last executing test programs: 25m18.722887847s ago: executing program 32 (id=433): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000280)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) io_setup(0x8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20m3.767311305s ago: executing program 5 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x4001000006) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x8, 0xbf, 0x0, 0x20b, 0x2, "7f0900000000010000000000000100", 0x563, 0x5}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r9, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}, @IFLA_AF_SPEC={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) 19m59.590608482s ago: executing program 5 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x4001000006) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x8, 0xbf, 0x0, 0x20b, 0x2, "7f0900000000010000000000000100", 0x563, 0x5}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r9, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc811}, 0x8000) 19m58.298081385s ago: executing program 5 (id=1242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x6, 0x801, 0x187d) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x2, 0xf, 0x4}}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fc, &(0x7f0000000080)="74972a7cdcf08d30fe259b7dfbe03273032af63d9f259d0beb4c1a04f7d7cf178920ef15913568190641a3f6900f233b2a3b33d1c6713597896b9cf6bfbc1834a4eb74ab8334f795d215b4bf78cb46cdc1d1bd75df7d2d7f3b21410a1b282d9a8ff162b4f8ffdc2ec36e2f9481c322e393") socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff3, 0x5}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x31b5}, @TCA_CAKE_MPU={0x8, 0xe, 0x34}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x66000080) 19m57.417249315s ago: executing program 5 (id=1245): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 19m57.208306197s ago: executing program 5 (id=1247): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) listen(r2, 0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x5f8c, 0x800, 0x0, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x5, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x4800) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400", 0x22) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x4, 0x1, 0xe, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0}, 0xfffffffffffffe93) 19m56.999980489s ago: executing program 5 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), 0x204008, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x0, 0x100) 19m56.676620048s ago: executing program 33 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), 0x204008, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x0, 0x100) 19m34.459721291s ago: executing program 6 (id=1249): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 19m34.230501254s ago: executing program 6 (id=1328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x0) r1 = eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) ppoll(&(0x7f0000000040)=[{r1, 0x3273}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 19m33.739860672s ago: executing program 6 (id=1331): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f44e672d7000fbdbdf2531fb000008000300", @ANYRES32=r6, @ANYBLOB="0c009900010000007e00000008000300", @ANYRES32=r7, @ANYBLOB="080001002b00000008005200", @ANYRES32=0x0, @ANYBLOB="0c009900e86200004e00000008000300", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x4000000) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002dbd7000ffdbdf251100eeff0400300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040844) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 19m33.256158849s ago: executing program 34 (id=1331): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f44e672d7000fbdbdf2531fb000008000300", @ANYRES32=r6, @ANYBLOB="0c009900010000007e00000008000300", @ANYRES32=r7, @ANYBLOB="080001002b00000008005200", @ANYRES32=0x0, @ANYBLOB="0c009900e86200004e00000008000300", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x4000000) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002dbd7000ffdbdf251100eeff0400300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040844) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) 8m2.954109856s ago: executing program 3 (id=3229): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) 8m1.931939465s ago: executing program 3 (id=3235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a0000000000fd00000000001400050000000000000000000000000000000002"], 0x30}, 0x1, 0x11}, 0x0) 8m1.627862363s ago: executing program 3 (id=3236): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000140)='./file1\x00', 0x80, &(0x7f0000000340)={[{@discard}, {@filestreams}, {@gqnoenforce}, {@bsdgroups}, {@gqnoenforce}, {@discard}]}, 0x1, 0x97e8, &(0x7f000001c700)="$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") sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x100, 0x18cc}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}}, 0x0) 7m58.035970442s ago: executing program 3 (id=3246): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x20000000003, 0x6, 0x0, 0x0, 0x4, 0x1c, "fee8a2abd607000000000000072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c00000000000000000000002100f4ffffffffffffff00", [0x0, 0x200]}}) openat$pfkey(0xffffffffffffff9c, 0x0, 0xa000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000040)=""/99) epoll_create1(0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x1], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {0xffff, 0x9}, {0x1ff}, {0x0, 0x3}, {}, {0x2}, {}, {}, {0x0, 0x9}], 0xc}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) 7m55.643050331s ago: executing program 3 (id=3258): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 7m54.816633748s ago: executing program 3 (id=3265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) 7m54.480867168s ago: executing program 35 (id=3265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) 7m25.395657226s ago: executing program 8 (id=3334): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$caif_stream(0x25, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = memfd_create(0x0, 0x1) fcntl$addseals(r3, 0x409, 0x12) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$caif(r2, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, 0x0, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f00000000c0)=""/4096, 0x1000) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r1, 0x1, 0x7fffffff, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x20000054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x200000, 0xd8, 0x10}, &(0x7f0000000080)='./file1\x00', 0x18, 0x0, 0x12345}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x0, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) 7m23.991370908s ago: executing program 8 (id=3340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000480)=0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x108, 0x14, 0x5, 0x5, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x8}, [@nested={0x14, 0x56, 0x0, 0x1, [@nested={0x4, 0x13}, @nested={0x4, 0x5c}, @typed={0x8, 0x38, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0x14, 0x56, 0x0, 0x1, [@nested={0xc, 0xef, 0x0, 0x1, [@typed={0x8, 0x117, 0x0, 0x0, @u32=0xbee}]}, @nested={0x4, 0x157}]}, @typed={0x14, 0x952, 0x0, 0x0, @ipv6=@remote}, @generic="6d6d542bef45e11b38bd2a616caf12df30922da60a97d4eff654efc2fbdd123d3e7702f0bb2145ef19057293d81d1a176ebdc03b5a0abc5618c81d071f621872ffca52438bf22fc95ec5e0f14a4a51a05263886cd452e2338c7d8b3e179c60726fd73e06b13a3923783f2d80e54a22a7755624284813058d650fcd1e337fff412aa55d75b920fd4d3a1913e2bcaaa96c2fb5abdfa033add7ef8929c593349473a945e09cf78de8dc2371c0bb0c749955f55d21022c"]}, 0x108}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4000000) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)='!', 0x2a000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0xc048aec8, &(0x7f0000000240)={0x8, 0xc, 0xd3f, 0x8, 0xfffffffffffffff7}) 7m21.594447337s ago: executing program 8 (id=3347): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r5, 0xf, "d656c9a61490b7e8773ca55437fa23"}, &(0x7f0000000180)=0x17) 7m19.435488133s ago: executing program 8 (id=3349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000bbe20519b758b79f9a"], 0x15, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m17.862785494s ago: executing program 8 (id=3354): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = socket$alg(0x26, 0x5, 0x0) close_range(r5, r5, 0x6) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x6c}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7m16.926094798s ago: executing program 8 (id=3355): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 7m1.140342665s ago: executing program 36 (id=3355): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 6m38.250064413s ago: executing program 1 (id=3452): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 6m35.925593698s ago: executing program 1 (id=3456): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000005e00), 0x20000, 0x0) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000007080)={{}, {0x1, 0x2}, [], {0x4, 0x3}, [], {0x10, 0x1}}, 0x24, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 6m33.084370043s ago: executing program 1 (id=3460): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x80, 0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 6m30.565335179s ago: executing program 1 (id=3468): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) 6m29.331943171s ago: executing program 1 (id=3470): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 6m26.484110866s ago: executing program 1 (id=3479): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 6m25.760896618s ago: executing program 37 (id=3479): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 19.11052117s ago: executing program 7 (id=4542): r0 = socket$caif_stream(0x25, 0x1, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$caif(r0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 16.338584441s ago: executing program 4 (id=4548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x5bd, &(0x7f0000000680)="$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") r1 = open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)='0', 0x1}], 0x1) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r1, &(0x7f0000000300)='_', 0x1, 0x10000000005) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x101, 0x2501) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400000000000000", @ANYRES32, @ANYBLOB="000000000000000020001280080001007369740014000280080014"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0xf, 0x0, 0x100c, 0x4, 0x2, 0x2, 0x0, 0x5}}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x2e, 0x4, @thr={&(0x7f0000000d00)="6e99e2d7a191172598a6b40cd90c72eb1b2980ec97286c0227bde1d96f7ee1f10ba8e64875076eedc9b1c8d690722bd0497cd53b4cde59e7f2956067b407d97247a4347b0fe14cfbea3c07061aee28fb6165f3b58d2256db2e99d414b25c66702300b9e4e1a2491017541fa2162e60644c45b019e80126260b9fb5ece25d1d8930", 0x0}}, &(0x7f0000000280)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20fffe82) 14.288424911s ago: executing program 2 (id=4552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, 0x0, 0x20040040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) 12.728465432s ago: executing program 7 (id=4553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18000, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4a460f54}}, {@minixdf}, {@noload}, {@grpquota}, {@discard}, {@mblk_io_submit}, {@dax_never}, {@dioread_nolock}], [{@audit}]}, 0x80, 0x62d, &(0x7f0000000600)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.0574204s ago: executing program 2 (id=4564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 11.966064996s ago: executing program 7 (id=4555): syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x141040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) r0 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r5, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x41d, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x10, 0x1, 0x24, 0x800}}, @mark={{0x10, 0x1, 0x51, 0x108}}], 0x20}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socket(0x15, 0x5, 0x0) 9.248011613s ago: executing program 4 (id=4557): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) 8.036557513s ago: executing program 4 (id=4558): r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(0x0, 0x0) fsmount(r4, 0x0, 0x80) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) 6.865876302s ago: executing program 4 (id=4559): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 6.797632446s ago: executing program 2 (id=4560): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 6.55111063s ago: executing program 0 (id=4561): syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$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") mkdirat(r1, &(0x7f0000000540)='./file0\x00', 0x77) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4008020}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000025300)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8000000000000c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x52, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4a7, @mcast2, 0x202}, {0xa, 0x4f24, 0x7ffc, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8}, 0xffffffffffffffff, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) socket(0x10, 0x3, 0x204) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) unshare(0x26020480) fanotify_init(0xf00, 0x1) write$vhost_msg(r2, &(0x7f0000000100)={0x1, {&(0x7f0000000400)=""/188, 0xbc, 0x0, 0x3, 0x3}}, 0x48) 5.616026174s ago: executing program 9 (id=4562): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@generic={0x5, 0x12, "75ab01000200000000000000c04917cf"}]}}}}}}}, 0x0) 5.33155507s ago: executing program 0 (id=4563): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) inotify_init1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) creat(&(0x7f0000000580)='./file0\x00', 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) 4.921648684s ago: executing program 0 (id=4565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x8, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002f9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 4.83194799s ago: executing program 9 (id=4566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) 4.764367213s ago: executing program 2 (id=4567): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 4.471016921s ago: executing program 0 (id=4568): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() syz_pidfd_open(r1, 0x0) fcntl$getownex(r0, 0x10, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r2, 0x0) sigaltstack(&(0x7f0000000300)={&(0x7f0000002340)=""/4097, 0x80000000, 0x1001}, 0x0) sigaltstack(0x0, &(0x7f0000000040)={0x0}) truncate(0x0, 0x7f0) r3 = getpid() accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10, 0x1800) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000340)={&(0x7f0000005000)={[{&(0x7f0000000480)="0662", 0x2, 0x1}]}, 0x1}, 0x1) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) 4.470810121s ago: executing program 9 (id=4569): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() fanotify_init(0x40, 0x400) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x18, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x1000000, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 4.098539212s ago: executing program 7 (id=4570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, 0x0, 0x20040040) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000001000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"]}, 0x132) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) 2.498319145s ago: executing program 0 (id=4571): r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(0x0, 0x0) fsmount(r4, 0x0, 0x80) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) 2.381598152s ago: executing program 7 (id=4572): r0 = socket$kcm(0x10, 0xd, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) llistxattr(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, 0x0) 1.248026377s ago: executing program 0 (id=4573): capset(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18000, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4a460f54}}, {@minixdf}, {@noload}, {@grpquota}, {@discard}, {@mblk_io_submit}, {@dax_never}, {@dioread_nolock}], [{@audit}]}, 0x80, 0x62d, &(0x7f0000000600)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.119812095s ago: executing program 2 (id=4574): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 946.302005ms ago: executing program 7 (id=4575): syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$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") mkdirat(r1, &(0x7f0000000540)='./file0\x00', 0x77) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4008020}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8000000000000c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x52, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x4a7, @mcast2, 0x202}, {0xa, 0x4f24, 0x7ffc, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8}, 0xffffffffffffffff, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) socket(0x10, 0x3, 0x204) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) unshare(0x26020480) fanotify_init(0xf00, 0x1) write$vhost_msg(r2, &(0x7f0000000100)={0x1, {&(0x7f0000000400)=""/188, 0xbc, 0x0, 0x3, 0x3}}, 0x48) 900.393718ms ago: executing program 9 (id=4576): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7, {[@generic={0x5, 0x12, "75ab01000200000000000000c04917cf"}]}}}}}}}, 0x0) 615.908445ms ago: executing program 2 (id=4577): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) inotify_init1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) creat(&(0x7f0000000580)='./file0\x00', 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) 607.655525ms ago: executing program 4 (id=4578): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 497.393131ms ago: executing program 9 (id=4579): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x8, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002f9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 80.480486ms ago: executing program 4 (id=4580): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="18000000010005", 0x7) 0s ago: executing program 9 (id=4581): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): he config [ 1262.563905][ T41] usb 2-1: config 0 has no interfaces? [ 1262.593884][ T41] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1262.606098][ T41] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1262.614640][ T41] usb 2-1: Manufacturer: syz [ 1262.621973][ T41] usb 2-1: config 0 descriptor?? [ 1262.834933][T17644] vhci_hcd: connection closed [ 1262.841679][ T4374] vhci_hcd: stop threads [ 1262.946909][T16020] usb 2-1: USB disconnect, device number 4 [ 1262.977908][T16030] usb 35-1: device descriptor read/64, error -71 [ 1263.033424][ T4374] vhci_hcd: release socket [ 1263.903769][ T4374] vhci_hcd: disconnect device [ 1263.937922][T16030] vhci_hcd: vhci_device speed not set [ 1264.332240][T17676] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1265.420305][T17681] lo speed is unknown, defaulting to 1000 [ 1265.464160][T17681] lo speed is unknown, defaulting to 1000 [ 1265.482556][T17681] lo speed is unknown, defaulting to 1000 [ 1265.495317][T17685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3358'. [ 1265.514929][T17685] netlink: 'syz.4.3358': attribute type 3 has an invalid length. [ 1267.828049][ T4281] Bluetooth: hci3: command 0x1003 tx timeout [ 1267.834578][T14633] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1269.926907][T17681] infiniband syz0: set active [ 1269.931831][ T4383] lo speed is unknown, defaulting to 1000 [ 1269.977860][T17681] infiniband syz0: added lo [ 1269.982990][T17681] rdma_rxe: unable to create cq [ 1270.060771][T17714] loop4: detected capacity change from 0 to 1024 [ 1270.068078][T17681] infiniband syz0: Couldn't create ib_mad CQ [ 1270.111340][T17681] infiniband syz0: Couldn't open port 1 [ 1270.254559][T17681] RDS/IB: syz0: added [ 1270.291565][T17681] smc: adding ib device syz0 with port count 1 [ 1270.327977][T17681] smc: ib device syz0 port 1 has pnetid [ 1270.353889][T16027] lo speed is unknown, defaulting to 1000 [ 1270.363807][T17681] lo speed is unknown, defaulting to 1000 [ 1270.443471][T17721] loop7: detected capacity change from 0 to 512 [ 1270.526647][T17721] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1270.574395][T17721] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1270.707115][T17721] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 1270.722387][T17681] lo speed is unknown, defaulting to 1000 [ 1270.800438][T17721] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1271.243803][T17732] netlink: 'syz.1.3372': attribute type 10 has an invalid length. [ 1271.324710][T17721] fscrypt (loop7): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 1271.704979][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1273.950034][T17749] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3375'. [ 1273.961539][T17749] netlink: 'syz.7.3375': attribute type 3 has an invalid length. [ 1274.264505][T17732] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1274.514125][T17681] lo speed is unknown, defaulting to 1000 [ 1275.901888][T17681] lo speed is unknown, defaulting to 1000 [ 1275.921156][T17766] loop4: detected capacity change from 0 to 256 [ 1280.125786][T17791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3390'. [ 1280.147359][T17791] netlink: 'syz.0.3390': attribute type 3 has an invalid length. [ 1280.595158][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1280.611210][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1280.622938][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1280.636486][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1280.644457][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1280.653258][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1280.867457][T17681] lo speed is unknown, defaulting to 1000 [ 1280.867542][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3387'. [ 1280.882939][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3387'. [ 1280.891916][T17785] netlink: 'syz.7.3387': attribute type 13 has an invalid length. [ 1280.899850][T17785] netlink: 'syz.7.3387': attribute type 12 has an invalid length. [ 1281.049628][T17796] virt_wifi0 speed is unknown, defaulting to 1000 [ 1281.441625][T17803] loop7: detected capacity change from 0 to 256 [ 1281.633341][T17804] x_tables: duplicate underflow at hook 3 [ 1281.918979][T17796] lo speed is unknown, defaulting to 1000 [ 1282.707977][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 1282.837334][T17681] lo speed is unknown, defaulting to 1000 [ 1283.497152][T17824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3401'. [ 1283.524721][T17824] netlink: 'syz.0.3401': attribute type 3 has an invalid length. [ 1284.478697][T17827] loop1: detected capacity change from 0 to 16 [ 1284.788050][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 1286.539292][T17827] erofs: (device loop1): mounted with root inode @ nid 36. [ 1286.867997][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 1287.190428][T17796] chnl_net:caif_netlink_parms(): no params data found [ 1287.495633][T17796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.637849][T17851] x_tables: duplicate underflow at hook 3 [ 1287.818915][T17796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.067259][T17796] device bridge_slave_0 entered promiscuous mode [ 1288.150882][T17796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.184977][T17796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.205856][T17855] loop1: detected capacity change from 0 to 256 [ 1288.207460][T17796] device bridge_slave_1 entered promiscuous mode [ 1288.346621][T17796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.369366][T17859] tmpfs: Unknown parameter 'grpquota' [ 1288.390174][T17796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.538202][T14788] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1288.648429][T17796] team0: Port device team_slave_0 added [ 1288.692598][T17796] team0: Port device team_slave_1 added [ 1288.737910][T14788] usb 8-1: Using ep0 maxpacket: 32 [ 1288.745002][T14788] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1288.778150][T14788] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1288.807345][T14788] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.947948][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 1289.007897][T14788] usb 8-1: Product: syz [ 1289.023937][T14788] usb 8-1: Manufacturer: syz [ 1289.526298][T14788] usb 8-1: SerialNumber: syz [ 1289.549826][T14788] usb 8-1: config 0 descriptor?? [ 1289.570346][T17796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.588654][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.689613][T17796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.971026][ T9104] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.068254][T17796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.075543][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.231266][T17796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.390203][ T9104] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.948183][T14788] gs_usb 8-1:0.0: Couldn't get device config: (err=-110) [ 1291.269150][T14788] gs_usb: probe of 8-1:0.0 failed with error -110 [ 1291.386716][T16027] usb 8-1: USB disconnect, device number 13 [ 1291.494727][ T9104] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.596023][T17796] device hsr_slave_0 entered promiscuous mode [ 1291.613796][T17796] device hsr_slave_1 entered promiscuous mode [ 1291.625702][T17796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.750118][T17796] Cannot create hsr debugfs directory [ 1291.805036][T17886] x_tables: duplicate underflow at hook 3 [ 1291.824794][T17885] loop1: detected capacity change from 0 to 256 [ 1292.595298][ T9104] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.676448][T17891] netlink: 'syz.0.3422': attribute type 10 has an invalid length. [ 1293.550414][T17891] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1293.658856][T17902] netlink: 'syz.4.3424': attribute type 10 has an invalid length. [ 1293.752152][T17902] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1296.706239][T17796] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1296.833738][T17796] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1297.073603][T17796] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1297.123303][T17928] x_tables: duplicate underflow at hook 3 [ 1297.200087][T17796] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1299.012252][T17796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.189370][T17796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.196573][ T8065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1299.222468][ T8065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1299.365188][ T6991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1299.407230][ T6991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1299.466822][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.474035][ T6991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.539366][ T6991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1299.694825][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1299.717385][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1299.751654][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.758896][ T5198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.796994][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1299.914069][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.920480][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.022910][T17975] mmap: syz.0.3443 (17975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1300.087363][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1300.112159][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1301.080467][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1301.089627][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1301.133088][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1301.192363][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1301.241977][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1301.264087][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1301.490763][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1302.355271][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1302.368887][T17796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1304.779256][ T9104] device hsr_slave_0 left promiscuous mode [ 1304.834485][ T9104] device hsr_slave_1 left promiscuous mode [ 1304.848291][ T9104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.855778][ T9104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.919132][ T9104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.926613][ T9104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.998852][ T9104] device bridge_slave_1 left promiscuous mode [ 1306.102246][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.348259][ T9104] device bridge_slave_0 left promiscuous mode [ 1306.476970][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.702732][ T9104] device veth1_macvtap left promiscuous mode [ 1306.712515][ T9104] device veth0_macvtap left promiscuous mode [ 1306.908350][ T9104] device veth1_vlan left promiscuous mode [ 1306.914786][ T9104] device veth0_vlan left promiscuous mode [ 1308.149659][ T9104] infiniband syz0: set down [ 1311.394569][T18073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3469'. [ 1312.171769][ T9104] team0 (unregistering): Port device team_slave_1 removed [ 1312.240466][ T9104] team0 (unregistering): Port device team_slave_0 removed [ 1312.303517][ T9104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.380924][ T9104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.833198][ T9104] bond0 (unregistering): Released all slaves [ 1314.011186][ T6991] smc: removing ib device syz0 [ 1314.026741][ T7328] lo speed is unknown, defaulting to 1000 [ 1314.211238][T18087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.125361][T18087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.091271][T17693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1316.108872][T17693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1316.119661][T17693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1316.136166][T17693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1316.144483][T17693] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1316.151954][T17693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1316.330211][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1316.446181][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1316.455494][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1316.474665][T17796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.486647][T18119] virt_wifi0 speed is unknown, defaulting to 1000 [ 1316.596753][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1316.993534][T18133] device syzkaller0 entered promiscuous mode [ 1318.150418][T18119] chnl_net:caif_netlink_parms(): no params data found [ 1318.228166][T17693] Bluetooth: hci0: command 0x0409 tx timeout [ 1318.546579][ T9104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.449992][T18162] loop7: detected capacity change from 0 to 16 [ 1319.467718][T18162] erofs: (device loop7): mounted with root inode @ nid 36. [ 1319.479962][T18162] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1319.490370][T18162] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1319.500569][T18162] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1319.510474][T18162] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1319.522378][T18162] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1319.536551][T18162] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1319.546364][T18166] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1319.556670][T18166] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1319.566886][T18166] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1319.576733][T18166] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1319.708098][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3495'. [ 1319.722435][T18166] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1319.735364][T18166] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1319.964719][ T9104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.258283][ T9104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.306574][T18180] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1320.308537][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 1320.313147][T18180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1320.338900][T18180] vhci_hcd vhci_hcd.0: Device attached [ 1320.362153][T18180] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 1320.368728][T18180] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1320.407272][T18186] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1320.424987][T18180] vhci_hcd vhci_hcd.0: Device attached [ 1320.460032][ T9104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.477552][T18180] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(7) [ 1320.484166][T18180] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1320.521262][T18119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.523672][T18186] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(10) [ 1320.535167][T18186] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1320.548658][T18180] vhci_hcd vhci_hcd.0: Device attached [ 1320.558990][T18119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.577098][T18119] device bridge_slave_0 entered promiscuous mode [ 1320.583576][T18186] vhci_hcd vhci_hcd.0: Device attached [ 1320.595166][T18180] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(12) [ 1320.601815][T18180] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1320.626291][T18180] vhci_hcd vhci_hcd.0: Device attached [ 1320.632083][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1320.640460][T16226] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1320.653162][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1320.681463][T18181] vhci_hcd: connection reset by peer [ 1320.681788][T18189] vhci_hcd: connection closed [ 1320.687053][T18187] vhci_hcd: connection closed [ 1320.687723][ T8954] vhci_hcd: stop threads [ 1320.692278][T18183] vhci_hcd: connection closed [ 1320.696671][ T8954] vhci_hcd: release socket [ 1320.739317][ T8954] vhci_hcd: disconnect device [ 1320.752170][ T8954] vhci_hcd: stop threads [ 1320.763533][ T8954] vhci_hcd: release socket [ 1320.771087][T18119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.790285][T18119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.805834][ T8954] vhci_hcd: disconnect device [ 1320.824096][T18191] vhci_hcd: connection closed [ 1320.833284][ T8954] vhci_hcd: stop threads [ 1320.842747][T18119] device bridge_slave_1 entered promiscuous mode [ 1320.851710][ T8954] vhci_hcd: release socket [ 1320.883930][T17796] device veth0_vlan entered promiscuous mode [ 1320.898494][T17796] device veth1_vlan entered promiscuous mode [ 1320.904746][ T8954] vhci_hcd: disconnect device [ 1320.916814][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1320.929964][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1320.937868][ T8954] vhci_hcd: stop threads [ 1320.946931][ T8954] vhci_hcd: release socket [ 1320.958942][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1320.962421][ T8954] vhci_hcd: disconnect device [ 1320.992795][ T8954] vhci_hcd: stop threads [ 1321.013298][ T8954] vhci_hcd: release socket [ 1321.028150][ T8954] vhci_hcd: disconnect device [ 1321.037282][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1321.050698][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1321.074445][T18119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.099889][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1321.119372][T18119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.161153][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1321.174679][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1321.213158][T17796] device veth0_macvtap entered promiscuous mode [ 1321.306563][T18119] team0: Port device team_slave_0 added [ 1321.359603][T17796] device veth1_macvtap entered promiscuous mode [ 1321.393849][T18119] team0: Port device team_slave_1 added [ 1321.463261][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.475625][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.485741][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.497337][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.513182][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.524281][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.846649][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.954208][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.185585][T17796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.388060][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 1322.459924][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1322.482263][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1322.504936][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1322.523030][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1322.535573][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.556187][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.566438][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.577116][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.587096][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.598281][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.609858][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.620457][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.633240][T17796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.702760][T18119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.710581][T18119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.740869][T18119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.755038][T18119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.762522][T18119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.793285][T18119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.804941][T18208] tipc: Enabling of bearer rejected, failed to enable media [ 1323.818075][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1323.833726][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1323.877600][T17796] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.886973][T17796] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.910775][T17796] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.925280][T17796] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.118530][T18218] netlink: 'syz.4.3503': attribute type 1 has an invalid length. [ 1324.170490][T18119] device hsr_slave_0 entered promiscuous mode [ 1324.229054][T18119] device hsr_slave_1 entered promiscuous mode [ 1324.246826][T18119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1324.266736][T18119] Cannot create hsr debugfs directory [ 1324.467976][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 1324.660043][T18226] loop7: detected capacity change from 0 to 512 [ 1325.385096][T18226] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1325.672253][ T6991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.716633][ T6991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.748073][T16226] vhci_hcd: vhci_device speed not set [ 1325.800835][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1325.857648][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.889350][T18235] loop7: detected capacity change from 0 to 16 [ 1325.914579][T18235] erofs: (device loop7): mounted with root inode @ nid 36. [ 1325.927414][T18235] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1325.937318][T18235] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1325.947690][T18235] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1325.957612][T18235] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1325.967997][T18235] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1325.976713][T18235] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1325.991996][T18236] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1326.001959][T18236] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1326.012137][T18236] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1326.022059][T18236] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1326.032084][T18236] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1326.040608][T18236] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1326.086924][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3507'. [ 1326.117615][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.368394][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1329.340599][T18269] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3515'. [ 1329.362652][T18269] netlink: 'syz.7.3515': attribute type 3 has an invalid length. [ 1329.422814][ T9104] bond0: (slave wlan1): Releasing backup interface [ 1330.407033][T18286] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3526'. [ 1331.646062][T18304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1331.767404][T18290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.782805][T18290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.812493][T18290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.822823][T18290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.830291][ T9104] device hsr_slave_0 left promiscuous mode [ 1333.854500][ T9104] device hsr_slave_1 left promiscuous mode [ 1333.914170][ T9104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.943700][ T9104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.351752][ T9104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.586882][ T9104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.727528][ T9104] device bridge_slave_1 left promiscuous mode [ 1334.734004][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.743725][ T9104] device bridge_slave_0 left promiscuous mode [ 1334.750568][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.788623][ T9104] device veth1_macvtap left promiscuous mode [ 1334.794779][ T9104] device veth0_macvtap left promiscuous mode [ 1335.324488][ T9104] bond1 (unregistering): Released all slaves [ 1335.708388][ T9104] team0 (unregistering): Port device team_slave_1 removed [ 1335.766752][ T9104] team0 (unregistering): Port device team_slave_0 removed [ 1335.822007][ T9104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.875247][ T9104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.254057][ T9104] bond0 (unregistering): Released all slaves [ 1336.570604][T18119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1336.633817][T18350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3532'. [ 1337.081490][T18359] loop9: detected capacity change from 0 to 512 [ 1338.104776][T18119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1338.119434][T18359] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1338.352908][T18357] loop7: detected capacity change from 0 to 16 [ 1338.366570][T18357] erofs: (device loop7): mounted with root inode @ nid 36. [ 1338.378661][T18357] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1338.418392][T18357] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1338.429006][T18357] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1338.439020][T18357] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1338.449636][T18357] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1338.458179][T18357] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1338.699236][T18119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1338.724806][T18363] virt_wifi0 speed is unknown, defaulting to 1000 [ 1338.778149][T18119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1340.763877][T18119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.855477][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1340.909318][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1340.964235][T18119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.013648][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1341.051912][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1342.433194][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.440413][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.466485][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1342.574981][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1342.584710][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1342.594256][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.601509][T10524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.614246][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1342.656332][T18119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1342.732408][T18119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1342.771005][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1342.793968][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1342.838242][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1342.858861][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1342.901894][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1342.939593][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1342.973475][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1343.028869][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1343.047359][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1343.079288][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1343.103594][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1344.148975][T18410] loop7: detected capacity change from 0 to 16 [ 1344.181039][T18410] erofs: (device loop7): mounted with root inode @ nid 36. [ 1344.373221][T18411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3547'. [ 1344.392843][T18411] netlink: 'syz.0.3547': attribute type 3 has an invalid length. [ 1344.731200][T18420] netlink: 'syz.7.3550': attribute type 12 has an invalid length. [ 1346.411329][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1346.448080][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1346.471065][T18119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.580079][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1346.628683][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1346.699066][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1346.708626][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1346.746136][T18119] device veth0_vlan entered promiscuous mode [ 1346.754304][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1346.776808][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1346.902938][T18119] device veth1_vlan entered promiscuous mode [ 1346.963868][T18119] device veth0_macvtap entered promiscuous mode [ 1346.974326][T18119] device veth1_macvtap entered promiscuous mode [ 1347.082359][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1347.279045][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1347.440231][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1347.565220][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1347.741464][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1348.460405][T18453] virt_wifi0 speed is unknown, defaulting to 1000 [ 1348.465765][T18119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.620211][T18462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3560'. [ 1348.630328][T18119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.645442][T18119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.676576][T18119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.717022][T18119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.799914][T18119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.812030][T18463] netlink: 'syz.0.3560': attribute type 3 has an invalid length. [ 1348.818846][T18119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.829914][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1348.841574][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1348.850597][T10524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1348.874590][T18119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.954695][T18119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.985266][T18119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1349.011827][T18119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.042500][T18119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1349.101596][T18119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.142139][T18119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.174695][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1349.188889][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1349.226666][T18119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.249893][T18119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.271111][T18119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.294410][T18119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.531910][ T5676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.566234][ T5676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.623754][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1349.660263][ T5676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.690331][ T5676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.746176][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1351.606479][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3571'. [ 1351.814263][T18505] bond0: (slave bond_slave_0): Releasing backup interface [ 1351.927304][T18510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1351.938955][T18510] netlink: 'syz.0.3572': attribute type 3 has an invalid length. [ 1352.204670][T18515] loop7: detected capacity change from 0 to 512 [ 1352.340920][T18515] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1352.423458][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1352.460899][T18523] loop2: detected capacity change from 0 to 2048 [ 1352.575939][T18523] Alternate GPT is invalid, using primary GPT. [ 1352.617127][T18523] loop2: p2 p3 p7 [ 1352.725343][ T3638] Alternate GPT is invalid, using primary GPT. [ 1352.748712][ T3638] loop2: p2 p3 p7 [ 1353.988310][T18540] virt_wifi0 speed is unknown, defaulting to 1000 [ 1354.132400][T16861] udevd[16861]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1354.155981][T16894] udevd[16894]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1354.180258][T16867] udevd[16867]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1354.308890][T16861] udevd[16861]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1354.309381][T16894] udevd[16894]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1354.349129][T16867] udevd[16867]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1354.431870][T18548] netlink: 'syz.2.3583': attribute type 3 has an invalid length. [ 1358.658099][T18582] loop2: detected capacity change from 0 to 2048 [ 1358.732699][T18590] netlink: 'syz.7.3595': attribute type 3 has an invalid length. [ 1358.956298][T18582] Alternate GPT is invalid, using primary GPT. [ 1359.081000][T18582] loop2: p2 p3 p7 [ 1361.282031][T16894] udevd[16894]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1361.292946][T16861] udevd[16861]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 1361.320720][T16867] udevd[16867]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1361.353080][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.359518][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.535695][T18621] loop2: detected capacity change from 0 to 131072 [ 1362.643180][T18621] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1362.651473][T18621] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1362.844853][T18621] F2FS-fs (loop2): invalid crc value [ 1363.206331][T18621] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1363.392054][T18621] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1363.400575][T18621] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1365.517045][T18683] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.753946][T18703] loop2: detected capacity change from 0 to 256 [ 1371.823347][T18750] loop7: detected capacity change from 0 to 256 [ 1372.352658][T18759] loop9: detected capacity change from 0 to 1024 [ 1372.419374][T18759] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1372.478083][T18759] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1372.507218][T18759] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1372.598012][T18759] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.3638: Inode bitmap for bg 0 marked uninitialized [ 1372.618183][T18759] EXT4-fs (loop9): Remounting filesystem read-only [ 1372.631457][T18759] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1373.481894][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1374.111603][T18790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1375.925800][T18802] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.442392][T18807] netlink: 'syz.0.3645': attribute type 3 has an invalid length. [ 1376.695853][T18815] loop7: detected capacity change from 0 to 16 [ 1376.707528][T18815] erofs: (device loop7): mounted with root inode @ nid 36. [ 1376.796067][T18815] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1376.805990][T18815] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1376.816061][T18815] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1376.825926][T18815] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1376.835957][T18815] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1376.844533][T18815] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1376.862832][T18816] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1376.872915][T18816] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1376.883059][T18816] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1376.893140][T18816] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1376.903314][T18816] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1376.949203][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3647'. [ 1376.963647][T18816] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1377.026901][T18813] loop9: detected capacity change from 0 to 256 [ 1378.651707][T18823] loop7: detected capacity change from 0 to 32768 [ 1378.690771][T18823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.3651 (18823) [ 1378.749293][T18823] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1378.780733][T18823] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1378.816250][T18823] BTRFS info (device loop7): force clearing of disk cache [ 1378.849614][T18823] BTRFS info (device loop7): force zlib compression, level 3 [ 1378.857996][T18823] BTRFS info (device loop7): enabling auto defrag [ 1378.864499][T18823] BTRFS info (device loop7): metadata ratio 257 [ 1378.897012][T18823] BTRFS info (device loop7): enabling disk space caching [ 1378.942791][T18823] BTRFS info (device loop7): disk space caching is enabled [ 1379.499399][T18823] BTRFS info (device loop7): enabling ssd optimizations [ 1379.602378][T18823] BTRFS info (device loop7): rebuilding free space tree [ 1380.219187][T18823] BTRFS info (device loop7): disabling free space tree [ 1380.238230][T18823] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1380.327845][T18823] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1380.491674][T18878] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.098833][T18883] netlink: 'syz.9.3660': attribute type 3 has an invalid length. [ 1381.245917][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3661'. [ 1381.285313][ T9961] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1381.303122][T18888] loop2: detected capacity change from 0 to 16 [ 1381.321519][T18888] erofs: (device loop2): mounted with root inode @ nid 36. [ 1381.341388][T18888] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1381.351548][T18888] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1381.361535][T18888] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1381.371872][T18888] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1381.381842][T18888] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1381.390204][T18888] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1383.408366][ T26] audit: type=1326 audit(1770257283.672:11348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18917 comm="syz.4.3670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f36d9aeb9 code=0x0 [ 1385.240832][T18949] capability: warning: `syz.9.3675' uses deprecated v2 capabilities in a way that may be insecure [ 1385.417188][T18949] device macvtap1 entered promiscuous mode [ 1385.426960][T18949] device dummy0 entered promiscuous mode [ 1385.447207][T18949] team0: Device macvtap1 failed to register rx_handler [ 1386.153284][T18949] device dummy0 left promiscuous mode [ 1386.189455][T18951] netlink: 'syz.4.3676': attribute type 3 has an invalid length. [ 1386.270301][T18957] loop7: detected capacity change from 0 to 16 [ 1386.299654][T18957] erofs: (device loop7): mounted with root inode @ nid 36. [ 1386.312507][T18957] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1386.322789][T18957] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1386.333027][T18957] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1386.342869][T18957] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1386.352951][T18957] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1386.374280][T18957] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1386.384163][T18959] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1386.394793][T18959] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1386.405118][T18959] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1386.414959][T18959] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1386.458822][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3677'. [ 1386.469879][T18959] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1386.486900][T18959] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1388.092713][T18961] loop2: detected capacity change from 0 to 256 [ 1388.281130][T18971] netlink: 'syz.9.3692': attribute type 3 has an invalid length. [ 1388.567388][T18977] loop2: detected capacity change from 0 to 1024 [ 1388.784541][T18977] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1389.342313][T18977] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1389.356754][T18977] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1390.372762][T18977] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.3682: Inode bitmap for bg 0 marked uninitialized [ 1390.470516][T18977] EXT4-fs (loop2): Remounting filesystem read-only [ 1390.518654][T18977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1391.737928][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1391.977458][T19010] loop2: detected capacity change from 0 to 256 [ 1394.295977][T14798] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1394.489485][T14798] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 1394.505164][T14798] usb 3-1: config 2 has no interface number 0 [ 1394.534986][T14798] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 1394.567843][T14798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.621518][T14798] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected [ 1394.659536][T14798] earthmate ttyUSB0: required endpoint is missing [ 1395.630132][T19058] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1395.655827][T19058] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1395.822682][T19058] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1395.861431][T19058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1395.915430][T19058] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1396.029139][T19058] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1396.063515][T19058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1396.094817][T19058] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1396.142717][T19058] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1396.192868][T19058] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1396.226720][T19058] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1396.267996][T19058] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1396.306337][T19058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1396.345102][T19058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1396.379364][T19058] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1396.948053][ T4286] Bluetooth: hci2: command 0x0c1a tx timeout [ 1397.416458][T19095] loop9: detected capacity change from 0 to 256 [ 1397.736489][T19099] loop7: detected capacity change from 0 to 16 [ 1397.748243][T19099] erofs: (device loop7): mounted with root inode @ nid 36. [ 1397.761676][T19099] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1397.771611][T19099] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1397.781780][T19099] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1397.791716][T19099] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1397.801763][T19099] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1397.810291][T19099] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1397.825734][T19100] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1397.836129][T19100] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1397.846280][T19100] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1397.856728][T19100] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1397.867112][T19100] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1397.907948][ T4286] Bluetooth: hci1: command 0x0c1a tx timeout [ 1397.919462][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3716'. [ 1397.931488][T19100] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1398.067995][ T4286] Bluetooth: hci4: command 0x0c1a tx timeout [ 1398.227953][ T4286] Bluetooth: hci3: command 0x0c1a tx timeout [ 1398.307863][ T4286] Bluetooth: hci0: command 0x0c1a tx timeout [ 1399.029538][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 1399.923180][T14788] usb 3-1: USB disconnect, device number 2 [ 1399.961227][T14788] cypress_m8 3-1:2.169: device disconnected [ 1399.988018][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 1400.085515][T19113] loop2: detected capacity change from 0 to 16 [ 1400.099580][T19113] erofs: (device loop2): mounted with root inode @ nid 36. [ 1400.133900][T19113] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1400.144496][T19113] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1400.154487][T19113] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1400.164272][T19113] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1400.174218][T19113] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1400.182691][T19113] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1400.192743][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 1400.307872][T17693] Bluetooth: hci3: command 0x0406 tx timeout [ 1400.388021][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 1401.305744][T19145] loop2: detected capacity change from 0 to 256 [ 1402.199231][T19143] loop7: detected capacity change from 0 to 131072 [ 1402.213806][T19143] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1402.222080][T19143] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1402.231802][T19143] F2FS-fs (loop7): invalid crc value [ 1402.260678][T19143] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1402.322216][T19143] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1402.329455][T19143] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1402.705953][T19162] loop2: detected capacity change from 0 to 16 [ 1402.719211][T19162] erofs: (device loop2): mounted with root inode @ nid 36. [ 1402.730463][T19162] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1402.740511][T19162] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1402.750539][T19162] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1402.760335][T19162] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1402.770934][T19162] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1402.779537][T19162] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1403.060214][T19171] netlink: 'syz.2.3737': attribute type 3 has an invalid length. [ 1404.206670][T19200] loop7: detected capacity change from 0 to 16 [ 1404.252150][T19200] erofs: (device loop7): mounted with root inode @ nid 36. [ 1404.347944][T19200] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1404.387829][T17693] Bluetooth: hci3: command 0x0406 tx timeout [ 1404.395646][T19200] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1404.440109][T19207] netlink: 'syz.2.3751': attribute type 3 has an invalid length. [ 1404.449546][T19200] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1404.460242][T19200] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1404.472604][T19200] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1404.483178][T19200] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1405.414884][T19230] loop7: detected capacity change from 0 to 16 [ 1405.427603][T19230] erofs: (device loop7): mounted with root inode @ nid 36. [ 1405.440050][T19230] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1405.450227][T19230] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1405.460389][T19230] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1405.470256][T19230] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1405.480229][T19230] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1405.488792][T19230] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1405.507810][T19231] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1405.518142][T19231] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1405.528221][T19231] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1405.538083][T19231] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1405.548773][T19231] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1405.557215][T19231] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1406.065437][T19241] loop7: detected capacity change from 0 to 256 [ 1407.164921][T19250] loop9: detected capacity change from 0 to 16 [ 1407.352661][T19250] erofs: (device loop9): mounted with root inode @ nid 36. [ 1407.435408][T19250] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1407.485496][T19250] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1407.499141][T19250] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1407.509277][T19250] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1407.519693][T19250] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1407.528477][T19250] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1407.561755][T19261] netlink: 'syz.7.3765': attribute type 3 has an invalid length. [ 1409.484289][T19288] loop7: detected capacity change from 0 to 16 [ 1409.541097][T19288] erofs: (device loop7): mounted with root inode @ nid 36. [ 1409.554183][T19288] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1409.566044][T19288] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1409.576278][T19288] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1409.586750][T19288] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1409.597054][T19288] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1409.611266][T19288] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1409.621576][T19289] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1409.633327][T19289] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1409.653095][T19289] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1409.753841][T19289] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1409.772111][T19289] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1409.796899][T19289] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1410.878613][T19319] netlink: 'syz.4.3783': attribute type 3 has an invalid length. [ 1410.954696][T19322] loop9: detected capacity change from 0 to 16 [ 1410.974091][T19322] erofs: (device loop9): mounted with root inode @ nid 36. [ 1411.020089][T19322] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1411.092441][T19322] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1411.142894][T19322] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1411.203596][T19322] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1411.264335][T19322] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1411.295297][T19322] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1412.474099][T19347] loop2: detected capacity change from 0 to 256 [ 1412.657355][T19348] loop9: detected capacity change from 0 to 16 [ 1412.668329][T19348] erofs: (device loop9): mounted with root inode @ nid 36. [ 1412.680596][T19348] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1412.690470][T19348] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1412.700614][T19348] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1412.710926][T19348] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1412.721132][T19348] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1412.729702][T19348] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1412.744964][T19349] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1412.754980][T19349] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1412.765154][T19349] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1412.775067][T19349] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1412.785141][T19349] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1412.793812][T19349] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1414.130999][T19370] netlink: 'syz.9.3796': attribute type 3 has an invalid length. [ 1415.136678][T19381] loop9: detected capacity change from 0 to 16 [ 1415.144605][T19381] erofs: (device loop9): mounted with root inode @ nid 36. [ 1415.153868][T19381] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1415.164740][T19381] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1415.176139][T19381] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1415.186136][T19381] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1415.196252][T19381] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1415.204876][T19381] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1416.828528][T19406] loop2: detected capacity change from 0 to 16 [ 1416.875865][T19406] erofs: (device loop2): mounted with root inode @ nid 36. [ 1416.889401][T19406] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1416.899342][T19406] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1416.910218][T19406] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1416.920304][T19406] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1416.930338][T19406] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1416.938795][T19406] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1416.964383][T19407] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1416.974343][T19407] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1416.984528][T19407] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1416.994348][T19407] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1417.005055][T19407] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1417.052539][T19407] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1417.642645][T19413] netlink: 'syz.7.3810': attribute type 3 has an invalid length. [ 1420.162896][T19463] loop7: detected capacity change from 0 to 16 [ 1420.195885][T19463] erofs: (device loop7): mounted with root inode @ nid 36. [ 1420.209879][T19463] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1420.219837][T19463] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1420.230254][T19463] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1420.240132][T19463] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1420.250162][T19463] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1420.258704][T19463] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1420.274666][T19464] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1420.285144][T19464] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1420.295391][T19464] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1420.305337][T19464] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1420.315647][T19464] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1420.324584][T19464] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1420.797368][T19468] netlink: 'syz.0.3824': attribute type 3 has an invalid length. [ 1421.221602][T19479] loop7: detected capacity change from 0 to 16 [ 1421.266594][T19479] erofs: (device loop7): mounted with root inode @ nid 36. [ 1421.299291][T19479] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1421.336913][T19479] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1421.372260][T19479] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1421.394577][T19479] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1421.451068][T19479] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1421.494538][T19479] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1423.310046][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.316416][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.042565][T19517] netlink: 'syz.7.3837': attribute type 3 has an invalid length. [ 1424.170045][T19523] loop2: detected capacity change from 0 to 16 [ 1424.184760][T19523] erofs: (device loop2): mounted with root inode @ nid 36. [ 1424.197068][T19523] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1424.207044][T19523] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1424.217136][T19523] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1424.227116][T19523] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1424.237150][T19523] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1424.245647][T19523] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1424.263905][T19524] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1424.274402][T19524] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1424.284937][T19524] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1424.294797][T19524] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1424.304827][T19524] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1424.358115][T19524] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1425.229680][T19532] loop2: detected capacity change from 0 to 16 [ 1425.264277][T19532] erofs: (device loop2): mounted with root inode @ nid 36. [ 1427.201489][T19567] loop7: detected capacity change from 0 to 16 [ 1427.212631][T19567] erofs: (device loop7): mounted with root inode @ nid 36. [ 1427.224015][T19567] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1427.233945][T19567] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1427.244433][T19567] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1427.254394][T19567] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1427.264393][T19567] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1427.273164][T19567] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1427.291224][T19568] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1427.301349][T19568] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1427.311597][T19568] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1427.321460][T19568] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1427.331510][T19568] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1427.340083][T19568] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1428.346944][T19579] netlink: 'syz.7.3854': attribute type 3 has an invalid length. [ 1429.638058][T19599] loop7: detected capacity change from 0 to 1024 [ 1429.668551][T19599] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1429.713843][T19599] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1429.762342][T19599] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1429.864386][T19599] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.3861: Inode bitmap for bg 0 marked uninitialized [ 1429.914184][T19599] EXT4-fs (loop7): Remounting filesystem read-only [ 1429.967164][T19599] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1429.983069][T19609] loop9: detected capacity change from 0 to 16 [ 1430.036700][T19609] erofs: (device loop9): mounted with root inode @ nid 36. [ 1430.737809][T19618] loop9: detected capacity change from 0 to 256 [ 1430.861475][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1430.963953][T19620] loop2: detected capacity change from 0 to 16 [ 1430.977155][T19620] erofs: (device loop2): mounted with root inode @ nid 36. [ 1430.992204][T19620] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1431.002273][T19620] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1431.012464][T19620] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1431.022351][T19620] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1431.033014][T19620] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1431.041728][T19620] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1431.065674][T19621] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1431.075682][T19621] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1431.085861][T19621] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1431.095751][T19621] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1431.105910][T19621] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1431.153026][T19621] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1432.086401][T19629] netlink: 'syz.2.3868': attribute type 3 has an invalid length. [ 1432.934159][T19634] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1435.840628][T19663] loop2: detected capacity change from 0 to 1024 [ 1435.883819][T19663] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1435.938136][T19663] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1436.046329][T19663] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1436.125687][T19663] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.3878: Inode bitmap for bg 0 marked uninitialized [ 1436.186415][T19663] EXT4-fs (loop2): Remounting filesystem read-only [ 1436.216657][T19663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1437.238950][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1438.267870][T19687] netlink: 'syz.4.3883': attribute type 3 has an invalid length. [ 1438.883580][T19707] loop7: detected capacity change from 0 to 256 [ 1440.278242][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 1440.720387][T19719] loop7: detected capacity change from 0 to 1024 [ 1440.806109][T19719] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1440.908174][T19719] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1440.917316][T19719] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1440.944242][T19719] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.3892: Inode bitmap for bg 0 marked uninitialized [ 1440.959761][T19719] EXT4-fs (loop7): Remounting filesystem read-only [ 1440.966879][T19719] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1442.019435][T19733] loop9: detected capacity change from 0 to 16 [ 1442.077286][T19733] erofs: (device loop9): mounted with root inode @ nid 36. [ 1442.216818][T19730] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1442.251946][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1442.267052][T19730] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1442.506307][T19730] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1442.516735][T19730] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1442.567502][T19730] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1444.137333][T19730] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1444.384133][T19731] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1444.406598][T19731] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1444.660966][T19731] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1444.676320][T19731] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1444.718770][T19731] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1444.750970][T19731] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1444.905093][T19748] netlink: 'syz.2.3898': attribute type 3 has an invalid length. [ 1445.576920][T19763] loop9: detected capacity change from 0 to 256 [ 1447.868578][T19793] netlink: 'syz.0.3909': attribute type 3 has an invalid length. [ 1448.121566][T19801] loop2: detected capacity change from 0 to 256 [ 1451.247885][T19843] netlink: 'syz.0.3924': attribute type 3 has an invalid length. [ 1454.112306][T19882] loop7: detected capacity change from 0 to 16 [ 1454.139364][T19882] erofs: (device loop7): mounted with root inode @ nid 36. [ 1454.151687][T19882] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1454.162043][T19882] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1454.172234][T19882] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1454.182611][T19882] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1454.192885][T19882] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1454.201334][T19882] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1454.223103][T19884] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1454.233493][T19884] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1454.243660][T19884] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1454.253576][T19884] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1454.263607][T19884] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1454.306842][T19884] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1455.772604][T19894] netlink: 'syz.4.3938': attribute type 3 has an invalid length. [ 1460.187375][T19942] netlink: 'syz.4.3952': attribute type 3 has an invalid length. [ 1460.844752][T19953] loop2: detected capacity change from 0 to 1024 [ 1460.872568][T19953] EXT4-fs: Ignoring removed mblk_io_submit option [ 1460.896011][T19953] ext4: Unknown parameter 'audit' [ 1462.801860][T19986] netlink: 'syz.7.3965': attribute type 3 has an invalid length. [ 1462.926747][T19992] loop9: detected capacity change from 0 to 16 [ 1462.960241][T19992] erofs: (device loop9): mounted with root inode @ nid 36. [ 1462.979176][T19992] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1462.990674][T19992] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1463.001081][T19992] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1463.010932][T19992] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1463.021155][T19992] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1463.036262][T19992] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1463.046236][T19993] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1463.056239][T19993] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1463.066436][T19993] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1463.076263][T19993] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1463.126085][T19993] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1463.136432][T19993] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1465.635593][T20007] loop7: detected capacity change from 0 to 1024 [ 1465.706599][T20007] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1465.769980][T20007] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1465.799177][T20007] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1465.840258][T20007] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.3969: Inode bitmap for bg 0 marked uninitialized [ 1465.970853][T20007] EXT4-fs (loop7): Remounting filesystem read-only [ 1466.016644][T20007] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1470.181570][T20042] netlink: 'syz.4.3979': attribute type 3 has an invalid length. [ 1470.324052][T20043] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.364612][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1470.856212][T20057] loop7: detected capacity change from 0 to 16 [ 1470.869571][T20057] erofs: (device loop7): mounted with root inode @ nid 36. [ 1470.883632][T20057] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1470.893669][T20057] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1470.904030][T20057] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1470.913972][T20057] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1471.006081][T20057] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1471.014810][T20057] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1471.024667][T20058] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1471.035061][T20058] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1471.045184][T20058] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1471.088713][T20058] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1471.098878][T20058] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1471.107324][T20058] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1473.595438][T20088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3990'. [ 1473.660199][T20088] overlayfs: failed to clone lowerpath [ 1473.805910][T20094] netlink: 'syz.7.3991': attribute type 3 has an invalid length. [ 1474.437422][T20111] loop7: detected capacity change from 0 to 16 [ 1474.474442][T20111] erofs: (device loop7): mounted with root inode @ nid 36. [ 1474.487649][T20111] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1474.497890][T20111] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1474.507990][T20111] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1474.517923][T20111] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1474.528075][T20111] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1474.536549][T20111] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1474.554344][T20114] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1474.564368][T20114] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1474.574753][T20114] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1474.584821][T20114] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1474.594950][T20114] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1474.642231][T20114] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1479.776446][T20203] loop9: detected capacity change from 0 to 16 [ 1479.787519][T20203] erofs: (device loop9): mounted with root inode @ nid 36. [ 1479.800245][T20203] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1479.810363][T20203] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1479.820593][T20203] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1479.830910][T20203] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1479.841101][T20203] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1479.849619][T20203] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1479.866176][T20204] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1479.876320][T20204] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1479.886404][T20204] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1479.896252][T20204] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1479.906421][T20204] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1479.915019][T20204] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1481.197402][T20219] loop9: detected capacity change from 0 to 1024 [ 1481.245577][T20219] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1481.275990][T20219] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1481.309010][T20219] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1481.435058][T20219] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.4023: Inode bitmap for bg 0 marked uninitialized [ 1481.558823][T20219] EXT4-fs (loop9): Remounting filesystem read-only [ 1481.565700][T20219] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1482.537174][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1483.207761][T20260] loop9: detected capacity change from 0 to 16 [ 1483.220129][T20260] erofs: (device loop9): mounted with root inode @ nid 36. [ 1483.231519][T20260] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1483.241676][T20260] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1483.252026][T20260] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1483.262346][T20260] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1483.272548][T20260] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1483.281090][T20260] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1483.297611][T20261] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1483.307864][T20261] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1483.318027][T20261] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1483.327922][T20261] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1483.337956][T20261] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1483.346470][T20261] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1484.231191][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.237601][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.754943][T20282] input: syz0 as /devices/virtual/input/input11 [ 1485.242548][T20291] loop7: detected capacity change from 0 to 1024 [ 1485.289428][T20291] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1486.756528][T20291] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1486.836002][T20291] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1486.914394][T20291] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.4040: Inode bitmap for bg 0 marked uninitialized [ 1486.988077][T20291] EXT4-fs (loop7): Remounting filesystem read-only [ 1487.015169][T20291] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1488.685553][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1490.866420][T20362] loop9: detected capacity change from 0 to 1024 [ 1490.908586][T20362] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1490.954471][T20362] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1491.044994][T20362] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1491.064000][T20368] loop7: detected capacity change from 0 to 16 [ 1491.077543][T20368] erofs: (device loop7): mounted with root inode @ nid 36. [ 1491.089897][T20368] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1491.099907][T20368] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1491.110363][T20368] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1491.120513][T20368] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1491.130601][T20368] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1491.139348][T20368] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1491.158134][T20369] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1491.168475][T20369] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1491.178988][T20369] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1491.189721][T20369] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1491.199858][T20369] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1491.250052][T20369] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1491.408034][T20362] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.4057: Inode bitmap for bg 0 marked uninitialized [ 1491.712887][T20362] EXT4-fs (loop9): Remounting filesystem read-only [ 1491.849115][T20362] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1493.529219][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1496.851183][T20443] batman_adv: batadv0: Adding interface: dummy0 [ 1496.883558][T20443] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.984739][T20443] batman_adv: batadv0: Interface activated: dummy0 [ 1497.021599][T20447] batadv0: mtu less than device minimum [ 1497.083569][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1497.096890][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1497.109326][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1497.122078][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1497.134456][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1497.146930][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1497.159517][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1497.171988][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1497.184403][T20447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1498.128388][T20456] loop9: detected capacity change from 0 to 16 [ 1498.141457][T20456] erofs: (device loop9): mounted with root inode @ nid 36. [ 1498.157439][T20456] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1498.167426][T20456] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1498.177587][T20456] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1498.187607][T20456] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1498.197649][T20456] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1498.206366][T20456] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1498.225594][T20457] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1498.235713][T20457] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1498.245826][T20457] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1498.255700][T20457] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1498.265943][T20457] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1498.274463][T20457] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1500.050020][T20489] loop2: detected capacity change from 0 to 1024 [ 1500.069290][T20489] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1500.104401][T20489] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1500.143473][T20489] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1500.205020][T20489] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.4093: Inode bitmap for bg 0 marked uninitialized [ 1500.270524][T20489] EXT4-fs (loop2): Remounting filesystem read-only [ 1500.277264][T20489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1501.920735][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1505.667758][ T4383] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1505.867841][ T4383] usb 3-1: Using ep0 maxpacket: 8 [ 1506.019793][ T4383] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 1506.052513][ T4383] usb 3-1: config 0 has no interface number 0 [ 1506.061499][ T4383] usb 3-1: config 0 interface 191 has no altsetting 0 [ 1506.806450][ T4383] usb 3-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=a2.64 [ 1506.830808][ T4383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.849630][ T4383] usb 3-1: Product: syz [ 1506.853943][ T4383] usb 3-1: Manufacturer: syz [ 1506.859031][ T4383] usb 3-1: SerialNumber: syz [ 1506.871944][ T4383] usb 3-1: config 0 descriptor?? [ 1506.884669][ T4383] usbtest 3-1:0.191: EZ-USB device [ 1506.903076][ T4383] usbtest 3-1:0.191: high-speed {control bulk-in bulk-out} tests (+alt) [ 1507.194686][ T4383] usb 3-1: USB disconnect, device number 3 [ 1507.555481][T20551] loop9: detected capacity change from 0 to 1024 [ 1507.578407][T20551] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1507.638054][T20551] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1507.679009][T20551] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1507.697798][T20551] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.4110: Inode bitmap for bg 0 marked uninitialized [ 1507.756547][T20551] EXT4-fs (loop9): Remounting filesystem read-only [ 1507.785331][T20551] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1508.725052][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1508.950952][T20572] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1510.645017][T20591] loop9: detected capacity change from 0 to 512 [ 1510.683126][T20591] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1510.711477][T20591] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1510.755991][T20591] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1510.823305][T20591] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.4123: bad orphan inode 131083 [ 1510.885169][T20591] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1511.093282][T20602] loop2: detected capacity change from 0 to 16 [ 1511.113196][T20602] erofs: (device loop2): mounted with root inode @ nid 36. [ 1511.130494][T20602] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1511.140517][T20602] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1511.150625][T20602] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1511.160506][T20602] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1511.170940][T20602] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1511.179813][T20602] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1511.199390][T20603] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1511.209496][T20603] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1511.220074][T20603] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1511.230423][T20603] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1511.240514][T20603] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1511.291646][T20603] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1512.113750][T20591] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1513.079661][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1515.022983][T20661] loop7: detected capacity change from 0 to 16 [ 1515.038843][T20661] erofs: (device loop7): mounted with root inode @ nid 36. [ 1515.051390][T20661] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1515.061347][T20661] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1515.071601][T20661] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1515.081477][T20661] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1515.091757][T20661] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1515.100403][T20661] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1515.116984][T20662] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1515.127018][T20662] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1515.137252][T20662] erofs: (device loop7): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1515.147627][T20662] erofs: (device loop7): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1515.159264][T20662] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1515.203384][T20662] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1515.802718][T20667] fuse: Bad value for 'fd' [ 1516.232145][T20679] loop2: detected capacity change from 0 to 1024 [ 1516.306959][T20679] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1516.631170][T20679] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1517.029116][T20679] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1517.120948][T20679] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.4144: Inode bitmap for bg 0 marked uninitialized [ 1517.221286][T20679] EXT4-fs (loop2): Remounting filesystem read-only [ 1517.264200][T20679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1519.017443][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1519.370128][T20717] loop2: detected capacity change from 0 to 16 [ 1519.386374][T20717] erofs: (device loop2): mounted with root inode @ nid 36. [ 1519.400633][T20717] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1519.411568][T20717] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1519.422139][T20717] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1519.431984][T20717] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1519.442416][T20717] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1519.464540][T20717] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1521.479983][T20733] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4159'. [ 1521.970751][T20750] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1522.796312][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4165'. [ 1522.881223][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4165'. [ 1522.901493][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4165'. [ 1522.917316][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4165'. [ 1522.933234][T20756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4165'. [ 1524.110262][T20773] loop9: detected capacity change from 0 to 16 [ 1524.123476][T20773] erofs: (device loop9): mounted with root inode @ nid 36. [ 1524.136776][T20773] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1524.147116][T20773] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1524.157862][T20773] erofs: (device loop9): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1524.168092][T20773] erofs: (device loop9): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 1524.178773][T20773] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1524.196233][T20773] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1527.743686][T20803] loop2: detected capacity change from 0 to 1024 [ 1527.818765][T20803] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1527.888271][T20803] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1527.959611][T20803] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1527.987816][T20803] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.4178: Inode bitmap for bg 0 marked uninitialized [ 1528.002321][T20803] EXT4-fs (loop2): Remounting filesystem read-only [ 1528.010338][T20803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1528.801609][T20823] netlink: 'syz.0.4183': attribute type 25 has an invalid length. [ 1528.815697][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1528.824609][T20823] netlink: 'syz.0.4183': attribute type 7 has an invalid length. [ 1528.851663][T20823] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4183'. [ 1529.523928][T20806] loop9: detected capacity change from 0 to 40427 [ 1529.798063][T20806] F2FS-fs (loop9): build fault injection attr: rate: 684, type: 0x3ffff [ 1529.831571][T20806] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x35f7 [ 1529.843303][T20806] F2FS-fs (loop9): invalid crc value [ 1529.871931][T20806] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1530.657294][T20806] F2FS-fs (loop9): Start checkpoint disabled! [ 1530.738904][T20854] loop2: detected capacity change from 0 to 128 [ 1532.667107][T20873] loop2: detected capacity change from 0 to 1024 [ 1532.716557][T20873] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1532.828807][T20873] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1532.878217][T20873] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1532.929269][T20873] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.4194: Inode bitmap for bg 0 marked uninitialized [ 1533.046093][T20873] EXT4-fs (loop2): Remounting filesystem read-only [ 1533.097197][T20873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1533.127531][T20869] loop7: detected capacity change from 0 to 32768 [ 1533.152165][T20869] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 scanned by syz.7.4195 (20869) [ 1533.223694][T20869] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1533.250441][T20869] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1533.299437][T20869] BTRFS info (device loop7): setting nodatacow, compression disabled [ 1533.352588][T20869] BTRFS info (device loop7): force clearing of disk cache [ 1533.666314][T20869] BTRFS info (device loop7): using free space tree [ 1533.878814][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1534.281839][T20869] BTRFS info (device loop7): enabling ssd optimizations [ 1534.334838][T20869] BTRFS info (device loop7): rebuilding free space tree [ 1534.540844][ T26] audit: type=1800 audit(1770257434.802:11349): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4195" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 1535.751917][ T9961] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1538.599737][T20959] loop7: detected capacity change from 0 to 16 [ 1538.613662][T20959] erofs: (device loop7): mounted with root inode @ nid 36. [ 1540.407318][T20978] netlink: 'syz.0.4214': attribute type 13 has an invalid length. [ 1542.740971][T20978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.748351][T20978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.672972][T20978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1544.767619][T20978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1544.780523][T21009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1545.609249][T20978] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.618756][T20978] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.628332][T20978] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.680713][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.687109][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.101947][T21005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1546.110203][T21005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1546.132689][T21005] net_ratelimit: 10 callbacks suppressed [ 1546.132700][T21005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1549.483595][T21041] loop9: detected capacity change from 0 to 32768 [ 1549.541670][T21041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.4230 (21041) [ 1549.631572][T21041] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1549.652101][T21063] bond0: (slave dummy0): Releasing backup interface [ 1549.711947][T21041] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1549.752409][T21041] BTRFS info (device loop9): force clearing of disk cache [ 1549.773988][T21064] loop2: detected capacity change from 0 to 1024 [ 1549.780239][T21041] BTRFS info (device loop9): force zlib compression, level 3 [ 1549.780407][T21041] BTRFS info (device loop9): enabling auto defrag [ 1549.780462][T21041] BTRFS info (device loop9): metadata ratio 257 [ 1549.780485][T21041] BTRFS info (device loop9): enabling disk space caching [ 1549.780502][T21041] BTRFS info (device loop9): disk space caching is enabled [ 1549.883857][T21064] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1549.968265][T21064] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1549.990106][T21064] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1549.997388][T21064] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.4235: Inode bitmap for bg 0 marked uninitialized [ 1550.011434][T21064] EXT4-fs (loop2): Remounting filesystem read-only [ 1550.018589][T21064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1550.701893][T21041] BTRFS error (device loop9): open_ctree failed: -12 [ 1551.309223][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1552.658808][T21122] loop7: detected capacity change from 0 to 16 [ 1552.708457][T21122] erofs: (device loop7): mounted with root inode @ nid 36. [ 1555.304726][T21142] loop7: detected capacity change from 0 to 16 [ 1555.315235][T21142] erofs: (device loop7): mounted with root inode @ nid 36. [ 1555.641604][T21148] loop2: detected capacity change from 0 to 512 [ 1555.699845][T21148] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1555.737479][T21148] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1555.844612][T21148] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.4249: bad orphan inode 131083 [ 1555.866229][T21148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1556.925780][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1557.274520][T21165] loop2: detected capacity change from 0 to 1024 [ 1557.298906][T21165] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1557.328269][T21165] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1557.337479][T21165] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1557.358290][T21165] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.4251: Inode bitmap for bg 0 marked uninitialized [ 1557.452169][T21165] EXT4-fs (loop2): Remounting filesystem read-only [ 1557.480057][T21165] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1558.210011][T21178] loop7: detected capacity change from 0 to 1024 [ 1558.255514][T21178] EXT4-fs: Ignoring removed mblk_io_submit option [ 1558.278605][T21178] ext4: Unknown parameter 'audit' [ 1558.415621][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1558.817190][T21191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1561.397228][T21207] loop2: detected capacity change from 0 to 32768 [ 1561.431555][T21207] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.4263 (21207) [ 1561.663108][T21207] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1561.768319][T21207] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1561.777146][T21207] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1561.900844][T21207] BTRFS info (device loop2): force clearing of disk cache [ 1561.925325][T21207] BTRFS info (device loop2): using free space tree [ 1562.228171][T21207] BTRFS info (device loop2): enabling ssd optimizations [ 1562.249144][T21207] BTRFS info (device loop2): rebuilding free space tree [ 1562.407478][ T26] audit: type=1800 audit(1770257462.662:11350): pid=21207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4263" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 1563.451999][T18119] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1566.023478][T21292] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1570.593514][T21330] loop2: detected capacity change from 0 to 1024 [ 1571.239602][T21330] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1571.417333][T21330] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1571.440602][T21330] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1571.450659][T21330] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.4293: Inode bitmap for bg 0 marked uninitialized [ 1571.603086][T21330] EXT4-fs (loop2): Remounting filesystem read-only [ 1571.633459][T21330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1571.676861][T21353] overlayfs: failed to clone lowerpath [ 1574.657096][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1575.127991][T21372] loop9: detected capacity change from 0 to 32768 [ 1576.750599][T21372] XFS (loop9): Mounting V5 Filesystem [ 1576.831940][T21372] XFS (loop9): Ending clean mount [ 1577.474695][T17796] XFS (loop9): Unmounting Filesystem [ 1579.944525][T21430] loop9: detected capacity change from 0 to 1024 [ 1579.983781][T21430] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1580.019210][T21430] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1580.075118][T21430] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1580.134036][T21430] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.4313: Inode bitmap for bg 0 marked uninitialized [ 1580.341294][T21439] loop7: detected capacity change from 0 to 4096 [ 1580.485573][T21439] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1581.039019][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1581.046426][T21430] EXT4-fs (loop9): Remounting filesystem read-only [ 1581.082739][T21430] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1581.745568][T21454] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1582.016763][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1582.208893][T21458] device macvtap1 entered promiscuous mode [ 1585.416591][T21544] loop9: detected capacity change from 0 to 4096 [ 1585.638777][T21544] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1586.108986][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1586.923307][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 1588.949639][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1588.956726][T17693] Bluetooth: hci5: command 0x1003 tx timeout [ 1589.304034][T21571] loop9: detected capacity change from 0 to 2048 [ 1589.336793][T21571] EXT4-fs: Ignoring removed mblk_io_submit option [ 1589.433533][T21571] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1589.530903][T21581] loop2: detected capacity change from 0 to 128 [ 1589.557466][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1591.731070][T21614] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1592.246215][T21628] loop9: detected capacity change from 0 to 1024 [ 1592.299658][T21628] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1592.338343][T21628] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1592.363467][T21635] loop7: detected capacity change from 0 to 128 [ 1592.375273][T21628] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1592.410042][T21628] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.4349: Inode bitmap for bg 0 marked uninitialized [ 1592.526379][T21628] EXT4-fs (loop9): Remounting filesystem read-only [ 1592.542189][T21628] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1594.047067][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1595.264815][T21673] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1595.529996][T21672] loop7: detected capacity change from 0 to 32768 [ 1595.715112][T21672] XFS (loop7): Mounting V5 Filesystem [ 1595.777165][T21672] XFS (loop7): Ending clean mount [ 1597.916257][ T9961] XFS (loop7): Unmounting Filesystem [ 1598.240748][T21741] loop2: detected capacity change from 0 to 128 [ 1598.606153][T21745] loop9: detected capacity change from 0 to 1024 [ 1598.645015][T21745] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1598.728724][T21745] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1598.792872][T21745] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1598.821746][T21745] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.4370: Inode bitmap for bg 0 marked uninitialized [ 1598.903777][T21745] EXT4-fs (loop9): Remounting filesystem read-only [ 1598.944445][T21745] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1600.271701][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1601.963013][T21795] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1603.975409][T21807] loop7: detected capacity change from 0 to 128 [ 1604.883108][T21828] loop7: detected capacity change from 0 to 1024 [ 1604.953623][T21828] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1605.055028][T21828] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1605.150031][T21828] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1605.212326][T21828] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.4389: Inode bitmap for bg 0 marked uninitialized [ 1605.313909][T21828] EXT4-fs (loop7): Remounting filesystem read-only [ 1605.339110][T21828] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1606.375831][T21851] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1606.381835][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1607.862295][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.868714][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.845321][T21865] loop7: detected capacity change from 0 to 128 [ 1611.234655][T21885] usb usb6: usbfs: interface 0 claimed by hub while 'syz.7.4403' sets config #5 [ 1611.671961][T21893] loop2: detected capacity change from 0 to 1024 [ 1611.692954][T21893] EXT4-fs: Ignoring removed mblk_io_submit option [ 1611.718788][T21893] ext4: Unknown parameter 'audit' [ 1613.076618][T21902] netlink: 'syz.2.4406': attribute type 1 has an invalid length. [ 1613.084646][T21902] netlink: 'syz.2.4406': attribute type 2 has an invalid length. [ 1613.876466][T21905] overlayfs: failed to clone lowerpath [ 1615.741366][T21922] loop9: detected capacity change from 0 to 128 [ 1617.651714][T21940] loop9: detected capacity change from 0 to 1024 [ 1617.700350][T21940] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1617.770408][T21940] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1617.800530][T21940] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1617.933185][T21940] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.4416: Inode bitmap for bg 0 marked uninitialized [ 1618.028200][T21940] EXT4-fs (loop9): Remounting filesystem read-only [ 1618.086063][T21940] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1618.762710][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1625.319158][T22016] loop9: detected capacity change from 0 to 32768 [ 1626.455055][T22016] XFS (loop9): Mounting V5 Filesystem [ 1626.497576][T22031] loop7: detected capacity change from 0 to 128 [ 1626.775789][T22016] XFS (loop9): Ending clean mount [ 1627.213065][T22016] XFS (loop9): Quotacheck needed: Please wait. [ 1627.741590][T22016] XFS (loop9): Quotacheck: Done. [ 1628.087736][T17796] XFS (loop9): Unmounting Filesystem [ 1629.535034][T22078] loop7: detected capacity change from 0 to 1024 [ 1629.591693][T22078] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1629.689045][T22078] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1629.708990][T22078] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1629.826670][T22078] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.4443: Inode bitmap for bg 0 marked uninitialized [ 1629.899108][T22078] EXT4-fs (loop7): Remounting filesystem read-only [ 1631.582293][T22078] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1632.734395][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1633.743155][T22110] loop7: detected capacity change from 0 to 32768 [ 1634.120888][T22110] XFS (loop7): Mounting V5 Filesystem [ 1634.790697][T22110] XFS (loop7): Ending clean mount [ 1634.800835][T22110] XFS (loop7): Quotacheck needed: Please wait. [ 1634.913363][T22110] XFS (loop7): Quotacheck: Done. [ 1635.190548][ T9961] XFS (loop7): Unmounting Filesystem [ 1637.230673][T22151] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1640.072570][T22157] loop7: detected capacity change from 0 to 40427 [ 1640.139619][T22157] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1640.277504][T22157] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1640.407726][T22157] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1642.135995][T22206] loop2: detected capacity change from 0 to 128 [ 1646.371183][T22250] device syzkaller0 entered promiscuous mode [ 1646.385223][T22250] tipc: Started in network mode [ 1646.390507][T22250] tipc: Node identity 42d99d84664f, cluster identity 4711 [ 1646.398628][T22250] tipc: Enabled bearer , priority 0 [ 1646.408303][T22249] tipc: Resetting bearer [ 1646.625607][T22249] tipc: Disabling bearer [ 1646.924620][T22263] loop7: detected capacity change from 0 to 128 [ 1647.131375][T16020] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1647.998337][T16020] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.018568][T16020] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1648.027537][T16020] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1648.058201][T22276] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1648.065807][T16020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.078134][T16020] usb 3-1: config 0 descriptor?? [ 1649.072758][T16020] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1649.113037][T16020] dvb-usb: bulk message failed: -22 (3/0) [ 1649.289269][T22288] fuse: Bad value for 'fd' [ 1649.355782][T16020] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1649.390959][T16020] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1649.414388][T16020] usb 3-1: media controller created [ 1649.436107][T16020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1649.531475][T16020] dvb-usb: bulk message failed: -22 (6/0) [ 1649.624089][T16020] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1649.807235][T16020] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 1650.044956][T16020] dvb-usb: schedule remote query interval to 150 msecs. [ 1650.127823][T16020] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1650.198879][T16020] usb 3-1: USB disconnect, device number 4 [ 1650.511724][T16020] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1651.278963][ T8954] Bluetooth: hci5: Frame reassembly failed (-84) [ 1652.295783][T22312] netlink: 'syz.7.4495': attribute type 1 has an invalid length. [ 1652.304030][T22312] netlink: 'syz.7.4495': attribute type 2 has an invalid length. [ 1652.869523][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1652.876730][T17693] Bluetooth: hci5: command 0x1003 tx timeout [ 1653.339204][T22321] device syzkaller0 entered promiscuous mode [ 1653.358851][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4490'. [ 1653.393317][T22320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1653.488558][T22320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1653.592562][T22320] device dummy0 entered promiscuous mode [ 1653.646330][T22320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan11: link becomes ready [ 1653.794969][T22320] device dummy0 left promiscuous mode [ 1654.122006][T22321] tipc: Started in network mode [ 1654.127408][T22321] tipc: Node identity d6de8d51bb9b, cluster identity 4711 [ 1654.252078][T22321] tipc: Enabled bearer , priority 0 [ 1654.278047][T22317] tipc: Resetting bearer [ 1654.394252][T22317] tipc: Disabling bearer [ 1654.595425][T22333] loop9: detected capacity change from 0 to 128 [ 1654.803525][T22336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1657.420473][T22347] fuse: Bad value for 'fd' [ 1657.898251][T22358] loop9: detected capacity change from 0 to 128 [ 1659.996147][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'. [ 1660.065216][T22371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1660.115267][T22371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1660.159942][T22371] device dummy0 entered promiscuous mode [ 1660.182923][T22371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan13: link becomes ready [ 1660.239229][T22371] device dummy0 left promiscuous mode [ 1660.656307][T22379] overlayfs: failed to clone lowerpath [ 1664.181440][T22389] loop2: detected capacity change from 0 to 128 [ 1668.820465][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.826942][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.028713][T22427] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1671.285667][T22428] netlink: 'syz.2.4524': attribute type 1 has an invalid length. [ 1671.293505][T22428] netlink: 'syz.2.4524': attribute type 2 has an invalid length. [ 1679.554590][T22492] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1681.979186][T22512] loop9: detected capacity change from 0 to 32768 [ 1682.026319][T22512] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.4539 (22512) [ 1682.047745][T22512] BTRFS info (device loop9): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1682.058463][T22512] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 1682.067367][T22512] BTRFS info (device loop9): enabling disk space caching [ 1682.074450][T22512] BTRFS info (device loop9): force clearing of disk cache [ 1682.081642][T22512] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1682.091634][T22512] BTRFS info (device loop9): use zstd compression, level 3 [ 1682.099115][T22512] BTRFS info (device loop9): disk space caching is enabled [ 1682.377842][T22512] BTRFS info (device loop9): enabling ssd optimizations [ 1682.387371][T22512] BTRFS info (device loop9): rebuilding free space tree [ 1682.410935][T22512] BTRFS info (device loop9): disabling free space tree [ 1682.417950][T22512] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1682.427907][T22512] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1684.578279][T22550] overlayfs: failed to clone lowerpath [ 1684.628434][T17796] BTRFS info (device loop9): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1686.438442][T22466] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 13 /dev/loop9 scanned by udevd (22466) [ 1688.326778][T22576] loop7: detected capacity change from 0 to 1024 [ 1688.393572][T22576] EXT4-fs: Ignoring removed mblk_io_submit option [ 1688.425048][T22576] ext4: Unknown parameter 'audit' [ 1691.208046][T22597] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4548'. [ 1693.900124][T22614] loop9: detected capacity change from 0 to 1024 [ 1693.924357][T22614] EXT4-fs: Ignoring removed orlov option [ 1693.931649][T22614] EXT4-fs: inline encryption not supported [ 1694.070441][T22614] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1694.179275][T22625] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1695.432298][T17796] EXT4-fs (loop9): unmounting filesystem. [ 1696.119505][T22638] overlayfs: failed to clone upperpath [ 1699.921292][T22663] device geneve2 entered promiscuous mode [ 1700.291638][T22672] loop7: detected capacity change from 0 to 1024 [ 1700.407491][T22676] loop2: detected capacity change from 0 to 512 [ 1700.414423][T22672] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1700.425487][T22675] overlayfs: failed to clone lowerpath [ 1700.448475][T22672] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1700.464699][T22672] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1700.696153][T22672] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.4575: Inode bitmap for bg 0 marked uninitialized [ 1700.721954][T22672] EXT4-fs (loop7): Remounting filesystem read-only [ 1700.754164][T22672] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1700.766274][T22676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1700.797809][T22676] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1701.476991][T22687] [ 1701.479364][T22687] ====================================================== [ 1701.486468][T22687] WARNING: possible circular locking dependency detected [ 1701.493511][T22687] syzkaller #0 Not tainted [ 1701.497925][T22687] ------------------------------------------------------ [ 1701.504952][T22687] syz.2.4577/22687 is trying to acquire lock: [ 1701.511015][T22687] ffff88803ec960a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 1701.519952][T22687] [ 1701.519952][T22687] but task is already holding lock: [ 1701.527323][T22687] ffff888052133eb8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 1701.536926][T22687] [ 1701.536926][T22687] which lock already depends on the new lock. [ 1701.536926][T22687] [ 1701.547355][T22687] [ 1701.547355][T22687] the existing dependency chain (in reverse order) is: [ 1701.556380][T22687] [ 1701.556380][T22687] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 1701.564215][T22687] down_read+0x42/0x2d0 [ 1701.568970][T22687] ext4_map_blocks+0x323/0x1b70 [ 1701.574366][T22687] ext4_getblk+0x1cc/0x6f0 [ 1701.579342][T22687] ext4_bread+0x26/0x170 [ 1701.584161][T22687] ext4_quota_read+0x180/0x380 [ 1701.589549][T22687] find_tree_dqentry+0x1cd/0xf30 [ 1701.595068][T22687] qtree_read_dquot+0x57b/0x820 [ 1701.600477][T22687] v2_read_dquot+0xc0/0x110 [ 1701.605667][T22687] dquot_acquire+0x152/0x520 [ 1701.610815][T22687] ext4_acquire_dquot+0x2d9/0x4a0 [ 1701.616421][T22687] dqget+0x778/0xeb0 [ 1701.620866][T22687] __dquot_initialize+0x3c3/0xcd0 [ 1701.626439][T22687] ext4_create+0x92/0x470 [ 1701.631388][T22687] vfs_create+0x2db/0x460 [ 1701.636292][T22687] do_mknodat+0x3a1/0x4d0 [ 1701.641171][T22687] __x64_sys_mknod+0x8a/0xa0 [ 1701.646313][T22687] do_syscall_64+0x4c/0xa0 [ 1701.651300][T22687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.657803][T22687] [ 1701.657803][T22687] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 1701.665911][T22687] down_read+0x42/0x2d0 [ 1701.670642][T22687] v2_read_dquot+0x4a/0x110 [ 1701.675695][T22687] dquot_acquire+0x152/0x520 [ 1701.680832][T22687] ext4_acquire_dquot+0x2d9/0x4a0 [ 1701.686404][T22687] dqget+0x778/0xeb0 [ 1701.690844][T22687] __dquot_initialize+0x3c3/0xcd0 [ 1701.696417][T22687] ext4_create+0x92/0x470 [ 1701.701320][T22687] vfs_create+0x2db/0x460 [ 1701.706223][T22687] do_mknodat+0x3a1/0x4d0 [ 1701.711113][T22687] __x64_sys_mknod+0x8a/0xa0 [ 1701.716261][T22687] do_syscall_64+0x4c/0xa0 [ 1701.721230][T22687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.727667][T22687] [ 1701.727667][T22687] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1701.735347][T22687] __lock_acquire+0x2d07/0x7d10 [ 1701.740867][T22687] lock_acquire+0x1bb/0x4a0 [ 1701.745918][T22687] __mutex_lock+0x12d/0xaf0 [ 1701.750972][T22687] dquot_commit+0x5a/0x410 [ 1701.755959][T22687] ext4_write_dquot+0x1f0/0x360 [ 1701.761388][T22687] mark_all_dquot_dirty+0xf9/0x400 [ 1701.767053][T22687] __dquot_alloc_space+0x5fc/0xe60 [ 1701.772709][T22687] ext4_mb_new_blocks+0xf8d/0x4760 [ 1701.778382][T22687] ext4_ext_map_blocks+0x195b/0x6810 [ 1701.784205][T22687] ext4_map_blocks+0x9de/0x1b70 [ 1701.789605][T22687] ext4_getblk+0x1cc/0x6f0 [ 1701.794575][T22687] ext4_bread+0x26/0x170 [ 1701.799386][T22687] ext4_append+0x2be/0x560 [ 1701.804383][T22687] ext4_add_entry+0x8eb/0xdb0 [ 1701.809639][T22687] ext4_add_nondir+0x93/0x270 [ 1701.814896][T22687] ext4_create+0x2e6/0x470 [ 1701.819876][T22687] path_openat+0x1181/0x2ee0 [ 1701.825015][T22687] do_filp_open+0x1f1/0x430 [ 1701.830103][T22687] do_sys_openat2+0x150/0x4b0 [ 1701.835440][T22687] __x64_sys_creat+0x8c/0xb0 [ 1701.840597][T22687] do_syscall_64+0x4c/0xa0 [ 1701.845568][T22687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.852010][T22687] [ 1701.852010][T22687] other info that might help us debug this: [ 1701.852010][T22687] [ 1701.862261][T22687] Chain exists of: [ 1701.862261][T22687] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 1701.862261][T22687] [ 1701.875952][T22687] Possible unsafe locking scenario: [ 1701.875952][T22687] [ 1701.883429][T22687] CPU0 CPU1 [ 1701.888817][T22687] ---- ---- [ 1701.894199][T22687] lock(&ei->i_data_sem/2); [ 1701.898823][T22687] lock(&s->s_dquot.dqio_sem); [ 1701.906214][T22687] lock(&ei->i_data_sem/2); [ 1701.913472][T22687] lock(&dquot->dq_lock); [ 1701.917907][T22687] [ 1701.917907][T22687] *** DEADLOCK *** [ 1701.917907][T22687] [ 1701.926083][T22687] 4 locks held by syz.2.4577/22687: [ 1701.931302][T22687] #0: ffff88801ee64460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1701.940517][T22687] #1: ffff888052134030 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: path_openat+0x7d2/0x2ee0 [ 1701.950728][T22687] #2: ffff888052133eb8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 1701.960687][T22687] #3: ffffffff8cc74988 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x173/0xe60 [ 1701.970285][T22687] [ 1701.970285][T22687] stack backtrace: [ 1701.976210][T22687] CPU: 0 PID: 22687 Comm: syz.2.4577 Not tainted syzkaller #0 [ 1701.983686][T22687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1701.993790][T22687] Call Trace: [ 1701.997090][T22687] [ 1702.000058][T22687] dump_stack_lvl+0x188/0x24e [ 1702.004775][T22687] ? load_image+0x400/0x400 [ 1702.009322][T22687] ? show_regs_print_info+0x12/0x12 [ 1702.014550][T22687] ? print_circular_bug+0x12b/0x1a0 [ 1702.019784][T22687] check_noncircular+0x296/0x330 [ 1702.024750][T22687] ? add_chain_block+0x940/0x940 [ 1702.029731][T22687] ? lockdep_lock+0xf1/0x1f0 [ 1702.034367][T22687] ? _find_first_zero_bit+0xcf/0x100 [ 1702.039739][T22687] __lock_acquire+0x2d07/0x7d10 [ 1702.044639][T22687] ? rcu_is_watching+0x11/0xa0 [ 1702.049545][T22687] ? rcu_qs+0xd0/0x170 [ 1702.053651][T22687] ? rcu_softirq_qs+0x2e0/0x2e0 [ 1702.058549][T22687] ? verify_lock_unused+0x140/0x140 [ 1702.063775][T22687] ? mark_lock+0x94/0x320 [ 1702.068146][T22687] lock_acquire+0x1bb/0x4a0 [ 1702.072680][T22687] ? dquot_commit+0x5a/0x410 [ 1702.077287][T22687] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 1702.082683][T22687] ? __might_sleep+0xd0/0xd0 [ 1702.087288][T22687] ? read_lock_is_recursive+0x10/0x10 [ 1702.092690][T22687] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 1702.098088][T22687] __mutex_lock+0x12d/0xaf0 [ 1702.102618][T22687] ? dquot_commit+0x5a/0x410 [ 1702.107237][T22687] ? __might_sleep+0xd0/0xd0 [ 1702.111847][T22687] ? dquot_commit+0x5a/0x410 [ 1702.116457][T22687] ? __sched_text_start+0x8/0x8 [ 1702.121339][T22687] ? mutex_lock_nested+0x10/0x10 [ 1702.126305][T22687] ? ext4_journal_check_start+0x17e/0x240 [ 1702.132045][T22687] dquot_commit+0x5a/0x410 [ 1702.136490][T22687] ext4_write_dquot+0x1f0/0x360 [ 1702.141366][T22687] mark_all_dquot_dirty+0xf9/0x400 [ 1702.146500][T22687] __dquot_alloc_space+0x5fc/0xe60 [ 1702.151636][T22687] ? __dquot_alloc_space+0x173/0xe60 [ 1702.156955][T22687] ext4_mb_new_blocks+0xf8d/0x4760 [ 1702.162111][T22687] ? _raw_write_unlock+0x36/0x40 [ 1702.167075][T22687] ? __es_insert_extent+0x1790/0x1790 [ 1702.172472][T22687] ? ext4_find_extent+0x367/0xe00 [ 1702.177517][T22687] ? rcu_is_watching+0x11/0xa0 [ 1702.182323][T22687] ? ext4_ext_search_right+0x380/0x830 [ 1702.187809][T22687] ? memcpy+0x3c/0x60 [ 1702.191891][T22687] ? ext4_mb_pa_callback+0xd0/0xd0 [ 1702.197026][T22687] ? ext4_ext_check_overlap+0x401/0x560 [ 1702.202605][T22687] ? ext4_ext_find_goal+0xed/0x1d0 [ 1702.207740][T22687] ext4_ext_map_blocks+0x195b/0x6810 [ 1702.213056][T22687] ? lockdep_hardirqs_on+0x94/0x140 [ 1702.218293][T22687] ? lock_acquire+0x225/0x4a0 [ 1702.223006][T22687] ? ext4_ext_release+0x10/0x10 [ 1702.227880][T22687] ? rwsem_write_trylock+0x135/0x1c0 [ 1702.233196][T22687] ? ext4_es_lookup_extent+0x645/0xb10 [ 1702.238771][T22687] ext4_map_blocks+0x9de/0x1b70 [ 1702.243681][T22687] ? ext4_issue_zeroout+0x250/0x250 [ 1702.248931][T22687] ext4_getblk+0x1cc/0x6f0 [ 1702.253400][T22687] ? ext4_get_block_unwritten+0x100/0x100 [ 1702.259169][T22687] ? raw_spin_rq_unlock_irq+0x11/0x90 [ 1702.264583][T22687] ? memset+0x1e/0x40 [ 1702.268607][T22687] ? fscrypt_setup_filename+0x94/0xa40 [ 1702.274200][T22687] ext4_bread+0x26/0x170 [ 1702.278493][T22687] ext4_append+0x2be/0x560 [ 1702.282970][T22687] ? ext4_init_new_dir+0x570/0x570 [ 1702.288153][T22687] ext4_add_entry+0x8eb/0xdb0 [ 1702.292917][T22687] ? ext4_inc_count+0x1b0/0x1b0 [ 1702.297820][T22687] ? asm_sysvec_call_function_single+0x16/0x20 [ 1702.304024][T22687] ext4_add_nondir+0x93/0x270 [ 1702.308760][T22687] ext4_create+0x2e6/0x470 [ 1702.313212][T22687] ? asm_sysvec_call_function_single+0x16/0x20 [ 1702.319407][T22687] ? ext4_lookup+0x710/0x710 [ 1702.324030][T22687] ? ext4_lookup+0x710/0x710 [ 1702.328655][T22687] path_openat+0x1181/0x2ee0 [ 1702.333288][T22687] ? do_filp_open+0x430/0x430 [ 1702.338036][T22687] do_filp_open+0x1f1/0x430 [ 1702.342561][T22687] ? vfs_tmpfile+0x480/0x480 [ 1702.347165][T22687] ? preempt_schedule_common+0xa5/0xd0 [ 1702.352659][T22687] ? _raw_spin_unlock+0x36/0x40 [ 1702.357530][T22687] ? alloc_fd+0x58f/0x630 [ 1702.361896][T22687] do_sys_openat2+0x150/0x4b0 [ 1702.366601][T22687] ? rcu_is_watching+0x11/0xa0 [ 1702.371391][T22687] ? do_sys_open+0xe0/0xe0 [ 1702.375855][T22687] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1702.381873][T22687] ? lock_chain_count+0x20/0x20 [ 1702.386753][T22687] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1702.392767][T22687] __x64_sys_creat+0x8c/0xb0 [ 1702.397393][T22687] do_syscall_64+0x4c/0xa0 [ 1702.401838][T22687] ? clear_bhb_loop+0x60/0xb0 [ 1702.406538][T22687] ? clear_bhb_loop+0x60/0xb0 [ 1702.411248][T22687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.417212][T22687] RIP: 0033:0x7f640979aeb9 [ 1702.421672][T22687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.441318][T22687] RSP: 002b:00007f640a62b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1702.449753][T22687] RAX: ffffffffffffffda RBX: 00007f6409a16090 RCX: 00007f640979aeb9 [ 1702.457743][T22687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 1702.465732][T22687] RBP: 00007f6409808c1f R08: 0000000000000000 R09: 0000000000000000 [ 1702.473725][T22687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.481722][T22687] R13: 00007f6409a16128 R14: 00007f6409a16090 R15: 00007ffcfc505518 [ 1702.489726][T22687] [ 1702.655329][T22687] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.4577: corrupted inode contents [ 1702.668076][T22687] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #2: comm syz.2.4577: mark_inode_dirty error [ 1702.682039][T22687] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #2: comm syz.2.4577: corrupted inode contents [ 1702.702433][T22687] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.4577: mark_inode_dirty error [ 1702.719332][T22691] netlink: 'syz.9.4581': attribute type 1 has an invalid length. [ 1702.764610][T22691] device bond1 entered promiscuous mode [ 1702.783153][ T9961] EXT4-fs (loop7): unmounting filesystem. [ 1702.792468][T22692] bond1: (slave ip6gretap1): making interface the new active one [ 1702.848133][T22692] device ip6gretap1 entered promiscuous mode [ 1702.868119][T22692] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1702.892406][T22691] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4581'. [ 1702.912441][T22691] device bond1 left promiscuous mode [ 1702.928631][T22691] device ip6gretap1 left promiscuous mode [ 1702.934851][T22691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1703.006596][T18119] EXT4-fs (loop2): unmounting filesystem. [ 1703.827766][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready