-fs (loop0): unmounting filesystem. [ 832.463211][T11940] No such timeout policy "syz1" [ 832.556507][T11940] loop2: detected capacity change from 0 to 512 [ 832.945962][T11940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 833.202045][T11940] System zones: 1-12 [ 833.226285][T11940] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1422: missing EA_INODE flag [ 833.322714][T11940] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1422: error while reading EA inode 12 err=-117 [ 833.361694][T11940] EXT4-fs (loop2): 1 orphan inode deleted [ 833.394607][T11940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 834.460867][T11951] loop1: detected capacity change from 0 to 4096 [ 834.476268][T11951] EXT4-fs: inline encryption not supported [ 834.556421][T11951] EXT4-fs (loop1): Test dummy encryption mode enabled [ 834.590346][T11951] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 834.635767][T11951] System zones: 0-5 [ 834.732231][T11961] loop0: detected capacity change from 0 to 256 [ 834.830682][T11951] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 834.912150][T11961] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 834.935751][ T26] audit: type=1800 audit(1776971338.399:33): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1425" name="file1" dev="loop0" ino=1048656 res=0 errno=0 [ 835.993834][T11974] loop3: detected capacity change from 0 to 16 [ 836.563277][T11974] erofs: (device loop3): mounted with root inode @ nid 36. [ 836.909815][T11964] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 837.138445][T11951] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 837.205351][T11951] overlayfs: upper fs does not support tmpfile. [ 837.310310][T11951] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 837.312553][T11987] loop3: detected capacity change from 0 to 2048 [ 837.776940][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 838.187092][T11987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 838.575208][T12004] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 838.816894][T11068] EXT4-fs (loop1): unmounting filesystem. [ 839.907371][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 840.276023][T12019] loop2: detected capacity change from 0 to 1024 [ 841.062431][T12019] EXT4-fs: Ignoring removed nobh option [ 841.068129][T12019] EXT4-fs: Ignoring removed i_version option [ 841.531041][T12019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 841.648447][T12019] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 841.760954][T12019] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 841.773453][T12019] EXT4-fs (loop2): This should not happen!! Data will be lost [ 841.773453][T12019] [ 841.783293][T12019] EXT4-fs (loop2): Total free blocks count 0 [ 841.791060][T12019] EXT4-fs (loop2): Free/Dirty block details [ 841.797958][T12019] EXT4-fs (loop2): free_blocks=20480 [ 841.803523][T12019] EXT4-fs (loop2): dirty_blocks=80 [ 841.809525][T12019] EXT4-fs (loop2): Block reservation details [ 841.815730][T12019] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 842.061657][ T4376] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 842.522558][T12058] loop2: detected capacity change from 0 to 2048 [ 842.577381][T12058] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 843.058918][T12068] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 843.642703][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 844.044251][T12082] x_tables: duplicate underflow at hook 1 [ 844.752058][T12086] loop2: detected capacity change from 0 to 512 [ 844.773088][T12086] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1449: missing EA_INODE flag [ 844.910568][T12086] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1449: error while reading EA inode 12 err=-117 [ 845.002579][T12086] EXT4-fs (loop2): 1 orphan inode deleted [ 845.008560][T12086] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 845.354643][T12096] loop0: detected capacity change from 0 to 2048 [ 845.479679][T12096] loop0: p3 < > p4 < > [ 845.484495][T12096] loop0: partition table partially beyond EOD, truncated [ 845.503623][T12096] loop0: p3 start 4284289 is beyond EOD, truncated [ 846.349457][T12098] binfmt_misc: register: failed to install interpreter file ./file2 [ 846.644177][T12112] loop0: detected capacity change from 0 to 1024 [ 846.690483][T12112] EXT4-fs: Ignoring removed bh option [ 846.695978][T12112] ext4: Unknown parameter 'noacl' [ 846.868723][T12119] No such timeout policy "syz1" [ 846.910498][T12119] loop1: detected capacity change from 0 to 512 [ 846.969723][T12119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 846.987071][T12119] System zones: 1-12 [ 846.995237][T12119] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1457: missing EA_INODE flag [ 847.010949][T12119] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1457: error while reading EA inode 12 err=-117 [ 847.090253][T12119] EXT4-fs (loop1): 1 orphan inode deleted [ 847.096788][T12119] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 848.008145][T12127] loop3: detected capacity change from 0 to 2048 [ 848.081878][T12127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 848.335746][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 848.336543][T11068] EXT4-fs (loop1): unmounting filesystem. [ 848.686899][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 852.705819][T12184] No such timeout policy "syz1" [ 852.749639][T12182] loop1: detected capacity change from 0 to 2048 [ 852.771211][T12184] loop2: detected capacity change from 0 to 512 [ 852.994068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 853.004758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 853.015418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 853.026099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 853.038427][T12196] loop3: detected capacity change from 0 to 256 [ 853.047476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 853.058169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 853.068846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 853.079534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 853.090225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 853.100909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 853.873985][T12184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 853.888197][T12196] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 853.902754][T12184] System zones: 1-12 [ 853.919676][T12182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 853.937742][T12184] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1471: missing EA_INODE flag [ 854.290135][T12184] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1471: error while reading EA inode 12 err=-117 [ 854.467053][T12199] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 855.034803][T12184] EXT4-fs (loop2): 1 orphan inode deleted [ 855.051499][T11068] EXT4-fs (loop1): unmounting filesystem. [ 855.110796][T12184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 855.443288][T12201] loop9: detected capacity change from 0 to 16 [ 855.453932][T12201] erofs: (device loop9): mounted with root inode @ nid 36. [ 855.551299][T12213] loop3: detected capacity change from 0 to 512 [ 855.592942][T12213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 855.622350][T12213] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 855.740742][T12213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 855.741784][T12208] loop1: detected capacity change from 0 to 2048 [ 855.783802][T12213] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 855.801324][T12213] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 855.814235][T12213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 855.868394][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 855.987730][T12208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 856.883659][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 857.047451][T12226] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 858.268669][T11068] EXT4-fs (loop1): unmounting filesystem. [ 858.536268][T12242] loop1: detected capacity change from 0 to 512 [ 858.586295][T12242] EXT4-fs: Ignoring removed oldalloc option [ 858.631293][T12242] EXT4-fs (loop1): Test dummy encryption mode enabled [ 858.689915][ T9670] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 858.754239][T12242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 858.850208][ T14] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 858.883253][T12242] EXT4-fs (loop1): unmounting filesystem. [ 858.917190][ T9670] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 4 [ 858.951928][ T9670] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 859.012497][ T9670] usb 4-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 859.063831][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 859.071641][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.073843][ T9670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.121423][ T9670] usb 4-1: Product: syz [ 859.126595][ T9670] usb 4-1: Manufacturer: syz [ 859.136850][ T14] usb 3-1: config 0 has no interfaces? [ 859.150712][ T9670] usb 4-1: SerialNumber: syz [ 859.161981][ T14] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 859.180695][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.190923][ T14] usb 3-1: config 0 descriptor?? [ 859.458828][T12256] loop1: detected capacity change from 0 to 16 [ 860.142128][T12256] erofs: (device loop1): mounted with root inode @ nid 36. [ 860.177576][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.209113][ T9670] usb 4-1: Can't get UAC3 power state for id 10 [ 860.237409][ T9670] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 860.296068][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.318732][ T125] usb 3-1: USB disconnect, device number 18 [ 860.373899][ T9670] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 860.561349][ T9670] usb 4-1: USB disconnect, device number 13 [ 861.318268][T12273] loop2: detected capacity change from 0 to 256 [ 862.664132][T12273] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 862.767128][T12280] x_tables: ip_tables: esp match: only valid for protocol 50 [ 863.081266][T12287] loop0: detected capacity change from 0 to 16 [ 863.160084][T12287] erofs: (device loop0): mounted with root inode @ nid 36. [ 864.935452][T12310] x_tables: duplicate underflow at hook 1 [ 867.354062][T12325] loop9: detected capacity change from 0 to 2048 [ 867.579649][T12325] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 869.607079][T12340] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 870.125886][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 870.331861][T12352] loop9: detected capacity change from 0 to 1024 [ 870.392201][T12352] EXT4-fs: Ignoring removed bh option [ 870.438096][T12352] ext4: Unknown parameter 'noacl' [ 870.630863][T12356] loop2: detected capacity change from 0 to 16 [ 870.726687][T12356] erofs: (device loop2): mounted with root inode @ nid 36. [ 872.599459][T12373] loop3: detected capacity change from 0 to 2048 [ 872.700639][T12373] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 874.247773][T12405] loop2: detected capacity change from 0 to 16 [ 874.325618][T12402] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 874.380512][T12405] erofs: (device loop2): mounted with root inode @ nid 36. [ 875.643815][T12427] loop9: detected capacity change from 0 to 16 [ 876.725608][T12427] erofs: (device loop9): mounted with root inode @ nid 36. [ 878.150440][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 879.517788][T12470] loop0: detected capacity change from 0 to 16 [ 879.633361][T12470] erofs: (device loop0): mounted with root inode @ nid 36. [ 880.390372][T12479] loop1: detected capacity change from 0 to 1024 [ 880.415555][T12479] EXT4-fs: Ignoring removed bh option [ 880.421071][T12479] ext4: Unknown parameter 'noacl' [ 880.579713][T12483] loop0: detected capacity change from 0 to 512 [ 880.778421][T12483] EXT4-fs: inline encryption not supported [ 880.789350][T12483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 880.800859][T12483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 880.809533][T12483] System zones: 1-12 [ 880.817128][T12483] EXT4-fs (loop0): 1 truncate cleaned up [ 880.823422][T12483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 880.881606][T12492] loop3: detected capacity change from 0 to 512 [ 880.963285][T12492] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)! [ 881.033160][T12492] EXT4-fs (loop3): group descriptors corrupted! [ 881.600280][T12505] xt_hashlimit: size too large, truncated to 1048576 [ 882.816127][T12517] loop3: detected capacity change from 0 to 2048 [ 882.928652][T12517] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 883.649944][T12532] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 884.029489][T10260] EXT4-fs (loop0): unmounting filesystem. [ 884.239723][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 884.875812][T12545] loop9: detected capacity change from 0 to 1024 [ 884.891312][T12545] EXT4-fs: Ignoring removed i_version option [ 884.898470][T12545] EXT4-fs: inline encryption not supported [ 884.952159][T12545] EXT4-fs (loop9): Test dummy encryption mode enabled [ 885.407856][T12545] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 887.287267][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 887.441832][T12564] fuse: Unknown parameter 'group_i00000000000000000000' [ 888.161381][T12575] loop1: detected capacity change from 0 to 1024 [ 888.235524][T12575] EXT4-fs: Ignoring removed bh option [ 888.301893][T12575] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 888.363178][T12580] loop0: detected capacity change from 0 to 1024 [ 888.400661][T12580] EXT4-fs: Ignoring removed bh option [ 888.443336][T12580] ext4: Unknown parameter 'noacl' [ 888.873436][T12584] loop1: detected capacity change from 0 to 256 [ 888.880683][T12584] exfat: Deprecated parameter 'utf8' [ 888.886230][T12584] exfat: Deprecated parameter 'namecase' [ 888.892580][T12584] exfat: Deprecated parameter 'namecase' [ 888.898493][T12584] exfat: Deprecated parameter 'utf8' [ 888.959679][T12584] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 890.117799][T12599] No such timeout policy "syz1" [ 890.203558][T12599] loop1: detected capacity change from 0 to 512 [ 890.379484][T12605] netlink: 188 bytes leftover after parsing attributes in process `syz.9.1550'. [ 891.339836][T12599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 892.308138][T12599] System zones: 1-12 [ 892.369338][T12599] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1551: missing EA_INODE flag [ 892.412516][T12599] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1551: error while reading EA inode 12 err=-117 [ 892.597835][T12599] EXT4-fs (loop1): 1 orphan inode deleted [ 892.606093][T12599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 894.322698][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 894.345739][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 894.795183][T11068] EXT4-fs (loop1): unmounting filesystem. [ 895.140528][T12630] loop2: detected capacity change from 0 to 256 [ 896.001756][T12637] loop2: detected capacity change from 0 to 2048 [ 896.266787][T12637] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 897.608676][T12637] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 898.353383][T12671] fuse: Unknown parameter 'group_i00000000000000000000' [ 898.668090][T12672] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 902.036980][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 904.076808][T12709] loop2: detected capacity change from 0 to 1024 [ 904.130251][T12709] EXT4-fs: Ignoring removed bh option [ 904.146939][T12709] ext4: Unknown parameter 'noacl' [ 904.807671][T12724] loop2: detected capacity change from 0 to 512 [ 904.912700][T12724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 905.164044][T12724] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 906.522912][T12743] loop3: detected capacity change from 0 to 256 [ 906.715431][T12743] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 907.039116][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 907.047970][T12753] fuse: Unknown parameter 'group_i00000000000000000000' [ 907.129958][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 908.207659][ T14] usb 4-1: config 2 has an invalid interface number: 13 but max is 0 [ 908.254759][ T14] usb 4-1: config 2 has no interface number 0 [ 908.261116][ T14] usb 4-1: config 2 interface 13 altsetting 9 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 908.272850][ T14] usb 4-1: config 2 interface 13 has no altsetting 0 [ 908.303492][ T14] usb 4-1: New USB device found, idVendor=0499, idProduct=103f, bcdDevice=9c.a8 [ 908.342540][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.363804][ T14] usb 4-1: Product: syz [ 908.368055][ T14] usb 4-1: Manufacturer: syz [ 908.376314][T12767] loop9: detected capacity change from 0 to 1024 [ 908.397231][ T14] usb 4-1: SerialNumber: syz [ 908.477286][T12767] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 908.507721][T12767] EXT4-fs (loop9): orphan cleanup on readonly fs [ 909.097519][T12767] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1585: Invalid inode table block 0 in block_group 0 [ 909.248263][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.255001][T12767] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 909.340137][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.368295][T12767] EXT4-fs error (device loop9): ext4_quota_write:7253: inode #3: comm syz.9.1585: mark_inode_dirty error [ 909.423283][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.512763][T12767] Quota error (device loop9): write_blk: dquota write failed [ 909.553833][T12767] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 909.634997][T12767] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.1585: Failed to acquire dquot type 0 [ 909.650354][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.689112][T12767] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1585: Invalid inode table block 0 in block_group 0 [ 909.737066][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.743758][T12767] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 909.764696][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.790506][T12767] EXT4-fs error (device loop9): ext4_ext_truncate:4460: inode #15: comm syz.9.1585: mark_inode_dirty error [ 909.822906][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.829581][T12767] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1585: Invalid inode table block 0 in block_group 0 [ 909.884539][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.914577][T12767] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 909.943500][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.950140][T12767] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 909.956096][T12768] loop2: detected capacity change from 0 to 512 [ 909.974927][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 909.981607][T12767] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1585: Invalid inode table block 0 in block_group 0 [ 910.010689][T12768] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 910.020342][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 910.041309][T12768] EXT4-fs (loop2): inodes count not valid: 3 vs 32 [ 910.048883][T12767] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 910.085532][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 910.105088][T12767] EXT4-fs error (device loop9): ext4_truncate:4325: inode #15: comm syz.9.1585: mark_inode_dirty error [ 910.140689][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 910.170208][T12767] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 910.204699][T12767] EXT4-fs (loop9): Remounting filesystem read-only [ 910.241700][T12767] EXT4-fs (loop9): 1 truncate cleaned up [ 910.254744][T12767] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 910.453786][ T14] usb 4-1: invalid MIDI in EP 0 [ 910.639174][T12793] EXT4-fs error (device loop9): ext4_search_dir:1549: inode #2: block 16: comm syz.9.1585: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 910.685838][ T14] snd-usb-audio: probe of 4-1:2.13 failed with error -22 [ 910.717516][ T14] usb 4-1: USB disconnect, device number 14 [ 910.974625][T12793] EXT4-fs error (device loop9): ext4_search_dir:1549: inode #2: block 16: comm syz.9.1585: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 911.427134][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.13/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.545164][T12794] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1585: Invalid inode table block 0 in block_group 0 [ 911.760836][T12806] loop1: detected capacity change from 0 to 16 [ 911.776132][T12806] erofs: (device loop1): mounted with root inode @ nid 36. [ 911.927031][T12793] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.1585: Invalid inode table block 0 in block_group 0 [ 912.133621][T12794] ext4: Unknown parameter 'trusted.overlay.metacopy' [ 912.378326][T12821] cgroup: Unknown subsys name 'appraise' [ 914.398134][T12835] loop3: detected capacity change from 0 to 16 [ 914.428716][T12835] erofs: (device loop3): mounted with root inode @ nid 36. [ 914.818314][ T8733] EXT4-fs (loop9): unmounting filesystem. [ 915.302945][T12844] loop2: detected capacity change from 0 to 128 [ 915.798528][T12845] loop3: detected capacity change from 0 to 512 [ 915.808960][T12845] EXT4-fs: inline encryption not supported [ 915.818379][T12845] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 915.877698][T12845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 915.886314][T12845] System zones: 1-12 [ 915.935656][T12845] EXT4-fs (loop3): 1 truncate cleaned up [ 915.942139][T12845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 916.204036][T12844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 916.214602][T12844] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 916.236014][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1597'. [ 916.503394][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 916.603344][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 919.353919][T12867] loop0: detected capacity change from 0 to 16 [ 919.393163][T12867] erofs: (device loop0): mounted with root inode @ nid 36. [ 920.539726][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1605'. [ 921.774253][T12898] loop3: detected capacity change from 0 to 256 [ 921.838339][T12898] FAT-fs (loop3): Unrecognized mount option "utf8=y" or missing value [ 922.185591][T12898] loop3: detected capacity change from 0 to 128 [ 922.192681][T12898] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 922.943114][T12915] loop1: detected capacity change from 0 to 1024 [ 922.956810][T12915] EXT4-fs: Ignoring removed bh option [ 922.962332][T12915] ext4: Unknown parameter 'noacl' [ 933.020508][T12975] loop3: detected capacity change from 0 to 1024 [ 933.034280][T12975] EXT4-fs: Ignoring removed bh option [ 933.039977][T12975] ext4: Unknown parameter 'noacl' [ 933.055175][T12976] loop1: detected capacity change from 0 to 512 [ 933.908158][T12976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 933.954579][T12976] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 934.950364][T12976] [ 934.952968][T12976] ====================================================== [ 934.960271][T12976] WARNING: possible circular locking dependency detected [ 934.967467][T12976] syzkaller #0 Not tainted [ 934.972229][T12976] ------------------------------------------------------ [ 934.979264][T12976] syz.1.1622/12976 is trying to acquire lock: [ 934.985522][T12976] ffff88805554f3e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 934.994485][T12976] [ 934.994485][T12976] but task is already holding lock: [ 935.001966][T12976] ffff888072f78c90 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x999/0x1240 [ 935.011777][T12976] [ 935.011777][T12976] which lock already depends on the new lock. [ 935.011777][T12976] [ 935.022295][T12976] [ 935.022295][T12976] the existing dependency chain (in reverse order) is: [ 935.031340][T12976] [ 935.031340][T12976] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 935.039225][T12976] down_read+0x42/0x2d0 [ 935.043944][T12976] ext4_map_blocks+0x323/0x1b70 [ 935.049383][T12976] ext4_getblk+0x1cc/0x6f0 [ 935.054370][T12976] ext4_bread+0x26/0x170 [ 935.059162][T12976] ext4_quota_read+0x180/0x380 [ 935.064460][T12976] find_tree_dqentry+0x1cd/0xf30 [ 935.069925][T12976] qtree_read_dquot+0x57b/0x820 [ 935.075558][T12976] v2_read_dquot+0xc0/0x110 [ 935.080587][T12976] dquot_acquire+0x152/0x520 [ 935.085693][T12976] ext4_acquire_dquot+0x2d9/0x4a0 [ 935.091245][T12976] dqget+0x778/0xeb0 [ 935.095672][T12976] __dquot_initialize+0x3c3/0xcd0 [ 935.101248][T12976] ext4_mkdir+0x1a5/0xce0 [ 935.106139][T12976] vfs_mkdir+0x387/0x570 [ 935.110914][T12976] do_mkdirat+0x1d8/0x440 [ 935.115769][T12976] __x64_sys_mkdirat+0x85/0x90 [ 935.121058][T12976] do_syscall_64+0x4c/0xa0 [ 935.126018][T12976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.132465][T12976] [ 935.132465][T12976] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 935.140571][T12976] down_read+0x42/0x2d0 [ 935.145253][T12976] v2_read_dquot+0x4a/0x110 [ 935.150277][T12976] dquot_acquire+0x152/0x520 [ 935.155378][T12976] ext4_acquire_dquot+0x2d9/0x4a0 [ 935.160920][T12976] dqget+0x778/0xeb0 [ 935.165332][T12976] __dquot_initialize+0x3c3/0xcd0 [ 935.170877][T12976] ext4_mkdir+0x1a5/0xce0 [ 935.175723][T12976] vfs_mkdir+0x387/0x570 [ 935.180502][T12976] do_mkdirat+0x1d8/0x440 [ 935.185351][T12976] __x64_sys_mkdirat+0x85/0x90 [ 935.190629][T12976] do_syscall_64+0x4c/0xa0 [ 935.195665][T12976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.202086][T12976] [ 935.202086][T12976] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 935.209818][T12976] __lock_acquire+0x2d07/0x7d10 [ 935.215190][T12976] lock_acquire+0x1bb/0x4a0 [ 935.220301][T12976] __mutex_lock+0x12d/0xaf0 [ 935.225377][T12976] dquot_commit+0x5a/0x410 [ 935.230329][T12976] ext4_write_dquot+0x1f0/0x360 [ 935.235734][T12976] mark_all_dquot_dirty+0xf9/0x400 [ 935.241466][T12976] __dquot_free_space+0x7ec/0xbc0 [ 935.247108][T12976] ext4_free_blocks+0x1bf3/0x26a0 [ 935.252785][T12976] ext4_ext_remove_space+0x225f/0x44c0 [ 935.258798][T12976] ext4_ext_truncate+0x211/0x370 [ 935.264304][T12976] ext4_truncate+0xa23/0x1240 [ 935.269621][T12976] ext4_setattr+0x11f8/0x1b50 [ 935.274856][T12976] notify_change+0xc74/0xf40 [ 935.279982][T12976] do_truncate+0x1ac/0x240 [ 935.284919][T12976] path_openat+0x2861/0x2ee0 [ 935.290027][T12976] do_filp_open+0x1f1/0x430 [ 935.295046][T12976] do_sys_openat2+0x150/0x4b0 [ 935.300241][T12976] __x64_sys_creat+0x8c/0xb0 [ 935.305346][T12976] do_syscall_64+0x4c/0xa0 [ 935.310289][T12976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.316718][T12976] [ 935.316718][T12976] other info that might help us debug this: [ 935.316718][T12976] [ 935.326966][T12976] Chain exists of: [ 935.326966][T12976] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 935.326966][T12976] [ 935.340625][T12976] Possible unsafe locking scenario: [ 935.340625][T12976] [ 935.348079][T12976] CPU0 CPU1 [ 935.353453][T12976] ---- ---- [ 935.358812][T12976] lock(&ei->i_data_sem/2); [ 935.363420][T12976] lock(&s->s_dquot.dqio_sem); [ 935.370916][T12976] lock(&ei->i_data_sem/2); [ 935.378039][T12976] lock(&dquot->dq_lock); [ 935.382465][T12976] [ 935.382465][T12976] *** DEADLOCK *** [ 935.382465][T12976] [ 935.390625][T12976] 5 locks held by syz.1.1622/12976: [ 935.395817][T12976] #0: ffff888075626460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 935.404975][T12976] #1: ffff888072f78e08 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240 [ 935.415250][T12976] #2: ffff888072f78fa8 (mapping.invalidate_lock#2){++++}-{3:3}, at: ext4_setattr+0xfb3/0x1b50 [ 935.425604][T12976] #3: ffff888072f78c90 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x999/0x1240 [ 935.435372][T12976] #4: ffffffff8cc74a48 (dquot_srcu){....}-{0:0}, at: __dquot_free_space+0x174/0xbc0 [ 935.444853][T12976] [ 935.444853][T12976] stack backtrace: [ 935.450860][T12976] CPU: 0 PID: 12976 Comm: syz.1.1622 Not tainted syzkaller #0 [ 935.458324][T12976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 935.468495][T12976] Call Trace: [ 935.471794][T12976] [ 935.474732][T12976] dump_stack_lvl+0x188/0x24e [ 935.479519][T12976] ? load_image+0x400/0x400 [ 935.484042][T12976] ? show_regs_print_info+0x12/0x12 [ 935.489333][T12976] ? print_circular_bug+0x12b/0x1a0 [ 935.494535][T12976] check_noncircular+0x296/0x330 [ 935.499478][T12976] ? __lock_acquire+0x7d10/0x7d10 [ 935.504502][T12976] ? add_chain_block+0x940/0x940 [ 935.509462][T12976] ? lockdep_lock+0xf1/0x1f0 [ 935.514088][T12976] ? _find_first_zero_bit+0xcf/0x100 [ 935.519386][T12976] __lock_acquire+0x2d07/0x7d10 [ 935.524257][T12976] ? __kernel_text_address+0x9/0x30 [ 935.529488][T12976] ? check_path+0x21/0x40 [ 935.533936][T12976] ? check_noncircular+0x189/0x330 [ 935.539088][T12976] ? verify_lock_unused+0x140/0x140 [ 935.544485][T12976] ? add_chain_block+0x940/0x940 [ 935.549426][T12976] ? lockdep_lock+0xf1/0x1f0 [ 935.554103][T12976] ? lockdep_unlock+0x142/0x2e0 [ 935.559131][T12976] ? mark_lock+0x94/0x320 [ 935.563550][T12976] lock_acquire+0x1bb/0x4a0 [ 935.568163][T12976] ? dquot_commit+0x5a/0x410 [ 935.572763][T12976] ? __might_sleep+0xd0/0xd0 [ 935.577370][T12976] ? read_lock_is_recursive+0x10/0x10 [ 935.582767][T12976] __mutex_lock+0x12d/0xaf0 [ 935.587288][T12976] ? dquot_commit+0x5a/0x410 [ 935.591935][T12976] ? __might_sleep+0xd0/0xd0 [ 935.596735][T12976] ? dquot_commit+0x5a/0x410 [ 935.601356][T12976] ? mutex_lock_nested+0x10/0x10 [ 935.606344][T12976] ? ext4_journal_check_start+0x17e/0x240 [ 935.612285][T12976] dquot_commit+0x5a/0x410 [ 935.616820][T12976] ext4_write_dquot+0x1f0/0x360 [ 935.621686][T12976] mark_all_dquot_dirty+0xf9/0x400 [ 935.626829][T12976] __dquot_free_space+0x7ec/0xbc0 [ 935.631884][T12976] ? __dquot_free_space+0x174/0xbc0 [ 935.637100][T12976] ? ext4_free_blocks+0x18de/0x26a0 [ 935.642344][T12976] ext4_free_blocks+0x1bf3/0x26a0 [ 935.647404][T12976] ? ext4_mb_discard_preallocations_should_retry+0x710/0x710 [ 935.654808][T12976] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 935.660887][T12976] ? ext4_inode_journal_mode+0x18f/0x460 [ 935.666523][T12976] ext4_ext_remove_space+0x225f/0x44c0 [ 935.671996][T12976] ? ext4_da_release_space+0x133/0x5d0 [ 935.677536][T12976] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 935.683343][T12976] ext4_ext_truncate+0x211/0x370 [ 935.688278][T12976] ext4_truncate+0xa23/0x1240 [ 935.692961][T12976] ? __ext4_mark_inode_dirty+0x770/0x770 [ 935.698592][T12976] ? unmap_mapping_range+0x91/0x100 [ 935.703870][T12976] ext4_setattr+0x11f8/0x1b50 [ 935.708577][T12976] ? ext4_write_inode+0x5e0/0x5e0 [ 935.713646][T12976] notify_change+0xc74/0xf40 [ 935.718351][T12976] do_truncate+0x1ac/0x240 [ 935.722772][T12976] ? put_page_bootmem+0x2c0/0x2c0 [ 935.727798][T12976] ? ima_bprm_check+0x200/0x200 [ 935.732648][T12976] ? bpf_lsm_path_truncate+0x5/0x10 [ 935.737934][T12976] path_openat+0x2861/0x2ee0 [ 935.742534][T12976] ? do_filp_open+0x430/0x430 [ 935.747212][T12976] do_filp_open+0x1f1/0x430 [ 935.751709][T12976] ? vfs_tmpfile+0x480/0x480 [ 935.756306][T12976] ? _raw_spin_unlock+0x24/0x40 [ 935.761183][T12976] ? alloc_fd+0x58f/0x630 [ 935.765729][T12976] do_sys_openat2+0x150/0x4b0 [ 935.770752][T12976] ? do_sys_open+0xe0/0xe0 [ 935.775174][T12976] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 935.781157][T12976] ? lock_chain_count+0x20/0x20 [ 935.786010][T12976] __x64_sys_creat+0x8c/0xb0 [ 935.790615][T12976] do_syscall_64+0x4c/0xa0 [ 935.795046][T12976] ? clear_bhb_loop+0x60/0xb0 [ 935.799720][T12976] ? clear_bhb_loop+0x60/0xb0 [ 935.804399][T12976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.810292][T12976] RIP: 0033:0x7f123859c819 [ 935.814713][T12976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.834338][T12976] RSP: 002b:00007f1239520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 935.842776][T12976] RAX: ffffffffffffffda RBX: 00007f1238815fa0 RCX: 00007f123859c819 [ 935.850746][T12976] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000200000000040 [ 935.858806][T12976] RBP: 00007f1238632c91 R08: 0000000000000000 R09: 0000000000000000 [ 935.867033][T12976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.875480][T12976] R13: 00007f1238816038 R14: 00007f1238815fa0 R15: 00007fffb96994f8 [ 935.883566][T12976] [ 935.944677][T13006] loop0: detected capacity change from 0 to 512 [ 936.107782][T13006] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 936.677255][ T4377] kworker/dying (4377) used greatest stack depth: 15048 bytes left [ 936.944890][T11068] EXT4-fs (loop1): unmounting filesystem.