last executing test programs: 15m30.678655345s ago: executing program 32 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x1, 0x4, r2, 0x13}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x2, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x4, r2, 0x5}) 14m57.884354791s ago: executing program 33 (id=70): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f00000000030000000000000004000000"], 0xd4}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xe3, 0x80, 0x40000949, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) 14m56.369562592s ago: executing program 34 (id=71): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x1}, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 14m30.750940627s ago: executing program 35 (id=106): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0x2, 0x1}}}, {{@arp={@loopback, @remote, 0x8c126cb44f2559af, 0xff000000, 0x5, 0x8, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xab1d, 0xfe01, 0x8, 0x4661, 0x4, 0x44ea, 'nr0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @local, @multicast2, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_triestat\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000700)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(0xffffffffffffffff, 0x85f5, 0x4000000005, 0x2) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 13m16.161011515s ago: executing program 36 (id=232): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, &(0x7f0000000040), 0x5005) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) 13m5.075717485s ago: executing program 37 (id=247): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x33) r1 = socket$nl_generic(0x10, 0x3, 0x10) gettid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501000000"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) close(r0) 12m35.184069741s ago: executing program 38 (id=287): r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x33) r1 = socket$nl_generic(0x10, 0x3, 0x10) gettid() socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501000000"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) close(r0) 10m52.222894724s ago: executing program 39 (id=419): getpid() keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$setperm(0x5, 0x0, 0x8021200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0xfffffffffffffffc, 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x4000, 0x1, 0x282}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r4 = creat(&(0x7f0000000440)='./bus\x00', 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[], 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) 10m40.288260156s ago: executing program 40 (id=434): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x10, 0x2f, 0x0, @empty, @mcast2, {[], {0x2000, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xa0, 0xff00}}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) connect$llc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0xe7e, 0x0) read$msr(r5, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 9m10.34190673s ago: executing program 41 (id=587): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x2, 0x16, 0x400000, 0x7ff, 0x24, 0xb, 0x1, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x5, 0x3, 0x8, 0x37e9, 0x3, 0x800, 0x6, 0x4, 0x3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f0000002500)=ANY=[], 0x1, 0x1f9, &(0x7f0000000180)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) preadv2(r4, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6c}) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f0000000500)=""/81, 0x51) 7m28.076934194s ago: executing program 42 (id=784): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7m17.686583137s ago: executing program 43 (id=797): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000500)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nobh}, {@jqfmt_vfsv1}, {@nouid32}, {@dioread_nolock}, {@jqfmt_vfsv0}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") pipe2$9p(&(0x7f0000000080), 0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, 0x0, 0x4040800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x150}}, 0x0) 5m43.991315395s ago: executing program 44 (id=939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) 5m28.271158962s ago: executing program 8 (id=1000): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x3, 0x742, 0x3, 0x8, 0x9c, 0xfffffffffffffffb, 0x20000000ffe, 0xf66, 0xffeffffc}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) stat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000500)='./file1\x00', r0, 0x0) 5m26.91335637s ago: executing program 8 (id=1004): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@errors_remount}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") pivot_root(&(0x7f0000000040)='./file1\x00', 0x0) 5m25.322797293s ago: executing program 8 (id=1009): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x4, {{0x2, 0x4e24, @multicast2}}}, 0x88) 5m21.946625983s ago: executing program 8 (id=1014): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f00000036c0)="$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") syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ftruncate(r0, 0x200c17a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) sendfile(r1, r1, 0x0, 0xe70) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0xc0002, 0xa) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) 5m19.337582824s ago: executing program 8 (id=1020): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000002680)) 5m15.434865643s ago: executing program 8 (id=1023): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x4, {{0x2, 0x4e24, @multicast2}}}, 0x88) 5m12.489921698s ago: executing program 45 (id=1023): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x4, {{0x2, 0x4e24, @multicast2}}}, 0x88) 4m34.872345584s ago: executing program 5 (id=1094): clock_adjtime(0x0, &(0x7f0000000000)={0x20000066b9, 0x200000000, 0x3, 0x6, 0x0, 0x0, 0x78, 0x1000000000004, 0x0, 0x4, 0x0, 0x248a, 0x1, 0x227, 0x0, 0x2, 0x6, 0x0, 0x4, 0x412c, 0x2, 0x1000000000000000, 0x8000, 0x8}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) 4m33.471727879s ago: executing program 5 (id=1098): setuid(0xee00) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) 4m32.022623208s ago: executing program 5 (id=1101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00010024bd70000000000002201400fc0200070002000008000300", @ANYBLOB="080001"], 0x34}}, 0xea5bc50b6199d7fe) 4m31.304580404s ago: executing program 5 (id=1103): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r1, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r1, r0, 0x0, 0x40001) 4m30.205204651s ago: executing program 5 (id=1106): syz_open_dev$MSR(0x0, 0xfb, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./bus\x00', 0x204414, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="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", @ANYBLOB="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", @ANYRESDEC, @ANYRES8=0x0], 0x1, 0x2c3, &(0x7f0000000140)="$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") syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x7fffffff, 0x2, 0x0, 0x8}) 4m29.007247299s ago: executing program 5 (id=1111): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@minixdf}, {}, {@errors_remount}, {@commit={'commit', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000017c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000040)) 4m26.616122086s ago: executing program 46 (id=1111): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@minixdf}, {}, {@errors_remount}, {@commit={'commit', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0xfe, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000017c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000040)) 4m19.826632082s ago: executing program 2 (id=1131): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000240)) 4m19.187954166s ago: executing program 2 (id=1135): syz_open_dev$sndctrl(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 4m18.588947053s ago: executing program 2 (id=1138): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @rand_addr=0x64010100, {[@noop, @generic={0x7, 0x4, "0402"}]}}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1b9c4f2cf9f0516f, 0x7, 0x0, 0x3}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x7, r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x4, [@datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x8, 0x1}], "8914a1"}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000006c0)=""/70, 0x38, 0x46, 0x1, 0x4c47}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0xe3b1, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 4m12.611627783s ago: executing program 2 (id=1142): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x25, 0x35b, &(0x7f0000000200)="$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") ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f00000027c0)={0x1, [{0x1, 0xf0, 0x8001, &(0x7f0000000580)="45b48c9c7ecf3cf3b1569aea9c361c34ecb0ce2e0eaebb52a5977533ba3a"}, {0x5, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x7, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x7ff, 0x0}, {0x3, 0x0, 0x50f78604, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x401, 0x0}, {0x3, 0x0, 0x150, 0x0}, {0x0, 0x0, 0x5, 0x0}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4m11.952967042s ago: executing program 2 (id=1145): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 4m11.481296801s ago: executing program 2 (id=1148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x81, 0x1, 0x80000001, 0x8}, 0x10) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x37, r6}) r8 = socket(0xa, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000005b40)="$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") ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000000)=ANY=[]) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) 4m7.649297814s ago: executing program 7 (id=1159): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffd, 0x8, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4c, 0x1, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m6.622056172s ago: executing program 7 (id=1160): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@errors_remount}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) truncate(&(0x7f0000000000)='./file0\x00', 0x1) 4m5.658214114s ago: executing program 7 (id=1161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x50) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$vcsa(0xffffffffffffff9c, 0x0, 0x10000, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x12, 0xf1, 0x400000000050, 0x12, 0x5, 0x0, 0x1d497c23, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x1, 0x3], 0xeeee8000, 0x200}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3001, 0x0, 0x10, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x2d, 0x81, 0x80}, {0x6000, 0xdddd1000, 0x3, 0x0, 0x42, 0x8, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0x0, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xe000, 0xf, 0x3, 0x16, 0x3, 0xab, 0x8, 0x7f, 0x8, 0xf7, 0x97}, {0x2000, 0xa000, 0xe, 0xa0, 0xb1, 0x8, 0x81, 0x80, 0x82, 0x31, 0x1, 0x7}, {0x8080000, 0x3000, 0x18, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x8080000, 0x10, 0x5, 0xd0, 0x7, 0x1, 0x9, 0x2, 0xc, 0xac, 0x81}, {0x4000}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x142064, 0x200000002, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4m5.136033665s ago: executing program 7 (id=1163): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1c0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000000050008000000000008000a00"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 4m4.097720877s ago: executing program 7 (id=1166): inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x22000080) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x941802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000470000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x53}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m3.540222385s ago: executing program 7 (id=1168): socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 3m55.195855894s ago: executing program 47 (id=1148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000200000000000000000000000a030000000000000063"], 0x0, 0x52}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x81, 0x1, 0x80000001, 0x8}, 0x10) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x37, r6}) r8 = socket(0xa, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000005b40)="$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") ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000000)=ANY=[]) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) 3m47.174104331s ago: executing program 48 (id=1168): socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 1m23.078992648s ago: executing program 0 (id=1525): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fe02000000000000200000000c00060001"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m21.993297105s ago: executing program 0 (id=1530): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1m20.93450575s ago: executing program 0 (id=1535): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/21, 0x15}, 0x854}], 0x1, 0x2, 0x0) io_uring_setup(0xb9c, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x1d3}) 1m20.384932266s ago: executing program 0 (id=1539): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESHEX, @ANYBLOB="28cbc43f3f9e4a0769ec04073d62d51a0a9ffe243f458bb7dc848aaceb8f256ce2b527df3d43625c4ef8b15be1946bf4a508d0d908ba1df7496fe969c539c5c888ae168d511659d874a4e64ed181ac4f8da0b7675da9c17b8f6cdbd603374a68cc0cf5ea03f85b6784c65024615db48740a51ebd6a70dde488ff41852b64c96e60496fe858d0af72a248d1e55d983663b53f3eecf48fa06f62ed0d8997cf20482e661e801102d55d3a4ec2a49912daf708c23f7efb0a60"], 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000018c0)={0x24, &(0x7f00000016c0)={0x40, 0x0, 0xb1, {0xb1, 0xd, "26fb23aa25a7a19a1979672b63493a5e68aca90d18a9c10d00fa25c6b12dfb45421e9b0f351d763809b3aa3de55d78fb28c1cd26f1bced8a4a6ee64812f0cb0196be5bca86d4b29d4494b9e62d9cf7c64948b5badbe91fc42167ca33034e3ffde8e6c11cc9054e394c697bc8eb66194a6bddc1d49cc11f34d66950c781fec67c722fd406369e0c1ccf31dd237929e69ebcd2108266cd381ab812eafef299ef90b195417d93a66812d7b3d779e20569"}}, &(0x7f00000017c0)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "079ab86d8f4beee463bd7a5aef2042d64def9ebfe689e847f87ef58081e2929c6c5f1672039f0c02b95acbf14dee543ee266c1dcad93ab789130bf4436177f298ab804cc72a83b199117c6a7"}}, &(0x7f0000001840)={0x0, 0x22, 0x9, {[@main=@item_4={0x3, 0x0, 0x8, "13594ab3"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0xc, '0'}, @global]}}, &(0x7f0000001880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0xc3e}}}}, &(0x7f0000001a80)={0x2c, 0x0, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x88}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001a00)={0x20, 0x1, 0x10, "2b097626155b0dca398dc157293208ea"}, &(0x7f0000001a40)={0x20, 0x3, 0x1, 0xc1}}) 1m18.683667682s ago: executing program 0 (id=1547): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000980)={[{@nodelalloc}, {@noblock_validity}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4f0, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m16.537714266s ago: executing program 0 (id=1549): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/21, 0x15}, 0x854}], 0x1, 0x2, 0x0) io_uring_setup(0xb9c, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x1d3}) 59.931747758s ago: executing program 49 (id=1549): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/21, 0x15}, 0x854}], 0x1, 0x2, 0x0) io_uring_setup(0xb9c, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x1d3}) 9.025571188s ago: executing program 6 (id=1774): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) 7.824176681s ago: executing program 6 (id=1781): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200010, &(0x7f0000000400)=ANY=[], 0x1, 0x6b5, &(0x7f0000001540)="$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") syz_usb_connect$cdc_ncm(0x6, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a860000102030109025d00020105e00409f7052400d4137bf1"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000001c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x64}, @initial, @device_b, @broadcast, {0x1, 0x1}}, @a_msdu=[{@broadcast, @device_b}, {@device_a, @device_b, 0x37, "bc3ba9bf2cdf0bdac11f9b3e28da1882950401ed0e893ab462363595234455eae7a05c2af5b9639ce07f7972dd5e1736bb18b4682fe2ab"}, {}, {@broadcast, @broadcast, 0x3, '\x00\x00\x00'}, {@device_a, @broadcast, 0x27, "84176599d9ebe735b6a38bfb8153a573d8999fc40f8e7e276f28a436018fee3156b4c127377457"}, {@broadcast, @broadcast, 0x3, "ecacb0"}, {@broadcast, @broadcast, 0x6c, "b2b7f59ef76dd2fc5e34954e71366fade16ebf81c306c49f04beee4bfe08ef74d96590d2e5aa37a3120874b2e0bf4731a4915ed6ddb0a4133f4ae7014eae7a1e122877124d2c62295510b061d1e22667964bea9bbd6f1e4a4e2e20a862ce1c891ea2ef821b8206f89fdebcf8"}, {@broadcast, @broadcast, 0x82, "7c2eb8ce5a02117523848997917cc983743b900096de67b9f0dd65d2f283ad2ef1f031c9652996e9e81cdb8c1eb03a4a54db5c124cbd76481e391bcc40127b552a88025a991522b7e26c765a2ebad7c7ea6787160a89e74ea31a689b837eb0b4ada01004352ab14f601a66a41506b4676184f9de818411b59572bf793647bdea0575"}]}, 0x1ec) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.225992801s ago: executing program 4 (id=1784): capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x800007}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x1, 0x7}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, 0x0, 0x40440c0) 6.750960504s ago: executing program 3 (id=1787): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.56053532s ago: executing program 4 (id=1789): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 6.13727954s ago: executing program 3 (id=1791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x2, 0x6, 0x7}, 0x49}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00123c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 6.02695254s ago: executing program 6 (id=1792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0xfffffffffffffffc, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x3, {0x0, 0xff}, {0x0, 0xff, 0x1}, 0xfc}], 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000200)=0xfffffffd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r6, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 5.959337179s ago: executing program 1 (id=1793): socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r0, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}}, 0x0) 5.593532066s ago: executing program 9 (id=1794): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) 5.419493697s ago: executing program 4 (id=1795): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000090400000000000000000000010500000008000000"], 0x0, 0x42}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 5.221329454s ago: executing program 1 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)={0x10, 0x13, 0x821}, 0x10}], 0x1}, 0x0) 4.991699197s ago: executing program 9 (id=1797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x147, 0x9}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 4.916314841s ago: executing program 3 (id=1798): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x20000022) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002d80)=""/4101, 0x1005}, {&(0x7f0000004700)=""/4072, 0xfe8}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/191, 0xbf}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000540)=""/123, 0x7b}], 0x7}, 0x10000) 4.872440523s ago: executing program 4 (id=1799): capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x800007}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x1, 0x7}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x4}}}], 0x14}, 0x40440c0) 4.829459861s ago: executing program 6 (id=1800): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4d3, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r2 = userfaultfd(0x801) timerfd_create(0x0, 0x800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x23}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701faffffff00000000017c0000040042801800018006000600800a00000c001c78708aaa4853bb72000400028058aaaa3a5be190d25e622ccb63563642f0328803d54dd6297588ef67851f3b0f8d862a47c0ea1fbcae60e92bbe79cef732c432cc379c1d508611e2011b557e616cbdbd1c7053771203adda8992a4f96f37704432411078a575e17159b34a25d37aa605cd5e8ae5e2eebb82ede4160409348c244d424fb2c0b6680e980bc375e5d3a713953b3ffd849385de5f68022a952f81cb009d4f"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_io_uring_setup(0x1cd7, 0x0, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 4.641527219s ago: executing program 1 (id=1801): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.352443582s ago: executing program 9 (id=1802): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578feffff7f0404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466", 0x48, 0x0, 0x0, 0x0) 2.737966935s ago: executing program 4 (id=1803): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1c0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c617665000000001400058005000900000000000500080000"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 2.230399972s ago: executing program 3 (id=1804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.86198866s ago: executing program 1 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 1.553633825s ago: executing program 9 (id=1806): socket$packet(0x11, 0x2, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r0, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414bb050004"], 0x40}}, 0x0) 1.29196156s ago: executing program 6 (id=1807): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) 1.230925372s ago: executing program 3 (id=1808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) 1.103169826s ago: executing program 1 (id=1809): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000090400000000000000000000010500000008000000"], 0x0, 0x42}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.035277205s ago: executing program 4 (id=1810): sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 648.225312ms ago: executing program 9 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)={0x10, 0x13, 0x821}, 0x10}], 0x1}, 0x0) 554.692313ms ago: executing program 3 (id=1812): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x155}, {&(0x7f0000000bc0)="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", 0x1ca}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859", 0x20}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631", 0xd3}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 447.092984ms ago: executing program 1 (id=1813): write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 428.310911ms ago: executing program 6 (id=1814): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x1ff}) sendmmsg(r0, &(0x7f000000cec0)=[{{&(0x7f0000000200)=@phonet={0x23, 0x27, 0x6a, 0xe}, 0x80, &(0x7f0000001300)=[{&(0x7f00000002c0)="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", 0x167}], 0x1}}], 0x1, 0x4000) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x18}}, 0x2400c0c0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r8, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xdd0, &(0x7f0000000280)=ANY=[], 0x0) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r11, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r11, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) sendmsg$inet6(r11, &(0x7f0000000b00)={&(0x7f00000001c0)={0xa, 0x4e20, 0x8, @remote}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000600)="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", 0xfa}, {&(0x7f0000000700)="1b4663dc6484c21d682572c0cdf31505fa923c958df320d6300fe336890a8f0db3089c6214ec6ac4b92ce3fe09c815aa6782465aedd7c829279da9d3d35b5f9277112874a743e6356ce3de2123efff4ed48cde93d37e8c578ebbbffddb278ff0b15ad71cd1bee2bfc762e54fb4c52345fa90f7c0830ff80069a5e3e0d1087a9d326ece0c1332bde319afe5e50d0ecb6a7449ae68d8aeccaef385aab263ad75ec92b797b572c92c5d0da2facfdc0e76eb", 0xb0}, {&(0x7f00000007c0)="3133b68bb9fbb1a205525cb8204533a45ae3f261a3609df62ae600056c39d53a79a2b195848206e35592b411f62d66c3697dcf27d82eba480db894939f779cd1eb085df752c5fe5790684c2bcbff1f30c3b852df77844aa3fb98e1853ed1c186fa35e9fd2b4356f706ac2493cb561148c007640688248e151e4cea51ab6ef2b391fd9fd1f717f2b718e26e6ffadebef36723db551be796a2d4cf14345e5f925c2debcd7988234c09cba9bdfcbbe8cef6563c0eee01ba0641ad2cd84fcc9c04a3bd3ab0f31aa9b4493cc65ddba8f30b832a3e1185", 0xd4}, {&(0x7f00000008c0)="e1e4a0e54bd02f72deeb30a71736d9e420dec47b95ca27829e55c034b61a5a8b3702f36e17db9eeea9721816a44a2827014db4", 0x33}], 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x198}, 0xc810) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffd}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 9 (id=1815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b00"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): rt 6081 - 0 [ 710.372927][ T7251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.455502][ T5899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.117755][T10073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.154919][T10084] loop3: detected capacity change from 0 to 764 [ 712.264777][T10084] rock: directory entry would overflow storage [ 712.295261][T10084] rock: sig=0x4654, size=5, remaining=4 [ 712.514601][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.574085][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.884604][ T8428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.989104][ T8428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.816709][T10126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.293696][T10131] loop8: detected capacity change from 0 to 764 [ 720.410836][T10131] rock: directory entry would overflow storage [ 720.417136][T10131] rock: sig=0x4654, size=5, remaining=4 [ 724.148095][T10156] loop2: detected capacity change from 0 to 256 [ 724.401883][T10156] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 724.983058][ T8428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.045943][ T8428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.502990][T10181] loop2: detected capacity change from 0 to 764 [ 727.675275][T10181] rock: directory entry would overflow storage [ 727.682315][T10181] rock: sig=0x4654, size=5, remaining=4 [ 727.710836][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.802434][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.400693][T10184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.741630][T10235] loop3: detected capacity change from 0 to 764 [ 737.809693][T10235] rock: directory entry would overflow storage [ 737.853452][T10235] rock: sig=0x4654, size=5, remaining=4 [ 738.167495][T10242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.463509][ T5899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.342680][T10273] overlayfs: missing 'lowerdir' [ 743.224697][ T5899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.800941][T10281] loop8: detected capacity change from 0 to 512 [ 743.862817][T10281] FAT-fs (loop8): Directory bread(block 199916) failed [ 744.010831][T10281] FAT-fs (loop8): Directory bread(block 199917) failed [ 744.116534][T10281] FAT-fs (loop8): Directory bread(block 199918) failed [ 744.266529][ T5899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.333206][T10281] FAT-fs (loop8): Directory bread(block 199919) failed [ 744.501371][T10281] FAT-fs (loop8): Directory bread(block 199920) failed [ 744.673560][T10281] FAT-fs (loop8): Directory bread(block 199921) failed [ 744.739228][T10281] FAT-fs (loop8): Directory bread(block 199922) failed [ 744.746312][T10281] FAT-fs (loop8): Directory bread(block 199923) failed [ 744.791144][T10288] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 744.881915][T10288] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 744.891590][T10288] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 744.930112][T10288] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 744.936714][T10288] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 745.091193][T10292] loop3: detected capacity change from 0 to 764 [ 745.187164][T10292] rock: directory entry would overflow storage [ 745.251765][T10292] rock: sig=0x4654, size=5, remaining=4 [ 745.307157][ T5899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.514214][T10295] loop7: detected capacity change from 0 to 512 [ 745.552160][T10295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 745.729078][T10295] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #11: comm syz.7.913: iget: bad extended attribute block 3153 [ 745.794832][T10303] loop5: detected capacity change from 0 to 256 [ 745.820184][T10295] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 745.828937][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 745.844859][ C0] EXT4-fs (loop7): initial error at time 1776157109: ext4_orphan_get:1397: inode 11 [ 745.854641][ C0] EXT4-fs (loop7): last error at time 1776157109: ext4_orphan_get:1397: inode 11 [ 745.864622][T10295] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.913: couldn't read orphan inode 11 (err -117) [ 745.903935][T10295] loop7: lost filesystem error report for type 5 error -117 [ 746.370183][T10295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.839593][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 747.203715][ T5779] Bluetooth: hci3: command 0x0c1a tx timeout [ 747.213970][ T5779] Bluetooth: hci0: command 0x040f tx timeout [ 747.223916][ T5779] Bluetooth: hci5: command 0x0c1a tx timeout [ 747.230543][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 747.823611][ T5899] bridge_slave_1: left allmulticast mode [ 747.924493][T10303] FAT-fs (loop5): Directory bread(block 64) failed [ 747.964905][ T5899] bridge_slave_1: left promiscuous mode [ 748.057827][T10303] FAT-fs (loop5): Directory bread(block 65) failed [ 748.108919][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.269598][T10303] FAT-fs (loop5): Directory bread(block 66) failed [ 748.316833][T10303] FAT-fs (loop5): Directory bread(block 67) failed [ 748.346630][T10303] FAT-fs (loop5): Directory bread(block 68) failed [ 748.422579][T10303] FAT-fs (loop5): Directory bread(block 69) failed [ 748.445932][T10303] FAT-fs (loop5): Directory bread(block 70) failed [ 748.474293][T10303] FAT-fs (loop5): Directory bread(block 71) failed [ 748.496231][T10303] FAT-fs (loop5): Directory bread(block 72) failed [ 748.526938][T10303] FAT-fs (loop5): Directory bread(block 73) failed [ 748.725671][ T6754] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.744647][ T5899] bridge_slave_0: left allmulticast mode [ 748.751404][ T5899] bridge_slave_0: left promiscuous mode [ 748.829878][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.377427][T10316] loop7: detected capacity change from 0 to 512 [ 749.657750][T10321] overlayfs: missing 'lowerdir' [ 749.712424][T10316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.789706][T10316] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.896859][T10325] loop2: detected capacity change from 0 to 512 [ 749.993039][T10325] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 750.154349][T10325] EXT4-fs (loop2): 1 truncate cleaned up [ 750.221330][T10325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.314047][ T29] audit: type=1800 audit(1776157113.602:21): pid=10325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.920" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 750.474353][T10332] loop8: detected capacity change from 0 to 512 [ 750.528412][T10332] EXT4-fs: Ignoring removed nobh option [ 750.579315][T10332] EXT4-fs: Ignoring removed mblk_io_submit option [ 750.786323][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.786628][T10332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.818585][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.846212][ T5899] bond0 (unregistering): Released all slaves [ 750.909732][ T6754] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.940543][T10332] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.082427][T10332] EXT4-fs error (device loop8): ext4_lookup:1785: inode #15: comm syz.8.922: invalid fast symlink length 10 [ 751.326807][ T9771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.547709][ T8899] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.715975][T10342] loop7: detected capacity change from 0 to 1024 [ 751.830506][T10342] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 752.043857][T10342] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.923: Invalid block bitmap block 0 in block_group 0 [ 752.129271][T10342] loop7: lost filesystem error report for type 5 error -117 [ 752.130651][T10342] Quota error (device loop7): write_blk: dquota write failed [ 752.145930][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 752.146015][ C0] EXT4-fs (loop7): initial error at time 1776157115: ext4_read_block_bitmap_nowait:483 [ 752.146128][ C0] EXT4-fs (loop7): last error at time 1776157115: ext4_read_block_bitmap_nowait:483 [ 752.323047][T10342] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 752.647758][T10342] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.923: Failed to acquire dquot type 0 [ 752.848343][T10342] loop7: lost filesystem error report for type 5 error -117 [ 752.947344][ T5899] hsr_slave_0: left promiscuous mode [ 753.119183][ T5899] hsr_slave_1: left promiscuous mode [ 753.155364][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.171340][T10342] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.923: Freeing blocks not in datazone - block = 0, count = 4096 [ 753.234086][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.309448][T10342] loop7: lost filesystem error report for type 5 error -117 [ 753.316319][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.348445][T10342] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.923: Invalid inode bitmap blk 0 in block_group 0 [ 753.366062][ T5898] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 753.381951][T10342] loop7: lost filesystem error report for type 5 error -117 [ 753.382817][T10342] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 753.402406][ T5898] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:9: Failed to release dquot type 0 [ 753.422617][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.499329][T10342] loop7: lost filesystem error report for type 5 error -117 [ 753.509208][ T5898] loop7: lost filesystem error report for type 5 error -117 [ 753.529115][T10342] EXT4-fs (loop7): 1 orphan inode deleted [ 753.584966][ T5899] veth1_macvtap: left promiscuous mode [ 753.629301][ T5899] veth0_macvtap: left promiscuous mode [ 753.631151][T10342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.666106][ T5899] veth1_vlan: left promiscuous mode [ 753.709118][ T5899] veth0_vlan: left promiscuous mode [ 753.950813][T10355] loop2: detected capacity change from 0 to 764 [ 754.045310][T10342] syz.7.923 (10342) used greatest stack depth: 2832 bytes left [ 754.063625][T10355] rock: directory entry would overflow storage [ 754.111252][ T6754] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.127030][T10355] rock: sig=0x4654, size=5, remaining=4 [ 754.784483][T10364] loop5: detected capacity change from 0 to 512 [ 754.892913][T10364] EXT4-fs: inline encryption not supported [ 754.956935][T10364] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 755.187897][T10364] EXT4-fs (loop5): 1 truncate cleaned up [ 755.241119][T10364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.629374][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.636970][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.880022][T10381] overlayfs: missing 'lowerdir' [ 757.893517][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.8.934'. [ 758.013192][ T9836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.420520][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 758.560060][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 761.058211][T10409] loop8: detected capacity change from 0 to 764 [ 761.218002][T10409] rock: directory entry would overflow storage [ 761.264646][T10409] rock: sig=0x4654, size=5, remaining=4 [ 763.491532][T10430] overlay: Unknown parameter '/' [ 768.061542][T10450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.951'. [ 770.638291][T10467] loop5: detected capacity change from 0 to 4096 [ 770.715874][T10467] EXT4-fs: inline encryption not supported [ 770.785003][T10467] EXT4-fs (loop5): Test dummy encryption mode enabled [ 770.869478][T10467] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 770.911613][T10467] System zones: 0-5 [ 771.006453][T10467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.449925][T10467] fscrypt (loop5): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 771.463403][T10478] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 772.090833][T10490] overlay: Unknown parameter '/' [ 772.112443][ T9836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.283649][T10509] fuse: Bad value for 'fd' [ 774.983728][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.7.964'. [ 777.953499][T10532] overlay: Unknown parameter '/' [ 778.180945][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.214725][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.231277][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.264363][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.282954][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.029597][ T5786] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 780.320741][ T5786] Bluetooth: hci1: command tx timeout [ 780.454735][T10539] chnl_net:caif_netlink_parms(): no params data found [ 781.934575][T10565] fuse: Bad value for 'fd' [ 782.400470][ T5786] Bluetooth: hci1: command tx timeout [ 783.761547][T10573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.978'. [ 784.479363][ T5786] Bluetooth: hci1: command tx timeout [ 784.709359][T10539] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.764867][T10539] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.799458][T10539] bridge_slave_0: entered allmulticast mode [ 784.847008][T10539] bridge_slave_0: entered promiscuous mode [ 784.929184][T10539] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.989278][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.996929][T10539] bridge_slave_1: entered allmulticast mode [ 785.041113][T10539] bridge_slave_1: entered promiscuous mode [ 785.476363][T10539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.511789][T10594] loop5: detected capacity change from 0 to 512 [ 785.564602][T10594] EXT4-fs: Ignoring removed nobh option [ 785.587745][T10539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.600266][T10594] EXT4-fs: Ignoring removed mblk_io_submit option [ 785.764384][T10594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.809352][T10598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.935704][T10594] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.211741][T10539] team0: Port device team_slave_0 added [ 786.467211][ T9836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.535612][T10539] team0: Port device team_slave_1 added [ 786.559817][ T5786] Bluetooth: hci1: command tx timeout [ 786.950339][T10539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.957441][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.138634][T10539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.214348][T10539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.237708][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.324469][T10539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.681528][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.5.993'. [ 790.121750][T10635] overlayfs: failed to clone lowerpath [ 790.237157][T10539] hsr_slave_0: entered promiscuous mode [ 790.274923][T10539] hsr_slave_1: entered promiscuous mode [ 790.351860][T10539] debugfs: 'hsr0' already exists in 'hsr' [ 790.357750][T10539] Cannot create hsr debugfs directory [ 791.081122][T10645] loop8: detected capacity change from 0 to 512 [ 791.378290][T10645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.496359][T10645] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.721876][T10652] loop7: detected capacity change from 0 to 1024 [ 791.865096][T10652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 792.023133][T10652] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.082404][T10652] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #15: comm syz.7.1001: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 792.108368][ T8899] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.302471][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1002'. [ 792.523326][ T6754] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 792.819861][T10662] loop8: detected capacity change from 0 to 512 [ 792.897933][T10662] EXT4-fs: Ignoring removed oldalloc option [ 793.035954][T10662] EXT4-fs error (device loop8): ext4_iget_extra_inode:5040: inode #15: comm syz.8.1004: corrupted in-inode xattr: invalid ea_ino [ 793.068992][T10662] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 793.078876][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 793.094673][ C1] EXT4-fs (loop8): initial error at time 1776157156: ext4_iget_extra_inode:5040: inode 15 [ 793.104888][ C1] EXT4-fs (loop8): last error at time 1776157156: ext4_iget_extra_inode:5040: inode 15 [ 793.116196][T10662] EXT4-fs (loop8): Remounting filesystem read-only [ 793.124946][T10662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.520732][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1007'. [ 793.852089][ T8899] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.057175][T10680] overlayfs: failed to clone lowerpath [ 796.091025][T10539] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 796.166014][T10539] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 796.305826][T10539] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 796.451518][T10539] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 797.644954][ T57] Bluetooth: hci6: Frame reassembly failed (-84) [ 798.150346][T10539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.296569][T10539] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.418002][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.425528][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.500030][T10699] loop8: detected capacity change from 0 to 8192 [ 798.593142][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.600760][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.681622][ T5786] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 799.681767][T10304] Bluetooth: hci6: command 0x1003 tx timeout [ 799.821296][T10711] loop7: detected capacity change from 0 to 256 [ 799.885847][ T8899] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 799.918320][ T8899] FAT-fs (loop8): Filesystem has been set read-only [ 800.021598][T10711] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 800.155109][T10711] exFAT-fs (loop7): start_clu is invalid cluster(0xffffffff) [ 800.244810][T10711] process 'syz.7.1018' launched './file0' with NULL argv: empty string added [ 803.456332][ T7251] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.723346][ T7251] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.864924][T10539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.983661][ T7251] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.363452][ T7251] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.112797][ T7251] bridge_slave_0: left allmulticast mode [ 805.118632][ T7251] bridge_slave_0: left promiscuous mode [ 805.170243][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.100531][ T7251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.162271][ T7251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.194023][ T7251] bond0 (unregistering): Released all slaves [ 807.061187][ T7251] hsr_slave_0: left promiscuous mode [ 807.089711][ T7251] hsr_slave_1: left promiscuous mode [ 807.097270][ T7251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.200225][ T7251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.251515][ T7251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.318986][ T7251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.433712][ T7251] veth1_macvtap: left promiscuous mode [ 807.469151][ T7251] veth0_macvtap: left promiscuous mode [ 807.511061][ T7251] veth1_vlan: left promiscuous mode [ 807.556345][ T7251] veth0_vlan: left promiscuous mode [ 807.631800][T10766] loop7: detected capacity change from 0 to 128 [ 807.735412][T10304] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 807.755807][T10304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 807.766058][T10304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 807.798935][T10304] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 807.830216][T10304] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 807.832047][T10766] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 808.001486][T10766] FAT-fs (loop7): Filesystem has been set read-only [ 808.036273][T10772] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 809.068633][ T7251] team0 (unregistering): Port device team_slave_1 removed [ 809.104631][ T7251] team0 (unregistering): Port device team_slave_0 removed [ 809.855537][T10763] ip6gre1: entered promiscuous mode [ 809.890088][T10763] ip6gre1: entered allmulticast mode [ 809.919536][ T5786] Bluetooth: hci2: command tx timeout [ 811.227259][T10539] veth0_vlan: entered promiscuous mode [ 811.571601][T10539] veth1_vlan: entered promiscuous mode [ 812.001156][ T5786] Bluetooth: hci2: command tx timeout [ 812.619594][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1039'. [ 812.694478][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1039'. [ 812.719328][T10539] veth0_macvtap: entered promiscuous mode [ 813.156407][T10539] veth1_macvtap: entered promiscuous mode [ 814.079060][ T5786] Bluetooth: hci2: command tx timeout [ 814.231295][T10539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.631676][T10539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.896194][T10768] chnl_net:caif_netlink_parms(): no params data found [ 815.149298][ T34] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.199473][ T34] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.588977][ T34] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.708152][ T34] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.828515][T10833] loop7: detected capacity change from 0 to 256 [ 815.863721][T10833] exfat: Deprecated parameter 'utf8' [ 815.969263][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 815.995078][T10833] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x0119abd0, checksum : 0x1119abd0) [ 816.029353][T10833] exFAT-fs (loop7): invalid boot region [ 816.049554][T10833] exFAT-fs (loop7): failed to recognize exfat type [ 816.160530][ T5786] Bluetooth: hci2: command tx timeout [ 816.222075][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 816.259230][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 816.300593][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 816.363874][ T10] usb 6-1: language id specifier not provided by device, defaulting to English [ 816.431162][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 816.475385][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.509053][ T10] usb 6-1: Product: syz [ 816.513390][ T10] usb 6-1: Manufacturer: syz [ 816.518135][ T10] usb 6-1: SerialNumber: syz [ 816.875168][ T10] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 816.922349][ T10] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 817.057172][T10768] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.077219][T10844] loop7: detected capacity change from 0 to 2048 [ 817.086458][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.137273][T10768] bridge_slave_0: entered allmulticast mode [ 817.190904][T10768] bridge_slave_0: entered promiscuous mode [ 817.265470][T10844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.273753][T10768] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.292814][T10768] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.302429][T10768] bridge_slave_1: entered allmulticast mode [ 817.321540][T10768] bridge_slave_1: entered promiscuous mode [ 817.480689][T10844] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 817.626751][ T10] usb 6-1: USB disconnect, device number 3 [ 817.956830][ T9045] udevd[9045]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.011183][T10768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.107074][T10768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.156459][ T6754] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.249189][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 818.357829][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.378296][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.480795][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 818.533931][T10768] team0: Port device team_slave_0 added [ 818.563044][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 818.587434][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.622525][T10768] team0: Port device team_slave_1 added [ 818.626801][ T10] usb 6-1: Product: syz [ 818.673062][ T10] usb 6-1: Manufacturer: syz [ 818.677830][ T10] usb 6-1: SerialNumber: syz [ 818.999535][T10768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.039475][ T10] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 819.050508][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.199057][T10768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.242580][T10768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.274802][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.394444][T10768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.041332][T10768] hsr_slave_0: entered promiscuous mode [ 820.090321][T10768] hsr_slave_1: entered promiscuous mode [ 820.100736][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 820.141626][T10768] debugfs: 'hsr0' already exists in 'hsr' [ 820.189037][T10768] Cannot create hsr debugfs directory [ 820.201263][ T10] usb 6-1: USB disconnect, device number 4 [ 820.450873][ T9045] udevd[9045]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 822.008128][T10894] loop5: detected capacity change from 0 to 1024 [ 822.277573][T10894] hfsplus: request for non-existent node 3 in B*Tree [ 822.319630][T10894] hfsplus: request for non-existent node 3 in B*Tree [ 822.499047][T10894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.038533][T10768] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 823.161194][T10768] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 823.322311][T10768] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 823.465893][T10768] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 824.117207][ T8428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.168568][ T8428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.408974][T10910] loop7: detected capacity change from 0 to 4096 [ 824.438046][ T8428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.494880][T10910] EXT4-fs (loop7): Test dummy encryption mode enabled [ 824.497623][ T8428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.602808][T10910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.021388][T10918] loop5: detected capacity change from 0 to 512 [ 825.187822][T10768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.310644][T10918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.469534][T10918] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.598479][T10768] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.749751][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.757275][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.957139][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.964697][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.989078][ T5829] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 826.200073][ T5829] usb 7-1: unable to get BOS descriptor or descriptor too short [ 826.262696][ T5829] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 826.267989][ T9836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.309182][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.363785][ T5829] usb 7-1: Product: syz [ 826.368130][ T5829] usb 7-1: Manufacturer: syz [ 826.388953][ T5829] usb 7-1: SerialNumber: syz [ 826.495908][ T5829] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.670026][ T5829] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 826.755803][ T5829] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.880679][ T5829] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 826.993385][ T5829] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 827.819351][ T5829] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 827.927179][ T5829] usb 7-1: USB disconnect, device number 16 [ 828.321935][ T9045] udevd[9045]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.672713][ T6754] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.933603][T10768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.983533][T10956] loop6: detected capacity change from 0 to 1024 [ 832.094232][T10956] hfsplus: request for non-existent node 3 in B*Tree [ 832.129218][T10956] hfsplus: request for non-existent node 3 in B*Tree [ 832.507037][T10956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.992890][T10768] veth0_vlan: entered promiscuous mode [ 834.148520][T10768] veth1_vlan: entered promiscuous mode [ 834.615180][T10768] veth0_macvtap: entered promiscuous mode [ 834.771116][T10768] veth1_macvtap: entered promiscuous mode [ 835.065814][T10988] loop6: detected capacity change from 0 to 128 [ 835.112529][T10768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.375160][T10768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.470927][ T7251] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.569919][ T7251] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.606288][ T7251] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.697299][ T7251] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.197872][T10996] tipc: Can't bind to reserved service type 1 [ 836.987893][ T5786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 836.997854][ T5786] CPU: 0 UID: 0 PID: 5786 Comm: kworker/u9:5 Tainted: G W L syzkaller #0 PREEMPT(full) [ 836.998023][ T5786] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 836.998075][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 836.998188][ T5786] Workqueue: hci1 hci_rx_work [ 836.998409][ T5786] Call Trace: [ 836.998459][ T5786] [ 836.998503][ T5786] __dump_stack+0x26/0x30 [ 836.998650][ T5786] dump_stack_lvl+0x14c/0x1c0 [ 836.998802][ T5786] dump_stack+0x1e/0x25 [ 836.998937][ T5786] sysfs_create_dir_ns+0x46c/0x540 [ 836.999087][ T5786] kobject_add_internal+0x1084/0x19b0 [ 836.999260][ T5786] kobject_add+0x2c1/0x410 [ 836.999425][ T5786] ? kmsan_get_metadata+0xf1/0x160 [ 836.999546][ T5786] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 836.999680][ T5786] device_add+0xa70/0x1c00 [ 836.999824][ T5786] hci_conn_add_sysfs+0x159/0x2e0 [ 837.000042][ T5786] le_conn_complete_evt+0x1de4/0x2340 [ 837.000261][ T5786] hci_le_conn_complete_evt+0x157/0x260 [ 837.000436][ T5786] hci_le_meta_evt+0x6eb/0x960 [ 837.000562][ T5786] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 837.000723][ T5786] hci_event_packet+0xb8c/0x1820 [ 837.000886][ T5786] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 837.001049][ T5786] hci_rx_work+0x8c3/0xfc0 [ 837.001166][ T5786] ? kmsan_get_metadata+0xf1/0x160 [ 837.001290][ T5786] ? __pfx_hci_rx_work+0x10/0x10 [ 837.001407][ T5786] process_scheduled_works+0xb82/0x1e80 [ 837.001615][ T5786] worker_thread+0xee4/0x1590 [ 837.001788][ T5786] kthread+0x53f/0x600 [ 837.001944][ T5786] ? __pfx_worker_thread+0x10/0x10 [ 837.002096][ T5786] ? __pfx_kthread+0x10/0x10 [ 837.002244][ T5786] ret_from_fork+0x20f/0x910 [ 837.002374][ T5786] ? __switch_to+0x51c/0x750 [ 837.002541][ T5786] ? __pfx_kthread+0x10/0x10 [ 837.002689][ T5786] ret_from_fork_asm+0x1a/0x30 [ 837.002873][ T5786] [ 837.193422][ T5786] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 837.207803][ T5786] Bluetooth: hci1: failed to register connection device [ 838.366936][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1078'. [ 839.370412][T11037] loop5: detected capacity change from 0 to 512 [ 839.411816][T11037] EXT4-fs: Ignoring removed orlov option [ 839.453823][T11037] EXT4-fs (loop5): Test dummy encryption mode enabled [ 839.497050][T11037] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 839.605715][T11037] EXT4-fs (loop5): 1 truncate cleaned up [ 839.673001][T11037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.916166][T11073] loop7: detected capacity change from 0 to 256 [ 843.027498][T11083] capability: warning: `syz.7.1089' uses deprecated v2 capabilities in a way that may be insecure [ 843.636114][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.658935][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.125603][ T9836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.327367][T11097] loop7: detected capacity change from 0 to 128 [ 844.364382][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.392712][T11097] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 844.409395][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.583420][T11097] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 844.666276][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.009032][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.434145][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.072253][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.540025][T11123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.177324][ T29] audit: type=1326 audit(1776157210.285:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.9.1100" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x0 [ 847.301183][ T12] bridge_slave_1: left allmulticast mode [ 847.307006][ T12] bridge_slave_1: left promiscuous mode [ 847.363460][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1101'. [ 847.373948][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.429574][ T12] bridge_slave_0: left allmulticast mode [ 847.450037][ T12] bridge_slave_0: left promiscuous mode [ 847.483080][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.955897][T11139] loop5: detected capacity change from 0 to 512 [ 848.103840][T11139] EXT4-fs (loop5): 1 truncate cleaned up [ 848.135273][T11139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.753423][ T9836] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 848.796089][ T9836] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 849.041273][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.141226][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.230067][ T12] bond0 (unregistering): Released all slaves [ 849.710795][ T9836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.605427][ T12] hsr_slave_0: left promiscuous mode [ 850.658623][ T12] hsr_slave_1: left promiscuous mode [ 850.671598][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.725408][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.764133][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.814907][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.925913][ T12] veth1_macvtap: left promiscuous mode [ 850.931604][ T12] veth0_macvtap: left promiscuous mode [ 850.961592][ T12] veth1_vlan: left promiscuous mode [ 850.992212][ T12] veth0_vlan: left promiscuous mode [ 852.366821][ T12] team0 (unregistering): Port device team_slave_1 removed [ 852.489327][ T12] team0 (unregistering): Port device team_slave_0 removed [ 853.412559][T10304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 853.425880][T10304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 853.437086][T10304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 853.466417][T10304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 853.496480][T10304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 854.827932][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.855217][T11194] IPv6: NLM_F_REPLACE set, but no existing node found! [ 855.095322][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.379685][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.584228][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1120'. [ 855.636825][T11201] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1120'. [ 855.671835][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.743805][T10304] Bluetooth: hci0: command tx timeout [ 856.622521][T11180] chnl_net:caif_netlink_parms(): no params data found [ 856.674068][T11210] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1121'. [ 856.934347][ T12] bridge_slave_1: left allmulticast mode [ 856.940195][ T12] bridge_slave_1: left promiscuous mode [ 856.972843][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.115932][ T12] bridge_slave_0: left allmulticast mode [ 857.156334][ T12] bridge_slave_0: left promiscuous mode [ 857.187246][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.967218][T10304] Bluetooth: hci0: command tx timeout [ 858.098655][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.197385][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.232623][ T12] bond0 (unregistering): Released all slaves [ 858.385519][T11221] syz_tun: entered promiscuous mode [ 859.041125][ T12] hsr_slave_0: left promiscuous mode [ 859.136327][ T12] hsr_slave_1: left promiscuous mode [ 859.165693][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.173233][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.241707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.304371][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.485393][ T12] veth1_macvtap: left promiscuous mode [ 859.491076][ T12] veth0_macvtap: left promiscuous mode [ 859.506724][ T12] veth1_vlan: left promiscuous mode [ 859.512208][ T12] veth0_vlan: left promiscuous mode [ 859.584353][T11243] loop9: detected capacity change from 0 to 1024 [ 859.606067][T11243] EXT4-fs: Ignoring removed bh option [ 859.623265][T11243] EXT4-fs: Ignoring removed oldalloc option [ 859.634653][T11243] EXT4-fs: Ignoring removed nobh option [ 859.710285][T11243] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 859.710285][T11243] [ 860.206037][T10304] Bluetooth: hci0: command tx timeout [ 860.349460][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1136'. [ 861.300293][ T12] team0 (unregistering): Port device team_slave_1 removed [ 861.354889][ T12] team0 (unregistering): Port device team_slave_0 removed [ 861.520940][T11269] loop9: detected capacity change from 0 to 512 [ 861.652312][T11269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.137540][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.194611][T11254] bridge_slave_1: left allmulticast mode [ 862.215292][T11254] bridge_slave_1: left promiscuous mode [ 862.243728][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.414447][T10304] Bluetooth: hci0: command tx timeout [ 862.532237][T11180] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.574700][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.582328][T11180] bridge_slave_0: entered allmulticast mode [ 862.630953][T11180] bridge_slave_0: entered promiscuous mode [ 862.673839][T11180] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.704308][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.711915][T11180] bridge_slave_1: entered allmulticast mode [ 862.759617][T11180] bridge_slave_1: entered promiscuous mode [ 863.000061][T11180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.412578][T11180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.862177][T11180] team0: Port device team_slave_0 added [ 865.919597][T11180] team0: Port device team_slave_1 added [ 866.232683][T11180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.239796][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.380368][T11180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.440171][T11180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.502738][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.568974][T11180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.834144][T11294] fuse: Bad value for 'fd' [ 866.899875][T11180] hsr_slave_0: entered promiscuous mode [ 866.929922][T11180] hsr_slave_1: entered promiscuous mode [ 866.990773][T11180] debugfs: 'hsr0' already exists in 'hsr' [ 866.996646][T11180] Cannot create hsr debugfs directory [ 868.047660][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1149'. [ 868.470198][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.478602][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.043495][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.078429][T11313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.338683][T10768] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.844143][ T57] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.950666][ T57] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.137767][ T57] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.186544][ T57] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.274928][T11322] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1153'. [ 870.712584][T11180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 870.814008][T11180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 870.882230][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1155'. [ 870.908928][T11180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 871.040191][T11180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.115696][T11332] random: crng reseeded on system resumption [ 871.747224][ T5836] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 871.952271][T11180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.961668][ T5836] usb 10-1: Using ep0 maxpacket: 16 [ 871.989818][ T5836] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.025112][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.046394][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.068137][ T5836] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 872.077035][T11180] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.089472][ T5836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.120149][ T5836] usb 10-1: config 0 descriptor?? [ 872.141804][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.149466][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.241995][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.249675][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.704212][ T5836] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 872.726127][ T5836] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 872.839059][ T5836] usb 10-1: USB disconnect, device number 4 [ 874.143926][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1163'. [ 874.243092][T11180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.535810][T11354] bridge_slave_1: left allmulticast mode [ 874.554887][T11354] bridge_slave_1: left promiscuous mode [ 874.575910][T11354] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.879653][T11180] veth0_vlan: entered promiscuous mode [ 874.978529][T11180] veth1_vlan: entered promiscuous mode [ 875.369310][T11180] veth0_macvtap: entered promiscuous mode [ 875.474534][T11180] veth1_macvtap: entered promiscuous mode [ 875.672258][T11180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.769438][T11180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.899112][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.931377][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.991843][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.047672][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.590167][ T5829] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 876.799888][ T5829] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 876.849414][ T5829] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.884458][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 876.914682][ T5829] usb 10-1: SerialNumber: syz [ 877.692673][ T5829] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 877.865648][T11371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.926813][T11371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.981035][ T5829] usb 10-1: USB disconnect, device number 5 [ 878.010441][ T5829] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 879.743925][ T5829] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 879.960988][ T5829] usb 10-1: Using ep0 maxpacket: 8 [ 880.004821][ T5829] usb 10-1: unable to get BOS descriptor or descriptor too short [ 880.017257][ T5829] usb 10-1: config 17 has an invalid interface number: 8 but max is 1 [ 880.054239][ T5829] usb 10-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 880.063460][ T5829] usb 10-1: config 17 has no interface number 0 [ 880.107288][ T5829] usb 10-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 880.143261][ T5829] usb 10-1: config 17 interface 8 has no altsetting 0 [ 880.173305][ T5829] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 880.205593][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.246779][ T5829] usb 10-1: Product: syz [ 880.268867][ T5829] usb 10-1: Manufacturer: syz [ 880.284884][ T5829] usb 10-1: SerialNumber: syz [ 880.555476][ T5829] usb 10-1: selecting invalid altsetting 0 [ 881.037298][ T5829] usb 10-1: USB disconnect, device number 6 [ 881.141337][ T9045] udevd[9045]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.364108][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.428365][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.693743][ T8428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.740635][ T8428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.193586][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 882.200168][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.417679][T11424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.563911][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1175'. [ 885.298568][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 885.308097][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 885.318921][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 885.331257][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 885.342341][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 885.663489][ T5786] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 886.752659][T11458] chnl_net:caif_netlink_parms(): no params data found [ 886.889822][T11479] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1187'. [ 887.566204][ T5786] Bluetooth: hci3: command tx timeout [ 887.877365][T11485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.369750][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.401612][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.435275][T11458] bridge_slave_0: entered allmulticast mode [ 888.460795][T11458] bridge_slave_0: entered promiscuous mode [ 888.520582][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.554446][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.584359][T11458] bridge_slave_1: entered allmulticast mode [ 888.614900][T11458] bridge_slave_1: entered promiscuous mode [ 889.055696][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.160046][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.501952][T11500] loop6: detected capacity change from 0 to 512 [ 889.532634][T11458] team0: Port device team_slave_0 added [ 889.575947][T11458] team0: Port device team_slave_1 added [ 889.632689][T11500] EXT4-fs (loop6): Test dummy encryption mode enabled [ 889.639627][T11500] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 889.793661][ T5786] Bluetooth: hci3: command tx timeout [ 889.820137][T11500] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1191: bad orphan inode 131083 [ 889.859370][T11500] loop6: lost filesystem error report for type 5 error -117 [ 889.878258][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 889.892225][ C0] EXT4-fs (loop6): initial error at time 1776157250: ext4_orphan_get:1423 [ 889.901039][ C0] EXT4-fs (loop6): last error at time 1776157250: ext4_orphan_get:1423 [ 889.913603][T11500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.072360][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.079463][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.220453][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.283936][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.308450][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.338027][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.445010][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.810067][T11512] loop6: detected capacity change from 0 to 256 [ 890.873305][T11512] FAT-fs (loop6): Directory bread(block 1285) failed [ 890.915799][T11512] FAT-fs (loop6): Directory bread(block 1286) failed [ 890.957244][T11512] FAT-fs (loop6): Directory bread(block 1287) failed [ 890.982782][T11458] hsr_slave_0: entered promiscuous mode [ 890.991285][T11512] FAT-fs (loop6): Directory bread(block 1288) failed [ 891.046074][T11458] hsr_slave_1: entered promiscuous mode [ 891.086770][T11458] debugfs: 'hsr0' already exists in 'hsr' [ 891.092645][T11458] Cannot create hsr debugfs directory [ 891.104557][T11512] FAT-fs (loop6): Directory bread(block 1285) failed [ 891.128314][T11512] FAT-fs (loop6): Directory bread(block 1286) failed [ 891.161360][T11512] FAT-fs (loop6): Directory bread(block 1287) failed [ 891.206036][T11512] FAT-fs (loop6): Directory bread(block 1288) failed [ 891.225898][T11512] FAT-fs (loop6): Directory bread(block 1285) failed [ 891.232765][T11512] FAT-fs (loop6): Directory bread(block 1286) failed [ 892.006291][ T5786] Bluetooth: hci3: command tx timeout [ 892.692223][T11522] fuse: Unknown parameter 'fd0x0000000000000003' [ 892.998469][ T5786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 893.009127][ T5786] CPU: 0 UID: 0 PID: 5786 Comm: kworker/u9:5 Tainted: G W L syzkaller #0 PREEMPT(full) [ 893.009288][ T5786] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 893.009338][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 893.009429][ T5786] Workqueue: hci2 hci_rx_work [ 893.009547][ T5786] Call Trace: [ 893.009591][ T5786] [ 893.009633][ T5786] __dump_stack+0x26/0x30 [ 893.009776][ T5786] dump_stack_lvl+0x14c/0x1c0 [ 893.009930][ T5786] dump_stack+0x1e/0x25 [ 893.010061][ T5786] sysfs_create_dir_ns+0x46c/0x540 [ 893.010218][ T5786] kobject_add_internal+0x1084/0x19b0 [ 893.010393][ T5786] kobject_add+0x2c1/0x410 [ 893.010552][ T5786] ? kmsan_get_metadata+0xf1/0x160 [ 893.010678][ T5786] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 893.010820][ T5786] device_add+0xa70/0x1c00 [ 893.010962][ T5786] hci_conn_add_sysfs+0x159/0x2e0 [ 893.011135][ T5786] le_conn_complete_evt+0x1de4/0x2340 [ 893.011307][ T5786] hci_le_conn_complete_evt+0x157/0x260 [ 893.011469][ T5786] hci_le_meta_evt+0x6eb/0x960 [ 893.011596][ T5786] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 893.011756][ T5786] hci_event_packet+0xb8c/0x1820 [ 893.011924][ T5786] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 893.012086][ T5786] hci_rx_work+0x8c3/0xfc0 [ 893.012203][ T5786] ? kmsan_get_metadata+0xf1/0x160 [ 893.012326][ T5786] ? __pfx_hci_rx_work+0x10/0x10 [ 893.012445][ T5786] process_scheduled_works+0xb82/0x1e80 [ 893.012645][ T5786] worker_thread+0xee4/0x1590 [ 893.012823][ T5786] kthread+0x53f/0x600 [ 893.012984][ T5786] ? __pfx_worker_thread+0x10/0x10 [ 893.013128][ T5786] ? __pfx_kthread+0x10/0x10 [ 893.013271][ T5786] ret_from_fork+0x20f/0x910 [ 893.013402][ T5786] ? __switch_to+0x51c/0x750 [ 893.013558][ T5786] ? __pfx_kthread+0x10/0x10 [ 893.013705][ T5786] ret_from_fork_asm+0x1a/0x30 [ 893.013886][ T5786] [ 893.210442][ T5786] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 893.225089][ T5786] Bluetooth: hci2: failed to register connection device [ 893.497708][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 893.507251][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 893.516435][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 893.541658][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 893.552782][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 894.372290][ T5786] Bluetooth: hci3: command tx timeout [ 896.186091][ T5786] Bluetooth: hci6: command tx timeout [ 896.401759][T11540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.585409][T11547] loop1: detected capacity change from 0 to 1024 [ 896.786933][T11547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 896.913056][T11547] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.182153][T11555] loop6: detected capacity change from 0 to 512 [ 897.297921][T11555] EXT4-fs (loop6): Test dummy encryption mode enabled [ 897.377481][T11555] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 897.469615][T11555] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1201: bad orphan inode 131083 [ 897.506723][T11555] loop6: lost filesystem error report for type 5 error -117 [ 897.510056][T11555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.591451][T11180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 897.787434][T11458] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 897.887517][T11458] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 898.074944][T11458] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 898.144507][T11458] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 898.160454][T11566] loop1: detected capacity change from 0 to 512 [ 898.322169][T11566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.339025][T10304] Bluetooth: hci6: command tx timeout [ 898.366939][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.489563][T11566] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 899.217619][T11180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.260265][ T5836] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 899.456036][ T5836] usb 7-1: Using ep0 maxpacket: 8 [ 899.515477][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 899.550731][T11532] chnl_net:caif_netlink_parms(): no params data found [ 899.574757][ T5836] usb 7-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 899.638872][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.748768][ T5836] usb 7-1: config 0 descriptor?? [ 900.494725][ T5836] usb 7-1: language id specifier not provided by device, defaulting to English [ 900.560251][T10304] Bluetooth: hci6: command tx timeout [ 900.567318][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.715006][ T5836] uclogic 0003:5543:006E.0008: failed retrieving Huion firmware version: -71 [ 900.774218][ T5836] uclogic 0003:5543:006E.0008: failed probing parameters: -71 [ 900.782210][ T5836] uclogic 0003:5543:006E.0008: probe with driver uclogic failed with error -71 [ 900.899638][ T5836] usb 7-1: USB disconnect, device number 17 [ 900.919718][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.064996][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.072508][ T7251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.525729][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.533249][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.565151][T11605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 902.697427][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.704894][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.784838][T11532] bridge_slave_0: entered allmulticast mode [ 902.824828][T10304] Bluetooth: hci6: command tx timeout [ 902.842118][T11532] bridge_slave_0: entered promiscuous mode [ 902.886055][T11532] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.896688][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.909895][T11532] bridge_slave_1: entered allmulticast mode [ 902.922138][T11532] bridge_slave_1: entered promiscuous mode [ 903.419538][T11532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.855573][T11532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.368868][T11532] team0: Port device team_slave_0 added [ 904.671255][T11532] team0: Port device team_slave_1 added [ 905.559424][T11532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.598444][T11532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.689678][T11532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.727348][T11532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.763575][T11532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.855601][T11532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.288854][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 906.554193][T11532] hsr_slave_0: entered promiscuous mode [ 906.580823][T11532] hsr_slave_1: entered promiscuous mode [ 906.621032][T11532] debugfs: 'hsr0' already exists in 'hsr' [ 906.626909][T11532] Cannot create hsr debugfs directory [ 908.835059][T11659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.581182][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.430784][T11675] loop1: detected capacity change from 0 to 512 [ 911.528381][T11675] EXT4-fs (loop1): Test dummy encryption mode enabled [ 911.535332][T11675] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 911.714073][T11675] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1223: bad orphan inode 131083 [ 911.770858][T11532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 911.796145][T11532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 911.804191][T11675] loop1: lost filesystem error report for type 5 error -117 [ 911.804848][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 911.818959][ C0] EXT4-fs (loop1): initial error at time 1776157270: ext4_orphan_get:1423 [ 911.827744][ C0] EXT4-fs (loop1): last error at time 1776157270: ext4_orphan_get:1423 [ 911.843667][T11675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.928837][T11532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 912.081176][T11532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 912.575385][T11180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.702273][T11532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.074094][T11532] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.209875][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.217362][ T7251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.322271][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.329818][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.410249][T11458] veth0_vlan: entered promiscuous mode [ 914.916814][T11458] veth1_vlan: entered promiscuous mode [ 914.962046][T11710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 917.188407][T11532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 917.883157][T11458] veth0_macvtap: entered promiscuous mode [ 918.060873][T11458] veth1_macvtap: entered promiscuous mode [ 918.384415][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.602011][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.840772][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.908066][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.944400][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.014274][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.091870][T11734] loop6: detected capacity change from 0 to 512 [ 919.104060][T11731] loop1: detected capacity change from 0 to 764 [ 919.203016][T11734] EXT4-fs (loop6): Test dummy encryption mode enabled [ 919.209964][T11734] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 919.240117][T11731] rock: directory entry would overflow storage [ 919.270328][T11731] rock: sig=0x4654, size=5, remaining=4 [ 919.405985][T11734] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1235: bad orphan inode 131083 [ 919.547982][T11734] loop6: lost filesystem error report for type 5 error -117 [ 919.555436][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 919.569784][ C0] EXT4-fs (loop6): initial error at time 1776157278: ext4_orphan_get:1423 [ 919.578564][ C0] EXT4-fs (loop6): last error at time 1776157278: ext4_orphan_get:1423 [ 919.581405][T11734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.007527][T11532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.180834][T11745] loop1: detected capacity change from 0 to 16 [ 920.246915][T11745] erofs (device loop1): invalid ishare xattr prefix id 0 [ 920.294191][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.421010][T11745] overlayfs: overlapping lowerdir path [ 920.756211][T11532] veth0_vlan: entered promiscuous mode [ 921.070992][T11532] veth1_vlan: entered promiscuous mode [ 921.730983][T11532] veth0_macvtap: entered promiscuous mode [ 921.887589][T11532] veth1_macvtap: entered promiscuous mode [ 922.297956][T11532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.461453][T11532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.566596][T11769] futex_wake_op: syz.6.1241 tries to shift op by 32; fix this program [ 922.681277][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.745156][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.791545][T11772] loop1: detected capacity change from 0 to 512 [ 922.874424][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.910605][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.962462][T11772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.984457][T11772] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.283373][T11803] loop6: detected capacity change from 0 to 256 [ 927.420643][ T8428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.421050][T11180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.506051][ T8428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.830880][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.877706][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.920631][ T5886] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 929.169838][ T5886] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 929.201952][ T5886] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.234827][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 929.287798][ T5886] usb 5-1: SerialNumber: syz [ 930.085359][ T5886] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 930.221352][ T5829] usb 5-1: USB disconnect, device number 4 [ 930.233667][ T5829] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 930.607668][T10729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.636354][T10729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.941230][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.949212][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.973440][T11858] netlink: 1700 bytes leftover after parsing attributes in process `syz.0.1194'. [ 932.692135][T11862] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1252'. [ 933.690276][T11867] loop1: detected capacity change from 0 to 764 [ 933.825392][T11867] rock: directory entry would overflow storage [ 933.870276][T11867] rock: sig=0x4654, size=5, remaining=4 [ 933.994952][ T5899] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.598414][ T5899] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.042935][ T5899] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.279487][ T5899] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.389918][ T5829] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 935.637354][ T5829] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 935.706517][ T5829] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.751477][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 935.760609][ T5829] usb 1-1: SerialNumber: syz [ 936.105382][ T5899] bridge_slave_1: left allmulticast mode [ 936.139964][ T5899] bridge_slave_1: left promiscuous mode [ 936.146441][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.366703][ T5899] bridge_slave_0: left allmulticast mode [ 936.395183][T10304] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 936.406324][T10304] CPU: 1 UID: 0 PID: 10304 Comm: kworker/u9:0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 936.406493][T10304] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 936.406550][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 936.406649][T10304] Workqueue: hci0 hci_rx_work [ 936.406771][T10304] Call Trace: [ 936.406814][T10304] [ 936.406862][T10304] __dump_stack+0x26/0x30 [ 936.407010][T10304] dump_stack_lvl+0x14c/0x1c0 [ 936.407158][T10304] dump_stack+0x1e/0x25 [ 936.407287][T10304] sysfs_create_dir_ns+0x46c/0x540 [ 936.407434][T10304] kobject_add_internal+0x1084/0x19b0 [ 936.407609][T10304] kobject_add+0x2c1/0x410 [ 936.407766][T10304] ? kmsan_get_metadata+0xf1/0x160 [ 936.407890][T10304] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 936.408032][T10304] device_add+0xa70/0x1c00 [ 936.408176][T10304] hci_conn_add_sysfs+0x159/0x2e0 [ 936.408344][T10304] le_conn_complete_evt+0x1de4/0x2340 [ 936.408522][T10304] hci_le_conn_complete_evt+0x157/0x260 [ 936.408676][T10304] hci_le_meta_evt+0x6eb/0x960 [ 936.408806][T10304] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 936.408964][T10304] hci_event_packet+0xb8c/0x1820 [ 936.409134][T10304] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 936.409297][T10304] hci_rx_work+0x8c3/0xfc0 [ 936.409416][T10304] ? kmsan_get_metadata+0xf1/0x160 [ 936.409542][T10304] ? __pfx_hci_rx_work+0x10/0x10 [ 936.409661][T10304] process_scheduled_works+0xb82/0x1e80 [ 936.409861][T10304] worker_thread+0xee4/0x1590 [ 936.410043][T10304] kthread+0x53f/0x600 [ 936.410204][T10304] ? __pfx_worker_thread+0x10/0x10 [ 936.410355][T10304] ? __pfx_kthread+0x10/0x10 [ 936.410411][ T5899] bridge_slave_0: left promiscuous mode [ 936.410509][T10304] ret_from_fork+0x20f/0x910 [ 936.410648][T10304] ? __switch_to+0x51c/0x750 [ 936.410812][T10304] ? __pfx_kthread+0x10/0x10 [ 936.410969][T10304] ret_from_fork_asm+0x1a/0x30 [ 936.411159][T10304] [ 936.411312][T10304] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 936.614145][T10304] Bluetooth: hci0: failed to register connection device [ 936.664934][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.854764][ T5829] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 936.922978][ T5829] usb 1-1: USB disconnect, device number 8 [ 937.597285][T11910] loop6: detected capacity change from 0 to 512 [ 937.930496][T11910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.062114][T11915] binder: 11913:11915 ioctl c0306201 80000080 returned -14 [ 938.148510][T11915] binder: 11913:11915 ioctl 4068aea3 0 returned -22 [ 938.172146][T11915] binder: 11913:11915 ioctl c0306201 800003c0 returned -14 [ 938.390101][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.390332][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 938.508015][T11919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1268'. [ 938.533360][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.596203][T11919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1268'. [ 938.645667][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.712478][ T5899] bond0 (unregistering): Released all slaves [ 939.133799][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 940.987223][T11945] loop1: detected capacity change from 0 to 256 [ 941.554369][ T5899] hsr_slave_0: left promiscuous mode [ 941.611133][ T5899] hsr_slave_1: left promiscuous mode [ 941.664299][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.683936][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.765375][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.770655][ T5829] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 941.824119][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.957468][ T5899] veth1_macvtap: left promiscuous mode [ 941.986932][ T5899] veth0_macvtap: left promiscuous mode [ 941.992753][ T5899] veth1_vlan: left promiscuous mode [ 942.009583][ T5899] veth0_vlan: left promiscuous mode [ 942.061258][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 942.137742][ T5829] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.177452][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 942.230337][ T5829] usb 5-1: SerialNumber: syz [ 942.249972][T10304] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 942.823917][ T5829] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 942.946639][ T5829] usb 5-1: USB disconnect, device number 5 [ 943.565123][T11962] loop1: detected capacity change from 0 to 512 [ 943.782336][T11962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.901752][T11962] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.257936][T11180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.647393][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 944.780608][T11973] loop4: detected capacity change from 0 to 16 [ 944.792850][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 944.824091][T11973] erofs (device loop4): mounted with root inode @ nid 36. [ 944.907746][ T29] audit: type=1800 audit(1776157301.730:23): pid=11973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1286" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 944.929424][T11973] erofs (device loop4): bogus i_mode (4355) @ nid 46 [ 947.350073][ T5786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 947.360317][ T5786] CPU: 0 UID: 0 PID: 5786 Comm: kworker/u9:5 Tainted: G W L syzkaller #0 PREEMPT(full) [ 947.360478][ T5786] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 947.360530][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 947.360625][ T5786] Workqueue: hci3 hci_rx_work [ 947.360739][ T5786] Call Trace: [ 947.360784][ T5786] [ 947.360829][ T5786] __dump_stack+0x26/0x30 [ 947.360963][ T5786] dump_stack_lvl+0x14c/0x1c0 [ 947.361104][ T5786] dump_stack+0x1e/0x25 [ 947.361233][ T5786] sysfs_create_dir_ns+0x46c/0x540 [ 947.361375][ T5786] kobject_add_internal+0x1084/0x19b0 [ 947.361549][ T5786] kobject_add+0x2c1/0x410 [ 947.361706][ T5786] ? kmsan_get_metadata+0xf1/0x160 [ 947.361831][ T5786] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 947.361965][ T5786] device_add+0xa70/0x1c00 [ 947.362105][ T5786] hci_conn_add_sysfs+0x159/0x2e0 [ 947.362276][ T5786] le_conn_complete_evt+0x1de4/0x2340 [ 947.362459][ T5786] hci_le_conn_complete_evt+0x157/0x260 [ 947.362616][ T5786] hci_le_meta_evt+0x6eb/0x960 [ 947.362747][ T5786] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 947.362910][ T5786] hci_event_packet+0xb8c/0x1820 [ 947.363070][ T5786] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 947.363231][ T5786] hci_rx_work+0x8c3/0xfc0 [ 947.363351][ T5786] ? kmsan_get_metadata+0xf1/0x160 [ 947.363477][ T5786] ? __pfx_hci_rx_work+0x10/0x10 [ 947.363598][ T5786] process_scheduled_works+0xb82/0x1e80 [ 947.363800][ T5786] worker_thread+0xee4/0x1590 [ 947.363976][ T5786] kthread+0x53f/0x600 [ 947.364132][ T5786] ? __pfx_worker_thread+0x10/0x10 [ 947.364284][ T5786] ? __pfx_kthread+0x10/0x10 [ 947.364438][ T5786] ret_from_fork+0x20f/0x910 [ 947.364572][ T5786] ? __switch_to+0x51c/0x750 [ 947.364725][ T5786] ? __pfx_kthread+0x10/0x10 [ 947.364874][ T5786] ret_from_fork_asm+0x1a/0x30 [ 947.365053][ T5786] [ 947.556219][ T5786] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 947.571125][ T5786] Bluetooth: hci3: failed to register connection device [ 947.897933][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 947.905687][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 948.766354][T12002] netlink: 'syz.4.1294': attribute type 21 has an invalid length. [ 950.657605][ T7251] bridge_slave_0: left allmulticast mode [ 950.663418][ T7251] bridge_slave_0: left promiscuous mode [ 950.730398][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.531580][T12024] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1302'. [ 951.599976][ T7251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.728772][ T7251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.787157][ T7251] bond0 (unregistering): Released all slaves [ 952.095799][T10304] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 952.488936][T12045] loop4: detected capacity change from 0 to 256 [ 952.888338][T12045] FAT-fs (loop4): Directory bread(block 64) failed [ 952.967127][T12045] FAT-fs (loop4): Directory bread(block 65) failed [ 953.029123][T12045] FAT-fs (loop4): Directory bread(block 66) failed [ 953.035829][T12045] FAT-fs (loop4): Directory bread(block 67) failed [ 953.113553][T12045] FAT-fs (loop4): Directory bread(block 68) failed [ 953.120256][T12045] FAT-fs (loop4): Directory bread(block 69) failed [ 953.136147][ T7251] hsr_slave_0: left promiscuous mode [ 953.147777][T10942] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 953.186209][ T7251] hsr_slave_1: left promiscuous mode [ 953.200796][T12045] FAT-fs (loop4): Directory bread(block 70) failed [ 953.207478][T12045] FAT-fs (loop4): Directory bread(block 71) failed [ 953.228956][ T7251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.278435][ T7251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.287591][T12045] FAT-fs (loop4): Directory bread(block 72) failed [ 953.294298][T12045] FAT-fs (loop4): Directory bread(block 73) failed [ 953.377297][T10942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 953.439356][T10942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.626341][T10942] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 953.652922][T10942] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 953.690560][T10942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.735786][T10942] usb 7-1: config 0 descriptor?? [ 954.266038][T10942] hid_parser_main: 27 callbacks suppressed [ 954.266127][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.332729][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.388753][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.411517][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.447034][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.482502][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.489693][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.563191][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.616182][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.657757][T10942] elecom 0003:056E:00E6.0009: unknown main item tag 0x0 [ 954.787444][T10942] elecom 0003:056E:00E6.0009: hidraw0: USB HID v0.08 Device [HID 056e:00e6] on usb-dummy_hcd.6-1/input0 [ 954.849184][T12070] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.1317'. [ 954.938282][T10942] usb 7-1: USB disconnect, device number 18 [ 955.282425][T12073] kvm: requested 21790 ns i8254 timer period limited to 200000 ns [ 955.346652][T12073] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 955.391075][T12073] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 955.412857][ T7251] team0 (unregistering): Port device team_slave_1 removed [ 955.474309][T12073] kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 955.554669][T12073] kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 955.605746][ T7251] team0 (unregistering): Port device team_slave_0 removed [ 955.664979][T12073] kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 955.727614][T12073] kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 955.828620][T12073] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 955.862751][T12073] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 955.884126][T12078] fido_id[12078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 956.652863][T12090] netlink: 'syz.6.1323': attribute type 10 has an invalid length. [ 956.660848][T12090] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1323'. [ 957.240101][ T5786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 957.249887][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: kworker/u9:5 Tainted: G W L syzkaller #0 PREEMPT(full) [ 957.250047][ T5786] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 957.250095][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 957.250189][ T5786] Workqueue: hci6 hci_rx_work [ 957.250315][ T5786] Call Trace: [ 957.250359][ T5786] [ 957.250404][ T5786] __dump_stack+0x26/0x30 [ 957.250551][ T5786] dump_stack_lvl+0x14c/0x1c0 [ 957.250701][ T5786] dump_stack+0x1e/0x25 [ 957.250831][ T5786] sysfs_create_dir_ns+0x46c/0x540 [ 957.250988][ T5786] kobject_add_internal+0x1084/0x19b0 [ 957.251164][ T5786] kobject_add+0x2c1/0x410 [ 957.251321][ T5786] ? kmsan_get_metadata+0xf1/0x160 [ 957.251445][ T5786] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 957.251581][ T5786] device_add+0xa70/0x1c00 [ 957.251725][ T5786] hci_conn_add_sysfs+0x159/0x2e0 [ 957.251902][ T5786] le_conn_complete_evt+0x1de4/0x2340 [ 957.252079][ T5786] hci_le_conn_complete_evt+0x157/0x260 [ 957.252237][ T5786] hci_le_meta_evt+0x6eb/0x960 [ 957.252365][ T5786] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 957.252525][ T5786] hci_event_packet+0xb8c/0x1820 [ 957.252703][ T5786] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 957.252867][ T5786] hci_rx_work+0x8c3/0xfc0 [ 957.252992][ T5786] ? kmsan_get_metadata+0xf1/0x160 [ 957.253116][ T5786] ? __pfx_hci_rx_work+0x10/0x10 [ 957.253237][ T5786] process_scheduled_works+0xb82/0x1e80 [ 957.253464][ T5786] worker_thread+0xee4/0x1590 [ 957.253637][ T5786] kthread+0x53f/0x600 [ 957.253852][ T5786] ? __pfx_worker_thread+0x10/0x10 [ 957.254016][ T5786] ? __pfx_kthread+0x10/0x10 [ 957.254167][ T5786] ret_from_fork+0x20f/0x910 [ 957.254305][ T5786] ? __switch_to+0x51c/0x750 [ 957.254469][ T5786] ? __pfx_kthread+0x10/0x10 [ 957.254625][ T5786] ret_from_fork_asm+0x1a/0x30 [ 957.254807][ T5786] [ 957.434557][ T5786] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 957.448838][ T5786] Bluetooth: hci6: failed to register connection device [ 959.125158][T12126] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1335'. [ 960.923823][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1344'. [ 960.992729][ T5786] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 961.170559][T12162] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1345'. [ 961.211120][T12161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 963.753622][T12183] loop1: detected capacity change from 0 to 512 [ 963.806801][T12183] EXT4-fs: Ignoring removed nobh option [ 963.812564][T12183] EXT4-fs: Ignoring removed mblk_io_submit option [ 963.844221][T12182] loop4: detected capacity change from 0 to 512 [ 963.921190][T12183] EXT4-fs (loop1): orphan cleanup on readonly fs [ 963.945415][T12183] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 964.015209][T12182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.092957][T12183] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1354: attempt to clear invalid blocks 2 len 1 [ 964.093408][T12182] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 964.176421][T12183] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 964.178057][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 964.193926][ C0] EXT4-fs (loop1): initial error at time 1776157319: ext4_clear_blocks:876: inode 13 [ 964.203714][ C0] EXT4-fs (loop1): last error at time 1776157319: ext4_clear_blocks:876: inode 13 [ 964.213354][T12183] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 964.283013][T12183] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1354: invalid indirect mapped block 1819239214 (level 0) [ 964.353132][T12183] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 964.354311][T12183] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1354: invalid indirect mapped block 1819239214 (level 1) [ 964.456424][T12183] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 964.478123][T12183] EXT4-fs (loop1): 1 truncate cleaned up [ 964.539589][T12183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 964.619019][T11458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.715141][T12183] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 965.158335][T11180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.672222][ T5786] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 965.703912][T12208] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1362'. [ 965.838916][T12210] loop1: detected capacity change from 0 to 2048 [ 965.952218][T12210] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec028, mo2=0002] [ 965.963843][T12210] System zones: 0-4 [ 965.996130][T12210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.015237][T12210] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.248648][T12210] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #16: comm syz.1.1361: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 966.831688][T12210] EXT4-fs (loop1): Remounting filesystem read-only [ 968.585193][T11180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.262055][ T5786] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 984.945877][T12306] syz.0.1389 uses obsolete (PF_INET,SOCK_PACKET) [ 985.344122][T10304] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 988.493009][T10304] Bluetooth: hci0: command 0x0406 tx timeout [ 1001.449334][T12510] fuse: Bad value for 'user_id' [ 1001.466104][T12510] fuse: Bad value for 'user_id' [ 1003.535630][T12531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1003.674816][T12535] loop4: detected capacity change from 0 to 1024 [ 1003.787312][T12535] hfsplus: request for non-existent node 3 in B*Tree [ 1003.816227][T12535] hfsplus: request for non-existent node 3 in B*Tree [ 1003.970451][T12535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.388092][ T29] audit: type=1326 audit(1776157360.183:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.9.1411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1007.498458][ T29] audit: type=1326 audit(1776157360.183:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.9.1411" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 1007.684864][T12555] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1414'. [ 1007.702251][T12558] loop6: detected capacity change from 0 to 512 [ 1007.995225][T12558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.031860][T12567] fuse: Bad value for 'user_id' [ 1008.036877][T12567] fuse: Bad value for 'user_id' [ 1008.071297][T12558] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.279950][T12575] EXT4-fs (loop6): shut down requested (0) [ 1008.733246][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.753885][T12582] IPVS: Error connecting to the multicast addr [ 1009.946300][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 1010.597603][T12609] fuse: Bad value for 'fd' [ 1010.662588][T12610] loop4: detected capacity change from 0 to 512 [ 1010.718120][T12610] EXT4-fs: Ignoring removed orlov option [ 1010.914102][T12610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.078355][T12610] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.335481][T12610] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.1429: corrupted inode contents [ 1011.450774][T12610] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #2: comm syz.4.1429: mark_inode_dirty error [ 1011.548805][T12610] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.1429: corrupted inode contents [ 1011.613232][T12610] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1429: mark_inode_dirty error [ 1011.723960][T12622] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.1429: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 1011.723960][T12622] [ 1011.837061][T12622] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.1429: corrupted inode contents [ 1011.895698][T12622] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.1429: mark_inode_dirty error [ 1011.955568][T12622] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 1012.020345][T12624] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.1429: corrupted inode contents [ 1012.076277][T12624] EXT4-fs error (device loop4): add_dirent_to_buf:2151: inode #2: comm syz.4.1429: mark_inode_dirty error [ 1012.228070][T12634] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1434'. [ 1012.473159][T11458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.599042][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1013.605798][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1013.837648][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 1013.901086][T12659] fuse: Bad value for 'fd' [ 1014.149091][T12656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1014.325843][T12663] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 1020.479259][T12734] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 1021.245374][T10304] Bluetooth: hci3: command 0x0406 tx timeout [ 1021.828098][T12742] loop4: detected capacity change from 0 to 1024 [ 1021.955546][T12742] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1022.087925][T12742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1022.711461][T11458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.920068][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 1025.981105][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1489'. [ 1026.710441][T10304] Bluetooth: hci6: command 0x0406 tx timeout [ 1030.003996][T12809] loop4: detected capacity change from 0 to 512 [ 1030.228276][T12809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1030.317391][T12812] loop6: detected capacity change from 0 to 1024 [ 1030.345950][T12809] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.377556][T12812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1030.566226][T12812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.872925][T11458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1031.055125][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.831854][T12836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1505'. [ 1035.289363][T12874] loop1: detected capacity change from 0 to 128 [ 1035.427668][T12874] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1035.536002][T12874] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.588772][T12880] loop6: detected capacity change from 0 to 764 [ 1035.677739][T12880] rock: directory entry would overflow storage [ 1035.684024][T12880] rock: sig=0x4654, size=5, remaining=4 [ 1035.799012][ T29] audit: type=1800 audit(1776157386.767:26): pid=12874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1518" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 1035.888498][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1520'. [ 1036.019346][ T5786] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1036.240108][T11180] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1036.491781][T12893] loop4: detected capacity change from 0 to 2048 [ 1036.611522][T12893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.052626][T11458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.787342][T12929] loop4: detected capacity change from 0 to 764 [ 1038.859927][T12929] rock: directory entry would overflow storage [ 1038.880026][T12929] rock: sig=0x4654, size=5, remaining=4 [ 1038.963550][T12929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1537'. [ 1039.172060][T10304] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1043.134749][T12967] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1552'. [ 1043.190704][T12966] loop1: detected capacity change from 0 to 512 [ 1043.824740][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1554'. [ 1044.138920][T10304] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1050.104178][T13020] loop6: detected capacity change from 0 to 512 [ 1050.390124][T13020] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1050.515427][T13020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1050.523903][T13020] System zones: 0-1, 15-15, 18-18, 34-34 [ 1050.594345][T13020] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1050.624598][T13020] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1565: bg 0: block 40: padding at end of block bitmap is not set [ 1050.735447][T13020] loop6: lost filesystem error report for type 5 error -117 [ 1050.739882][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1050.753938][ C1] EXT4-fs (loop6): initial error at time 1776157400: ext4_validate_block_bitmap:441 [ 1050.763561][ C1] EXT4-fs (loop6): last error at time 1776157400: ext4_validate_block_bitmap:441 [ 1050.773576][T13020] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1050.782428][T13020] loop6: lost filesystem error report for type 5 error -117 [ 1050.831056][T13020] EXT4-fs (loop6): 1 truncate cleaned up [ 1050.880914][T13020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1051.030746][T13020] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.1565: bad symlink. [ 1051.246093][T13031] bridge_slave_0: left allmulticast mode [ 1051.271470][T13031] bridge_slave_0: left promiscuous mode [ 1051.307653][T13031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.347989][T10304] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1051.374239][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.377964][T13031] bridge_slave_1: left allmulticast mode [ 1051.389805][T13031] bridge_slave_1: left promiscuous mode [ 1051.399865][T13031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.553879][T13031] bond0: (slave bond_slave_0): Releasing backup interface [ 1051.640470][T13031] bond0: (slave bond_slave_1): Releasing backup interface [ 1051.814131][T13031] team0: Port device team_slave_0 removed [ 1051.908457][T13031] team0: Port device team_slave_1 removed [ 1052.014815][T13031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.022362][T13031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.125713][T13031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.162088][T13031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.243081][T13031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1052.730007][T13042] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1573'. [ 1056.975063][T13073] fuse: Unknown parameter 'use00000000000000000000' [ 1062.350643][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1062.373864][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1062.420074][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1062.651666][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1062.693417][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1063.483467][T13116] fuse: Unknown parameter 'use00000000000000000000' [ 1064.731898][T13111] chnl_net:caif_netlink_parms(): no params data found [ 1064.940696][T10304] Bluetooth: hci4: command tx timeout [ 1065.058963][ T5899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.372590][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1601'. [ 1065.596024][ T5899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.975724][ T5899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.255564][ T5899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.372328][T10304] Bluetooth: hci4: command tx timeout [ 1068.173434][T13161] fuse: Unknown parameter 'user_i00000000000000000000' [ 1068.331466][T13111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.508184][T13111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.909011][T13111] bridge_slave_0: entered allmulticast mode [ 1068.919038][T13111] bridge_slave_0: entered promiscuous mode [ 1068.934105][T13111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.942382][T13111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.968021][T13111] bridge_slave_1: entered allmulticast mode [ 1068.976968][T13111] bridge_slave_1: entered promiscuous mode [ 1069.555589][T10304] Bluetooth: hci4: command tx timeout [ 1069.569878][T13111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.676005][T13111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.046179][T13111] team0: Port device team_slave_0 added [ 1070.110960][T13111] team0: Port device team_slave_1 added [ 1070.238241][ T5899] bridge_slave_1: left allmulticast mode [ 1070.250365][ T5899] bridge_slave_1: left promiscuous mode [ 1070.256847][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.290417][ T794] IPVS: starting estimator thread 0... [ 1070.410944][T13176] IPVS: using max 240 ests per chain, 12000 per kthread [ 1070.420477][T13175] loop4: detected capacity change from 0 to 512 [ 1070.459291][T13175] EXT4-fs: Ignoring removed orlov option [ 1070.542325][ T5899] bridge_slave_0: left allmulticast mode [ 1070.571435][ T5899] bridge_slave_0: left promiscuous mode [ 1070.577642][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.819269][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 1070.840854][T13175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.946910][T13175] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.075213][T13175] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.1610: corrupted inode contents [ 1071.156248][T13175] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #2: comm syz.4.1610: mark_inode_dirty error [ 1071.227048][T13175] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.1610: corrupted inode contents [ 1071.374536][T13175] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1610: mark_inode_dirty error [ 1071.449701][T13187] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.1610: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 1071.449701][T13187] [ 1071.513598][T13187] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #2: comm syz.4.1610: corrupted inode contents [ 1071.549054][T13187] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.1610: mark_inode_dirty error [ 1071.617839][T13187] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 1071.779178][T10304] Bluetooth: hci4: command tx timeout [ 1071.911742][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.957296][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.988278][ T5899] bond0 (unregistering): Released all slaves [ 1072.040681][ T5899] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 1072.084404][ T5899] bond1 (unregistering): Released all slaves [ 1072.344219][T13111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.389331][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.634496][T13111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.876950][T13111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.884230][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.944411][T13111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.246953][T13207] sit1: entered allmulticast mode [ 1074.819341][T13213] loop1: detected capacity change from 0 to 128 [ 1075.027698][T13111] hsr_slave_0: entered promiscuous mode [ 1075.048914][T13111] hsr_slave_1: entered promiscuous mode [ 1075.197346][ T5899] hsr_slave_0: left promiscuous mode [ 1075.210404][ T5899] hsr_slave_1: left promiscuous mode [ 1075.220678][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.272589][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.326484][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.378912][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.473402][ T5899] veth1_macvtap: left promiscuous mode [ 1075.485777][ T5899] veth0_macvtap: left promiscuous mode [ 1075.505226][ T5899] veth1_vlan: left promiscuous mode [ 1075.530788][ T5899] veth0_vlan: left promiscuous mode [ 1077.970626][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 1078.069241][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 1078.524265][T13229] loop1: detected capacity change from 0 to 764 [ 1078.664159][T13216] gretap0: entered promiscuous mode [ 1078.707460][T13229] Symlink component flag not implemented [ 1078.713402][T13229] Symlink component flag not implemented (122) [ 1079.245176][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.251889][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1079.856638][T13234] loop6: detected capacity change from 0 to 2048 [ 1079.912597][T13234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1080.154031][T13234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.381716][T13246] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.1633: corrupted in-inode xattr: invalid ea_ino [ 1080.451600][T13246] EXT4-fs (loop6): Remounting filesystem read-only [ 1080.943246][T11458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.960763][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.240656][T13111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1082.321845][T13111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1082.401767][T13111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1082.597198][T13111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1084.144022][T13111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.311986][T13111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.375742][T13304] loop6: detected capacity change from 0 to 512 [ 1084.465766][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.473252][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.499374][T13304] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1084.630609][T13304] EXT4-fs (loop6): 1 truncate cleaned up [ 1084.637604][T13304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1084.740546][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.748065][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.232799][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.868704][T13324] netlink: 'syz.1.1661': attribute type 10 has an invalid length. [ 1085.935634][T13324] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1661'. [ 1085.966686][T13321] loop6: detected capacity change from 0 to 1024 [ 1086.182981][T13321] hfsplus: request for non-existent node 3 in B*Tree [ 1086.245507][T13321] hfsplus: request for non-existent node 3 in B*Tree [ 1086.523355][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.759298][T13335] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1664'. [ 1087.410315][T13111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.445239][T13343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1665'. [ 1087.993981][T13111] veth0_vlan: entered promiscuous mode [ 1088.182265][T13111] veth1_vlan: entered promiscuous mode [ 1088.426505][T13354] syzkaller0: entered promiscuous mode [ 1088.432141][T13354] syzkaller0: entered allmulticast mode [ 1089.479567][T13371] IPVS: Unknown mcast interface: wg2 [ 1089.684636][T13111] veth0_macvtap: entered promiscuous mode [ 1089.779956][T13111] veth1_macvtap: entered promiscuous mode [ 1089.932824][T13374] netlink: 'syz.9.1673': attribute type 10 has an invalid length. [ 1089.973931][T13374] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1673'. [ 1090.037137][T13111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.232344][T13111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.368742][ T132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.442318][ T132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.505702][ T132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.602961][ T132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.665393][T13381] loop6: detected capacity change from 0 to 1024 [ 1090.768887][T13381] EXT4-fs: Ignoring removed mblk_io_submit option [ 1090.943612][T13381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1090.984918][T13388] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1091.107845][T13384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.202539][T13381] EXT4-fs (loop6): shut down requested (2) [ 1091.497215][T10539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.107137][T13420] netlink: 'syz.1.1685': attribute type 10 has an invalid length. [ 1093.129089][T13420] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1685'. [ 1093.188686][T13421] fuse: Bad value for 'fd' [ 1094.548651][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1690'. [ 1094.601599][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1690'. [ 1095.661036][T13465] netlink: 'syz.6.1696': attribute type 10 has an invalid length. [ 1095.735808][T13465] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1696'. [ 1096.369952][T13470] fuse: Bad value for 'fd' [ 1097.004555][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.036971][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.316841][ T5898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.343327][ T5898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.082883][ T29] audit: type=1326 audit(1776157445.005:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.3.1591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1098.177917][T13499] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1705'. [ 1098.211725][T13498] loop1: detected capacity change from 0 to 256 [ 1098.218856][ T29] audit: type=1326 audit(1776157445.061:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.3.1591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=303 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1098.230270][T13499] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1705'. [ 1098.306734][ T29] audit: type=1326 audit(1776157445.061:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.3.1591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1098.437877][ T29] audit: type=1326 audit(1776157445.061:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.3.1591" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1098.941666][T13509] netlink: 'syz.3.1708': attribute type 10 has an invalid length. [ 1099.008459][T13509] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1708'. [ 1099.212976][T13511] fuse: Bad value for 'fd' [ 1100.866615][T10304] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1100.988727][T13539] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1721'. [ 1101.026159][T13539] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1721'. [ 1101.109976][T13544] netlink: 'syz.9.1723': attribute type 10 has an invalid length. [ 1101.176939][T13544] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1102.074349][T13563] loop1: detected capacity change from 0 to 512 [ 1102.155946][T13563] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1102.187324][T13563] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1102.243437][T13563] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1102.315509][T13563] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1102.346918][T13563] System zones: 0-2, 18-18, 34-35 [ 1102.356102][T13563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1102.755019][T11180] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.036900][T13578] loop3: detected capacity change from 0 to 1024 [ 1103.279369][T13578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.295575][T13587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1737'. [ 1103.338230][T13578] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.411891][T13578] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.1733: path /7/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 1103.493282][T13591] netlink: 'syz.6.1736': attribute type 10 has an invalid length. [ 1103.500758][T13578] EXT4-fs (loop3): Remounting filesystem read-only [ 1103.609314][T13591] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1736'. [ 1103.679798][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 1103.745357][T13587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.945695][T13111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1104.136099][T13595] loop1: detected capacity change from 0 to 1024 [ 1104.289554][T13595] hfsplus: request for non-existent node 3 in B*Tree [ 1104.344842][T13595] hfsplus: request for non-existent node 3 in B*Tree [ 1104.533281][T13595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.030868][T13604] loop3: detected capacity change from 0 to 4096 [ 1105.180017][T13604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.303148][ T29] audit: type=1800 audit(1776157451.777:31): pid=13604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1741" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 1105.775744][T13111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.343946][T13635] netlink: 'syz.4.1753': attribute type 10 has an invalid length. [ 1106.372820][T13637] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1752'. [ 1106.401307][T13635] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1753'. [ 1107.939672][T13658] loop3: detected capacity change from 0 to 1024 [ 1108.163620][T13658] hfsplus: request for non-existent node 3 in B*Tree [ 1108.191895][T13658] hfsplus: request for non-existent node 3 in B*Tree [ 1108.352430][T13658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.662792][T13670] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1764'. [ 1108.862131][T13673] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1765'. [ 1108.879620][T13674] netlink: 'syz.9.1766': attribute type 10 has an invalid length. [ 1108.938925][T13674] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1766'. [ 1109.329951][T13680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1768'. [ 1109.746515][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 1109.825157][T13680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.245895][T13693] sit1: entered allmulticast mode [ 1111.445433][T13718] netlink: 'syz.9.1782': attribute type 10 has an invalid length. [ 1111.478405][T13718] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1782'. [ 1111.501980][T13717] loop6: detected capacity change from 0 to 1024 [ 1111.627477][T13717] hfsplus: request for non-existent node 3 in B*Tree [ 1111.680069][T13717] hfsplus: request for non-existent node 3 in B*Tree [ 1111.940859][T13717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.369711][T13729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1786'. [ 1113.387481][T13744] syzkaller0: entered promiscuous mode [ 1113.425208][T13744] syzkaller0: entered allmulticast mode [ 1113.532699][T13750] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1113.570766][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1792'. [ 1113.705679][T13754] netlink: 'syz.4.1795': attribute type 10 has an invalid length. [ 1113.714353][T13754] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1795'. [ 1117.279357][T13780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1803'. [ 1118.160307][T13798] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 1118.169343][T13796] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1807'. [ 1118.191238][T13798] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1809'. [ 1119.054560][T13810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.078152][T13813] mac80211_hwsim hwsim41 ÿ: renamed from wlan1 (while UP) [ 1119.177806][T13813] ===================================================== [ 1119.185223][T13813] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1119.193654][T13813] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1119.199562][T13813] do_xdp_generic+0xe07/0x17f0 [ 1119.204574][T13813] tun_get_user+0x525a/0x7830 [ 1119.209459][T13813] tun_chr_write_iter+0x3e9/0x5c0 [ 1119.214729][T13813] vfs_write+0xbe1/0x15c0 [ 1119.219218][T13813] ksys_write+0x1d9/0x470 [ 1119.223723][T13813] __ia32_sys_write+0x9a/0xf0 [ 1119.228726][T13813] ia32_sys_call+0x37a7/0x4360 [ 1119.233713][T13813] do_int80_emulation+0x15a/0x330 [ 1119.239007][T13813] asm_int80_emulation+0x1f/0x30 [ 1119.244090][T13813] [ 1119.246602][T13813] Uninit was stored to memory at: [ 1119.251937][T13813] pskb_expand_head+0x4a0/0x1e00 [ 1119.257187][T13813] do_xdp_generic+0xb30/0x17f0 [ 1119.262114][T13813] tun_get_user+0x525a/0x7830 [ 1119.267117][T13813] tun_chr_write_iter+0x3e9/0x5c0 [ 1119.272303][T13813] vfs_write+0xbe1/0x15c0 [ 1119.276815][T13813] ksys_write+0x1d9/0x470 [ 1119.281451][T13813] __ia32_sys_write+0x9a/0xf0 [ 1119.286294][T13813] ia32_sys_call+0x37a7/0x4360 [ 1119.291342][T13813] do_int80_emulation+0x15a/0x330 [ 1119.296496][T13813] asm_int80_emulation+0x1f/0x30 [ 1119.301698][T13813] [ 1119.304083][T13813] Uninit was created at: [ 1119.308543][T13813] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 1119.315336][T13813] __alloc_skb+0x90d/0x1190 [ 1119.320078][T13813] alloc_skb_with_frags+0xc5/0xa60 [ 1119.325400][T13813] sock_alloc_send_pskb+0xacb/0xc60 [ 1119.330942][T13813] tun_get_user+0xcfc/0x7830 [ 1119.335687][T13813] tun_chr_write_iter+0x3e9/0x5c0 [ 1119.340884][T13813] vfs_write+0xbe1/0x15c0 [ 1119.345519][T13813] ksys_write+0x1d9/0x470 [ 1119.350008][T13813] __ia32_sys_write+0x9a/0xf0 [ 1119.354994][T13813] ia32_sys_call+0x37a7/0x4360 [ 1119.359883][T13813] do_int80_emulation+0x15a/0x330 [ 1119.365177][T13813] asm_int80_emulation+0x1f/0x30 [ 1119.370250][T13813] [ 1119.372664][T13813] CPU: 1 UID: 0 PID: 13813 Comm: syz.6.1814 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1119.383908][T13813] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1119.389264][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1119.399574][T13813] ===================================================== [ 1119.406671][T13813] Disabling lock debugging due to kernel taint [ 1119.412904][T13813] Kernel panic - not syncing: kmsan.panic set ... [ 1119.419433][T13813] CPU: 1 UID: 0 PID: 13813 Comm: syz.6.1814 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 1119.430553][T13813] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1119.437048][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1119.447208][T13813] Call Trace: [ 1119.450561][T13813] [ 1119.453568][T13813] __dump_stack+0x26/0x30 [ 1119.458056][T13813] dump_stack_lvl+0x50/0x1c0 [ 1119.462800][T13813] ? dump_stack+0x12/0x25 [ 1119.467287][T13813] dump_stack+0x1e/0x25 [ 1119.471598][T13813] vpanic+0x7b4/0x1430 [ 1119.475848][T13813] panic+0x15d/0x160 [ 1119.479950][T13813] kmsan_report+0x31a/0x320 [ 1119.484582][T13813] ? __msan_warning+0x1b/0x30 [ 1119.489435][T13813] ? bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1119.495508][T13813] ? do_xdp_generic+0xe07/0x17f0 [ 1119.500614][T13813] ? tun_get_user+0x525a/0x7830 [ 1119.505633][T13813] ? tun_chr_write_iter+0x3e9/0x5c0 [ 1119.510996][T13813] ? vfs_write+0xbe1/0x15c0 [ 1119.515668][T13813] ? ksys_write+0x1d9/0x470 [ 1119.520338][T13813] ? __ia32_sys_write+0x9a/0xf0 [ 1119.525359][T13813] ? ia32_sys_call+0x37a7/0x4360 [ 1119.530424][T13813] ? do_int80_emulation+0x15a/0x330 [ 1119.535735][T13813] ? asm_int80_emulation+0x1f/0x30 [ 1119.540979][T13813] ? ___bpf_prog_run+0xe958/0xea90 [ 1119.546251][T13813] ? __bpf_prog_run32+0xc2/0xf0 [ 1119.551243][T13813] ? kmsan_get_metadata+0xf1/0x160 [ 1119.556486][T13813] __msan_warning+0x1b/0x30 [ 1119.561144][T13813] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 1119.567031][T13813] ? pskb_expand_head+0x1ab9/0x1e00 [ 1119.572434][T13813] do_xdp_generic+0xe07/0x17f0 [ 1119.577412][T13813] ? tun_get_user+0x51dc/0x7830 [ 1119.582423][T13813] tun_get_user+0x525a/0x7830 [ 1119.587251][T13813] ? stack_depot_save_flags+0x35/0x790 [ 1119.592879][T13813] ? kmsan_get_metadata+0xf1/0x160 [ 1119.598102][T13813] ? kmsan_get_metadata+0xf1/0x160 [ 1119.603329][T13813] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1119.609849][T13813] ? kmsan_get_metadata+0xe0/0x160 [ 1119.615118][T13813] tun_chr_write_iter+0x3e9/0x5c0 [ 1119.620308][T13813] vfs_write+0xbe1/0x15c0 [ 1119.624813][T13813] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1119.630520][T13813] ksys_write+0x1d9/0x470 [ 1119.635019][T13813] __ia32_sys_write+0x9a/0xf0 [ 1119.639874][T13813] ia32_sys_call+0x37a7/0x4360 [ 1119.644754][T13813] do_int80_emulation+0x15a/0x330 [ 1119.649894][T13813] ? clear_bhb_loop+0x50/0xa0 [ 1119.654699][T13813] ? clear_bhb_loop+0x50/0xa0 [ 1119.659503][T13813] asm_int80_emulation+0x1f/0x30 [ 1119.664559][T13813] RIP: 0023:0xf7115cab [ 1119.668712][T13813] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1119.688451][T13813] RSP: 002b:00000000f53cd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1119.696990][T13813] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000280 [ 1119.705056][T13813] RDX: 0000000000000dd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1119.713111][T13813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1119.721164][T13813] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1119.729222][T13813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1119.737306][T13813] [ 1119.740724][T13813] Kernel Offset: disabled [ 1119.745095][T13813] Rebooting in 86400 seconds..