last executing test programs: 7m10.076838524s ago: executing program 4 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x409}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$kcm(r1, 0x0, 0x24014004) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400000) openat$uhid(0xffffffffffffff9c, 0x0, 0x6, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f00000000c0)={0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e746572000400028014"], 0xe4}}, 0x0) 7m8.825681322s ago: executing program 4 (id=165): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) 7m7.564167085s ago: executing program 4 (id=172): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002640)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmmsg$inet(r7, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000003c0)=0xc26080b) 7m6.170571283s ago: executing program 4 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x409}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$kcm(r1, 0x0, 0x24014004) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400000) openat$uhid(0xffffffffffffff9c, 0x0, 0x6, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f00000000c0)={0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e746572000400028014000180"], 0xe4}}, 0x0) 7m5.876334502s ago: executing program 4 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 7m5.197738399s ago: executing program 4 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)="1a", 0x1}], 0x1}}], 0x1, 0x4004000) 6m53.04805205s ago: executing program 32 (id=168): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3e, 0x40000) syz_emit_ethernet(0x6a, 0x0, 0x0) ioctl$BLKFINISHZONE(r1, 0x40101288, &(0x7f0000000140)={0x1, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xd}, 0x18) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508", 0x22) 6m49.835534144s ago: executing program 33 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)="1a", 0x1}], 0x1}}], 0x1, 0x4004000) 5m39.167549275s ago: executing program 6 (id=545): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) 5m38.956666072s ago: executing program 6 (id=550): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 5m38.754043681s ago: executing program 6 (id=553): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x7ff, [{0x1000000, 0x2, 0x800}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x7ff}, 0x28) 5m38.600855206s ago: executing program 6 (id=556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xb3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m38.144493352s ago: executing program 6 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 5m37.903271824s ago: executing program 6 (id=564): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f0000000100)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 5m27.596739744s ago: executing program 2 (id=619): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000380)="664315", 0x3, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) 5m27.465230886s ago: executing program 2 (id=621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) close(0x4) unshare(0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) 5m27.225773448s ago: executing program 2 (id=624): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8917, 0x0) syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[], 0x0) 5m26.938311359s ago: executing program 2 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0/../file0\x00') 5m26.418997041s ago: executing program 2 (id=635): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000053041f"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 5m25.291586807s ago: executing program 2 (id=644): pipe(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ba403c8e31", 0x5}], 0x1}}], 0x1, 0xc8040) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x6) 5m24.895841473s ago: executing program 34 (id=644): pipe(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ba403c8e31", 0x5}], 0x1}}], 0x1, 0xc8040) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x6) 5m22.766258255s ago: executing program 35 (id=564): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f0000000100)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 5m2.074449281s ago: executing program 7 (id=646): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f0000000240)='./file0/../file0\x00') 5m1.638235098s ago: executing program 7 (id=814): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8) 5m1.144800116s ago: executing program 7 (id=816): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) 5m0.432520283s ago: executing program 36 (id=816): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) 5m0.370908585s ago: executing program 8 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc014}, 0x80) 5m0.224774098s ago: executing program 8 (id=820): unshare(0x20000400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, 0x0, 0x0) 4m59.964780758s ago: executing program 8 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) 4m59.626829993s ago: executing program 8 (id=826): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="07011b00000074390000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000302000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 4m59.01724999s ago: executing program 8 (id=831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a010102000000000000000000000000000000003200000002000000ac14140000000000000000dcac4d090b5c7097dab6"], 0x23c}}, 0x0) 4m58.490690765s ago: executing program 37 (id=831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 15.336927981s ago: executing program 3 (id=2461): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 15.133366284s ago: executing program 3 (id=2463): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a2, &(0x7f0000000440)="$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") llistxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x0) 14.203260942s ago: executing program 5 (id=2465): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() memfd_create(0x0, 0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES8=r5], 0xffffffffffffffe2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 13.869569222s ago: executing program 3 (id=2468): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) rename(0x0, 0x0) close(r0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x18c7c80, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xbb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.819632203s ago: executing program 5 (id=2472): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 12.688513881s ago: executing program 5 (id=2473): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x5, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0xa, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x3, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001"], 0xec}}, 0x0) 11.609516353s ago: executing program 0 (id=2474): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002640)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmmsg$inet(r8, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x100000000) 10.59267813s ago: executing program 5 (id=2477): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 9.847621426s ago: executing program 3 (id=2478): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x1816, 0x0, 0x1, 0x0, 0x0) r4 = socket(0x840000000002, 0x80000, 0xfa) sendmmsg$inet(r4, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) sigaltstack(0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000000c0)) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) 9.619182343s ago: executing program 0 (id=2480): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000040)={[{@nodelalloc}, {@jqfmt_vfsold}, {@i_version}], [{@smackfsdef={'smackfsdef', 0x3d, 'cgroup.stat\x00'}}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x40) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1514, &(0x7f0000001540)="$eJzs3AuYT1X3OPC99t6HMbl8m+S+116HbxpskyShJLkkSRKSe0LSJEmSxJBbEpKQ6yS5jAm5p4lxv19yT5q8kiQJCQn7/4zq7+331t976f17f++sz/Ocx17OWeus813P+J5znsd803VYjcY1qzYgIvHPUL8u4Oc/koQQMUKIgUKIPEKIQAhRLq5cXOb+HAqS/qmTsH+ThilXuwN2NfH8szaef9bG88/aeP5ZG88/a+P5Z208/6yN589YlpZa8Fresu7G7///l5P/SjJ//2cJ8Ec7eP7/bdQ/dDTPP2vj+WdtPP+sjeef9Vx+BAuuah/s6uOf/6yN589Ylvanvk+OvVakrj97td9p8/YPbIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2P8HZ/1lWgjx6/pq98UYY4wxxhhjjLE/j3//anfAGGOMMcYYY4yxfz8QUiihRSCyiewiRuQQseIakVPkErlFHhER14o4cZ3IK64X+UR+UUAUFIVEYVFEGIHCChKhKCqKiai4QRQXN4p4UUKUFKWEE6VFgrhJlBE3i7LiFlFO3CrKi9tEBVHx0jkz3SmqiLtEVXG3qCaqixqiprhH1BL3itriPlFH3C/qigdEPfGgqC8eEg1EQ9FIPCwai0dEE9FUNBPNRQvRUrS6Qn5ynt/Lf3FpdiFET9FLJIneoo94WfQV/UR/MUAMFK+IQeJVMVi8JoaIoWKYeF0MF2+IEeJNMVKMEqPFW2KMGCvGifFigpgoksXbYpJ4R0wW7z6SS0wV08R0kSJmiFTxnpgpZonZ4n0xR8wV80RyjgVioVgkevzyuX8kloilIl0sE8vFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVfCy2ie1ih9gpdondYo/4ROwVn4p94jORAZ//g/lnfpsvuoEAARIkaNCQDbJBDMRALMRCTsgJuSE3RCACcRAHeSEv5IN8UAAKQBIUgiJQBBAQCAiKQlGIQhSKQ3GIh3goCSXBgYMESIAycMF7XxbKQTkoD+WhAlSEinA73A6VoTJUgSpQFapCNagGNaAG3AP3wL1QG2pDHagDdaEu1IN6UB/qQwNoAI2gETSGxtAEmkAzaAYtoAW0glbQGlpDG2gD7aAdtIf20AE6QCIkQkfoCJ2gE3SGztAFukBX6Ard4AV4AV6EF+EleAl6QTXZG/pAH+gLfaE/DIAB8AoMglfhVXgNhsBQGAavw+vwBoyA0zASRsFoGA2V5VgYB+OB5ERIhmTILibBZJgMU2AqTIXpkAIzIBVSYSbMglnwPsyBuTAX5sN8WAiLYBEshg8hDdJgCZyBdFgGy2EFrIRVsBLWwFpYA+thA6yHTbAJtsAW+Bg+hu2wHXbCTtgNu+ET+AQ+hU9hCGRABuyH/XAADsBBOAiH4BAchsNwBI7AUTgKx+AYHIcTcBJOwCk4BafhDJwVQpyDc3AezsNFuJj5wy8zaallNplNxsgYGStjZU6ZU+aWuWVERmScjJN5ZV6ZT+aTBWQBWUgWkkVkEYkSJclQFpVFZVRGZXFZXMbLeFlSlpROOpkgE2QZWUaWlWVlOXmrLC9vkxVkRdnW3S5vl5VlO1dF3iWryqqymqwua8iasqasJWvJ2rK2rCPryLqyrqwnH5T1ZW/oDw1l5mQay6HQRA6DZrK5bCFbyjfgUdlajoA2sq1sJx+Xo2AkdJCtXaJ8SnaU46CTfEaOh2dlFzkRusrnZTf5guwuX5Q9ZBvXU/aSU6C37COnQ1/ZT/aXA+RMqC4zJ1ZDviZfzD5UDpOvy4Xwhhwh35Qj5Sg5Wr4lx8ixcpwcLyfIiTJZvi0nyXfkZPmunCKnymlyukyRM2SqfE/OlLPkbPm+nCPnKiHnywVyoVwkP5CL5YcyTX4kl8ilMl0uk8vlCrlSrpKr5Rq5Vq6T6+UGuVFukpvlFrlVfiy3ye1yh9wpd8ndco/8RO6Vn8p98jOZIT+X++Vf5AH5hTwov5SH5FfysPxaHpHfyKPyW3lMfiePyxPypPxenpI/yNPyjDwrf5Tn5E/yvLwgL0ovhQIllVJaBSqbyq5iVA4Vq65ROVUulVvlURF1rYpT16m86nqVT+VXBXRBVUgVVkWUUaisIhWqoqqYiqobVHF1o4pXJVRJVUo5VVolqJtUGXWzKqtuUeXUraq8uk1VUBVVJS/UHaqyulNVUXepqupuVU1VVzVUTXWPqqXuVbXVfaqOul/VVQ+oeupBVV89pBqohqqRelg1Vo+oJqqpaqaaqxaqpWqlHlWt1WOqjWqr2qnHVXv1hOqgnlSJ6inVUT2tOqlnVGf1rOqinlNd1fOqm3pBdVcX1EXlVU/VSyWp3qqPeln1Vf1UfzVADVSvqEHqVTVYvaaGqKFqmHpdDVdvqBHqTTVSjVKj1VtqjBqrxqnxaoKaqJLV22qSekdNVu+qKWqqmqamqxQ1Q/X/pdLsvyP/nd/JH3zp7FvUVvWx2qa2qx1qp9qldqs9ao/aq/aqfWqfylAZar/arw6oA+qgOqgOqUPqsDqsjqgj6qg6qo6pY+q4OqF+VN+rU+oHdVqdUWfUj+qcOqfO//IZCA1aaqW1DnQ2nV3H6Bw6Vl+jc+pcOrfOoyP6Wh2nr9N59fU6n86vC+iCupAurItoo1FbTTrURXUxHdU36OL6Rh2vS+iSupR2urRO0Df9y/lX6q+VbqVb69a6jW6j2+l2ur1urzvoDjpRJ+qOuqPupDvpzrqz7qK76K66q+6mu+nuurvuoXvonrqnTtJJuo9+WffV/XR/PUAP1K/oQXqQHqwH6yF6iB6mh+nhergeoUfokXqkHq1H6zF6jB6nx+kJeoJO9nn0JD1JT9aT9RQ9RU8bmEen6BSdqlP1TD1Tz9az9Rw9R8/T8/QCvUAv0ov0Yr1Yp+k0vUQv0el6mV6mV+gVepVepdfoNXqdXqc36A16k96k0/VWvVVv09v0Dr1D79K79B69R+/Ve/U+vU9n6Ay9X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVwf1yf1SX1Kn9Kn9Wl9Vp/V5/Q5fV6f1xf1xczbvkAGMtCBDrIF2YKYICaIDWKDnEHOIHeQO4gEkSAuiAvyBtcH+YL8QYGgYFAoKBwUCUyAgQ0oCIOiQbEgGtwQFA9uDOKDEkHJoFTggtJBQnBTUCa4OSgb3BKUC24Nyge3BRWCikGl4PbgjqBycGdQJbgrqBrcHVQLqgc1gprBPUGt4N6gdnBfUCe4P6gbPBDUCx4M6gcPBQ2ChkGj4OGgcfBI0CRoGjQLmgctgpZBqz+1vven8z/meppeJsn0Nn3My6av6Wf6mwFmoHnFDDKvmsHmNTPEDDXDzOtmuHnDjDBvmpFmlBlt3jJjzFgzzow3E8xEk2zeNpPMO2ayeddMMVPNtGC6STEzTKp5z8w0s8xs876ZY+aaeWa+WWAWGvj5llikmY/MErPUpJtlZrlZYVaaVWa1WWPWmnVmvdlgNppN5Qb9fKjZZrabHWan2WV2mz3mE7PXfGr2mc9Mhvnc7Dd/MQfMF+ag+dIcMl+Zw+Zrc8R8Y46ab80x8505bk6Yk+Z7c8r8YE6bM+as+dGcMz+Z8+aCuWh85s195tc7atSYDbNhDMZgLMZiTsyJuTE3RjCCcRiHeTEv5sN8WAALYCEshEWwCGYiJCyKRTGKUSyOxTEe47EklkSHDhMwActgGSyLZbEclsPyWB4rYAWshJXwDrwD78Q78S68C+/Gu7E6VseaWBNrYS2sjbWxDtbBulgX62E9rI/1sQE2wEbYCBtjY2yCTbAZNsMW2AJbYStsja2xDbbBdtgO22N77IAdMBETsSN2xE7YCTtjZ+yCXbArdsVu2A27Y3fsgT2wJ/bEJEzCPtgH+2Jf7I/9cSAOxEE4CAfjYByCQ3AYDsPhOBxH4AgciaNwNL6FY3AsjsPxOAEnYjIm4ySchJNxMk7BKTgNp2EKpmAqpuJMnImzcTbOwTk4D+fhAlyAi3ARLsbFmIZpuASXYDqm43JcjitxJa7G1bgW1+J6XI8bcSNuxs24FbfiNtyGO3AH7sJduAf34F7ci/twH2ZgBu7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHsfjeBJP4ik8hafxNJ7Fs3gOf8LzeAEvoscYm8PG2mtsTpvL5rZ57P+MC9iCtpAtbItYY/PZ/L+J0Vobb0vYkraUdba0TbA3/U1cwVa0lezt9g5b2d5pq9gKNof467iWvdfWtvfZOvZ+W9Pe85u4rn3A1rOP2Pq2qW1gm9tGtqVtbB+xTWxT28w2ty1sS9vePmE72Cdton0qpqN9+q9jmxkvth/atXadXW832L32U3vW/miP2G/sOfuT7Wl72YH2FTvIvmoH29fsEDv0t7EQdrR9y46xY+04O95OsBP/Jp5mp9sUO8Om2vfsTDvrb+JF9gM7x6bZeXa+XWAXXooze0qzH9kldqlNt8vscrvCrrSr7Gq75v/2usJuspvtFrvHfmK32e12h91pd9ndl+LM69hnP7MZ9nN72H5tD9gv7EF71B6yX12KM6/vqP3WHrPf2eP2hD1pv7en7A/2tD1z6fozr/17e8FetN4KApKkSFNA2Sg7xVAOiqVrKCflotyUhyJ0LcXRdZSXrqd8lJ8KUEEqRIWpCBlCskQUUlEqRlG6gYrTjRRPJagklSJHpSmBbqIydDOVpVuoHN1K5emc974iVaLb6Q6qTHdSFbqLqtLdVI2qUw2qSfdQLbqXatN9VIfup7r0ANWjB6k+PUQNqCE1ooepMT1CTagpNaPm1IJaUit6lFrTY9SG2lI7epza0xPUgZ6kRHqKOtLT1Imeoc70LHWh56grPU/d6AXqTi9SD3qJelIvSqLe1Idepr7Uj/rTABpIr9AgepUG02s0hIbSMHqdhtMbNILepJE0ikbTWzSGxtI4Gk8TaCIl09s0id6hyfQuTaGpNI2mUwrNoFR6j2bSLJpN79McmkvzaD4toIW0iD6gxfQhpdFHtISWUjoto+W0glbSKlpNa2gtraP1tIE20ibaTFtoK31M22g77aCdtIt20x76hPbSp7SPPqMM+pz201/oAH1BB+lLOkRf0WH6mo7QN3SUvqVj9B0dpxN0kr6nU/QDnaYzdJZ+pHP0E52nC3SRPIkQQhmqUIdBmC3MHsaEOcLY8JowZ5grzB3mCSPhtWFceF2YN7w+zBfmDwuEBcNCYeGwSGhCDG1IYRgWDYuF0fCGsHh4YxgflghLhqVCF5YOE8KbwjLhzWHZ8JawXHhrWD68LawQVgwrhbeHd4SVwzvDKuFdYdXw7rBaWD2sEdYM7wlrhfeGtcP7wjrh/WHZ8IGwXvhgWD98KGwQNgwbhQ+HjcNHwiZh07BZ2DxsEbYMW4WPhq3Dx8I2YduwXfh42D58IuwQPhkmhk+FHcOnL+8vEfz8bfo/9ieFvUP1y5ua+9SC6MLoougH0cXRD6Np0Y+iS6JLo+nRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHN0S1R72tmFw4yH4SFdoHL5rK7GJfDxbprXE6Xy+V2eVzEXevi3HUur7ve5XP5XQFX0BVyhV0RZxw668iFrqgr5qLuBlfc3ejiXQlX0pVyzpV2Ca6la+VaudbuMdfGtXXt3OPucfeEe8I9GfNL466Te8Z1ds+6Lu4595x73nVzL7ju7kXXw73kerpeLskluT6uj+vr+rr+rr8b6Aa6QW6QG+wGuyFuiBvmhrnhbrgb4Ua4kW6kG+1GuzFujBvnxrkJboJLdslukpvkJrvJboqb4qa5aS7FpbhUl+pmuplutpvt5rg5bp6b5xa4BW6RW+QWu8UuzaW5JW6JS3fpbrlb7la6lW61W+3WurVuvVvvNrqNbrPb7La6rW6b2+Z2uB1ul9vl9rg9bq/b6/a5fS7DZbj9br874A64g+5Ld8h95Q67r90R94076r51x9x37rg74U46r065H9xpd8addT+6c+4nd95dcBedd8mRtyOTIu9EJkfejUyJTI1Mi0yPpERmRFIj70VmRmZFZkfej8yJzI3Mi8yPLIgsjCyKfBBZHPkwkhb5KLIksjSSHlkWWR5ZEVkZWRXxvvC20Bf1xXzU3+CL+xt9vC/hS/pS3vnSPsHf5Mv4m31Zf4sv52/15f1tvoKv6Cv5pr6Zb+5b+Ja+lX/Ut/aP+Ta+rW/nH/ft/RO+g3/SJ/qnfEf/tO/kn/Gd/bO+i3/Od/XPz/1lyr6Hf8n39L18ku/t+/iXfV/fz/f3A/xA/4of5F/1g/1rfogf6of51/1w/4Yf4d/0I/0oP9q/5cf4sX6cH+8n+Ik+2b/tJ/l3/GT/rp/ip/ppfrpP8TN8qn/Pz/Sz/Gz/vp/j5/p5fr5f4Bf6Rf4Dv9h/6NP8R36JX+rT/TK/3K/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/3Hfpvf7nf4nX6X3+33+E/8Xv+p3+c/8xn+c7/f/8Uf8F/4g/5Lf8h/5Q/7r/0R/40/6r/1x/x3/rg/4U/67/0p/4M/7c/4s/5Hf87/5M/7C/4i/581xhhjjLG/i7rC/t6/83fyly1THyFEru05/6bmxnw/r/vJvR0jQoinenVt+OvWsGFSUtIvx6YrERSbL4SIXM7PJi7Hy0Q78YRIFG1Fmd/tr5+sdOm+7/9VP3qrELFC5Pg1J/Px6Nf4cv2b/6B+0w/oD+sv+7n+fCHii13OySz8a3y5ftk/qL+7/R/Xv9R/ji+ShWjzVzmZn/av8eX6CeIx8bRI/M2RjDHGGGOMMcbYz/rJc92u8Px56fm8kP5t3q/xlZ7Pr6DKv9o/Y4wxxhhjjDHGruzZF7o/+WhiYtvO/82L7P/2U0wS/xlXeqUFCCH+A9r4sxbiP6ON/8rF1f6XiTHGGGOMMfZnu3zTf7U7YYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGsq5//jeEyb/74Kt9jYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtjV9n8CAAD//1U9VPM=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x52, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 8.246282203s ago: executing program 3 (id=2482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0xe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 6.621843655s ago: executing program 0 (id=2483): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 6.456342407s ago: executing program 1 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711043000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 6.403684278s ago: executing program 9 (id=2485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) sendmsg$can_bcm(r1, 0x0, 0x4044001) 6.304153663s ago: executing program 1 (id=2486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.008682494s ago: executing program 9 (id=2487): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10805, &(0x7f00000001c0)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@numtail}, {@numtail}, {@shortname_mixed}, {@fat=@gid}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@fmask}, {@fat=@sys_immutable}]}, 0x0, 0x286, &(0x7f00000004c0)="$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") 5.758843128s ago: executing program 9 (id=2488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xb3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.621419383s ago: executing program 1 (id=2489): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) statx(0xffffffffffffffff, 0x0, 0x1000, 0x800, &(0x7f0000000640)) syz_open_procfs(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = io_uring_setup(0x7fe7, &(0x7f0000000380)={0x0, 0x0, 0x3000}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = getpid() r2 = getpid() sched_rr_get_interval(0x0, &(0x7f0000000340)) syz_pidfd_open(r2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x2df3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x7, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xba68, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x103, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x0, 0x3, 0x7ff, 0x12b, 0x4, 0x8, 0x0, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x2006, 0x1, 0x4, 0x25], [0x800009, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c17, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.042367675s ago: executing program 9 (id=2490): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x4000, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x10000}, {0x0, 0x82}, {0x40, 0x6}, {0x1, 0xffffffff}, {0x3, 0x3}], 0xc}) 4.82850056s ago: executing program 1 (id=2491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) socket$inet(0x2b, 0x801, 0x0) epoll_create1(0x0) socket(0x1d, 0x2, 0x6) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 4.673487488s ago: executing program 5 (id=2492): io_setup(0xca, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}]}, 0x40}}, 0x44080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) unshare(0x6020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_init(0xf00, 0x0) getrlimit(0xd, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x5}}]}}]}, 0x48}}, 0x400c904) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0xfff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10) 4.644642263s ago: executing program 0 (id=2493): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7b, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0xfffffffd, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x100, 0x8071, 0x7, 0x6, 0xffffffff, 0x9, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x80400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000003, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x40000000, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x104000, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x6, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78f, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffff, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0xfff, 0x8000, 0x3, 0x6, 0x226, 0x15f3cce1, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x40, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.058548766s ago: executing program 1 (id=2494): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000040)={[{@nodelalloc}, {@jqfmt_vfsold}, {@i_version}], [{@smackfsdef={'smackfsdef', 0x3d, 'cgroup.stat\x00'}}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x40) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1514, &(0x7f0000001540)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x52, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.690611953s ago: executing program 9 (id=2495): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) 2.60850638s ago: executing program 0 (id=2496): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nodioread_nolock}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") open(0x0, 0x400141042, 0x4) unlink(0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "acbd6d7f2d4899b625b9e599152b3fff2e134e484ff2e7213c0d301b40286f033dbdb1920f9ba7c7b946749edde65bf3cb6b45249c5e7f"}, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0xab7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x40002000}) 2.473673833s ago: executing program 5 (id=2497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 2.45544162s ago: executing program 3 (id=2498): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000000800000000000000000000349202fbd5b6448990e90c10aad334048d4a67fda86b543023dea7fb85bab4bca234a463a7a2f0bb5dd938fd54252ac7690f958cc1db6c06c4deb13276fe40e0cf63a31bf6bb44ca3282686f0fa4780b3ab756b4f21a4cbb2256354251aed2573ea3bf7a09e71c5940", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffc) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$rfkill(r3, &(0x7f00000000c0), 0x8) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) 764.201364ms ago: executing program 1 (id=2499): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x200, 0x197) r2 = socket(0x2b, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) mlockall(0x7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000002c0)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0100250884a18a1260945e3bec0632a6c64dd4df4050d4f7f684787d71d1e9f8e3f2f058699d9795cf19a2cf86065092c871011c8ba9dab0fa2b6b3aaae19a019b53673a4118064c4b71dab3fd07d19b57d8089691fedd827d595334b350c48b8bbeead1099ccde5ec1333cb7829ca6271e70f96260247ff6772ff456b738390b4f825dfe036b8df5bff19fe6e27bf242c4a8e339a4c16768c1088a8076d1ca9c634d6b0fc3c9e85e23a301e7f75685660155d1253c3001263ad36229e69b3352cae27305eb0b39068811fb3cc35439899735b4b", 0x108) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0x40085503, 0x0) memfd_create(0x0, 0x2) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', r3, 0x4, 0x6, 0x1, 0x86c, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8000, 0x0, 0x29a0}}) r10 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r10, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000371e8e8403d0fa3684a7716020351a27789"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) 426.544µs ago: executing program 9 (id=2500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xb3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=2501): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000004c0)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@gid_forget}, {@nostrict}, {@unhide}, {@uid}, {@shortad}, {@uid_ignore}, {@shortad}, {@gid_ignore}, {@adinicb}, {@uid_ignore}, {@fileset}, {@partition={'partition', 0x3d, 0x1}}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ] macvtap1: entered allmulticast mode [ 271.421599][ T9623] batadv0: entered allmulticast mode [ 271.461758][ T9623] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 271.490374][ T9629] batadv0: left allmulticast mode [ 271.513506][ T9629] batadv0: left promiscuous mode [ 272.421436][ T9672] tipc: Enabled bearer , priority 0 [ 272.449938][ T9672] tipc: Resetting bearer [ 272.525740][ T9671] tipc: Disabling bearer [ 272.838243][ T9681] tipc: Enabled bearer , priority 0 [ 272.890203][ T9687] syzkaller0: entered promiscuous mode [ 272.910950][ T9687] syzkaller0: entered allmulticast mode [ 273.152241][ T9680] tipc: Resetting bearer [ 273.267509][ T9680] tipc: Disabling bearer [ 273.398473][ T9707] tipc: Enabled bearer , priority 0 [ 273.446457][ T9702] syzkaller0: entered promiscuous mode [ 273.474593][ T9702] syzkaller0: entered allmulticast mode [ 273.518423][ T9702] tipc: Resetting bearer [ 273.563274][ T9701] tipc: Resetting bearer [ 273.666962][ T9701] tipc: Disabling bearer [ 273.866797][ T9718] netlink: 'syz.5.990': attribute type 1 has an invalid length. [ 273.921435][ T9718] netlink: 'syz.5.990': attribute type 2 has an invalid length. [ 274.028633][ T9725] block nbd0: Attempted send on invalid socket [ 274.034811][ T9725] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 274.046208][ T9725] efs: cannot read volume header [ 274.178894][ T9695] mpoa:mpoad_close: () going down [ 275.476372][ T5926] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 275.563383][ T9755] netlink: 32 bytes leftover after parsing attributes in process `syz.9.999'. [ 275.586986][ T9755] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.631600][ T9756] tipc: Started in network mode [ 275.638160][ T9756] tipc: Node identity 8688739136e, cluster identity 4711 [ 275.668687][ T9756] tipc: Enabled bearer , priority 0 [ 275.685141][ T9763] tipc: Enabling of bearer rejected, failed to enable media [ 275.696559][ T9750] syzkaller0: entered promiscuous mode [ 275.702051][ T9750] syzkaller0: entered allmulticast mode [ 275.757927][ T9753] tipc: Resetting bearer [ 275.772693][ T5926] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 275.815318][ T9748] tipc: Resetting bearer [ 275.867810][ T9748] tipc: Disabling bearer [ 275.891802][ T9763] syzkaller0: entered promiscuous mode [ 275.905226][ T9763] syzkaller0: entered allmulticast mode [ 276.682171][ T9789] block nbd3: Attempted send on invalid socket [ 276.688423][ T9789] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 276.697579][ T9789] efs: cannot read volume header [ 277.526164][ T9806] nbd0: detected capacity change from 0 to 63 [ 277.568153][ T5865] block nbd0: Receive control failed (result -32) [ 277.634338][ T5994] block nbd0: Dead connection, failed to find a fallback [ 277.645722][ T5994] block nbd0: shutting down sockets [ 277.652271][ T5994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.681676][ T5994] Buffer I/O error on dev nbd0, logical block 0, async page read [ 277.707939][ T5994] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.759808][ T5994] Buffer I/O error on dev nbd0, logical block 1, async page read [ 277.806065][ T5994] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.815145][ T5994] Buffer I/O error on dev nbd0, logical block 2, async page read [ 277.846078][ T5994] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.910139][ T5994] Buffer I/O error on dev nbd0, logical block 3, async page read [ 277.929722][ T5994] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.955367][ T5994] Buffer I/O error on dev nbd0, logical block 0, async page read [ 277.968594][ T9792] mpoa:mpoad_close: () going down [ 277.974369][ T5994] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.985681][ T5994] Buffer I/O error on dev nbd0, logical block 1, async page read [ 278.004452][ T5994] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.015472][ T5994] Buffer I/O error on dev nbd0, logical block 2, async page read [ 278.027338][ T5994] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.038941][ T5994] Buffer I/O error on dev nbd0, logical block 3, async page read [ 278.048812][ T5994] Buffer I/O error on dev nbd0, logical block 0, async page read [ 278.064677][ T5994] Buffer I/O error on dev nbd0, logical block 1, async page read [ 278.083735][ T5994] ldm_validate_partition_table(): Disk read failed. [ 278.103831][ T5994] Dev nbd0: unable to read RDB block 0 [ 278.123567][ T5994] nbd0: unable to read partition table [ 278.144371][ T5994] ldm_validate_partition_table(): Disk read failed. [ 278.159922][ T5994] Dev nbd0: unable to read RDB block 0 [ 278.175250][ T5994] nbd0: unable to read partition table [ 278.200873][ T5994] block nbd0: NBD_DISCONNECT [ 278.222805][ T5994] block nbd0: Send disconnect failed -32 [ 279.346655][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 279.783157][ T9835] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1022'. [ 279.965375][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 280.021861][ T9840] netlink: 'syz.3.1024': attribute type 14 has an invalid length. [ 280.033588][ T9840] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 282.200958][ T9852] mpoa:mpoad_close: () going down [ 282.563922][ T9907] efs: device does not support 512 byte blocks [ 282.570206][ T9907] device does not support 512 byte blocks [ 282.570206][ T9907] [ 284.179371][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1063'. [ 284.467256][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.767926][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 285.075914][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 285.249870][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 285.356405][T10005] netlink: 'syz.9.1079': attribute type 1 has an invalid length. [ 285.370161][T10005] netlink: 'syz.9.1079': attribute type 1 has an invalid length. [ 286.546853][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 286.793312][T10001] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.852278][ T328] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.882870][ T328] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.907608][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 286.943264][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 286.997737][T10014] netlink: 'syz.0.1081': attribute type 7 has an invalid length. [ 287.028104][T10001] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.097862][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.157120][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 287.158512][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.190927][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 287.235961][T10014] netlink: 'syz.0.1081': attribute type 7 has an invalid length. [ 287.295131][T10001] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.366365][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.375133][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.508310][T10001] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.556153][T10043] netlink: 'syz.1.1091': attribute type 1 has an invalid length. [ 287.565131][T10043] netlink: 'syz.1.1091': attribute type 1 has an invalid length. [ 287.585220][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.610275][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.851966][ T6781] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.891529][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.942324][T10058] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1097'. [ 287.993469][ T6781] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.037350][ T6781] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.300241][T10060] loop1: detected capacity change from 0 to 32768 [ 288.308239][T10060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1096 (10060) [ 288.374598][T10060] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.384861][T10060] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 288.561404][T10060] BTRFS info (device loop1): enabling ssd optimizations [ 288.568484][T10060] BTRFS info (device loop1): enabling free space tree [ 289.542423][T10090] tipc: Enabling of bearer rejected, failed to enable media [ 289.638771][ T5871] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 289.663838][T10111] netlink: 'syz.9.1104': attribute type 1 has an invalid length. [ 289.700288][T10111] netlink: 'syz.9.1104': attribute type 1 has an invalid length. [ 290.086144][T10127] tipc: Started in network mode [ 290.091052][T10127] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 290.188662][T10127] tipc: Enabled bearer , priority 10 [ 290.842997][T10155] netlink: 'syz.9.1119': attribute type 1 has an invalid length. [ 290.859967][T10155] netlink: 'syz.9.1119': attribute type 1 has an invalid length. [ 291.313346][ T57] tipc: Node number set to 4269801488 [ 292.636099][ T328] syzkaller0: tun_net_xmit 76 [ 292.649394][ T328] syzkaller0: tun_net_xmit 48 [ 292.656853][ T5926] syzkaller0: tun_net_xmit 76 [ 292.686535][T10212] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1136'. [ 294.076057][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 296.397186][T10271] xfrm0: entered promiscuous mode [ 296.419348][T10271] xfrm0: entered allmulticast mode [ 296.578230][T10281] netlink: 'syz.9.1159': attribute type 8 has an invalid length. [ 297.534090][T10314] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1165'. [ 299.695059][ T6440] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.709986][ T6440] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.717884][ T5941] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.753455][T10331] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.866382][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 299.881466][T10346] tipc: Enabling of bearer rejected, failed to enable media [ 299.962435][T10331] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.300313][T10331] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.627594][ T5941] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.114448][T10331] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.315645][T10390] tipc: Enabled bearer , priority 0 [ 301.390779][T10390] tipc: Resetting bearer [ 301.425552][ T6924] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.576571][T10389] tipc: Disabling bearer [ 301.684830][ T6924] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.758550][T10406] rdma_rxe: rxe_newlink: failed to add lo [ 301.843338][ T6924] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.885435][ T6924] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.965262][T10417] tipc: Enabled bearer , priority 0 [ 302.009661][T10417] syzkaller0: entered promiscuous mode [ 302.015168][T10417] syzkaller0: entered allmulticast mode [ 302.056399][T10417] tipc: Resetting bearer [ 302.087579][T10415] tipc: Resetting bearer [ 302.341171][T10415] tipc: Disabling bearer [ 302.515761][T10435] block nbd5: Attempted send on invalid socket [ 302.522280][T10435] blk_print_req_error: 140 callbacks suppressed [ 302.522317][T10435] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 302.538469][T10435] efs: cannot read volume header [ 303.076481][T10437] 8021q: VLANs not supported on vcan0 [ 303.699227][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1215'. [ 303.986189][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.999820][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1222'. [ 305.586101][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 306.886359][T10481] 8021q: VLANs not supported on vcan0 [ 307.109293][T10531] netlink: 'syz.0.1230': attribute type 13 has an invalid length. [ 307.505734][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.513752][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.749678][T10531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.780460][T10531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.411765][ T56] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.461014][ T56] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.472941][ T56] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.507018][ T56] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.602361][ T56] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.627854][ T56] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.642650][T10558] wg1 speed is unknown, defaulting to 1000 [ 308.651115][T10586] 8021q: VLANs not supported on vcan0 [ 308.662687][ T56] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.671030][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 308.708617][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'. [ 308.720905][ T56] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.746394][T10589] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1237'. [ 308.934732][T10596] netlink: 'syz.9.1240': attribute type 1 has an invalid length. [ 308.943609][T10596] netlink: 'syz.9.1240': attribute type 1 has an invalid length. [ 309.064245][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 309.547183][T10623] netdevsim netdevsim1: loading /lib/firmware// failed with error -22 [ 309.566006][T10623] netdevsim netdevsim1: Direct firmware load for / failed with error -22 [ 309.629047][T10623] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 309.898537][T10636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1251'. [ 310.562423][T10663] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1261'. [ 310.646050][T10670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1264'. [ 310.866759][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1268'. [ 310.905211][T10683] syzkaller0: entered promiscuous mode [ 310.916186][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1268'. [ 310.958598][T10684] netlink: 26 bytes leftover after parsing attributes in process `syz.9.1268'. [ 310.965269][T10683] syzkaller0: entered allmulticast mode [ 314.545989][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.109413][T10824] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1312'. [ 316.436312][ T5951] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.018387][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1322'. [ 317.065648][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1322'. [ 317.101522][ T50] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.116058][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.118687][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1322'. [ 317.129989][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.137727][ T50] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.141926][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.154136][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1322'. [ 317.155679][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.186779][ T5926] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 317.999977][ T50] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.029994][ T50] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.814816][T10891] syzkaller0: entered promiscuous mode [ 318.844616][T10891] syzkaller0: entered allmulticast mode [ 318.881639][T10896] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1334'. [ 319.382715][T10909] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1336'. [ 319.538938][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1336'. [ 320.285624][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 320.450383][T10931] loop3: detected capacity change from 0 to 128 [ 320.545622][ T30] audit: type=1804 audit(1757561830.749:6): pid=10931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1343" name="/newroot/324/bus/bus" dev="loop3" ino=1048660 res=1 errno=0 [ 320.579261][ T5951] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 320.921765][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 321.285052][T10956] syzkaller0: entered promiscuous mode [ 321.299831][T10956] syzkaller0: entered allmulticast mode [ 321.363112][T10957] loop1: detected capacity change from 0 to 8192 [ 321.686329][ T5951] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 321.740409][T10968] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 321.749643][T10968] FAT-fs (loop1): Filesystem has been set read-only [ 322.129379][T10971] netlink: 'syz.0.1355': attribute type 8 has an invalid length. [ 322.244302][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1354'. [ 322.446856][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 322.493554][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1357'. [ 322.561996][T10987] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1357'. [ 322.876017][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.876163][T11003] loop1: detected capacity change from 0 to 1024 [ 323.007422][T11003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 323.041785][T11003] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.115101][T11003] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.1363: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.331580][T11015] tipc: Enabled bearer , priority 0 [ 323.350350][T11020] tipc: Enabled bearer , priority 0 [ 323.381070][T11015] syzkaller0: entered promiscuous mode [ 323.406517][T11015] syzkaller0: entered allmulticast mode [ 323.496250][T11020] syzkaller0: entered promiscuous mode [ 323.501767][T11020] syzkaller0: entered allmulticast mode [ 323.545488][ T5871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 323.609270][T11015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1366'. [ 323.674830][T11033] tipc: Resetting bearer [ 323.714751][T11025] tipc: Resetting bearer [ 323.738940][T11019] tipc: Resetting bearer [ 323.778671][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 323.813907][T11019] tipc: Disabling bearer [ 323.902297][T11013] tipc: Resetting bearer [ 323.997807][T11013] tipc: Disabling bearer [ 324.007676][T11042] Set syz1 is full, maxelem 65536 reached [ 324.593506][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1376'. [ 324.631965][T11068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1377'. [ 325.969467][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.982838][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.686150][ T5950] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.868305][ T5926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.913122][T11093] loop3: detected capacity change from 0 to 512 [ 326.951074][T11093] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 326.971580][T11094] loop5: detected capacity change from 0 to 1024 [ 327.014209][T11094] EXT4-fs: Ignoring removed nobh option [ 327.019210][T11093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 327.053402][T11094] EXT4-fs: Ignoring removed bh option [ 327.148390][T11094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.191472][T11093] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 327.259684][T11093] EXT4-fs (loop3): 1 truncate cleaned up [ 327.271102][T11093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.340494][ T30] audit: type=1800 audit(1757561837.549:7): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1383" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 327.349678][ T5926] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 327.703480][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.746953][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'. [ 327.940215][ T6663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.646387][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 329.133458][T11143] netlink: 'syz.1.1398': attribute type 8 has an invalid length. [ 329.515429][T11164] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1403'. [ 329.639066][T11166] loop3: detected capacity change from 0 to 128 [ 329.704386][T11166] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 329.794128][T11166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 330.306015][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.763733][T11187] syzkaller0: entered promiscuous mode [ 330.771208][T11187] syzkaller0: entered allmulticast mode [ 332.161956][T11208] tipc: Enabled bearer , priority 0 [ 332.180406][T11208] tipc: Resetting bearer [ 332.501221][T11207] tipc: Disabling bearer [ 332.825947][T10548] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 333.008433][T10548] usb 1-1: Using ep0 maxpacket: 16 [ 333.057018][T10548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.089751][T10548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.136459][T10548] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 333.192058][T10548] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 333.242075][T10548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.308308][T10548] usb 1-1: config 0 descriptor?? [ 333.679978][ T30] audit: type=1400 audit(1757561843.879:8): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11242 comm="syz.3.1432" [ 333.929036][T11215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.351805][T11215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.376777][T11249] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1416'. [ 334.445337][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1434'. [ 334.647460][T10548] usbhid 1-1:0.0: can't add hid device: -71 [ 334.663580][T10548] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 334.708160][T10548] usb 1-1: USB disconnect, device number 2 [ 335.531954][T11273] loop9: detected capacity change from 0 to 512 [ 335.603307][T11273] EXT4-fs (loop9): Test dummy encryption mode enabled [ 335.635739][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1445'. [ 335.658889][T11273] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 335.684118][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1447'. [ 335.718816][T11282] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1447'. [ 335.724443][T11283] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1446'. [ 335.755290][T11273] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1443: bad orphan inode 131083 [ 335.771900][T11273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.984724][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1450'. [ 336.002896][T11273] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 336.066383][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 336.093043][T11273] EXT4-fs error (device loop9): ext4_find_dest_de:2052: inode #2: block 13: comm syz.9.1443: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 336.113260][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 336.123595][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'. [ 336.133383][T10548] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 336.179471][T11273] EXT4-fs (loop9): shut down requested (1) [ 336.313802][T10548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.352081][T11298] tipc: Enabled bearer , priority 0 [ 336.360646][T11298] syzkaller0: entered promiscuous mode [ 336.366830][T11298] syzkaller0: entered allmulticast mode [ 336.376324][T10548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.382026][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.386940][T10548] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 336.417857][T11298] tipc: Resetting bearer [ 336.459906][T10548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.477663][T10548] usb 4-1: config 0 descriptor?? [ 336.497886][T11297] tipc: Resetting bearer [ 336.655363][T11297] tipc: Disabling bearer [ 336.737489][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.792175][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.856045][T10548] usbhid 4-1:0.0: can't add hid device: -71 [ 336.862083][T10548] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 336.931492][T10548] usb 4-1: USB disconnect, device number 3 [ 337.175735][T11317] syzkaller0: entered promiscuous mode [ 337.187151][ T1218] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 337.281079][T11317] syzkaller0: entered allmulticast mode [ 338.070679][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.107582][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.146030][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.179432][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.226009][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 338.306071][ T1218] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 338.437235][T11349] loop5: detected capacity change from 0 to 256 [ 338.836081][T11360] loop5: detected capacity change from 0 to 8 [ 338.989547][T11360] SQUASHFS error: Failed to read block 0x4de: -5 [ 339.107686][T11360] SQUASHFS error: Failed to read block 0x4de: -5 [ 339.114410][ T30] audit: type=1800 audit(1757561849.319:9): pid=11360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1476" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 340.256688][T11395] __nla_validate_parse: 12 callbacks suppressed [ 340.256707][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1484'. [ 341.367470][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1485'. [ 341.722361][T11402] tipc: Enabling of bearer rejected, failed to enable media [ 342.823297][T11431] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1491'. [ 342.831723][T11433] loop0: detected capacity change from 0 to 512 [ 342.836706][T11432] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 342.985386][T11433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.106281][T11433] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.231878][T11450] loop9: detected capacity change from 0 to 512 [ 343.271572][T11450] EXT4-fs: Ignoring removed nobh option [ 343.856695][T11450] EXT4-fs (loop9): Test dummy encryption mode enabled [ 343.893703][ T9071] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.954899][T11450] EXT4-fs error (device loop9): __ext4_iget:5464: inode #11: block 1: comm syz.9.1497: invalid block [ 344.023653][T11450] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1497: couldn't read orphan inode 11 (err -117) [ 344.151641][T11450] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.346176][T11472] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1505'. [ 344.550482][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.668905][T11474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.722245][T11474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.929059][T11474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.969359][T11474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.057889][T11492] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.083457][T11492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.199023][T11474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.223818][T11474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.304891][T11503] Driver unsupported XDP return value 0 on prog (id 240) dev N/A, expect packet loss! [ 345.428877][T11474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.458176][T11474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.623284][T11483] loop0: detected capacity change from 0 to 32768 [ 345.682156][T11483] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 345.771785][T11483] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1802 dinode [ 345.792549][T11483] XFS (loop0): Unmount and run xfs_repair [ 345.823983][T11483] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 345.847406][T11483] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 345.899265][T11483] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.929448][T11525] loop9: detected capacity change from 0 to 2048 [ 345.957091][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.965368][T11483] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 345.978141][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.988396][T11525] udf: Unknown parameter '8#2#vh|D+ޫb:m]1YL]c)TZ#P#_19M#8@ dYͫ&/.sߥYmނgu]?nE9A1) going down [ 355.853332][T11677] wg1 speed is unknown, defaulting to 1000 [ 355.853594][T11623] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 355.902279][T11623] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 355.920430][T11623] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 355.991088][T11623] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 356.020736][T11623] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 356.049367][T11623] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 356.105025][T11623] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 356.159497][T11623] XFS (loop1): metadata inode 0x1802 type 6 is corrupt [ 356.212372][T11623] XFS (loop1): failed to read RT inodes [ 356.237000][T11623] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 356.827175][T11700] syzkaller0: entered promiscuous mode [ 356.832688][T11700] syzkaller0: entered allmulticast mode [ 357.040771][T11714] loop0: detected capacity change from 0 to 8 [ 357.107578][T11717] loop5: detected capacity change from 0 to 128 [ 357.121494][T11714] SQUASHFS error: Failed to read block 0x4de: -5 [ 357.157714][T11714] SQUASHFS error: Failed to read block 0x4de: -5 [ 357.166846][ T30] audit: type=1800 audit(1757561867.369:11): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1559" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 357.198107][T11714] SQUASHFS error: Failed to read block 0x4de: -5 [ 357.207894][T11714] SQUASHFS error: Failed to read block 0x4de: -5 [ 357.214619][T11714] SQUASHFS error: Failed to read block 0x4de: -5 [ 357.228626][T11714] SQUASHFS error: Failed to read block 0x4de: -5 [ 357.451662][T11730] netlink: 'syz.0.1563': attribute type 72 has an invalid length. [ 357.498859][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 357.592319][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 357.624119][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 357.683909][T11737] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1565'. [ 358.021420][T11748] tipc: Enabled bearer , priority 0 [ 358.070816][T11748] syzkaller0: entered promiscuous mode [ 358.099351][T11748] syzkaller0: entered allmulticast mode [ 358.303806][T11747] tipc: Resetting bearer [ 358.385311][T11747] tipc: Disabling bearer [ 358.410915][T11733] mpoa:mpoad_close: () going down [ 359.725171][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 359.735703][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'. [ 359.775670][T11782] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1577'. [ 360.224375][T11794] tipc: Enabled bearer , priority 0 [ 360.619652][T11794] tipc: Resetting bearer [ 360.726790][T11793] tipc: Disabling bearer [ 360.825509][T11762] loop5: detected capacity change from 0 to 32768 [ 360.989952][T11762] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.046931][T11762] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop5": -EINTR [ 361.058138][T11762] XFS (loop5): log mount failed [ 361.100578][T11815] tipc: Enabled bearer , priority 0 [ 361.156200][T11815] syzkaller0: entered promiscuous mode [ 361.161712][T11815] syzkaller0: entered allmulticast mode [ 361.407782][T11813] tipc: Resetting bearer [ 361.575464][T11813] tipc: Disabling bearer [ 362.775901][T11847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1593'. [ 363.105221][T11864] loop1: detected capacity change from 0 to 512 [ 363.171526][T11864] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.249573][T11864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 363.277930][T11864] System zones: 1-12 [ 363.293707][T11864] EXT4-fs (loop1): 1 truncate cleaned up [ 363.301612][T11864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.375672][T11864] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes [ 364.374252][T11887] loop0: detected capacity change from 0 to 2048 [ 364.519708][T11887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.736906][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1607'. [ 364.754438][ T9071] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.888302][ T5871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.983377][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 366.182881][T11935] loop5: detected capacity change from 0 to 164 [ 366.245324][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 366.322498][T11935] Unsupported NM flag settings (8) [ 366.354785][T11938] vlan5: entered promiscuous mode [ 366.377441][T11938] bond0: entered promiscuous mode [ 367.243587][T11971] tipc: Enabling of bearer rejected, failed to enable media [ 367.408159][T11983] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1635'. [ 368.735025][T12008] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1648'. [ 370.024690][T12031] tipc: Enabled bearer , priority 0 [ 370.039927][T12031] syzkaller0: entered promiscuous mode [ 370.045536][T12031] syzkaller0: entered allmulticast mode [ 370.106784][T12031] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 370.244122][T12040] tipc: Resetting bearer [ 370.343162][T12028] tipc: Resetting bearer [ 370.436838][T12028] tipc: Disabling bearer [ 370.504088][T12050] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1660'. [ 370.705751][T12057] tipc: Enabled bearer , priority 0 [ 370.715080][T12057] syzkaller0: entered promiscuous mode [ 370.723030][T12057] syzkaller0: entered allmulticast mode [ 370.757322][T12061] syzkaller1: entered promiscuous mode [ 370.769521][T12061] syzkaller1: entered allmulticast mode [ 370.801829][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1664'. [ 370.904677][T12057] tipc: Resetting bearer [ 370.911735][T12066] loop1: detected capacity change from 0 to 512 [ 370.926514][T12055] tipc: Resetting bearer [ 370.960767][T12066] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 371.033393][T12055] tipc: Disabling bearer [ 371.224075][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'. [ 371.249185][T12077] vlan2: entered promiscuous mode [ 371.281338][T12077] bond0: entered promiscuous mode [ 371.309448][T12077] bond_slave_0: entered promiscuous mode [ 371.325229][T12081] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1674'. [ 371.338486][T12077] bond_slave_1: entered promiscuous mode [ 371.369412][T12084] tipc: Enabled bearer , priority 0 [ 371.391117][T12084] syzkaller0: entered promiscuous mode [ 371.411475][T12084] syzkaller0: entered allmulticast mode [ 371.430314][T12084] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 371.619127][T12090] tipc: Resetting bearer [ 371.666924][T12083] tipc: Resetting bearer [ 371.749905][T12083] tipc: Disabling bearer [ 371.970445][T12100] syzkaller1: entered promiscuous mode [ 371.979647][T12100] syzkaller1: entered allmulticast mode [ 372.191164][T12114] tipc: Enabled bearer , priority 0 [ 372.207003][T12114] syzkaller0: entered promiscuous mode [ 372.212680][T12114] syzkaller0: entered allmulticast mode [ 372.224502][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1686'. [ 372.241088][T12114] tipc: Resetting bearer [ 372.343477][T12116] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1687'. [ 372.393998][T12111] tipc: Resetting bearer [ 372.456640][T12111] tipc: Disabling bearer [ 373.796035][T12136] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1696'. [ 373.934663][T12142] loop5: detected capacity change from 0 to 8 [ 373.953183][T12141] syzkaller1: entered promiscuous mode [ 373.978564][T12141] syzkaller1: entered allmulticast mode [ 374.033255][T12142] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.064747][T12142] SQUASHFS error: Failed to read block 0x4de: -5 [ 374.068937][T12146] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1700'. [ 374.094106][ T30] audit: type=1800 audit(1757561884.299:12): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1699" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 374.800249][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 374.809670][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 374.988948][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.056339][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1705'. [ 375.056923][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.079721][ T6781] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.126031][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 375.150754][ T6781] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.519580][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 375.534001][ T5874] Bluetooth: hci3: command 0x0405 tx timeout [ 375.725261][T12180] loop5: detected capacity change from 0 to 512 [ 375.736962][T12180] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.761875][T12179] loop1: detected capacity change from 0 to 1764 [ 375.772319][T12180] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.809415][T12180] EXT4-fs: Mount option(s) incompatible with ext2 [ 376.698571][T12186] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1714'. [ 376.914784][T12190] loop0: detected capacity change from 0 to 8 [ 377.106189][T12192] syzkaller1: entered promiscuous mode [ 377.111711][T12192] syzkaller1: entered allmulticast mode [ 377.700590][T12190] SQUASHFS error: Failed to read block 0x4de: -5 [ 377.732599][T12190] SQUASHFS error: Failed to read block 0x4de: -5 [ 377.866432][ T30] audit: type=1800 audit(1757561888.059:13): pid=12190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1717" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 378.040273][T12208] loop9: detected capacity change from 0 to 164 [ 378.554641][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.761496][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 378.771906][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'. [ 378.774171][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.782022][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 378.810222][T12202] xfrm0: entered promiscuous mode [ 378.817946][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.824364][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.847256][T12202] xfrm0: entered allmulticast mode [ 380.214787][T12227] __nla_validate_parse: 1 callbacks suppressed [ 380.214806][T12227] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1728'. [ 380.223004][T12228] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1730'. [ 380.525460][T12234] loop5: detected capacity change from 0 to 8 [ 380.570757][T12236] loop3: detected capacity change from 0 to 8 [ 380.623810][T12236] SQUASHFS error: Failed to read block 0x4de: -5 [ 381.810289][T12236] SQUASHFS error: Failed to read block 0x4de: -5 [ 381.902719][T12236] SQUASHFS error: Failed to read block 0x4de: -5 [ 381.920098][ T30] audit: type=1800 audit(1757561892.039:14): pid=12236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1734" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 381.969246][T12236] SQUASHFS error: Failed to read block 0x4de: -5 [ 382.036235][T12236] SQUASHFS error: Failed to read block 0x4de: -5 [ 382.103771][T12243] loop9: detected capacity change from 0 to 1024 [ 382.147101][T12243] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 382.236479][T12243] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 382.327450][T12243] EXT4-fs (loop9): orphan cleanup on readonly fs [ 382.335727][T12243] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.1736: Freeing blocks not in datazone - block = 0, count = 4096 [ 382.383129][T12247] loop5: detected capacity change from 0 to 128 [ 382.425251][T12243] EXT4-fs (loop9): 1 orphan inode deleted [ 382.841873][T12243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.012269][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.676223][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 383.684162][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.344949][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 384.391939][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'. [ 384.409675][T12255] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1742'. [ 384.611540][T12258] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1741'. [ 385.313442][T12276] loop3: detected capacity change from 0 to 8 [ 385.487330][T12276] SQUASHFS error: Failed to read block 0x4de: -5 [ 385.494019][T12276] SQUASHFS error: Failed to read block 0x4de: -5 [ 385.589142][ T30] audit: type=1800 audit(1757561895.799:15): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1749" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 385.618655][T12276] SQUASHFS error: Failed to read block 0x4de: -5 [ 385.625325][T12276] SQUASHFS error: Failed to read block 0x4de: -5 [ 385.701126][T12276] SQUASHFS error: Failed to read block 0x4de: -5 [ 385.778099][T12276] SQUASHFS error: Failed to read block 0x4de: -5 [ 387.455136][T12299] loop3: detected capacity change from 0 to 1024 [ 387.511515][T12301] netlink: 'syz.1.1758': attribute type 8 has an invalid length. [ 387.652256][T12299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 387.758152][T12299] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.829734][T12299] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.1756: lblock 0 mapped to illegal pblock 0 (length 1) [ 387.846645][T12309] syzkaller0: entered promiscuous mode [ 387.852146][T12309] syzkaller0: entered allmulticast mode [ 387.882289][T12310] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.1756: lblock 0 mapped to illegal pblock 0 (length 1) [ 387.919142][T12310] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 387.970120][T12310] EXT4-fs (loop3): This should not happen!! Data will be lost [ 387.970120][T12310] [ 388.105762][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 388.291797][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1763'. [ 388.537506][T12327] loop0: detected capacity change from 0 to 1024 [ 388.554646][T12331] process 'syz.5.1768' launched './file0' with NULL argv: empty string added [ 388.568332][T12327] EXT4-fs: Ignoring removed bh option [ 388.592896][T12327] EXT4-fs: Mount option(s) incompatible with ext3 [ 390.225607][T12346] syzkaller0: entered promiscuous mode [ 390.244995][T12346] syzkaller0: entered allmulticast mode [ 390.436404][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 390.488171][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 390.516705][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1779'. [ 391.009974][T12372] loop0: detected capacity change from 0 to 1024 [ 392.632421][T12380] loop5: detected capacity change from 0 to 2048 [ 392.677464][T12380] udf: Unknown parameter '8#2#vh|D+ޫb:m]1YL]c)TZ#P#_19M#8@ dYͫ&/.sߥYmނgu]?nE9A1 rejected, failed to enable media [ 413.206889][T12684] syzkaller0: entered promiscuous mode [ 413.212384][T12684] syzkaller0: entered allmulticast mode [ 413.311572][ T5873] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 413.868560][T12691] loop0: detected capacity change from 0 to 2048 [ 413.940337][T12691] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.960921][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 413.998701][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 414.019902][T12693] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1897'. [ 414.232663][T12699] syzkaller0: entered promiscuous mode [ 414.256563][T12699] syzkaller0: entered allmulticast mode [ 414.310057][T12699] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 415.146649][T12725] syzkaller0: entered promiscuous mode [ 415.163391][T12725] syzkaller0: entered allmulticast mode [ 415.170094][T10549] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 415.217773][T12730] loop9: detected capacity change from 0 to 8 [ 415.240903][T12730] SQUASHFS error: zlib decompression failed, data probably corrupt [ 415.250422][T12730] SQUASHFS error: Failed to read block 0x9b: -5 [ 415.257280][T12730] SQUASHFS error: Unable to read metadata cache entry [99] [ 415.264675][T12730] SQUASHFS error: Unable to read inode 0x127 [ 415.482723][T10549] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.495670][T10549] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.509308][T10549] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 415.518651][T10549] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 415.528175][T10549] usb 1-1: SerialNumber: syz [ 416.193702][T12753] block nbd1: Attempted send on invalid socket [ 416.200249][T12753] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 416.210440][T12753] efs: cannot read volume header [ 416.666637][T12722] loop0: detected capacity change from 0 to 1024 [ 417.152826][T10549] usb 1-1: 0:2 : does not exist [ 417.259408][T10549] usb 1-1: USB disconnect, device number 4 [ 417.278186][T12738] mpoa:mpoad_close: () going down [ 417.285480][T12765] loop1: detected capacity change from 0 to 8192 [ 417.359441][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.840062][T12807] xfrm0: entered promiscuous mode [ 418.856300][T12807] xfrm0: entered allmulticast mode [ 418.920467][T12805] loop1: detected capacity change from 0 to 8192 [ 419.038281][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 420.283651][T12822] loop1: detected capacity change from 0 to 16 [ 420.310240][T12820] syzkaller0: entered promiscuous mode [ 420.332661][T12822] erofs (device loop1): mounted with root inode @ nid 36. [ 420.332902][T12820] syzkaller0: entered allmulticast mode [ 420.516460][T12828] loop5: detected capacity change from 0 to 8 [ 420.535253][T12829] erofs (device loop1): bogus i_mode (4355) @ nid 46 [ 420.697647][T12829] erofs (device loop1): bogus i_mode (4355) @ nid 46 [ 421.009466][T12833] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1948'. [ 421.523871][T12847] loop9: detected capacity change from 0 to 8192 [ 423.326099][T12869] loop0: detected capacity change from 0 to 128 [ 423.884962][T12873] loop3: detected capacity change from 0 to 8192 [ 423.971972][T12878] syzkaller0: entered promiscuous mode [ 424.004420][T12878] syzkaller0: entered allmulticast mode [ 424.454227][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1968'. [ 424.469920][T12889] netlink: 'syz.9.1968': attribute type 14 has an invalid length. [ 424.486173][T12889] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1968'. [ 425.785328][T12894] loop1: detected capacity change from 0 to 128 [ 425.890857][T12894] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.906797][T12894] ext4 filesystem being mounted at /456/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.101155][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1972'. [ 426.130889][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1972'. [ 426.241370][ T5871] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.458600][T12905] tipc: Enabled bearer , priority 0 [ 426.542156][T12905] tipc: Resetting bearer [ 426.639654][T12904] tipc: Disabling bearer [ 426.891835][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1978'. [ 426.929754][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1978'. [ 426.957119][T12908] loop0: detected capacity change from 0 to 8192 [ 427.002212][ T5994] loop0: p1 p2 [ 427.012749][ T5994] loop0: partition table partially beyond EOD, truncated [ 427.040535][ T5994] loop0: p1 start 16777216 is beyond EOD, truncated [ 427.056151][ T5994] loop0: p2 size 515840 extends beyond EOD, truncated [ 427.110007][T12908] loop0: p1 p2 [ 427.113546][T12908] loop0: partition table partially beyond EOD, truncated [ 427.166595][T12908] loop0: p1 start 16777216 is beyond EOD, truncated [ 427.173919][T12908] loop0: p2 size 515840 extends beyond EOD, truncated [ 427.487908][T12922] loop5: detected capacity change from 0 to 1024 [ 427.509585][T12922] EXT4-fs: Ignoring removed bh option [ 427.583034][T12925] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.594615][T12925] I/O error, dev loop9, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.604282][T12925] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 427.615480][T12925] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.626301][T12925] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 427.636085][T12925] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 427.643822][T12925] UDF-fs: Scanning with blocksize 512 failed [ 427.657653][T12925] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.668866][T12925] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.678733][T12925] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 427.689600][T12925] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.699577][T12925] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 427.709302][T12925] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 427.717115][T12925] UDF-fs: Scanning with blocksize 1024 failed [ 427.727762][T12925] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.738451][T12925] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.748398][T12925] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 427.759048][T12925] I/O error, dev loop9, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.769050][T12925] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 427.778756][T12925] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 427.786543][T12925] UDF-fs: Scanning with blocksize 2048 failed [ 427.795975][T12925] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 427.806982][T12925] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 427.817967][T12925] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 427.828091][T12925] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 427.835858][T12925] UDF-fs: Scanning with blocksize 4096 failed [ 427.842021][T12925] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 427.860495][T12922] EXT4-fs: Mount option(s) incompatible with ext3 [ 428.343681][T12929] loop9: detected capacity change from 0 to 8 [ 428.494772][T12926] loop3: detected capacity change from 0 to 8192 [ 428.894915][ T5994] udevd[5994]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 428.938404][ T5994] udevd[5994]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 428.974254][T12941] wg1 speed is unknown, defaulting to 1000 [ 430.739989][T12963] syzkaller0: entered promiscuous mode [ 430.761976][T12963] syzkaller0: entered allmulticast mode [ 432.169356][T12976] loop5: detected capacity change from 0 to 8192 [ 433.345568][T12991] loop0: detected capacity change from 0 to 2048 [ 433.376822][T12991] udf: Unknown parameter '8#2#vh|D+ޫb:m]1YL]c)TZ#P#_19M#8@ dYͫ&/.sߥYmނgu]?nE9A1 rejected, failed to enable media [ 467.137224][T13506] syzkaller0: entered promiscuous mode [ 467.144245][T13506] syzkaller0: entered allmulticast mode [ 467.415119][T13490] mpoa:mpoad_close: () going down [ 468.139892][T13519] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2169'. [ 468.149129][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2169'. [ 468.953131][T13522] syzkaller0: entered promiscuous mode [ 468.973397][T13522] syzkaller0: entered allmulticast mode [ 469.070997][T13524] loop9: detected capacity change from 0 to 512 [ 469.100298][T13524] journal_path: Non-blockdev passed as './file0' [ 469.118903][T13524] EXT4-fs: error: could not find journal device path [ 469.599064][T13530] loop9: detected capacity change from 0 to 16 [ 469.648076][T13530] erofs (device loop9): mounted with root inode @ nid 36. [ 469.689913][T13530] erofs (device loop9): bogus i_mode (4355) @ nid 46 [ 469.782994][T13536] wg1 speed is unknown, defaulting to 1000 [ 470.111735][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2179'. [ 470.247370][T13552] loop9: detected capacity change from 0 to 128 [ 470.275192][T13547] tipc: Enabling of bearer rejected, failed to enable media [ 470.285997][T13552] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 470.299977][T13547] syzkaller0: entered promiscuous mode [ 470.305625][T13547] syzkaller0: entered allmulticast mode [ 470.318937][T13552] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 470.463324][T13559] loop1: detected capacity change from 0 to 512 [ 470.489539][T13559] journal_path: Non-blockdev passed as './file0' [ 470.635112][T13559] EXT4-fs: error: could not find journal device path [ 471.303504][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 471.319556][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 471.509325][T13573] loop5: detected capacity change from 0 to 512 [ 471.618278][T13580] wg1 speed is unknown, defaulting to 1000 [ 471.748929][T13573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.788875][T13573] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.559349][ T6663] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.613772][T13596] loop9: detected capacity change from 0 to 512 [ 472.638402][T13596] journal_path: Non-blockdev passed as './file0' [ 472.686861][T13596] EXT4-fs: error: could not find journal device path [ 473.035285][T13607] loop5: detected capacity change from 0 to 512 [ 473.066699][T13612] loop0: detected capacity change from 0 to 164 [ 473.093858][T13607] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 473.140696][T13607] EXT4-fs (loop5): Unsupported encryption level 249 [ 473.175439][T13612] Unable to read rock-ridge attributes [ 473.232701][T13607] hfsplus: unable to find HFS+ superblock [ 474.493885][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 474.508390][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 475.696969][T13642] loop0: detected capacity change from 0 to 512 [ 475.724011][T13642] journal_path: Non-blockdev passed as './file0' [ 475.746984][T13642] EXT4-fs: error: could not find journal device path [ 476.394736][T13650] loop9: detected capacity change from 0 to 2048 [ 476.400519][T13648] wg1 speed is unknown, defaulting to 1000 [ 476.546566][T13650] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.728444][T13650] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 476.808967][T13666] syzkaller0: entered promiscuous mode [ 476.835020][T13666] syzkaller0: entered allmulticast mode [ 476.915194][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.992874][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 477.034903][T13670] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 477.058991][T13679] loop9: detected capacity change from 0 to 1024 [ 477.075904][T13679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.135686][T13679] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.138616][T13682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 477.190316][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 477.190985][T13682] loop3: detected capacity change from 0 to 1024 [ 477.267133][T13682] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 477.281657][T13682] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 477.307387][T13682] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 477.314172][T13682] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 477.541285][ T56] hfsplus: b-tree write err: -5, ino 4 [ 477.679624][ T56] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 478.212780][T13685] loop1: detected capacity change from 0 to 8192 [ 478.332509][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.490634][T13699] loop3: detected capacity change from 0 to 8 [ 478.519923][T13699] SQUASHFS error: Failed to read block 0x4de: -5 [ 478.643813][T13699] SQUASHFS error: Failed to read block 0x4de: -5 [ 478.650729][ T30] audit: type=1800 audit(1757561988.859:23): pid=13699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2233" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 478.871478][T13699] SQUASHFS error: Failed to read block 0x4de: -5 [ 478.916125][T13699] SQUASHFS error: Failed to read block 0x4de: -5 [ 478.943257][T13707] loop9: detected capacity change from 0 to 512 [ 478.965673][T13699] SQUASHFS error: Failed to read block 0x4de: -5 [ 478.986704][T13707] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2232: casefold flag without casefold feature [ 479.007228][T13699] SQUASHFS error: Failed to read block 0x4de: -5 [ 479.082890][T13707] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2232: couldn't read orphan inode 15 (err -117) [ 479.130874][T13707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.201925][T13709] loop0: detected capacity change from 0 to 8192 [ 479.321074][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.523504][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2238'. [ 479.572332][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2238'. [ 479.789809][T13721] loop1: detected capacity change from 0 to 1024 [ 479.863918][T13721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.034705][T13721] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.191936][T13729] tipc: Enabled bearer , priority 0 [ 480.215293][ T5871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.245383][T13729] tipc: Resetting bearer [ 480.393841][T13728] tipc: Disabling bearer [ 481.425930][T13733] wg1 speed is unknown, defaulting to 1000 [ 481.787688][T13739] loop0: detected capacity change from 0 to 16 [ 481.816801][T13739] erofs (device loop0): mounted with root inode @ nid 36. [ 483.118673][ T30] audit: type=1326 audit(1757561993.319:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fa92ada9 code=0x7ffc0000 [ 483.191358][ T30] audit: type=1326 audit(1757561993.319:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fa98eba9 code=0x7ffc0000 [ 483.359375][ T30] audit: type=1326 audit(1757561993.319:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fa92ada9 code=0x7ffc0000 [ 483.382284][ T30] audit: type=1326 audit(1757561993.319:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fa98eba9 code=0x7ffc0000 [ 483.432894][ T30] audit: type=1326 audit(1757561993.319:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fa92ada9 code=0x7ffc0000 [ 483.457316][T13771] blk_print_req_error: 2 callbacks suppressed [ 483.457335][T13771] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.473284][T13771] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.482746][T13771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 483.492606][T13771] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.501984][T13771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 483.511900][T13771] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 483.519583][T13771] UDF-fs: Scanning with blocksize 512 failed [ 483.526163][T13771] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.535549][T13771] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.544925][T13771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 483.554686][T13771] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.564158][T13771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 483.573919][T13771] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 483.581973][T13771] UDF-fs: Scanning with blocksize 1024 failed [ 483.589814][T13771] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.599251][T13771] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.608712][T13771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 483.618398][T13771] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.627841][T13771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 483.637414][T13771] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 483.645032][T13771] UDF-fs: Scanning with blocksize 2048 failed [ 483.651481][T13771] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 483.660956][T13771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 483.670904][T13771] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 483.680817][T13771] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 483.688461][T13771] UDF-fs: Scanning with blocksize 4096 failed [ 483.694506][T13771] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 483.704160][ T30] audit: type=1326 audit(1757561993.319:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fa98eba9 code=0x7ffc0000 [ 483.742768][ T30] audit: type=1326 audit(1757561993.319:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fa92ada9 code=0x7ffc0000 [ 483.876048][ T30] audit: type=1326 audit(1757561993.349:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fa92ada9 code=0x7ffc0000 [ 483.975161][ T30] audit: type=1326 audit(1757561993.349:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc6fa98eba9 code=0x7ffc0000 [ 484.015220][T13777] loop5: detected capacity change from 0 to 1024 [ 484.082323][ T30] audit: type=1326 audit(1757561993.349:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fa92ada9 code=0x7ffc0000 [ 484.108973][T13777] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 484.115601][T13777] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 484.226082][ T30] audit: type=1326 audit(1757561993.349:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fa98eba9 code=0x7ffc0000 [ 484.455585][ T30] audit: type=1326 audit(1757561993.349:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fa92ada9 code=0x7ffc0000 [ 484.497479][ T30] audit: type=1326 audit(1757561993.349:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fa98eba9 code=0x7ffc0000 [ 484.510925][T13787] mmap: syz.3.2262 (13787): VmData 29216768 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 484.555097][ T30] audit: type=1326 audit(1757561993.349:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fa92ada9 code=0x7ffc0000 [ 484.586304][ T30] audit: type=1326 audit(1757561993.349:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13767 comm="syz.1.2246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fa98eba9 code=0x7ffc0000 [ 484.621321][ T6781] hfsplus: b-tree write err: -5, ino 4 [ 484.871840][T13795] loop1: detected capacity change from 0 to 8 [ 485.034397][T13795] SQUASHFS error: Failed to read block 0x4de: -5 [ 485.261186][T13795] SQUASHFS error: Failed to read block 0x4de: -5 [ 486.296694][T13818] tipc: Enabled bearer , priority 0 [ 486.347388][T13817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2272'. [ 486.358696][T13817] tipc: Resetting bearer [ 486.720898][T13816] tipc: Disabling bearer [ 488.016166][ T5873] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 488.199742][T13833] loop5: detected capacity change from 0 to 1024 [ 488.644017][T13839] hfsplus: can't free extent [ 489.624853][T13844] syzkaller0: entered promiscuous mode [ 489.638697][T13844] syzkaller0: entered allmulticast mode [ 489.662378][T13844] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 490.712199][T13849] loop9: detected capacity change from 0 to 16 [ 490.719356][T13849] erofs: Unknown parameter '' [ 491.352020][T13852] loop0: detected capacity change from 0 to 256 [ 491.444510][T13852] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 491.497140][T13852] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 491.519567][T13852] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 491.538324][T13852] exFAT-fs (loop0): failed to load alloc-bitmap [ 491.545260][T13852] exFAT-fs (loop0): failed to recognize exfat type [ 492.018695][T13864] loop1: detected capacity change from 0 to 16 [ 492.052182][T13864] erofs (device loop1): mounted with root inode @ nid 36. [ 493.042702][T13874] loop1: detected capacity change from 0 to 1024 [ 493.484964][T13879] hfsplus: can't free extent [ 493.492703][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 493.498906][ T30] audit: type=1800 audit(1757562003.679:44): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2292" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 494.411818][T13881] tipc: Enabled bearer , priority 0 [ 494.508510][T13888] loop1: detected capacity change from 0 to 8 [ 494.516792][T13885] syzkaller0: entered promiscuous mode [ 494.522288][T13885] syzkaller0: entered allmulticast mode [ 494.659833][T13881] tipc: Resetting bearer [ 494.824928][T13880] tipc: Resetting bearer [ 495.182449][T13880] tipc: Disabling bearer [ 495.241013][T13899] loop1: detected capacity change from 0 to 1024 [ 495.277140][T13899] EXT4-fs: Ignoring removed nobh option [ 495.298158][T13899] EXT4-fs: inline encryption not supported [ 495.347715][T13899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.581560][ T5871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.899322][T13912] loop0: detected capacity change from 0 to 764 [ 496.308107][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 496.865866][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 497.763111][T13940] loop0: detected capacity change from 0 to 8192 [ 497.921870][T13940] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 497.948422][T13940] UDF-fs: Scanning with blocksize 512 failed [ 498.008526][T13940] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 498.051085][T13940] UDF-fs: Scanning with blocksize 1024 failed [ 498.096590][T13940] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 498.150431][T13940] UDF-fs: Scanning with blocksize 2048 failed [ 498.193572][T13940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.541730][T13951] loop0: detected capacity change from 0 to 1024 [ 498.760284][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2316'. [ 498.798425][T13951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.918057][T13902] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 500.194767][T13982] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2322'. [ 500.239269][T13982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2322'. [ 500.285666][ T9071] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.719987][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2326'. [ 501.233689][T14001] loop1: detected capacity change from 0 to 8 [ 501.278345][T14001] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.292605][T14001] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.325630][T14001] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.336339][ T30] audit: type=1800 audit(1757562011.529:45): pid=14001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2327" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 501.356271][T14001] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.375178][T14001] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.384300][T14001] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.433488][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 501.441473][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.450741][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.457215][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.592219][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'. [ 503.225949][T13998] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2326'. [ 503.284224][T13995] wg1 speed is unknown, defaulting to 1000 [ 503.611908][T14030] loop0: detected capacity change from 0 to 1024 [ 503.631182][T14030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.643971][T14030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.681821][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2339'. [ 503.693967][T14030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.766388][T14030] syz.0.2338 (pid 14030) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 503.892222][T14044] loop5: detected capacity change from 0 to 164 [ 503.951677][ T9071] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.955905][T14044] Unsupported NM flag settings (240) [ 505.513151][ T5873] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 506.129135][T14062] loop1: detected capacity change from 0 to 4096 [ 506.188774][T14060] loop0: detected capacity change from 0 to 8192 [ 506.190974][T14062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.514441][T14062] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.2350: corrupted inode contents [ 506.550091][T14070] EXT4-fs (loop1): shut down requested (2) [ 506.599449][T14068] loop9: detected capacity change from 0 to 2048 [ 506.634926][T14068] udf: Unknown parameter '8#2#vh|D+ޫb:m]1YL]c)TZ#P#_19M#8@ dYͫ&/.sߥYmނgu]?nE9A1 rejected, failed to enable media [ 509.704511][T14104] syzkaller0: entered promiscuous mode [ 509.717059][T14104] syzkaller0: entered allmulticast mode [ 509.880188][T14115] loop3: detected capacity change from 0 to 1024 [ 512.998220][ T30] audit: type=1326 audit(1757562023.199:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.3.2375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f557098eba9 code=0x0 [ 513.201346][T14151] loop9: detected capacity change from 0 to 512 [ 513.312748][T14151] EXT4-fs: Ignoring removed oldalloc option [ 513.502152][T14151] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.715646][T14151] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 514.786870][ T5926] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 514.961494][ T5926] usb 4-1: unable to get BOS descriptor or descriptor too short [ 514.988416][ T5926] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 515.016286][ T5926] usb 4-1: can't read configurations, error -71 [ 515.755954][T14156] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 516.104216][T14189] tipc: Enabling of bearer rejected, failed to enable media [ 516.158298][T14189] syzkaller0: entered promiscuous mode [ 516.178023][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.198596][T14189] syzkaller0: entered allmulticast mode [ 516.354350][T14193] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 516.868505][T14211] loop9: detected capacity change from 0 to 512 [ 517.199262][T14211] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.306008][T14211] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.400230][T14220] loop0: detected capacity change from 0 to 1024 [ 517.630537][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.762832][ T6440] hfsplus: b-tree write err: -5, ino 4 [ 517.933627][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'. [ 517.954808][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 517.982762][T14234] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2397'. [ 520.866539][T14267] loop1: detected capacity change from 0 to 8192 [ 521.135301][T14283] loop3: detected capacity change from 0 to 2048 [ 521.203418][T14283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.254349][T14283] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.747826][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.835526][ T5873] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 522.886534][T14292] loop0: detected capacity change from 0 to 8192 [ 523.037938][T14303] loop3: detected capacity change from 0 to 1024 [ 523.094209][T14303] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 523.170893][T14303] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2418: Invalid block bitmap block 0 in block_group 0 [ 523.295199][T14303] Quota error (device loop3): write_blk: dquota write failed [ 523.352258][T14303] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 523.363017][T14303] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.2418: Failed to acquire dquot type 0 [ 523.384872][T14303] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2418: Freeing blocks not in datazone - block = 0, count = 4096 [ 523.445591][T14303] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2418: Invalid inode bitmap blk 0 in block_group 0 [ 524.058072][ T6924] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 524.085834][ T6924] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:12: Failed to release dquot type 0 [ 524.142023][T14303] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 524.223089][T14303] EXT4-fs (loop3): 1 orphan inode deleted [ 524.237954][T14303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.367783][T14318] tipc: Enabling of bearer rejected, failed to enable media [ 524.391661][T14318] syzkaller0: entered promiscuous mode [ 524.410794][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.427318][T14318] syzkaller0: entered allmulticast mode [ 524.496781][T14318] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 524.921726][T14306] mpoa:mpoad_close: () going down [ 525.590417][T14342] loop9: detected capacity change from 0 to 8 [ 525.672017][T14342] unable to read xattr id index table [ 527.313091][ T5873] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 527.457849][T14365] loop1: detected capacity change from 0 to 512 [ 527.500771][T14365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 527.715074][T14365] EXT4-fs (loop1): 1 truncate cleaned up [ 527.838339][T14365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.033429][T14372] loop5: detected capacity change from 0 to 8 [ 528.361167][T14372] SQUASHFS error: Failed to read block 0x4de: -5 [ 528.400341][T14372] SQUASHFS error: Failed to read block 0x4de: -5 [ 528.407395][ T30] audit: type=1800 audit(1757562038.619:49): pid=14372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2442" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 528.474623][ T5871] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.744777][T14378] loop1: detected capacity change from 0 to 1024 [ 528.781795][T14378] EXT4-fs: Ignoring removed bh option [ 528.790098][T14378] EXT4-fs: Mount option(s) incompatible with ext3 [ 530.982578][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2446'. [ 531.002318][T14390] bridge_slave_1: left allmulticast mode [ 531.029885][T14390] bridge_slave_1: left promiscuous mode [ 531.070390][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.152445][T14390] bridge_slave_0: left allmulticast mode [ 531.187637][T14390] bridge_slave_0: left promiscuous mode [ 531.239026][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.152414][T14412] syzkaller0: entered promiscuous mode [ 532.165858][T14412] syzkaller0: entered allmulticast mode [ 532.527906][T14425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2461'. [ 532.781831][T14430] loop3: detected capacity change from 0 to 8 [ 533.323959][T14430] SQUASHFS error: Failed to read block 0x1ec: -5 [ 533.354967][T14430] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 533.383236][T14437] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 535.114550][T14463] loop0: detected capacity change from 0 to 16 [ 535.738551][T14463] erofs (device loop0): algorithm 1 isn't enabled on this kernel [ 536.243980][T14468] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2473'. [ 539.547552][T14495] blk_print_req_error: 2 callbacks suppressed [ 539.547570][T14495] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.563567][T14495] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.573079][T14495] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 539.582996][T14495] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.592427][T14495] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 539.602040][T14495] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 539.609866][T14495] UDF-fs: Scanning with blocksize 512 failed [ 539.617364][T14495] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.627470][T14495] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.636907][T14495] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 539.646703][T14495] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.662871][T14495] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 539.671080][T14494] loop9: detected capacity change from 0 to 1024 [ 539.676966][T14495] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 539.690120][T14495] UDF-fs: Scanning with blocksize 1024 failed [ 539.700550][T14495] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.709789][T14485] loop0: detected capacity change from 0 to 512 [ 539.710768][T14485] EXT4-fs: Ignoring removed i_version option [ 539.710799][T14485] ext4: Unknown parameter 'smackfsdef' [ 539.741761][T14495] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.751267][T14495] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 539.761039][T14495] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.770541][T14495] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 539.773384][T14494] EXT4-fs: Ignoring removed orlov option [ 539.780153][T14495] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 539.780171][T14495] UDF-fs: Scanning with blocksize 2048 failed [ 539.780699][T14495] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 539.810000][T14495] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 539.819752][T14495] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 539.829329][T14495] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 539.836955][T14495] UDF-fs: Scanning with blocksize 4096 failed [ 539.843000][T14495] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 539.986873][T14485] loop0: detected capacity change from 0 to 256 [ 540.613853][T14485] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 540.630797][T14485] exFAT-fs (loop0): error, data size is invalid(150994954) [ 540.638322][T14485] exFAT-fs (loop0): Filesystem has been set read-only [ 541.223980][T14494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.400012][ T9031] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.601667][T14506] tipc: Enabling of bearer rejected, failed to enable media [ 541.725304][T14512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2486'. [ 541.808285][T14516] loop9: detected capacity change from 0 to 128 [ 542.213999][T14520] syzkaller0: entered promiscuous mode [ 542.236608][T14520] syzkaller0: entered allmulticast mode [ 545.122810][T14543] loop1: detected capacity change from 0 to 512 [ 545.150860][T14543] EXT4-fs: Ignoring removed i_version option [ 545.192115][T14543] ext4: Unknown parameter 'smackfsdef' [ 547.015604][T14549] loop0: detected capacity change from 0 to 2048 [ 547.165685][T14549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.165875][T10570] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 547.219073][T14549] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 547.355791][T10570] usb 4-1: Using ep0 maxpacket: 16 [ 547.362671][T10570] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 547.394485][T10570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 547.425818][T10570] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 547.452452][T10570] usb 4-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00 [ 547.730276][T10570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.758813][T10570] usb 4-1: config 0 descriptor?? [ 547.782234][ T6924] ------------[ cut here ]------------ [ 547.790002][ T6924] kernel BUG at fs/ext4/inode.c:2809! [ 547.838568][ T6924] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 547.844872][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 547.854444][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 547.864509][ T6924] Workqueue: writeback wb_workfn (flush-7:0) [ 547.870526][ T6924] RIP: 0010:ext4_do_writepages+0x4607/0x4610 [ 547.876521][ T6924] Code: c6 00 78 be 8b e8 99 96 b3 fe 90 0f 0b e8 21 54 4b ff 4c 89 f7 48 c7 c6 e0 7b be 8b e8 82 96 b3 fe 90 0f 0b e8 0a 54 4b ff 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 547.897264][ T6924] RSP: 0018:ffffc9001afb6ca0 EFLAGS: 00010293 [ 547.903336][ T6924] RAX: ffffffff82746936 RBX: 0000006210000000 RCX: ffff88801ef40000 [ 547.911299][ T6924] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 547.919261][ T6924] RBP: ffffc9001afb70d0 R08: ffff88805c2e7317 R09: 1ffff1100b85ce62 [ 547.927219][ T6924] R10: dffffc0000000000 R11: ffffed100b85ce63 R12: 0000000000000001 [ 547.935178][ T6924] R13: ffffc9001afb7120 R14: 0000004000000000 R15: dffffc0000000000 [ 547.943139][ T6924] FS: 0000000000000000(0000) GS:ffff8881259f0000(0000) knlGS:0000000000000000 [ 547.952055][ T6924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.958627][ T6924] CR2: 00007f4af0bc7630 CR3: 000000005e112000 CR4: 00000000003526f0 [ 547.966588][ T6924] Call Trace: [ 547.969854][ T6924] [ 547.972776][ T6924] ? __lock_acquire+0xab9/0xd20 [ 547.977622][ T6924] ? unwind_next_frame+0xa5/0x2390 [ 547.982718][ T6924] ? unwind_next_frame+0xa5/0x2390 [ 547.987813][ T6924] ? __lock_acquire+0xab9/0xd20 [ 547.992655][ T6924] ? __lock_acquire+0xab9/0xd20 [ 547.997500][ T6924] ? unwind_next_frame+0xa5/0x2390 [ 548.002601][ T6924] ? unwind_next_frame+0xa5/0x2390 [ 548.007696][ T6924] ? __pfx_ext4_do_writepages+0x10/0x10 [ 548.013234][ T6924] ? unwind_next_frame+0xa5/0x2390 [ 548.018328][ T6924] ? look_up_lock_class+0x74/0x170 [ 548.023428][ T6924] ? register_lock_class+0x51/0x320 [ 548.028618][ T6924] ? __lock_acquire+0xab9/0xd20 [ 548.033462][ T6924] ? rcu_read_lock_any_held+0xb3/0x120 [ 548.038912][ T6924] ext4_writepages+0x205/0x350 [ 548.043669][ T6924] ? __pfx_ext4_writepages+0x10/0x10 [ 548.048948][ T6924] ? do_raw_spin_unlock+0x122/0x240 [ 548.054135][ T6924] ? __pfx_ext4_writepages+0x10/0x10 [ 548.059405][ T6924] do_writepages+0x32b/0x550 [ 548.063985][ T6924] ? reacquire_held_locks+0x127/0x1d0 [ 548.069348][ T6924] ? writeback_sb_inodes+0x384/0x1010 [ 548.074712][ T6924] __writeback_single_inode+0x145/0xff0 [ 548.080247][ T6924] ? do_raw_spin_unlock+0x122/0x240 [ 548.085445][ T6924] writeback_sb_inodes+0x6c7/0x1010 [ 548.090639][ T6924] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 548.096277][ T6924] ? rcu_is_watching+0x15/0xb0 [ 548.101040][ T6924] wb_writeback+0x43b/0xaf0 [ 548.105533][ T6924] ? queue_io+0x331/0x590 [ 548.109849][ T6924] ? __pfx_wb_writeback+0x10/0x10 [ 548.114866][ T6924] ? _raw_spin_unlock_irq+0x23/0x50 [ 548.120058][ T6924] wb_workfn+0x409/0xef0 [ 548.124301][ T6924] ? __pfx_wb_workfn+0x10/0x10 [ 548.129049][ T6924] ? __lock_acquire+0xab9/0xd20 [ 548.133891][ T6924] ? process_scheduled_works+0x9ef/0x17b0 [ 548.139604][ T6924] ? _raw_spin_unlock_irq+0x23/0x50 [ 548.144795][ T6924] ? process_scheduled_works+0x9ef/0x17b0 [ 548.150507][ T6924] ? process_scheduled_works+0x9ef/0x17b0 [ 548.156222][ T6924] process_scheduled_works+0xae1/0x17b0 [ 548.161779][ T6924] ? __pfx_process_scheduled_works+0x10/0x10 [ 548.167757][ T6924] worker_thread+0x8a0/0xda0 [ 548.172343][ T6924] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 548.178670][ T6924] ? __kthread_parkme+0x7b/0x200 [ 548.183599][ T6924] kthread+0x711/0x8a0 [ 548.187653][ T6924] ? __pfx_worker_thread+0x10/0x10 [ 548.192762][ T6924] ? __pfx_kthread+0x10/0x10 [ 548.197342][ T6924] ? _raw_spin_unlock_irq+0x23/0x50 [ 548.202533][ T6924] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.207722][ T6924] ? __pfx_kthread+0x10/0x10 [ 548.212304][ T6924] ret_from_fork+0x47c/0x820 [ 548.216887][ T6924] ? __pfx_ret_from_fork+0x10/0x10 [ 548.221992][ T6924] ? __switch_to_asm+0x39/0x70 [ 548.226744][ T6924] ? __switch_to_asm+0x33/0x70 [ 548.231497][ T6924] ? __pfx_kthread+0x10/0x10 [ 548.236077][ T6924] ret_from_fork_asm+0x1a/0x30 [ 548.240835][ T6924] [ 548.243849][ T6924] Modules linked in: [ 548.248727][ T6924] ---[ end trace 0000000000000000 ]--- [ 548.258025][T14565] syzkaller0: entered promiscuous mode [ 548.263548][T14565] syzkaller0: entered allmulticast mode [ 548.281546][ T6924] RIP: 0010:ext4_do_writepages+0x4607/0x4610 [ 548.288357][ T6924] Code: c6 00 78 be 8b e8 99 96 b3 fe 90 0f 0b e8 21 54 4b ff 4c 89 f7 48 c7 c6 e0 7b be 8b e8 82 96 b3 fe 90 0f 0b e8 0a 54 4b ff 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 548.310472][ T6924] RSP: 0018:ffffc9001afb6ca0 EFLAGS: 00010293 [ 548.347654][ T6924] RAX: ffffffff82746936 RBX: 0000006210000000 RCX: ffff88801ef40000 [ 548.356146][ T6924] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 548.364248][ T6924] RBP: ffffc9001afb70d0 R08: ffff88805c2e7317 R09: 1ffff1100b85ce62 [ 548.400727][ T6924] R10: dffffc0000000000 R11: ffffed100b85ce63 R12: 0000000000000001 [ 548.424557][ T6924] R13: ffffc9001afb7120 R14: 0000004000000000 R15: dffffc0000000000 [ 548.442882][ T6924] FS: 0000000000000000(0000) GS:ffff888125af0000(0000) knlGS:0000000000000000 [ 548.454621][ T6924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.461942][ T6924] CR2: 000055558de5f808 CR3: 000000005e112000 CR4: 00000000003526f0 [ 548.488575][ T6924] Kernel panic - not syncing: Fatal exception [ 548.494814][ T6924] Kernel Offset: disabled [ 548.499124][ T6924] Rebooting in 86400 seconds..