last executing test programs: 11m59.54870119s ago: executing program 1 (id=2): clock_adjtime(0x41, &(0x7f0000000000)={0x3ff, 0x1, 0x0, 0xd, 0x7fffffff, 0x8, 0x5, 0x200000000000000, 0x0, 0x4000000000100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0x9a, 0x0, 0x0, 0x1, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="650a0000000001000000000000000000000000950000000000000000000000000000000000000000c4f327397ad3238a69beb1b9bef9249cc0604d5daaaf2ca6517c3b1fd56dec9c091747eb3cac4f91ab0a95c9061e73e502bc86e2bb3ae36690d1c9a3c72c3c3c9603c99d718e078a496520c148b94f45eb0a6cc01ef1e3000a39c279311f66877dc887a1cff22cf9720bab706171484caadd29d327707240ba05d8adc71fe959c54e"], 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0x206, 0xa0582) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) fdatasync(r0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) 11m58.285726762s ago: executing program 1 (id=11): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x808b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x114, 0xfffffffffffffffe) 11m57.370138025s ago: executing program 1 (id=12): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000840), &(0x7f0000000140)=r1}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 11m55.766843956s ago: executing program 32 (id=12): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005c00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000840), &(0x7f0000000140)=r1}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 9m49.491314879s ago: executing program 4 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x100000, 0x115) 9m44.455264166s ago: executing program 4 (id=318): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) read$FUSE(r2, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000002300)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, r3, 0x3001, 0x2}}}, 0xffffff03) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002380)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r4, 0x1000) ftruncate(r4, 0xc17a) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0x2020) r5 = syz_create_resource$binfmt(&(0x7f0000004400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) brk(0xd99) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) 9m34.757533221s ago: executing program 4 (id=340): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 9m33.632046329s ago: executing program 4 (id=342): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 9m30.697713473s ago: executing program 4 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000054000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000070006007272000008000800000000000c000700000000452b56d5000800090080"], 0x68}}, 0x0) 9m27.854642224s ago: executing program 4 (id=353): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xd0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xa4, 0x2, [@TCA_BPF_ACT={0xa0, 0x1, [@m_bpf={0x40, 0x11, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000800) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000006c0), 0x5b, 0x40, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 9m26.635406525s ago: executing program 33 (id=353): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xd0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xa4, 0x2, [@TCA_BPF_ACT={0xa0, 0x1, [@m_bpf={0x40, 0x11, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000800) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000006c0), 0x5b, 0x40, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m23.63490008s ago: executing program 5 (id=787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) mlockall(0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket(0x1e, 0x805, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0xffffffffffffffff, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m15.222597421s ago: executing program 5 (id=788): openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000340), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5m10.681674065s ago: executing program 5 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x141080, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@rodir}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@utf8no}, {@uni_xlateno}, {@fat=@sys_immutable}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@fat=@dos1xfloppy}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 5m8.450691611s ago: executing program 5 (id=804): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m7.252570391s ago: executing program 5 (id=818): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) getsockopt$inet_int(r1, 0x0, 0x2, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m5.996534932s ago: executing program 5 (id=811): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0xf, &(0x7f00000000c0)=@string={0xf, 0x3, "69b9b555d9b0f1b2de8f37b796"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x3, 0x32, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550f, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 4m50.074435532s ago: executing program 34 (id=811): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0xf, &(0x7f00000000c0)=@string={0xf, 0x3, "69b9b555d9b0f1b2de8f37b796"}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x3, 0x32, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550f, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 2m29.420494061s ago: executing program 3 (id=1079): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getgid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, 0x0, 0x0) write$binfmt_misc(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010044, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x200700, &(0x7f0000000a00)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@inode_readahead_blks}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nouid32}]}, 0x1, 0x499, &(0x7f00000010c0)="$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") syz_emit_ethernet(0x32, 0x0, 0x0) 2m26.103274484s ago: executing program 3 (id=1083): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x7bb3, 0x0, &(0x7f0000001f00), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) 2m23.908393659s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file7/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file7/file0\x00', 0x10840, &(0x7f0000000580)=ANY=[@ANYBLOB="b383187c91ad3229682f235d2781213493fe127aa7ba6597640b6fbf391bc4b3d3200103f7b046bb6a2f9861dfed93a179cec8da7a924e4b92721b97eba682e8ff83754e87a7cb4a88c612af6da66d416c84eebfdeb325f68b67aaac9599a99eb1ccc8c33197cda0ea3dbb91734004560e695b3f1eadf1815d7e3269e7483839f58fe4768d044963a3fc6a8748eca42cee0ed2a260e980aef76e04ad4e08e3016af899"], 0x81, 0x279, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000027c0)=@get={0x1, &(0x7f00000017c0)=""/4096, 0x73}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 2m20.185518612s ago: executing program 3 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x181101, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x83e01, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x290f, 0xc000, 0x8, 0x26}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x5d, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) write(r3, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='-:s/', 0x4) 2m19.221712027s ago: executing program 3 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r4 = semget$private(0x0, 0x7, 0x195) semtimedop(r4, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}], 0x1, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x88, r6, 0xacf5e67dd0b583a1, 0x4000000, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5f, 0xe, {{{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3", {}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffa1, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x1, 0x2, 0x2, 0x1000}}, @val={0x6, 0x2, 0x8343}, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x81, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x61}}, @val={0x76, 0x6, {0xf, 0xf4, 0x22, 0x4}}}}]]}, 0x88}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 2m18.106045795s ago: executing program 3 (id=1093): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2m2.609421354s ago: executing program 35 (id=1093): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1m41.6180607s ago: executing program 6 (id=1145): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) r0 = creat(0x0, 0x30) connect$unix(r0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, 0x0, 0x0) 1m40.03089585s ago: executing program 6 (id=1149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r2, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffa, 0xffffff7e, 0xf}}, 0xe4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) 1m38.636075815s ago: executing program 6 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='username\x00', &(0x7f00000001c0)='guest\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1m37.119136133s ago: executing program 6 (id=1155): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 1m35.497952854s ago: executing program 6 (id=1157): io_uring_setup(0x62d2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r3, 0x1) 1m33.829692946s ago: executing program 6 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000001dc0)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040)) 1m16.616695868s ago: executing program 36 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000001dc0)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r4, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x4, 0x0, &(0x7f0000000040)) 29.625701246s ago: executing program 2 (id=1240): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa08004500002400670000002f9078ac1414fee0000001000065580401907800d8621b4b13a090d2f2002c17a9"], 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000400)="1b465ef5cdd960358cf976925991f96c1d20925c9faf3ed9f18189", 0x1b, 0x1486) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x100) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000940)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000a00)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x4040845}, 0x80) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) ioctl(0xffffffffffffffff, 0xc138fd09, 0x0) write(r3, &(0x7f0000000bc0)='0', 0x1) 28.934921444s ago: executing program 2 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = getpid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001d00)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[r4], 0x1}, 0x58) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 27.48816968s ago: executing program 2 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r3 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', r4, 0x0) setreuid(0x0, r4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) 20.512577315s ago: executing program 0 (id=1249): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000940)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000980)=""/19, &(0x7f00000009c0)=0x13) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) r2 = socket$inet_tcp(0x2, 0x1, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000a40)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) bind(r2, &(0x7f00000000c0)=@in={0x2, 0x2082, @loopback}, 0x10) listen(r2, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x6) connect(r4, &(0x7f0000000200)=@in={0x2, 0x2082, @loopback}, 0x10) r5 = accept(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000740)=@ccm_128={{0x303}, "79dbc643faa67158", "350083dacea15471e87e9248bd190e9f", '\x00', "88f92d0e2f558720"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000780), 0x4) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000007c0)=@gcm_256={{0x304}, "2cde2f240dc9bd08", "b750aa7a64c5e67051a52d830c4e2285f3c305f3cf73699f0480c45739846a05", "f3c55e41", "9ac5c045077b96b9"}, 0x38) sendto(r4, &(0x7f0000000800)="15030300020200", 0x7, 0x0, 0x0, 0x0) recvmsg(r5, 0x0, 0x0) 11.592763369s ago: executing program 8 (id=1113): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(&(0x7f00000002c0)=""/112) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"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", 0x29f}}, 0x1006) 11.591765869s ago: executing program 0 (id=1260): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48, 0x8001}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) 11.582479689s ago: executing program 7 (id=1261): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x60040045) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) fcntl$setownex(r1, 0xf, &(0x7f0000000300)={0x1}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109d", 0x27) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000700)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@utf8}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_mixed}, {@rodir}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@uni_xlateno}, {@rodir}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}]}, 0x1, 0x281, &(0x7f0000000440)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 9.504024062s ago: executing program 8 (id=1252): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) creat(0x0, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) shmctl$IPC_RMID(0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000"], 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r4, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) 9.502438802s ago: executing program 7 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 9.502029992s ago: executing program 0 (id=1253): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) userfaultfd(0x80001) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0xb0}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.482541402s ago: executing program 2 (id=1254): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, 0x0, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x1c3001, 0x11) write$tcp_mem(r2, &(0x7f00000002c0)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x902, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.011075679s ago: executing program 7 (id=1255): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x40) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={&(0x7f0000000080)="edcc4a4394a43eefcd348d302c216164b26c0d978cfaf8ad0bc3c829e5e37db036c8db94710ad65792fb3a7ea94b4bb77122a43ca40a6778e62bdfe7c8bb9b1d10d5152a4bdee9fad21ed2effb9fffedf4ce6d8a9dbb026774c18bdbf40477481138b927cc502a378521543dd62fd38eddd08afff508cc3ff3acc10242ed5add757332345bd3da5c5f720594eeaf2d2eb84fff86a3381c9f9369e6411896ced8566180", &(0x7f0000000180)=""/54, &(0x7f00000001c0), &(0x7f00000011c0)="aeb3fe4b1744af6b3ed3ec30fee93c87abc11ebb866cc9c28614a439a3d7c351974e7f6ac785a458a519e65d55ced49182c1a75b989a62d25e8fdcb9cdee4d7aaca5f9354e5f639c3eb8e9f015ac95ecc94c6ea543939580d777e50dcd320b81cfbd2ffe022842e04e2d9352187c28193e19140b00bcd59a36453fc8ce5d460e9c16ad9226043a", 0x2, 0x1}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x119) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x7afd, 0x800, 0x0, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r10, r2, 0x80000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000811}, 0x0) r11 = openat(0xffffffffffffffff, &(0x7f0000001300)='./file0\x00', 0x200000, 0xc3) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x2, 0x2000000, 0x10, r11, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x5220, 0x0) write$tun(r11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)) 7.091400522s ago: executing program 2 (id=1256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x3, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 6.894957847s ago: executing program 0 (id=1257): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x4002, &(0x7f0000000000), 0x1, 0x75d, &(0x7f0000001240)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x30d38000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) 5.212815809s ago: executing program 0 (id=1258): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000b4000000bf09200000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x82, 0x0, 0x0, 0x5000002) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x20000000, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x800001c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x12}, 0x1}], 0x1c) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, 0x80000) 4.935474486s ago: executing program 8 (id=1259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 2.980726765s ago: executing program 8 (id=1262): socket$can_j1939(0x1d, 0x2, 0x7) ustat(0x11, &(0x7f0000000600)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) socket(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='md0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r4, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000010000000008000001000000010000000000000001000000000000000100"/72) ioctl(r4, 0x40140921, &(0x7f0000000420)="0000000001000000000000000000000006000000") ioctl(r4, 0x400c0930, 0x0) 2.747871611s ago: executing program 2 (id=1264): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xe3}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48, 0x8001}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) 2.509678607s ago: executing program 7 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setparam(r0, 0x0) setrlimit(0xd, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) listen(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5800003a, r2, 0x0) read$FUSE(r3, &(0x7f0000004fc0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close(0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) 2.37598618s ago: executing program 8 (id=1266): syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000080)='./file0/file0\x00', 0x210000, &(0x7f00000005c0)={[{@block_validity}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@hash}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x442842, 0x14a) setns(r0, 0x40000000) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3) getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 2.247838713s ago: executing program 0 (id=1267): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffa, 0xffffff7e, 0xf}}, 0xe4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) 2.240554764s ago: executing program 7 (id=1268): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404a004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x2800000000000, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 1.034240664s ago: executing program 8 (id=1269): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x7bb3, 0x0, &(0x7f0000001f00), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4cc60) write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871", 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r5, &(0x7f00000091c0)=""/16384, 0x4000) syz_emit_ethernet(0x42, 0x0, 0x0) 0s ago: executing program 7 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) socket$packet(0x11, 0x2, 0x300) pipe2(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="ed56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000440), 0x0, 0x40800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) kernel console output (not intermixed with test programs): apacity change from 0 to 8 [ 182.636263][ T5451] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 182.658268][ T5452] SQUASHFS error: zlib decompression failed, data probably corrupt [ 182.658330][ T5452] SQUASHFS error: Failed to read block 0x9b: -5 [ 182.658345][ T5452] SQUASHFS error: Unable to read metadata cache entry [99] [ 182.658366][ T5452] SQUASHFS error: Unable to read inode 0x127 [ 183.517911][ T5463] loop2: detected capacity change from 0 to 2048 [ 183.588965][ T5463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.098817][ T5477] jffs2: notice: (5477) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.307784][ T5525] UBIFS error (pid: 5525): cannot open "(null)", error -22 [ 190.845521][ T5540] loop2: detected capacity change from 0 to 8 [ 191.129400][ T5540] SQUASHFS error: zlib decompression failed, data probably corrupt [ 191.137603][ T5540] SQUASHFS error: Failed to read block 0x9b: -5 [ 191.144538][ T5540] SQUASHFS error: Unable to read metadata cache entry [99] [ 191.151806][ T5540] SQUASHFS error: Unable to read inode 0x127 [ 194.065668][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.073341][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.074383][ T5597] loop2: detected capacity change from 0 to 512 [ 197.148677][ T5597] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.263: iget: bad i_size value: 38620345925642 [ 197.161773][ T5597] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.263: couldn't read orphan inode 15 (err -117) [ 197.184809][ T5597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.690837][ T9] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:0: bg 0: block 5: invalid block bitmap [ 197.724638][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 197.758417][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 197.758417][ T9] [ 197.883390][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 197.889552][ T9] EXT4-fs (loop2): Free/Dirty block details [ 197.895876][ T9] EXT4-fs (loop2): free_blocks=0 [ 197.901857][ T9] EXT4-fs (loop2): dirty_blocks=16000 [ 197.908345][ T9] EXT4-fs (loop2): Block reservation details [ 197.923901][ T9] EXT4-fs (loop2): i_reserved_data_blocks=16000 [ 198.531120][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 199.276834][ T5624] CacheFiles: Empty directory specified [ 199.297787][ T5628] netlink: 'syz.0.269': attribute type 11 has an invalid length. [ 203.743974][ T4277] EXT4-fs: 23 callbacks suppressed [ 203.743990][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 203.863763][ T5657] event trace: Could not enable event p [ 204.203132][ T5665] loop2: detected capacity change from 0 to 8 [ 204.233635][ T5673] device syzkaller0 entered promiscuous mode [ 204.263886][ T5665] SQUASHFS error: zlib decompression failed, data probably corrupt [ 204.271866][ T5665] SQUASHFS error: Failed to read block 0x9b: -5 [ 204.278309][ T5665] SQUASHFS error: Unable to read metadata cache entry [99] [ 204.285619][ T5665] SQUASHFS error: Unable to read inode 0x127 [ 206.392844][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 206.399597][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 206.405767][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 206.405787][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 207.045036][ T5691] dns_resolver: Unsupported content type (6) [ 208.410941][ T5705] device syzkaller0 entered promiscuous mode [ 208.777014][ T5714] device syzkaller0 entered promiscuous mode [ 209.942289][ T5727] loop0: detected capacity change from 0 to 256 [ 210.652973][ T27] audit: type=1804 audit(2000000016.750:32): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.294" name="/newroot/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop0" ino=1048666 res=1 errno=0 [ 210.859793][ T5735] tipc: Enabled bearer , priority 0 [ 210.931871][ T5742] tipc: Resetting bearer [ 211.002293][ T5732] tipc: Disabling bearer [ 213.627880][ T5760] syz.4.299 (5760): drop_caches: 2 [ 214.665368][ T4287] Bluetooth: hci0: hcon ffff8880242ba000 sent 1 < count 1025 [ 217.346804][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 221.105089][ T5808] loop0: detected capacity change from 0 to 2048 [ 221.191750][ T5808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.513309][ T5827] autofs4:pid:5827:autofs_fill_super: called with bogus options [ 223.664944][ T5837] jffs2: notice: (5837) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 223.783451][ T5844] loop2: detected capacity change from 0 to 128 [ 223.940211][ T5846] syz.2.322: attempt to access beyond end of device [ 223.940211][ T5846] loop2: rw=2049, sector=145, nr_sectors = 176 limit=128 [ 223.990691][ T5838] syz.2.322: attempt to access beyond end of device [ 223.990691][ T5838] loop2: rw=524288, sector=145, nr_sectors = 176 limit=128 [ 224.015700][ T5839] syz.2.322: attempt to access beyond end of device [ 224.015700][ T5839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 224.034605][ T5839] syz.2.322: attempt to access beyond end of device [ 224.034605][ T5839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 224.057232][ T5839] syz.2.322: attempt to access beyond end of device [ 224.057232][ T5839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 224.072412][ T5839] syz.2.322: attempt to access beyond end of device [ 224.072412][ T5839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 224.093772][ T5839] syz.2.322: attempt to access beyond end of device [ 224.093772][ T5839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 224.126377][ T5839] syz.2.322: attempt to access beyond end of device [ 224.126377][ T5839] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 225.216881][ T5851] loop0: detected capacity change from 0 to 164 [ 225.851008][ T5859] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 226.398012][ T5866] loop5: detected capacity change from 0 to 8 [ 226.431712][ T5866] SQUASHFS error: lzo decompression failed, data probably corrupt [ 226.439800][ T5866] SQUASHFS error: Failed to read block 0x91: -5 [ 226.446139][ T5866] SQUASHFS error: Unable to read metadata cache entry [8f] [ 226.453460][ T5866] SQUASHFS error: Unable to read inode 0x11f [ 227.134044][ T5874] x_tables: duplicate underflow at hook 2 [ 227.924686][ T5875] loop2: detected capacity change from 0 to 1024 [ 228.345075][ T5875] hfsplus: invalid length 1280 has been corrected to 255 [ 228.352984][ T5875] hfsplus: invalid length 1280 has been corrected to 255 [ 228.360348][ T5875] hfsplus: invalid length 1280 has been corrected to 255 [ 228.369044][ T5875] hfsplus: invalid length 1280 has been corrected to 255 [ 228.376503][ T5875] hfsplus: invalid length 1280 has been corrected to 255 [ 228.383898][ T5875] hfsplus: invalid length 1280 has been corrected to 255 [ 228.892663][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 229.082733][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 229.101492][ T4321] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 229.167722][ T4321] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 229.210070][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.232896][ T4321] usb 1-1: Product: syz [ 229.242756][ T4321] usb 1-1: Manufacturer: syz [ 229.247547][ T4321] usb 1-1: SerialNumber: syz [ 229.284245][ T4321] usb 1-1: config 0 descriptor?? [ 229.302308][ T4321] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 230.553645][ T4321] gspca_zc3xx: reg_w_i err -110 [ 231.192644][ T4321] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 231.203950][ T4321] gspca_zc3xx: probe of 1-1:0.0 failed with error -110 [ 231.315634][ T4321] usb 1-1: USB disconnect, device number 3 [ 233.287720][ T5903] loop5: detected capacity change from 0 to 8 [ 233.305830][ T5903] SQUASHFS error: zlib decompression failed, data probably corrupt [ 233.319676][ T5903] SQUASHFS error: Failed to read block 0x9b: -5 [ 233.452744][ T5903] SQUASHFS error: Unable to read metadata cache entry [99] [ 233.460028][ T5903] SQUASHFS error: Unable to read inode 0x127 [ 234.694676][ T5909] loop4: detected capacity change from 0 to 64 [ 235.764483][ T5911] tipc: Enabling of bearer rejected, already enabled [ 237.117649][ T4273] BFS-fs: bfs_iget(): Bad inode number loop4:0000fe02 [ 237.161420][ T4273] BFS-fs: bfs_iget(): Bad inode number loop4:0000fe02 [ 239.942148][ T5933] loop2: detected capacity change from 0 to 2048 [ 240.159681][ T5933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 240.222821][ T5933] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.267883][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 241.334552][ T5950] device syzkaller0 entered promiscuous mode [ 241.951414][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.960452][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.968488][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.228949][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.241374][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 242.251375][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.036263][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 244.169438][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.213079][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.221342][ T5967] device bridge_slave_0 entered promiscuous mode [ 244.230482][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.238489][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.249131][ T5967] device bridge_slave_1 entered promiscuous mode [ 244.284420][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.302747][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 244.313462][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.420473][ T5967] team0: Port device team_slave_0 added [ 245.428867][ T5967] team0: Port device team_slave_1 added [ 245.716239][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.738222][ T6006] loop2: detected capacity change from 0 to 512 [ 245.782649][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.029662][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 247.342835][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.406519][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.448940][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.522281][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.809518][ T6013] loop5: detected capacity change from 0 to 40427 [ 247.845139][ T6015] xt_socket: unknown flags 0x4c [ 248.465811][ T5967] device hsr_slave_0 entered promiscuous mode [ 248.492399][ T6013] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 248.500792][ T6013] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 248.553016][ T5967] device hsr_slave_1 entered promiscuous mode [ 248.573238][ T5967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.580864][ T5967] Cannot create hsr debugfs directory [ 248.584699][ T6013] F2FS-fs (loop5): Found nat_bits in checkpoint [ 248.654658][ T6013] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 248.662120][ T6013] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 249.103466][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 249.349903][ T5967] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.363286][ T6024] Set syz1 is full, maxelem 2076 reached [ 249.401517][ T5967] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.455510][ T5967] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.490779][ T6026] event trace: Could not enable event p [ 249.498636][ T5967] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.698405][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.768935][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.795053][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.823325][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.253216][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 253.327060][ T27] audit: type=1804 audit(2000000059.500:33): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.380" name="bus" dev="ramfs" ino=44853 res=1 errno=0 [ 253.374760][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.405036][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.442671][ T27] audit: type=1804 audit(2000000059.520:34): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.380" name="bus" dev="ramfs" ino=44853 res=1 errno=0 [ 253.511540][ T6049] ======================================================= [ 253.511540][ T6049] WARNING: The mand mount option has been deprecated and [ 253.511540][ T6049] and is ignored by this kernel. Remove the mand [ 253.511540][ T6049] option from the mount to silence this warning. [ 253.511540][ T6049] ======================================================= [ 254.296108][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.303272][ T4830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.344201][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.383129][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.422889][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.430029][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.460141][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.553230][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.680084][ T6058] usbip-vudc usbip-vudc.0: gadget not bound [ 255.504845][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.511209][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.592891][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.602350][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.780017][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.853274][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.872947][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.908820][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.946294][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.003494][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.097103][ T5967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.297161][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.363070][ T6066] xt_socket: unknown flags 0x4c [ 257.063399][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.102985][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.067475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.094726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.117887][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.965874][ T6103] netlink: 112 bytes leftover after parsing attributes in process `syz.5.388'. [ 259.976139][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.5.388'. [ 261.044539][ T6105] event trace: Could not enable event p [ 261.624942][ T6117] loop0: detected capacity change from 0 to 8 [ 262.274563][ T6117] SQUASHFS error: zlib decompression failed, data probably corrupt [ 262.282795][ T6117] SQUASHFS error: Failed to read block 0x9b: -5 [ 262.289116][ T6117] SQUASHFS error: Unable to read metadata cache entry [99] [ 262.298373][ T6117] SQUASHFS error: Unable to read inode 0x127 [ 262.816470][ T6123] loop2: detected capacity change from 0 to 8 [ 262.867560][ T6123] SQUASHFS error: zlib decompression failed, data probably corrupt [ 262.915793][ T6123] SQUASHFS error: Failed to read block 0x9b: -5 [ 262.946974][ T6123] SQUASHFS error: Unable to read metadata cache entry [99] [ 262.982019][ T6123] SQUASHFS error: Unable to read inode 0x127 [ 262.992157][ T6125] tc action pedit offset 0 out of bounds [ 262.998308][ T6125] tc action pedit offset 0 out of bounds [ 263.004036][ T6125] tc action pedit offset 0 out of bounds [ 263.009720][ T6125] tc action pedit offset 0 out of bounds [ 263.015424][ T6125] tc action pedit offset 0 out of bounds [ 263.021103][ T6125] tc action pedit offset 0 out of bounds [ 263.026792][ T6125] tc action pedit offset 0 out of bounds [ 263.032457][ T6125] tc action pedit offset 0 out of bounds [ 263.038183][ T6125] tc action pedit offset 0 out of bounds [ 263.043905][ T6125] tc action pedit offset 0 out of bounds [ 263.049597][ T6125] 0: reclassify loop, rule prio 0, protocol 800 [ 263.088926][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.123770][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.539420][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.700598][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.725297][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.734735][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.762329][ T5967] device veth0_vlan entered promiscuous mode [ 263.841589][ T5967] device veth1_vlan entered promiscuous mode [ 263.886460][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.956064][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.980429][ T5967] device veth0_macvtap entered promiscuous mode [ 263.995852][ T5967] device veth1_macvtap entered promiscuous mode [ 264.798682][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.830712][ T4830] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.913613][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.944619][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.802613][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.116436][ T6147] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.332304][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.372626][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.422545][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.464778][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.481050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.525676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.576221][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.606793][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.643353][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.687760][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.728722][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.751691][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.799416][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.841069][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.858675][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.890726][ T5967] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.915718][ T5967] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.962560][ T5967] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.982927][ T5967] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.143759][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.172671][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.190369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.250738][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.269868][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.300296][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.374313][ T6202] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 275.573105][ T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 276.482975][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 276.507538][ T126] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.539124][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.602759][ T126] usb 3-1: Product: syz [ 276.632559][ T126] usb 3-1: Manufacturer: syz [ 276.637225][ T126] usb 3-1: SerialNumber: syz [ 276.693341][ T126] usb 3-1: config 0 descriptor?? [ 276.787805][ T27] audit: type=1800 audit(2000000082.960:35): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.420" name="serialnumber" dev="configfs" ino=45495 res=0 errno=0 [ 276.859228][ T27] audit: type=1800 audit(2000000083.000:36): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.420" name="report_length" dev="configfs" ino=45498 res=0 errno=0 [ 276.906766][ T126] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.773504][ T126] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 279.868082][ T126] usb 3-1: USB disconnect, device number 6 [ 286.220095][ T6276] loop0: detected capacity change from 0 to 512 [ 286.302883][ T6276] ext4: Bad value for 'data' [ 290.810265][ T6307] FAULT_INJECTION: forcing a failure. [ 290.810265][ T6307] name failslab, interval 1, probability 0, space 0, times 1 [ 290.874046][ T6307] CPU: 1 PID: 6307 Comm: syz.2.442 Not tainted syzkaller #0 [ 290.881403][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 290.891520][ T6307] Call Trace: [ 290.894837][ T6307] [ 290.897796][ T6307] dump_stack_lvl+0x188/0x24e [ 290.902548][ T6307] ? show_regs_print_info+0x12/0x12 [ 290.907792][ T6307] ? load_image+0x410/0x410 [ 290.912426][ T6307] ? __might_sleep+0xd0/0xd0 [ 290.917057][ T6307] ? __lock_acquire+0x7ea0/0x7ea0 [ 290.922126][ T6307] should_fail_ex+0x390/0x4c0 [ 290.926845][ T6307] should_failslab+0x5/0x20 [ 290.931395][ T6307] slab_pre_alloc_hook+0x59/0x300 [ 290.936464][ T6307] ? memcg_list_lru_alloc+0x331/0xb00 [ 290.941877][ T6307] __kmem_cache_alloc_node+0x4f/0x270 [ 290.947293][ T6307] ? memcg_list_lru_alloc+0x331/0xb00 [ 290.952700][ T6307] __kmalloc+0xa3/0x240 [ 290.956894][ T6307] memcg_list_lru_alloc+0x331/0xb00 [ 290.962136][ T6307] ? slab_pre_alloc_hook+0xb1/0x300 [ 290.967360][ T6307] ? memcg_reparent_list_lrus+0x850/0x850 [ 290.973124][ T6307] ? get_obj_cgroup_from_current+0xd0/0x280 [ 290.979048][ T6307] ? get_obj_cgroup_from_current+0xd0/0x280 [ 290.984979][ T6307] slab_pre_alloc_hook+0x2ad/0x300 [ 290.990115][ T6307] ? slab_pre_alloc_hook+0xb1/0x300 [ 290.995328][ T6307] kmem_cache_alloc_lru+0x49/0x2e0 [ 291.000469][ T6307] ? bdev_alloc_inode+0x24/0x60 [ 291.005342][ T6307] ? _raw_spin_unlock+0x40/0x40 [ 291.010213][ T6307] bdev_alloc_inode+0x24/0x60 [ 291.014903][ T6307] ? bd_init_fs_context+0xa0/0xa0 [ 291.019950][ T6307] new_inode_pseudo+0x5f/0x1c0 [ 291.024730][ T6307] new_inode+0x25/0x1d0 [ 291.028926][ T6307] ? init_timer_key+0x178/0x320 [ 291.033822][ T6307] bdev_alloc+0x20/0x270 [ 291.038084][ T6307] __alloc_disk_node+0x127/0x570 [ 291.043036][ T6307] __blk_alloc_disk+0x2c/0x80 [ 291.047727][ T6307] dm_create+0x46b/0xf90 [ 291.051983][ T6307] dev_create+0x12e/0x2c0 [ 291.056333][ T6307] ? list_devices+0x820/0x820 [ 291.061020][ T6307] ? __might_fault+0xc2/0x120 [ 291.065719][ T6307] ? __might_fault+0xa6/0x120 [ 291.070409][ T6307] dm_ctl_ioctl+0xa9c/0xec0 [ 291.074941][ T6307] ? list_devices+0x820/0x820 [ 291.079649][ T6307] ? dm_poll+0x120/0x120 [ 291.083933][ T6307] ? bpf_lsm_file_ioctl+0x5/0x10 [ 291.088894][ T6307] ? security_file_ioctl+0x7c/0xa0 [ 291.094024][ T6307] ? dm_poll+0x120/0x120 [ 291.098291][ T6307] __se_sys_ioctl+0xfa/0x170 [ 291.102901][ T6307] do_syscall_64+0x4c/0xa0 [ 291.107332][ T6307] ? clear_bhb_loop+0x60/0xb0 [ 291.112029][ T6307] ? clear_bhb_loop+0x60/0xb0 [ 291.116743][ T6307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.122669][ T6307] RIP: 0033:0x7ffa4d19e1d9 [ 291.127106][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.146832][ T6307] RSP: 002b:00007ffa4e14a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.155302][ T6307] RAX: ffffffffffffffda RBX: 00007ffa4d425fa0 RCX: 00007ffa4d19e1d9 [ 291.163301][ T6307] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 291.171388][ T6307] RBP: 00007ffa4d235888 R08: 0000000000000000 R09: 0000000000000000 [ 291.179386][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.187382][ T6307] R13: 00007ffa4d426038 R14: 00007ffa4d425fa0 R15: 00007ffe99203d08 [ 291.195397][ T6307] [ 292.098820][ T6317] loop6: detected capacity change from 0 to 512 [ 292.155349][ T6317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.287606][ T6317] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 294.023755][ T6317] EXT4-fs (loop6): orphan cleanup on readonly fs [ 294.030284][ T6317] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.439: bad orphan inode 15 [ 294.079227][ T6317] ext4_test_bit(bit=14, block=5) = 0 [ 294.097463][ T6317] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 296.787648][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.809814][ T6347] device bridge_slave_0 left promiscuous mode [ 296.815078][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 296.821294][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.248911][ T6376] tipc: Enabled bearer , priority 0 [ 299.277765][ T6376] device syzkaller0 entered promiscuous mode [ 299.436241][ T6376] tipc: Resetting bearer [ 299.522927][ T6375] tipc: Resetting bearer [ 299.837635][ T6375] tipc: Disabling bearer [ 303.428909][ T6426] loop2: detected capacity change from 0 to 512 [ 303.532204][ T6428] overlayfs: failed to clone upperpath [ 303.589328][ T6426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 303.661598][ T6426] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.717779][ T6448] loop0: detected capacity change from 0 to 2048 [ 305.077363][ T6448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 305.326847][ T6448] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 305.920343][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 307.358308][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 307.928654][ T6461] loop2: detected capacity change from 0 to 2048 [ 307.966658][ T6461] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.407496][ T6474] loop6: detected capacity change from 0 to 512 [ 310.507529][ T6474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 310.547451][ T6474] System zones: 1-12 [ 310.595228][ T6474] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.480: missing EA_INODE flag [ 310.625779][ T6474] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.480: error while reading EA inode 12 err=-117 [ 310.657688][ T6474] EXT4-fs (loop6): 1 orphan inode deleted [ 310.683600][ T6474] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 310.748723][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 313.809805][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 313.926771][ T14] usb 6-1: device descriptor read/all, error -71 [ 314.049628][ T6491] device syzkaller0 entered promiscuous mode [ 314.084996][ T6491] TC_ACT_REPEAT abuse ? [ 315.722767][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 315.888577][ T6513] file system registered [ 315.912619][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 315.940596][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 316.040549][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 316.121994][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 316.206901][ T14] usb 1-1: Product: syz [ 316.257808][ T14] usb 1-1: Manufacturer: syz [ 316.304502][ T14] usb 1-1: SerialNumber: syz [ 316.431605][ T14] usb 1-1: config 0 descriptor?? [ 316.528835][ T6508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.622791][ T14] hub 1-1:0.0: bad descriptor, ignoring hub [ 316.628783][ T14] hub: probe of 1-1:0.0 failed with error -5 [ 316.950229][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.956702][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.223801][ T6531] loop5: detected capacity change from 0 to 512 [ 319.469531][ T4322] usb 1-1: USB disconnect, device number 4 [ 319.672974][ T6538] loop5: detected capacity change from 0 to 2048 [ 319.752645][ T1172] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 320.316579][ T1172] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.331629][ T6542] ip_tables: iptables: counters copy to user failed while replacing table [ 320.342708][ T1172] usb 7-1: config 0 has no interface number 0 [ 320.365139][ T1172] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.413038][ T1172] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 320.444945][ T1172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.511774][ T1172] usb 7-1: config 0 descriptor?? [ 320.540474][ T1172] usbhid 7-1:0.1: couldn't find an input interrupt endpoint [ 320.799193][ T6547] loop6: detected capacity change from 0 to 64 [ 323.076318][ T6551] device syzkaller0 entered promiscuous mode [ 323.603826][ T6553] usb 7-1: USB disconnect, device number 2 [ 325.977667][ T6568] loop2: detected capacity change from 0 to 512 [ 326.051385][ T6568] EXT4-fs (loop2): Test dummy encryption mode enabled [ 326.106017][ T6568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 326.253318][ T6576] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 326.293232][ T6568] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.501: bad orphan inode 131083 [ 326.612623][ T6568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 326.828818][ T6587] tipc: Started in network mode [ 326.866018][ T6587] tipc: Node identity 9ac0d251cd19, cluster identity 4711 [ 326.887198][ T6587] tipc: Enabled bearer , priority 0 [ 326.904463][ T6587] device syzkaller0 entered promiscuous mode [ 327.782780][ T6587] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 327.813723][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 327.904239][ T6553] tipc: Node number set to 1473892945 [ 327.962069][ T6587] tipc: Resetting bearer [ 328.021198][ T6602] loop2: detected capacity change from 0 to 2048 [ 328.041232][ T6602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.113640][ T6585] tipc: Resetting bearer [ 330.025512][ T6585] tipc: Disabling bearer [ 330.413534][ T4338] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 332.214858][ T4338] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 332.254390][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.317250][ T4338] usb 3-1: Product: syz [ 332.328236][ T4338] usb 3-1: Manufacturer: syz [ 332.350479][ T4338] usb 3-1: SerialNumber: syz [ 332.473172][ T4338] usb 3-1: config 0 descriptor?? [ 332.894938][ T4338] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.784874][ T4338] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 336.195467][ T4321] usb 3-1: USB disconnect, device number 7 [ 342.921036][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 342.969459][ T6679] device syzkaller0 entered promiscuous mode [ 344.144635][ T6687] loop2: detected capacity change from 0 to 1024 [ 347.694508][ T6711] jffs2: notice: (6711) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 351.327464][ T6739] loop0: detected capacity change from 0 to 1024 [ 354.283058][ T6766] netlink: 68 bytes leftover after parsing attributes in process `syz.0.550'. [ 354.992774][ T4323] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 356.814347][ T4323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 357.403483][ T4323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.413832][ T4323] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 357.423921][ T4323] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 357.446400][ T4323] usb 3-1: string descriptor 0 read error: -22 [ 357.459768][ T4323] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 357.489798][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.707651][ T4323] usb 3-1: Can't get UAC3 power state for id 10 [ 357.763032][ T4323] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 357.780881][ T4323] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 357.964446][ T4323] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 358.050173][ T4323] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 358.323053][ T4323] usb 3-1: USB disconnect, device number 8 [ 360.774640][ T6797] udevd[6797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.140086][ T6816] sctp: [Deprecated]: syz.6.562 (pid 6816) Use of int in max_burst socket option. [ 361.140086][ T6816] Use struct sctp_assoc_value instead [ 362.127958][ T6820] futex_wake_op: syz.2.564 tries to shift op by 144; fix this program [ 363.007149][ T6824] jffs2: notice: (6824) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 363.172279][ T6832] sd 0:0:1:0: PR command failed: 1026 [ 363.189770][ T6832] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 363.212172][ T6832] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 363.330835][ T4283] Bluetooth: hci0: Opcode 0x206c failed: -22 [ 363.338180][ T4283] Bluetooth: hci0: Opcode 0x2046 failed: -22 [ 365.132135][ T6718] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 365.403109][ T4283] Bluetooth: hci0: command 0x2046 tx timeout [ 365.436803][ T6718] usb 7-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 365.448094][ T6718] usb 7-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 365.464492][ T6718] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 365.638545][ T6718] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 365.691897][ T6718] usb 7-1: Manufacturer: syz [ 365.696674][ T6718] usb 7-1: SerialNumber: syz [ 365.969824][ T6718] usb 7-1: USB disconnect, device number 3 [ 370.670675][ T6892] 9pnet_fd: Insufficient options for proto=fd [ 370.747022][ T6896] loop6: detected capacity change from 0 to 256 [ 370.762041][ T6896] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ0x000000000000ee00ÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 372.463702][ T6783] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 372.800880][ T126] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 373.000952][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 373.008691][ T126] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 373.050309][ T126] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 373.123080][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.151873][ T126] usb 3-1: Product: syz [ 373.180893][ T126] usb 3-1: Manufacturer: syz [ 373.191073][ T126] usb 3-1: SerialNumber: syz [ 373.286128][ T126] usb 3-1: config 0 descriptor?? [ 373.323747][ T126] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 375.000860][ T126] gspca_zc3xx: reg_w_i err -110 [ 375.797063][ T126] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 375.803877][ T126] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 375.831435][ T126] usb 3-1: USB disconnect, device number 9 [ 379.321607][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.327971][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.463849][ T6939] loop0: detected capacity change from 0 to 256 [ 382.158169][ T6962] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.599'. [ 384.821949][ T6976] loop6: detected capacity change from 0 to 8 [ 384.970759][ T6976] SQUASHFS error: zlib decompression failed, data probably corrupt [ 384.978750][ T6976] SQUASHFS error: Failed to read block 0x9b: -5 [ 385.045971][ T6976] SQUASHFS error: Unable to read metadata cache entry [99] [ 385.053524][ T6976] SQUASHFS error: Unable to read inode 0x127 [ 387.010754][ T6976] loop6: detected capacity change from 0 to 8 [ 387.449480][ T6975] SQUASHFS error: Failed to read block 0x2d7: -5 [ 387.505728][ T6975] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 388.514093][ T7003] loop2: detected capacity change from 0 to 128 [ 388.977937][ T7012] program syz.6.613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.398197][ T7021] loop6: detected capacity change from 0 to 512 [ 389.544055][ T7024] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 390.304581][ T7021] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 392.130605][ T7034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 392.274863][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 392.567589][ T7051] use of bytesused == 0 is deprecated and will be removed in the future, [ 392.598399][ T7051] use the actual size instead. [ 392.770814][ T7055] loop0: detected capacity change from 0 to 32768 [ 392.804871][ T7055] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.625 (7055) [ 392.848062][ T7055] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 392.858594][ T7055] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 392.868238][ T7055] BTRFS info (device loop0): turning on async discard [ 392.875103][ T7055] BTRFS info (device loop0): using free space tree [ 393.058729][ T7055] BTRFS info (device loop0): enabling ssd optimizations [ 393.126092][ T27] audit: type=1804 audit(2000000455.298:37): pid=7055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.625" name="/newroot/114/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 393.274787][ T27] audit: type=1804 audit(2000000455.448:38): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.625" name="/newroot/114/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 393.598289][ T4338] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 393.778417][ T4338] usb 1-1: device descriptor read/64, error -71 [ 394.158201][ T4338] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 394.338411][ T4338] usb 1-1: device descriptor read/64, error -71 [ 394.485013][ T4338] usb usb1-port1: attempt power cycle [ 394.941765][ T7100] FAULT_INJECTION: forcing a failure. [ 394.941765][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 394.954790][ T7100] CPU: 0 PID: 7100 Comm: syz.2.623 Not tainted syzkaller #0 [ 394.962089][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 394.972147][ T7100] Call Trace: [ 394.975494][ T7100] [ 394.978514][ T7100] dump_stack_lvl+0x188/0x24e [ 394.983309][ T7100] ? show_regs_print_info+0x12/0x12 [ 394.988523][ T7100] ? load_image+0x410/0x410 [ 394.993042][ T7100] ? __might_sleep+0xd0/0xd0 [ 394.997706][ T7100] ? __lock_acquire+0x7ea0/0x7ea0 [ 395.002746][ T7100] should_fail_ex+0x390/0x4c0 [ 395.007476][ T7100] should_failslab+0x5/0x20 [ 395.012002][ T7100] slab_pre_alloc_hook+0x59/0x300 [ 395.017051][ T7100] kmem_cache_alloc+0x56/0x2f0 [ 395.021823][ T7100] ? getname_flags+0xb7/0x500 [ 395.026520][ T7100] getname_flags+0xb7/0x500 [ 395.031031][ T7100] __x64_sys_symlinkat+0x78/0xa0 [ 395.035971][ T7100] do_syscall_64+0x4c/0xa0 [ 395.040394][ T7100] ? clear_bhb_loop+0x60/0xb0 [ 395.045140][ T7100] ? clear_bhb_loop+0x60/0xb0 [ 395.049837][ T7100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.055744][ T7100] RIP: 0033:0x7ffa4d19e1d9 [ 395.060207][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.079877][ T7100] RSP: 002b:00007ffa4e14a028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 395.088404][ T7100] RAX: ffffffffffffffda RBX: 00007ffa4d425fa0 RCX: 00007ffa4d19e1d9 [ 395.096425][ T7100] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 395.104427][ T7100] RBP: 00007ffa4d235888 R08: 0000000000000000 R09: 0000000000000000 [ 395.112428][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.120419][ T7100] R13: 00007ffa4d426038 R14: 00007ffa4d425fa0 R15: 00007ffe99203d08 [ 395.128432][ T7100] [ 395.838788][ T7103] kAFS: No cell specified [ 395.978072][ T4338] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 396.224177][ T4271] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 396.293081][ T4338] usb 1-1: device not accepting address 7, error -71 [ 397.939354][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.6.635'. [ 399.547707][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 399.830517][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 399.859347][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 401.237781][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 401.251332][ T22] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 401.261464][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.271878][ T22] usb 1-1: config 0 descriptor?? [ 401.283254][ T22] usb 1-1: can't set config #0, error -71 [ 401.290880][ T22] usb 1-1: USB disconnect, device number 9 [ 404.100944][ T7144] loop2: detected capacity change from 0 to 164 [ 404.472892][ T7149] ip_tables: iptables: counters copy to user failed while replacing table [ 404.498106][ T7150] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 410.764152][ T7182] syz.2.658 (7182): drop_caches: 2 [ 415.960782][ T7225] Cannot find add_set index 0 as target [ 415.973048][ T7225] loop6: detected capacity change from 0 to 512 [ 417.164005][ T7225] EXT4-fs (loop6): 1 truncate cleaned up [ 417.170074][ T7225] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 417.430227][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 417.689488][ T7235] device syzkaller0 entered promiscuous mode [ 417.709784][ T7237] CacheFiles: Empty directory specified [ 417.737307][ T7237] netlink: 'syz.2.650': attribute type 11 has an invalid length. [ 419.063061][ T7243] syz.5.662 (7243): drop_caches: 2 [ 419.892901][ T7248] loop6: detected capacity change from 0 to 8 [ 419.948969][ T7248] SQUASHFS error: lzo decompression failed, data probably corrupt [ 419.957150][ T7248] SQUASHFS error: Failed to read block 0x91: -5 [ 419.963475][ T7248] SQUASHFS error: Unable to read metadata cache entry [8f] [ 419.970827][ T7248] SQUASHFS error: Unable to read inode 0x11f [ 422.496891][ T7256] loop6: detected capacity change from 0 to 1024 [ 422.848686][ T7256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 423.161531][ T7256] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 424.793716][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 425.574804][ T7273] device syzkaller0 entered promiscuous mode [ 427.306080][ T7281] syz.6.674 (7281): drop_caches: 2 [ 428.191492][ T7284] netlink: 168 bytes leftover after parsing attributes in process `syz.3.669'. [ 428.576721][ T7291] netlink: 'syz.3.676': attribute type 11 has an invalid length. [ 430.031857][ T7304] loop2: detected capacity change from 0 to 8 [ 430.074470][ T7304] SQUASHFS error: lzo decompression failed, data probably corrupt [ 430.082624][ T7304] SQUASHFS error: Failed to read block 0x91: -5 [ 430.089095][ T7304] SQUASHFS error: Unable to read metadata cache entry [8f] [ 430.096463][ T7304] SQUASHFS error: Unable to read inode 0x11f [ 430.475366][ T7305] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.958065][ T7309] jffs2: notice: (7309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 434.702898][ T7334] ubi0: attaching mtd0 [ 434.710692][ T7334] ubi0: scanning is finished [ 434.715550][ T7334] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 434.749524][ T7334] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 434.886720][ T7320] loop2: detected capacity change from 0 to 128 [ 435.128046][ T7320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 435.153936][ T7320] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.199466][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 436.274975][ T7344] tipc: Enabled bearer , priority 0 [ 436.283494][ T7344] device syzkaller0 entered promiscuous mode [ 436.296887][ T7344] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 436.412509][ T7350] loop2: detected capacity change from 0 to 256 [ 436.433980][ T7352] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 436.481877][ T7344] tipc: Resetting bearer [ 436.524884][ T7343] tipc: Resetting bearer [ 437.423073][ T7343] tipc: Disabling bearer [ 437.553147][ T7351] kvm [7348]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 437.625704][ T7351] kvm [7348]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 439.114866][ T7380] loop5: detected capacity change from 0 to 128 [ 439.448655][ T7385] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 439.457012][ T7385] Error parsing options; rc = [-22] [ 439.510771][ T7385] device vlan0 entered promiscuous mode [ 439.550739][ T7385] team0: Port device vlan0 added [ 439.853563][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.868929][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.470305][ T7414] loop0: detected capacity change from 0 to 512 [ 443.480229][ T7416] CacheFiles: Empty directory specified [ 443.488548][ T7416] netlink: 'syz.6.704': attribute type 11 has an invalid length. [ 443.639794][ T7414] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 443.701154][ T4323] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 444.251643][ T4323] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 444.478713][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 444.486433][ T4323] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 444.542411][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.744601][ T4323] usb 3-1: Product: syz [ 444.749333][ T4323] usb 3-1: Manufacturer: syz [ 444.754398][ T4323] usb 3-1: SerialNumber: syz [ 444.777902][ T4323] sisusb 3-1:1.0: Invalid USB2VGA device [ 444.792482][ T4323] sisusb: probe of 3-1:1.0 failed with error -22 [ 445.054975][ T7] usb 3-1: USB disconnect, device number 10 [ 450.653616][ T7461] loop0: detected capacity change from 0 to 8 [ 450.737408][ T7461] SQUASHFS error: zlib decompression failed, data probably corrupt [ 450.775267][ T7461] SQUASHFS error: Failed to read block 0x9b: -5 [ 450.781563][ T7461] SQUASHFS error: Unable to read metadata cache entry [99] [ 450.851254][ T7461] SQUASHFS error: Unable to read inode 0x127 [ 451.203879][ T7463] loop0: detected capacity change from 0 to 8 [ 451.540230][ T7461] SQUASHFS error: Failed to read block 0x2d7: -5 [ 451.562531][ T7461] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 456.299547][ T7481] loop0: detected capacity change from 0 to 8 [ 456.626755][ T7481] SQUASHFS error: lzo decompression failed, data probably corrupt [ 456.634869][ T7481] SQUASHFS error: Failed to read block 0x91: -5 [ 456.641205][ T7481] SQUASHFS error: Unable to read metadata cache entry [8f] [ 456.648533][ T7481] SQUASHFS error: Unable to read inode 0x11f [ 457.092995][ T7455] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 459.408919][ T7498] loop6: detected capacity change from 0 to 256 [ 459.439082][ T7500] CacheFiles: Empty directory specified [ 459.502003][ T7502] netlink: 'syz.5.720': attribute type 11 has an invalid length. [ 459.825236][ T7505] loop2: detected capacity change from 0 to 1024 [ 463.384207][ T7537] loop5: detected capacity change from 0 to 256 [ 463.399786][ T7537] FAT-fs (loop5): Unrecognized mount option "errors=remount-ro rejected, failed to enable media [ 479.119702][ T4426] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 479.933896][ T7682] netlink: 68 bytes leftover after parsing attributes in process `syz.3.765'. [ 480.148847][ T7682] 9pnet_fd: Insufficient options for proto=fd [ 480.624539][ T7703] kvm: pic: non byte write [ 480.630177][ T7702] tipc: Enabled bearer , priority 0 [ 480.663972][ T7702] device syzkaller0 entered promiscuous mode [ 480.713649][ T7702] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 480.913438][ T7702] tipc: Resetting bearer [ 480.961911][ T7697] tipc: Resetting bearer [ 481.083171][ T7697] tipc: Disabling bearer [ 481.350979][ T27] audit: type=1800 audit(2000000039.150:42): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.769" name="serialnumber" dev="configfs" ino=53891 res=0 errno=0 [ 481.405175][ T7710] loop0: detected capacity change from 0 to 2048 [ 481.407670][ T27] audit: type=1800 audit(2000000039.190:43): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.769" name="report_length" dev="configfs" ino=53892 res=0 errno=0 [ 481.468527][ T7710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.708577][ T7714] loop2: detected capacity change from 0 to 512 [ 482.601951][ T7624] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 482.864523][ T7725] 9pnet_fd: Insufficient options for proto=fd [ 483.052251][ T7728] loop2: detected capacity change from 0 to 2048 [ 484.397894][ T7731] loop0: detected capacity change from 0 to 1024 [ 484.406168][ T7731] EXT4-fs: Ignoring removed bh option [ 484.853083][ T7116] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 485.093020][ T7116] usb 7-1: Using ep0 maxpacket: 8 [ 485.119993][ T7116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 485.159277][ T7731] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 485.211391][ T7116] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 485.262156][ T7116] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 485.272189][ T7116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.489055][ T7116] usb 7-1: config 0 descriptor?? [ 486.344281][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 487.583944][ T7116] usbhid 7-1:0.0: can't add hid device: -71 [ 487.590202][ T7116] usbhid: probe of 7-1:0.0 failed with error -71 [ 487.703579][ T7116] usb 7-1: USB disconnect, device number 4 [ 493.199015][ T7808] loop0: detected capacity change from 0 to 512 [ 493.284690][ T7788] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 495.101587][ T7822] loop6: detected capacity change from 0 to 16 [ 495.248386][ T7822] erofs: (device loop6): mounted with root inode @ nid 36. [ 495.293831][ T4287] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 495.336228][ T7822] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 495.383186][ T7827] netlink: 68 bytes leftover after parsing attributes in process `syz.0.796'. [ 495.421149][ T7827] 9pnet_fd: Insufficient options for proto=fd [ 495.443289][ T27] audit: type=1800 audit(2000000053.250:44): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.791" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 495.470341][ T7829] loop2: detected capacity change from 0 to 1024 [ 495.529003][ T7829] EXT4-fs: Ignoring removed bh option [ 495.605553][ T7829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 497.180051][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 498.421454][ T7859] loop5: detected capacity change from 0 to 128 [ 498.933058][ T126] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 499.452700][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 499.463812][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 499.512489][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 499.543257][ T126] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 499.562375][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.590332][ T126] usb 3-1: config 0 descriptor?? [ 500.414195][ T7871] ip_tables: iptables: counters copy to user failed while replacing table [ 500.557266][ T7873] loop6: detected capacity change from 0 to 512 [ 501.329747][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.364699][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.398343][ T126] usbhid 3-1:0.0: can't add hid device: -71 [ 501.407081][ T126] usbhid: probe of 3-1:0.0 failed with error -71 [ 501.632413][ T126] usb 3-1: USB disconnect, device number 11 [ 502.742436][ T126] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 502.937740][ T126] usb 6-1: Using ep0 maxpacket: 32 [ 502.948385][ T126] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 502.985650][ T7917] loop6: detected capacity change from 0 to 1024 [ 502.991371][ T126] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 503.020510][ T126] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 503.046763][ T126] usb 6-1: Product: syz [ 503.048635][ T7917] EXT4-fs: Ignoring removed bh option [ 503.067615][ T126] usb 6-1: Manufacturer: syz [ 503.079620][ T126] usb 6-1: SerialNumber: syz [ 503.101028][ T126] usb 6-1: config 0 descriptor?? [ 503.125519][ T7908] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 503.138725][ T126] hub 6-1:0.0: bad descriptor, ignoring hub [ 503.158839][ T126] hub: probe of 6-1:0.0 failed with error -5 [ 503.479653][ T7917] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 504.030508][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.305694][ T7932] loop0: detected capacity change from 0 to 512 [ 504.425982][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.620015][ T7932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 504.662502][ T7932] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.586019][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 506.630475][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 517.705845][ T7115] usb 6-1: USB disconnect, device number 5 [ 519.235739][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.250543][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.260533][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.270133][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.277992][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 519.285375][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.303587][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.314261][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.321601][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.329821][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.337563][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 519.347030][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.887846][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 522.341451][ T8026] chnl_net:caif_netlink_parms(): no params data found [ 522.517098][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.585020][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.611874][ T8026] device bridge_slave_0 entered promiscuous mode [ 522.652120][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.710202][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.741199][ T8026] device bridge_slave_1 entered promiscuous mode [ 522.787158][ T8026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.811880][ T8026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.866240][ T8026] team0: Port device team_slave_0 added [ 522.902474][ T8026] team0: Port device team_slave_1 added [ 522.929830][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.936966][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.972359][ T8026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.995941][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.008127][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.044122][ T8026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.091747][ T8026] device hsr_slave_0 entered promiscuous mode [ 523.103903][ T8026] device hsr_slave_1 entered promiscuous mode [ 523.110738][ T8026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.127205][ T8026] Cannot create hsr debugfs directory [ 524.173411][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 525.324305][ T8026] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 525.334407][ T8026] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 525.344426][ T8026] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 525.361691][ T8026] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 525.457435][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.481722][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.491235][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.503318][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.515080][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.529726][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.539887][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.547104][ T7208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.571242][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.595457][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.608219][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.616987][ T7208] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.624154][ T7208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.637685][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 525.655096][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 525.669686][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 525.681543][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.691144][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.706729][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 525.719364][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.731350][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.740161][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.756002][ T8026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.768408][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.777669][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.786516][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.985345][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.993131][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.008804][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.212440][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 528.095878][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.115483][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.162143][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.168983][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.175166][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.181285][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.187408][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.193497][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.199557][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.205670][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.211764][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.217874][ T8094] tc action pedit 'at' offset 2 out of bounds [ 528.223972][ T8094] 0: reclassify loop, rule prio 0, protocol 800 [ 528.248177][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.292345][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 528.483288][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.628909][ T8026] device veth0_vlan entered promiscuous mode [ 528.642459][ T8026] device veth1_vlan entered promiscuous mode [ 528.708734][ T8026] device veth0_macvtap entered promiscuous mode [ 528.721514][ T8026] device veth1_macvtap entered promiscuous mode [ 528.857781][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 528.870621][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 528.896342][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 528.941337][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 528.980696][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 529.021640][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.051776][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 529.094375][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.104952][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.124811][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.212315][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.243333][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.337001][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.360315][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.400725][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.142320][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.204209][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.308470][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.787202][ T8119] device bridge_slave_0 left promiscuous mode [ 531.842506][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.489886][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 532.523222][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 532.594961][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.634531][ T8131] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 532.662308][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.683855][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.702446][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.730250][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.749555][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.760486][ T8026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.822284][ T8026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.847107][ T8138] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 533.662914][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.707463][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 533.764234][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 533.886055][ T8026] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.930614][ T8026] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.939484][ T8026] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.948339][ T8026] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.103771][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.111917][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.158689][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 534.181991][ T5133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.204117][ T5133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.211687][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 534.341364][ T8143] loop0: detected capacity change from 0 to 64 [ 536.244161][ T6718] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 536.902881][ T8162] loop7: detected capacity change from 0 to 512 [ 536.909500][ T6718] usb 7-1: unable to get BOS descriptor or descriptor too short [ 536.911937][ T8162] EXT4-fs: Ignoring removed nobh option [ 536.938351][ T8162] EXT4-fs (loop7): Test dummy encryption mode enabled [ 536.945478][ T8162] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 536.986475][ T6718] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.122632][ T6718] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 537.136392][ T8162] EXT4-fs (loop7): 1 truncate cleaned up [ 537.142618][ T8162] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 537.212610][ T8162] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 537.245825][ T6718] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 537.434038][ T8026] EXT4-fs (loop7): unmounting filesystem. [ 537.625666][ T6718] usb 7-1: string descriptor 0 read error: -71 [ 537.631914][ T6718] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 537.667321][ T6718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.687479][ T6718] usb 7-1: can't set config #1, error -71 [ 537.700796][ T6718] usb 7-1: USB disconnect, device number 5 [ 540.811040][ T8196] overlayfs: failed to clone upperpath [ 548.804737][ T8245] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 549.090782][ T8249] loop6: detected capacity change from 0 to 256 [ 554.403614][ T8276] tipc: Enabling of bearer rejected, failed to enable media [ 555.647160][ T8288] tipc: Enabling of bearer rejected, already enabled [ 555.659061][ T8288] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 555.728361][ T8288] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 556.650104][ T27] audit: type=1800 audit(2000000114.450:45): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.906" name="size" dev="configfs" ino=56548 res=0 errno=0 [ 556.745276][ T27] audit: type=1800 audit(2000000114.490:46): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.906" name="zoned" dev="configfs" ino=56549 res=0 errno=0 [ 556.766806][ T27] audit: type=1800 audit(2000000114.570:47): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.906" name="power" dev="configfs" ino=56183 res=0 errno=0 [ 557.390768][ T8307] null_blk: disk nullb1 created [ 561.552500][ T8317] ima: policy update failed [ 561.558896][ T27] audit: type=1802 audit(2000000119.360:48): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.904" res=0 errno=0 [ 562.694893][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.701243][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.091893][ T27] audit: type=1400 audit(2000000121.860:49): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=8337 comm="syz.0.914" [ 564.469608][ T8345] overlayfs: failed to clone lowerpath [ 564.527578][ T8345] overlayfs: failed to clone lowerpath [ 565.854698][ T8361] loop7: detected capacity change from 0 to 128 [ 566.901299][ T8370] loop6: detected capacity change from 0 to 512 [ 568.064835][ T8370] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 568.131442][ T46] kworker/u4:3: attempt to access beyond end of device [ 568.131442][ T46] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 568.182524][ T8370] FAT-fs (loop6): Filesystem has been set read-only [ 590.056773][ T8519] loop6: detected capacity change from 0 to 1024 [ 591.614143][ T8519] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 593.042101][ T8541] overlayfs: conflicting options: nfs_export=on,index=off [ 593.352402][ T7118] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 593.552347][ T7118] usb 7-1: device descriptor read/64, error -71 [ 593.948352][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 600.362068][ T7117] libceph: connect (1)[c::]:6789 error -101 [ 600.376956][ T8592] ceph: No mds server is up or the cluster is laggy [ 600.390861][ T7117] libceph: mon0 (1)[c::]:6789 connect error [ 600.735684][ T7115] libceph: connect (1)[c::]:6789 error -101 [ 600.741767][ T7115] libceph: mon0 (1)[c::]:6789 connect error [ 601.139845][ T8606] loop7: detected capacity change from 0 to 128 [ 601.467607][ T8606] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 601.810339][ T4402] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 604.589259][ T8623] loop7: detected capacity change from 0 to 512 [ 604.727479][ T8623] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 604.843222][ T8623] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.984: invalid indirect mapped block 256 (level 1) [ 604.933268][ T8623] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.984: invalid indirect mapped block 2683928664 (level 1) [ 604.955556][ T8623] EXT4-fs (loop7): 1 truncate cleaned up [ 604.961390][ T8623] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 605.227896][ T8623] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.984: Invalid block bitmap block 3 in block_group 0 [ 605.621119][ T8026] EXT4-fs (loop7): unmounting filesystem. [ 606.839065][ T8646] loop7: detected capacity change from 0 to 512 [ 607.752361][ T8646] EXT4-fs (loop7): invalid inodes per group: 0 [ 607.752361][ T8646] [ 612.581337][ T8675] futex_wake_op: syz.0.1000 tries to shift op by 144; fix this program [ 616.413680][ T27] audit: type=1800 audit(2000000174.220:50): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.996" name="size" dev="configfs" ino=59516 res=0 errno=0 [ 616.532087][ T27] audit: type=1800 audit(2000000174.330:51): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.996" name="zoned" dev="configfs" ino=59521 res=0 errno=0 [ 616.588969][ T27] audit: type=1800 audit(2000000174.390:52): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.996" name="power" dev="configfs" ino=58669 res=0 errno=0 [ 618.681488][ T8710] loop7: detected capacity change from 0 to 256 [ 620.632910][ T8719] input: syz0 as /devices/virtual/input/input8 [ 620.789935][ T8723] loop6: detected capacity change from 0 to 1024 [ 620.966339][ T8723] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 621.071624][ T8723] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.209628][ T8723] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 3) [ 621.419222][ T8723] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 621.472520][ T8723] EXT4-fs (loop6): This should not happen!! Data will be lost [ 621.472520][ T8723] [ 621.513948][ T8732] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 621.547439][ T8720] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 622.952163][ T8720] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 622.982415][ T8720] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 622.997226][ T8732] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 623.012345][ T8732] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 623.027327][ T8720] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 623.044208][ T8720] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 623.065521][ T8732] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.1012: lblock 3 mapped to illegal pblock 3 (length 1) [ 623.096950][ T8733] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 623.109694][ T8733] EXT4-fs (loop6): This should not happen!! Data will be lost [ 623.109694][ T8733] [ 623.119437][ T8733] EXT4-fs (loop6): Total free blocks count 0 [ 623.125687][ T8733] EXT4-fs (loop6): Free/Dirty block details [ 623.131706][ T8733] EXT4-fs (loop6): free_blocks=0 [ 623.136754][ T8733] EXT4-fs (loop6): dirty_blocks=64 [ 623.141899][ T8733] EXT4-fs (loop6): Block reservation details [ 623.336763][ T8746] loop7: detected capacity change from 0 to 512 [ 623.353522][ T8746] EXT4-fs: Ignoring removed nobh option [ 623.364229][ T8746] EXT4-fs (loop7): Test dummy encryption mode enabled [ 623.371093][ T8746] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 623.483455][ T8746] EXT4-fs (loop7): 1 truncate cleaned up [ 623.489378][ T8746] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 623.825934][ T8026] EXT4-fs (loop7): unmounting filesystem. [ 624.173108][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.179503][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.932680][ T8761] netlink: 'syz.3.1020': attribute type 2 has an invalid length. [ 627.715077][ T8771] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1029'. [ 632.260603][ T8800] loop6: detected capacity change from 0 to 4096 [ 632.882998][ T8800] EXT4-fs (loop6): Test dummy encryption mode enabled [ 632.971801][ T8809] tipc: Enabled bearer , priority 0 [ 632.990049][ T8800] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 633.031481][ T8813] tipc: Resetting bearer [ 633.462070][ T8813] tipc: Disabling bearer [ 633.579822][ T8807] loop7: detected capacity change from 0 to 512 [ 633.698623][ T5967] EXT4-fs (loop6): unmounting filesystem. [ 641.572548][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 642.796887][ T8874] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8874] [ 643.113365][ T8877] block device autoloading is deprecated and will be removed. [ 643.123026][ T8877] XFS (loop0): Invalid device [./loop0], error=-16 [ 643.969028][ T8886] loop0: detected capacity change from 0 to 128 [ 644.027055][ T8886] EXT4-fs (loop0): Test dummy encryption mode enabled [ 644.114644][ T8886] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 644.126513][ T8886] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 647.008130][ T8893] loop7: detected capacity change from 0 to 64 [ 648.597340][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 648.699262][ T8896] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 648.987832][ T8909] loop0: detected capacity change from 0 to 128 [ 649.012316][ T8909] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 650.251256][ T4972] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 651.388360][ T8927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1060'. [ 651.469344][ T8932] loop0: detected capacity change from 0 to 4096 [ 651.515041][ T8927] bridge0: port 3(wlan1) entered blocking state [ 651.564773][ T8927] bridge0: port 3(wlan1) entered disabled state [ 651.602855][ T8927] device wlan1 entered promiscuous mode [ 651.666158][ T8931] bridge0: port 3(wlan1) entered disabled state [ 652.575916][ T8931] device wlan1 left promiscuous mode [ 652.583599][ T8931] bridge0: port 3(wlan1) entered disabled state [ 652.899671][ T4278] libceph: connect (1)[c::]:6789 error -101 [ 652.934457][ T4278] libceph: mon0 (1)[c::]:6789 connect error [ 653.642350][ T4278] libceph: connect (1)[c::]:6789 error -101 [ 653.670805][ T8949] ceph: No mds server is up or the cluster is laggy [ 653.701270][ T4278] libceph: mon0 (1)[c::]:6789 connect error [ 656.384255][ T8971] nvmet: adding nsid 1 to subsystem testsubsys [ 657.489232][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1076'. [ 659.512431][ T8997] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 659.521479][ T8997] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 664.562419][ T9020] netlink: 'syz.6.1085': attribute type 2 has an invalid length. [ 667.191615][ T9026] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 667.220626][ T9026] CIFS: Attempting to mount \\127.0.0.1\share [ 667.238218][ T9026] CIFS: VFS: Error connecting to socket. Aborting operation. [ 667.247531][ T9026] CIFS: VFS: cifs_mount failed w/return code = -101 [ 667.694156][ T9037] Cannot find add_set index 0 as target [ 668.610183][ T3637] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 668.672449][ T3637] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 3689623684042142765 bytes. [ 669.843050][ T3637] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 669.963250][ T3637] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 669.978237][ T3637] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 670.020810][ T3637] loop0: [ 683.909076][ T9130] loop7: detected capacity change from 0 to 16 [ 683.953150][ T9130] erofs: (device loop7): mounted with root inode @ nid 36. [ 684.178898][ T9138] loop6: detected capacity change from 0 to 128 [ 684.190486][ T9138] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 684.499313][ T9138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.282414][ T9135] capability: warning: `syz.7.1111' uses deprecated v2 capabilities in a way that may be insecure [ 685.334804][ T9144] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1115'. [ 685.577155][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.583533][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.004674][ T9147] bridge0: port 1(wlan1) entered blocking state [ 686.442818][ T9147] bridge0: port 1(wlan1) entered disabled state [ 686.489834][ T9147] device wlan1 entered promiscuous mode [ 686.592729][ T9148] bridge0: port 1(wlan1) entered disabled state [ 686.739040][ T9159] Cannot find del_set index 4 as target [ 686.789766][ T9159] loop7: detected capacity change from 0 to 512 [ 686.803362][ T9159] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 686.897744][ T9159] EXT4-fs (loop7): 1 truncate cleaned up [ 686.903569][ T9159] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 687.125054][ T8026] EXT4-fs (loop7): unmounting filesystem. [ 687.141070][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 687.166815][ T9148] device wlan1 left promiscuous mode [ 687.200864][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 687.205749][ T9148] bridge0: port 1(wlan1) entered disabled state [ 687.213131][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 687.223417][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 687.231844][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 687.242345][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 688.333238][ T4299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.671367][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1120'. [ 688.680950][ T9178] block nbd0: Unsupported socket: should be TCP or UNIX. [ 689.416423][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 689.720284][ T4299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.492265][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 692.169878][ T4299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.880244][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 696.701905][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 696.764127][ T4299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.126011][ T4299] tipc: Disabling bearer [ 698.233685][ T4299] tipc: Left network mode [ 698.245861][ T9165] chnl_net:caif_netlink_parms(): no params data found [ 699.618625][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.661844][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.856498][ T9165] device bridge_slave_0 entered promiscuous mode [ 700.415301][ T9239] Cannot find add_set index 0 as target [ 700.731734][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.744850][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.854829][ T9165] device bridge_slave_1 entered promiscuous mode [ 701.809662][ T27] audit: type=1400 audit(2000000259.610:53): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=9252 comm="syz.0.1134" name="foo" offset=35 [ 702.073378][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.581058][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.430284][ T9165] team0: Port device team_slave_0 added [ 704.458704][ T9165] team0: Port device team_slave_1 added [ 704.520893][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.568180][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.691837][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.859181][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.887492][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.951788][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.047248][ T9165] device hsr_slave_0 entered promiscuous mode [ 705.073888][ T9165] device hsr_slave_1 entered promiscuous mode [ 705.082748][ T9165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.100516][ T9165] Cannot create hsr debugfs directory [ 709.110895][ T4299] device hsr_slave_0 left promiscuous mode [ 709.237627][ T4299] device hsr_slave_1 left promiscuous mode [ 709.292106][ T27] audit: type=1400 audit(2000000267.090:54): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=9333 comm="syz.7.1150" name="foo" offset=35 [ 709.365125][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.457306][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.568454][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.576143][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.612267][ T4299] device bridge_slave_1 left promiscuous mode [ 709.622416][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.641343][ T4299] device bridge_slave_0 left promiscuous mode [ 709.648338][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.693819][ T4299] device bond_slave_0 left promiscuous mode [ 709.700246][ T4299] device bond_slave_1 left promiscuous mode [ 709.823505][ T4299] device veth1_macvtap left promiscuous mode [ 709.829739][ T4299] device veth0_macvtap left promiscuous mode [ 709.872511][ T4299] device veth1_vlan left promiscuous mode [ 709.898849][ T4299] device veth0_vlan left promiscuous mode [ 710.154864][ T9342] CIFS: Attempting to mount \\127.0.0.1\share [ 710.557682][ T9342] CIFS: VFS: Error connecting to socket. Aborting operation. [ 710.565282][ T9342] CIFS: VFS: cifs_mount failed w/return code = -4 [ 713.513591][ T4299] bond1 (unregistering): (slave vlan2): Releasing active interface [ 713.561938][ T4299] bond1 (unregistering): Released all slaves [ 716.221577][ T9393] loop7: detected capacity change from 0 to 128 [ 716.239568][ T9393] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 716.259833][ T9393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.301047][ T9420] tcpci: probe of 0-0002 failed with error -5 [ 720.309620][ T9420] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 722.006653][ T9424] overlayfs: missing 'lowerdir' [ 722.371726][ T9441] loop7: detected capacity change from 0 to 128 [ 723.413381][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 725.443646][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 726.001418][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.662554][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.844120][ T27] audit: type=1400 audit(2000000286.650:55): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="foo" pid=9460 comm="syz.7.1176" [ 734.284825][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.299698][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 734.311362][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 734.320179][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 734.338309][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 734.345818][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 734.571027][ T4299] bond0 (unregistering): Released all slaves [ 734.996599][ T9165] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 735.033910][ T9165] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 736.486675][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 736.575749][ T9165] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 737.292654][ T9165] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 738.808807][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 739.122626][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.221433][ T9530] atomic_op ffff888075d78998 conn xmit_atomic 0000000000000000 [ 739.556284][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 739.595545][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 739.879889][ T9165] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.988659][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 740.185016][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 740.309008][ T9537] ubi0: attaching mtd0 [ 740.324946][ T9537] ubi0: scanning is finished [ 740.329917][ T9537] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 740.378006][ T9537] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 740.887923][ T4287] Bluetooth: hci5: command 0x040f tx timeout [ 741.468446][ T7208] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.475829][ T7208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.484245][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 741.493205][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 741.529727][ T7208] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.536994][ T7208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.571841][ T9542] mmap: syz.7.1194 (9542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 741.592014][ T7208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 741.628337][ T9486] chnl_net:caif_netlink_parms(): no params data found [ 741.658126][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 742.767628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 742.874613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 742.910435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 742.932725][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 742.983286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 743.070932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 743.129453][ T9165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 743.143253][ T9165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.205644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 743.244154][ T9563] loop0: detected capacity change from 0 to 512 [ 743.270647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 743.327659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 743.370132][ T9563] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 743.394168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 743.458279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 743.506457][ T9563] EXT4-fs (loop0): 1 truncate cleaned up [ 743.512432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 743.546694][ T9563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 744.082269][ T27] audit: type=1800 audit(2000000301.690:56): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1197" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 744.855312][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 744.976937][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.994421][ T9486] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.053165][ T9486] device bridge_slave_0 entered promiscuous mode [ 745.075032][ T9486] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.082724][ T9486] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.098710][ T9486] device bridge_slave_1 entered promiscuous mode [ 747.386259][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.392844][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.559610][ T4299] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.669687][ T9486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 747.744408][ T9486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.930227][ T9596] overlayfs: failed to resolve './file1': -2 [ 748.317766][ T4299] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.986568][ T4299] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.040118][ T9486] team0: Port device team_slave_0 added [ 749.076414][ T9486] team0: Port device team_slave_1 added [ 749.180312][ T4299] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.254297][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.261296][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.422253][ T9486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.470398][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.502195][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.056105][ T9486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.367903][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 751.379402][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 751.388054][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.396746][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.407652][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 751.416430][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 751.559106][ T9618] loop0: detected capacity change from 0 to 164 [ 752.326223][ T9486] device hsr_slave_0 entered promiscuous mode [ 752.355547][ T9486] device hsr_slave_1 entered promiscuous mode [ 752.395532][ T9624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 752.395709][ T9486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.492291][ T9486] Cannot create hsr debugfs directory [ 753.974141][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 756.020553][ T9655] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8026] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9655] [ 756.692194][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 758.776506][ T9610] chnl_net:caif_netlink_parms(): no params data found [ 758.783601][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 759.706698][ T9486] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 759.860921][ T9486] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 760.376781][ T9486] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 760.799139][ T9486] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 760.852217][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 761.087117][ T9610] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.112595][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.155100][ T9610] device bridge_slave_0 entered promiscuous mode [ 761.276392][ T4299] device hsr_slave_0 left promiscuous mode [ 761.293537][ T4299] device hsr_slave_1 left promiscuous mode [ 761.313360][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.342483][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.363650][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.371417][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.426265][ T4299] device bridge_slave_1 left promiscuous mode [ 761.446444][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.552815][ T4299] device veth1_macvtap left promiscuous mode [ 761.558926][ T4299] device veth0_macvtap left promiscuous mode [ 761.578736][ T4299] device veth1_vlan left promiscuous mode [ 761.592552][ T4299] device veth0_vlan left promiscuous mode [ 764.422556][ T4299] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 764.436183][ T9702] loop7: detected capacity change from 0 to 164 [ 764.908979][ T9705] rock: directory entry would overflow storage [ 764.915297][ T9705] rock: sig=0x4f50, size=4, remaining=3 [ 764.920935][ T9705] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 765.392295][ T3653] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 765.613049][ T3653] usb 8-1: no configurations [ 765.617876][ T3653] usb 8-1: can't read configurations, error -22 [ 765.792303][ T3653] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 765.993832][ T3653] usb 8-1: no configurations [ 765.998523][ T3653] usb 8-1: can't read configurations, error -22 [ 766.029602][ T3653] usb usb8-port1: attempt power cycle [ 766.219231][ T9714] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 766.227963][ T9714] netlink: 'syz.0.1224': attribute type 2 has an invalid length. [ 766.453176][ T3653] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 766.511980][ T3653] usb 8-1: no configurations [ 766.589172][ T3653] usb 8-1: can't read configurations, error -22 [ 766.821502][ T3653] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 766.886333][ T3653] usb 8-1: no configurations [ 766.913885][ T3653] usb 8-1: can't read configurations, error -22 [ 766.977019][ T3653] usb usb8-port1: unable to enumerate USB device [ 774.213688][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 774.351615][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 774.574493][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.542679][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.721206][ T9759] loop0: detected capacity change from 0 to 164 [ 777.296043][ T9765] rock: directory entry would overflow storage [ 777.302467][ T9765] rock: sig=0x4f50, size=4, remaining=3 [ 777.308104][ T9765] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 777.969331][ T27] audit: type=1800 audit(2000000335.770:57): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1239" name="syzkaller0" dev="sda1" ino=2057 res=0 errno=0 [ 778.057500][ T4299] bond0 (unregistering): Released all slaves [ 778.156372][ T9610] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.174662][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.185099][ T9610] device bridge_slave_1 entered promiscuous mode [ 778.297325][ T9610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.309891][ T9610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.342751][ T9486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.396331][ T9610] team0: Port device team_slave_0 added [ 778.405432][ T9610] team0: Port device team_slave_1 added [ 778.428222][ T9486] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.462913][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 778.478645][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 778.513454][ T9610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.531601][ T9610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.559068][ T9610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.574173][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 778.584512][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 778.593737][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.600902][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.615023][ T9610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.624979][ T9610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.651646][ T9610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.665788][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 778.675384][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 778.684740][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 778.694549][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.701694][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.770025][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 778.785539][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 778.831103][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 778.874795][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 778.968930][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 779.071277][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 780.226978][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 780.293586][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 780.340735][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 780.358105][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 780.377296][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 781.764046][ T9486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 781.879336][ T9610] device hsr_slave_0 entered promiscuous mode [ 781.939384][ T9610] device hsr_slave_1 entered promiscuous mode [ 781.963098][ T9610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.970714][ T9610] Cannot create hsr debugfs directory [ 786.528769][ T9819] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 787.389388][ T9823] x_tables: duplicate entry at hook 4 [ 787.400533][ T9823] tap0: tun_chr_ioctl cmd 1074025676 [ 787.405999][ T9823] tap0: owner set to 0 [ 787.434544][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 787.442069][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 787.809571][ T9486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.744253][ T9610] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 789.782978][ T9610] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 789.847797][ T9610] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 789.863387][ T9610] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 789.996133][ T4299] device hsr_slave_0 left promiscuous mode [ 790.012848][ T4299] device hsr_slave_1 left promiscuous mode [ 790.022783][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.043028][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.052976][ T4299] device bridge_slave_1 left promiscuous mode [ 790.059234][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.088847][ T4299] device bridge_slave_0 left promiscuous mode [ 790.100559][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.569638][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 790.641661][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 790.697403][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.752523][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.008421][ T4299] bond0 (unregistering): Released all slaves [ 791.192307][ T9610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.219557][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 791.243502][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 791.264257][ T9610] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.334692][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 791.351768][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 791.360738][ T4399] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.367929][ T4399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.399081][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 791.418243][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 791.431896][ T4399] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.439111][ T4399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.502220][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 791.510397][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 791.555672][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 791.586191][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 791.622938][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 791.719812][ T9610] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 791.772187][ T9610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 791.814794][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 791.844154][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 791.866922][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 791.922389][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 791.962666][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 791.971301][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 792.010367][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 792.040597][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 792.049484][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 792.073062][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 792.224468][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 792.235635][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 792.243844][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 792.253979][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 792.261564][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 792.269198][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 792.720171][ T9610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.743512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 792.751036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 792.814065][ T9873] chnl_net:caif_netlink_parms(): no params data found [ 793.072014][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.082852][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.091012][ T9873] device bridge_slave_0 entered promiscuous mode [ 793.125722][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.133383][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.141806][ T9873] device bridge_slave_1 entered promiscuous mode [ 793.167742][ T9873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.180778][ T9873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.246434][ T9873] team0: Port device team_slave_0 added [ 793.271406][ T9873] team0: Port device team_slave_1 added [ 793.390192][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.397635][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.424500][ T9873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.482872][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.489975][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.517047][ T9873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.602959][ T9873] device hsr_slave_0 entered promiscuous mode [ 793.615644][ T9873] device hsr_slave_1 entered promiscuous mode [ 793.638784][ T9873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.647156][ T9873] Cannot create hsr debugfs directory [ 793.785097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 793.794423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 793.947472][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 793.956896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 793.970702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 793.985275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 794.008964][ T9610] device veth0_vlan entered promiscuous mode [ 794.131989][ T9610] device veth1_vlan entered promiscuous mode [ 794.267274][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 794.287932][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 794.302453][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 794.309940][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 794.323366][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 794.346113][ T9610] device veth0_macvtap entered promiscuous mode [ 794.359785][ T4299] device hsr_slave_0 left promiscuous mode [ 794.366794][ T4299] device hsr_slave_1 left promiscuous mode [ 794.374818][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.383264][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.391016][ T4299] device bridge_slave_1 left promiscuous mode [ 794.397673][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.406653][ T4299] device bridge_slave_0 left promiscuous mode [ 794.413395][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.749110][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 794.799520][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 794.853349][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.904927][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.229063][ T4299] bond0 (unregistering): Released all slaves [ 795.294549][ T9610] device veth1_macvtap entered promiscuous mode [ 795.332863][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 795.350492][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.367645][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.378497][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.389248][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.399771][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.410690][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.426929][ T9610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.455314][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 795.467538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 795.482503][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.498127][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.509111][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.519885][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.530725][ T9610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.541485][ T9610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.571507][ T9610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.593043][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 795.606310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 795.619970][ T9610] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.641312][ T9610] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.650950][ T9610] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.660924][ T9610] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.889712][ T9873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 795.928098][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.945648][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.964754][ T9873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 795.984886][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 796.020036][ T9873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 796.040028][ T9873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 796.067862][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.092238][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.115267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 796.303455][ T9924] loop8: detected capacity change from 0 to 512 [ 796.476783][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 796.632138][ T9927] loop7: detected capacity change from 0 to 256 [ 797.289982][ T9926] overlayfs: filesystem on './file2' not supported [ 797.386882][ T9924] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.1113: bad orphan inode 15 [ 797.600903][ T9924] ext4_test_bit(bit=14, block=5) = 0 [ 797.632796][ T9873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.653222][ T9924] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 797.710537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 797.723783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 797.749790][ T9873] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.823264][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 797.832021][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 797.891483][ T9930] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 797.942355][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.949490][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.970068][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 797.992883][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 798.013283][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.020407][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.042241][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 798.050453][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 798.061027][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 798.077358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 798.094042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 798.103479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 798.117111][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 798.136070][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 798.244533][ T9610] EXT4-fs (loop8): unmounting filesystem. [ 798.275657][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 798.332735][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 798.368515][ T9873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.759272][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 800.478011][ T9873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 800.515204][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 800.548806][ T9950] loop8: detected capacity change from 0 to 164 [ 800.594722][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 800.941404][ T9956] loop0: detected capacity change from 0 to 2048 [ 801.070915][ T9957] rock: directory entry would overflow storage [ 801.077263][ T9957] rock: sig=0x4f50, size=4, remaining=3 [ 801.083088][ T9957] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 801.372248][ T7115] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 801.604140][ T7115] usb 9-1: no configurations [ 801.609458][ T7115] usb 9-1: can't read configurations, error -22 [ 801.812668][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 801.877395][ T9956] EXT4-fs (loop0): failed to initialize system zone (-117) [ 801.895027][ T9956] EXT4-fs (loop0): mount failed [ 801.912546][ T7115] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 802.132946][ T7115] usb 9-1: no configurations [ 802.137605][ T7115] usb 9-1: can't read configurations, error -22 [ 802.632207][ T7115] usb usb9-port1: attempt power cycle [ 804.053175][ T9873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.086551][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 804.873854][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 805.089332][ T9992] block device autoloading is deprecated and will be removed. [ 805.215292][ T9989] md: invalid raid superblock magic on ram0 [ 805.221735][ T9989] md: ram0 does not have a valid v0.0 superblock, not importing! [ 805.286246][ T9989] md: md_import_device returned -22 [ 805.573874][T10007] loop8: detected capacity change from 0 to 1024 [ 808.120572][T10026] ------------[ cut here ]------------ [ 808.126524][T10026] WARNING: CPU: 0 PID: 10026 at kernel/trace/ring_buffer.c:4570 rb_get_reader_page+0xabf/0xcd0 [ 808.136961][T10026] Modules linked in: [ 808.140887][T10026] CPU: 0 PID: 10026 Comm: syz.8.1269 Not tainted syzkaller #0 [ 808.148370][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 808.158452][T10026] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 808.164313][T10026] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 68 62 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 f6 63 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 808.183974][T10026] RSP: 0018:ffffc900036d7820 EFLAGS: 00010002 [ 808.190075][T10026] RAX: 1ffff110030ea001 RBX: 1ffff110030e39a6 RCX: ffffffff8185401a [ 808.198082][T10026] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888018470408 [ 808.206091][T10026] RBP: ffffc900036d79b0 R08: ffff88801847040b R09: 1ffff1100308e081 [ 808.214098][T10026] R10: dffffc0000000000 R11: ffffed100308e082 R12: ffff888018750010 [ 808.222100][T10026] R13: 0000000000000094 R14: 1ffff110030e39a3 R15: ffff888018470400 [ 808.230099][T10026] FS: 00007f6ae47d56c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 808.239059][T10026] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.245679][T10026] CR2: 0000000000000000 CR3: 000000005bcad000 CR4: 00000000003506f0 [ 808.253702][T10026] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 808.261707][T10026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 808.269711][T10026] Call Trace: [ 808.273024][T10026] [ 808.276004][T10026] ? ring_buffer_read_page+0x1370/0x1370 [ 808.281677][T10026] ? mark_lock+0x94/0x320 [ 808.286053][T10026] ? do_raw_spin_lock+0x128/0x2f0 [ 808.291144][T10026] rb_buffer_peek+0x5e/0x940 [ 808.295779][T10026] ring_buffer_peek+0x1f8/0x440 [ 808.300675][T10026] ? ring_buffer_iter_empty+0x340/0x340 [ 808.306264][T10026] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 808.311941][T10026] ? _find_next_bit+0x87/0x130 [ 808.316772][T10026] __find_next_entry+0x33f/0x6c0 [ 808.321807][T10026] ? trace_find_next_entry+0x3a0/0x3a0 [ 808.327318][T10026] tracing_read_pipe+0x3bd/0xb10 [ 808.332304][T10026] ? s_show+0x300/0x300 [ 808.336517][T10026] vfs_read+0x2db/0x960 [ 808.340801][T10026] ? kernel_read+0x1e0/0x1e0 [ 808.345443][T10026] ? __fget_files+0x28/0x460 [ 808.350122][T10026] ? __fget_files+0x3fc/0x460 [ 808.354856][T10026] ? __fdget_pos+0x2ae/0x360 [ 808.359496][T10026] ? ksys_read+0x70/0x260 [ 808.363880][T10026] ksys_read+0x14d/0x260 [ 808.368184][T10026] ? vfs_write+0x9a0/0x9a0 [ 808.372754][T10026] ? lockdep_hardirqs_on+0x94/0x140 [ 808.378011][T10026] do_syscall_64+0x4c/0xa0 [ 808.382488][T10026] ? clear_bhb_loop+0x60/0xb0 [ 808.387204][T10026] ? clear_bhb_loop+0x60/0xb0 [ 808.391929][T10026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.397861][T10026] RIP: 0033:0x7f6ae659e1d9 [ 808.402316][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.421964][T10026] RSP: 002b:00007f6ae47d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 808.430417][T10026] RAX: ffffffffffffffda RBX: 00007f6ae6826180 RCX: 00007f6ae659e1d9 [ 808.438423][T10026] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000007 [ 808.446435][T10026] RBP: 00007f6ae6635888 R08: 0000000000000000 R09: 0000000000000000 [ 808.454533][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.462544][T10026] R13: 00007f6ae6826218 R14: 00007f6ae6826180 R15: 00007fff3f0fab68 [ 808.470577][T10026] [ 808.473648][T10026] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 808.480955][T10026] CPU: 0 PID: 10026 Comm: syz.8.1269 Not tainted syzkaller #0 [ 808.488465][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 808.498564][T10026] Call Trace: [ 808.501882][T10026] [ 808.504850][T10026] dump_stack_lvl+0x188/0x24e [ 808.509576][T10026] ? memcpy+0x3c/0x60 [ 808.513685][T10026] ? show_regs_print_info+0x12/0x12 [ 808.518927][T10026] ? load_image+0x410/0x410 [ 808.523492][T10026] panic+0x2d3/0x710 [ 808.527469][T10026] ? bpf_jit_dump+0xd0/0xd0 [ 808.532036][T10026] __warn+0x2f8/0x4f0 [ 808.536066][T10026] ? rb_get_reader_page+0xabf/0xcd0 [ 808.541308][T10026] ? rb_get_reader_page+0xabf/0xcd0 [ 808.546538][T10026] report_bug+0x2ba/0x4f0 [ 808.550926][T10026] ? rb_get_reader_page+0xabf/0xcd0 [ 808.556241][T10026] handle_bug+0x3a/0x70 [ 808.560449][T10026] exc_invalid_op+0x16/0x40 [ 808.565006][T10026] asm_exc_invalid_op+0x16/0x20 [ 808.569924][T10026] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 808.575778][T10026] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 68 62 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 f6 63 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 808.595420][T10026] RSP: 0018:ffffc900036d7820 EFLAGS: 00010002 [ 808.601555][T10026] RAX: 1ffff110030ea001 RBX: 1ffff110030e39a6 RCX: ffffffff8185401a [ 808.609561][T10026] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888018470408 [ 808.617563][T10026] RBP: ffffc900036d79b0 R08: ffff88801847040b R09: 1ffff1100308e081 [ 808.625576][T10026] R10: dffffc0000000000 R11: ffffed100308e082 R12: ffff888018750010 [ 808.633609][T10026] R13: 0000000000000094 R14: 1ffff110030e39a3 R15: ffff888018470400 [ 808.641628][T10026] ? rb_get_reader_page+0xaba/0xcd0 [ 808.646882][T10026] ? ring_buffer_read_page+0x1370/0x1370 [ 808.652542][T10026] ? mark_lock+0x94/0x320 [ 808.656949][T10026] ? do_raw_spin_lock+0x128/0x2f0 [ 808.662013][T10026] rb_buffer_peek+0x5e/0x940 [ 808.666649][T10026] ring_buffer_peek+0x1f8/0x440 [ 808.671531][T10026] ? ring_buffer_iter_empty+0x340/0x340 [ 808.677134][T10026] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 808.682804][T10026] ? _find_next_bit+0x87/0x130 [ 808.687631][T10026] __find_next_entry+0x33f/0x6c0 [ 808.692729][T10026] ? trace_find_next_entry+0x3a0/0x3a0 [ 808.698232][T10026] tracing_read_pipe+0x3bd/0xb10 [ 808.703187][T10026] ? s_show+0x300/0x300 [ 808.707363][T10026] vfs_read+0x2db/0x960 [ 808.711558][T10026] ? kernel_read+0x1e0/0x1e0 [ 808.716156][T10026] ? __fget_files+0x28/0x460 [ 808.720750][T10026] ? __fget_files+0x3fc/0x460 [ 808.725455][T10026] ? __fdget_pos+0x2ae/0x360 [ 808.730155][T10026] ? ksys_read+0x70/0x260 [ 808.734526][T10026] ksys_read+0x14d/0x260 [ 808.738783][T10026] ? vfs_write+0x9a0/0x9a0 [ 808.743208][T10026] ? lockdep_hardirqs_on+0x94/0x140 [ 808.748433][T10026] do_syscall_64+0x4c/0xa0 [ 808.752855][T10026] ? clear_bhb_loop+0x60/0xb0 [ 808.757541][T10026] ? clear_bhb_loop+0x60/0xb0 [ 808.762245][T10026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.768175][T10026] RIP: 0033:0x7f6ae659e1d9 [ 808.772599][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.792210][T10026] RSP: 002b:00007f6ae47d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 808.800622][T10026] RAX: ffffffffffffffda RBX: 00007f6ae6826180 RCX: 00007f6ae659e1d9 [ 808.808602][T10026] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000007 [ 808.816592][T10026] RBP: 00007f6ae6635888 R08: 0000000000000000 R09: 0000000000000000 [ 808.824604][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.832605][T10026] R13: 00007f6ae6826218 R14: 00007f6ae6826180 R15: 00007fff3f0fab68 [ 808.840639][T10026] [ 808.844263][T10026] Kernel Offset: disabled [ 808.848699][T10026] Rebooting in 86400 seconds..