last executing test programs: 5m12.139406046s ago: executing program 0 (id=3324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r7 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 5m9.596427049s ago: executing program 0 (id=3326): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20) r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffb}) setrlimit(0xb, &(0x7f0000000140)={0x6, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5m5.745707584s ago: executing program 0 (id=3335): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4, 0x1}, 'syz1\x00', 0x35}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0x0, 0x2000000, 0x3, 0x101}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r6, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 4m58.084264623s ago: executing program 0 (id=3353): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xb8, 0x464, 0x21, 0x70bd2b, 0x25dfdbff, "c089652d9fa22687ca4280abdef2da471b679d867a239075832c8cd968908e564f3ab5892dfc0bdc51ce174a300c87904ebe002d3d196f877d21a62e89d6bbef922d61756d2efda50033c963ea8508799b3c64d2d3d58966cbd5fcd56b0db51964e3826eeb6c22c1f14d0f3b3fa87a00fe6fcd266ab73e3dfe04020cfd4b0b4d91122fd4ace30ef6ad187d92d341429252124abf263c40e1646bd7ff069967d639cdba3fcd3abe", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0xfffffffffffffe9a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@gid}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_lower}]}, 0x1, 0x23e, &(0x7f0000000880)="$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") pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) close_range(r1, r1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4m56.062842077s ago: executing program 0 (id=3346): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46057d5e00000000000000000003000300155eef2e5d020000380000000b03000006000000090020000100"], 0x58) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000005, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) 4m55.660866183s ago: executing program 0 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) delete_module(&(0x7f00000003c0)='nl80211\x00', 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 4m39.909304149s ago: executing program 32 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) delete_module(&(0x7f00000003c0)='nl80211\x00', 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 20.307581939s ago: executing program 3 (id=3881): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xb8, 0x464, 0x21, 0x70bd2b, 0x25dfdbff, "c089652d9fa22687ca4280abdef2da471b679d867a239075832c8cd968908e564f3ab5892dfc0bdc51ce174a300c87904ebe002d3d196f877d21a62e89d6bbef922d61756d2efda50033c963ea8508799b3c64d2d3d58966cbd5fcd56b0db51964e3826eeb6c22c1f14d0f3b3fa87a00fe6fcd266ab73e3dfe04020cfd4b0b4d91122fd4ace30ef6ad187d92d341429252124abf263c40e1646bd7ff069967d639cdba3fcd3abe", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0xfffffffffffffe9a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@gid}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_lower}]}, 0x1, 0x23e, &(0x7f0000000880)="$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") pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) close_range(r1, r1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 16.11058399s ago: executing program 3 (id=3897): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003d20"], 0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0x3, 0xd0e7500, 0x0, 0x60, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd}, 0x0, 0x0, 'nr0\x00', 'vxcan1\x00', {}, {}, 0x11}, 0x0, 0x158, 0x1c0, 0x0, {0x60000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [], @ipv6=@remote, [], @ipv4=@multicast2, [], @ipv4=@empty}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x36c, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000340)={r7, 0x0, 0x20}, &(0x7f0000000380)=0xc) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write(r0, &(0x7f0000000500)="ee40a7761e9508745cec1b9be97aad5d8294e67b2eea7a92394b60c0a8de0b3316420e5a67c226d9addeb539cecafbd707699bf7882f5d95480f74d161cb12172e7951b3095b5912c5e5c97d3f248b37088a70bb5b81cd9399da9098787d745719f4193182806bf456be76f5e5f6e3c03ae0f3419c8cbe00000000000000051d4bbfbdd4cf45ce7500041e1d0919d008b1e7fd732ce672f4dcc700c66451dbf3c3ad34c64188b6cfd06d4d6919de7c3dbd41d9e6c0deffbe205fdc4d640f7383a344a26ca20a9690b7bf29f40d976ef55aea19127fb31a0b01dd207ce4044cad", 0xe0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4a042, 0x109) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./bus\x00', 0x50000, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 11.523889636s ago: executing program 5 (id=3900): r0 = semget$private(0x0, 0x3, 0x40) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@noblock_validity}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000002b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f00000002c0)=""/144) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(r3, 0x0) setgroups(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd9ba8d938c14d7f3}, 0xc, 0x0}, 0x20008844) msgctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/133) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000001380)=[{0x0, 0xd36c, 0x1000}], 0x1, 0x0) 11.448392348s ago: executing program 3 (id=3902): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) io_submit(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x6700000000000000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000180)={0x6, 0x7, 0xfffff374}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) 10.057538221s ago: executing program 2 (id=3906): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0xfffffffffffffe9a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@gid}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_lower}]}, 0x1, 0x23e, &(0x7f0000000880)="$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") pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) close_range(r1, r1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 9.52874486s ago: executing program 1 (id=3909): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003d20"], 0x7) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0x3, 0xd0e7500, 0x0, 0x60, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd}, 0x0, 0x0, 'nr0\x00', 'vxcan1\x00', {}, {}, 0x11}, 0x0, 0x158, 0x1c0, 0x0, {0x60000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [], @ipv6=@remote, [], @ipv4=@multicast2, [], @ipv4=@empty}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x36c, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000340)={r7, 0x0, 0x20}, &(0x7f0000000380)=0xc) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) write(r0, &(0x7f0000000500)="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", 0xff) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x4a042, 0x109) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./bus\x00', 0x50000, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 9.51935332s ago: executing program 5 (id=3910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46057d5e00000000000000000003000300155eef2e5d020000380000000b030000060000000900200001"], 0x58) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000005, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) 9.014942769s ago: executing program 2 (id=3911): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 5.92857994s ago: executing program 2 (id=3912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46057d5e00000000000000000003000300155eef2e5d020000380000000b0300"], 0x58) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000005, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) 5.758334873s ago: executing program 1 (id=3913): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x1000410, &(0x7f00000001c0)={[{@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}], [{@dont_hash}]}, 0x4, 0x504, &(0x7f0000019940)="$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") socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e0409200c039c8dd7f32b45ed671e0beb6b998510b69122fa4478c7af267081b4134e17bf91197caf9883eda205811f1e6e568ee6b88d73628d876d77d8ab5218565a289348c8b4438404c0f6e2c8a3c67883ba49144fbe25fd2d6e81b4fa309187fa294a5696adde51f61e5ff4676b1bb04a3fa7d5b748c299a64e3693c22ef9d472caa8350247f3d6f2"], 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.633046195s ago: executing program 5 (id=3914): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000002880)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local}}}}, 0x0) 4.827112288s ago: executing program 3 (id=3915): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003d20"], 0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x1c0, 0x3, 0xd0e7500, 0x0, 0x60, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd}, 0x0, 0x0, 'nr0\x00', 'vxcan1\x00', {}, {}, 0x11}, 0x0, 0x158, 0x1c0, 0x0, {0x60000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [], @ipv6=@remote, [], @ipv4=@multicast2, [], @ipv4=@empty}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x36c, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r6, 0x0, 0x20}, &(0x7f0000000380)=0xc) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) 4.599911102s ago: executing program 4 (id=3917): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xb8, 0x464, 0x21, 0x70bd2b, 0x25dfdbff, "c089652d9fa22687ca4280abdef2da471b679d867a239075832c8cd968908e564f3ab5892dfc0bdc51ce174a300c87904ebe002d3d196f877d21a62e89d6bbef922d61756d2efda50033c963ea8508799b3c64d2d3d58966cbd5fcd56b0db51964e3826eeb6c22c1f14d0f3b3fa87a00fe6fcd266ab73e3dfe04020cfd4b0b4d91122fd4ace30ef6ad187d92d341429252124abf263c40e1646bd7ff069967d639cdba3fcd3abe", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@gid}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_lower}]}, 0x1, 0x23e, &(0x7f0000000880)="$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") pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) close_range(r0, r0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4.197302999s ago: executing program 4 (id=3918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000080000000000000000000085000300007d311fb72bad1ec6eee000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 4.19610448s ago: executing program 5 (id=3929): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000002880)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local}}}}, 0x0) 4.19565164s ago: executing program 2 (id=3919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46057d5e00000000000000000003000300155eef2e5d020000380000000b0300000600000009002000"], 0x58) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000005, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) 4.048328182s ago: executing program 1 (id=3920): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0xfffffffffffffe9a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@gid}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_lower}]}, 0x1, 0x23e, &(0x7f0000000880)="$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") pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) close_range(r1, r1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3.056344308s ago: executing program 1 (id=3921): r0 = semget$private(0x0, 0x3, 0x40) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@noblock_validity}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000002b40)="$eJzs3V9rW+UfAPDvSdt1/36/dTCGeiGFXTiZS9fWPxOEzUvR4UDvZ2jPymi6jCYdax1su3A33sgQRByIL8B7L4dvwFcx0MGQUfXCm8hJT9asbdq0iyaazwdO+zw5J33Ok+d8n37POQkJYGCNZz8KES9GxBdJxJGWdcORrxxf2271yc2ZbEmiXv/o1ySS/LHm9kn++1BeeSEifvws4lRhc7vV5ZX5UrmcLub1idrCtYnq8srpKwuluXQuvTo1PX32jempt996s2t9ffXiH19/+OC9s5+fWP3q+0dH7yVxPg7n61r78Rxut1bGYzx/TUbi/IYNJ7vQWD9Jer0D7MlQHucjkc0BR2Ioj3rgv+9WRNSBAZWIfxhQzTwgO//d19tUpCcev7t2AtS8trF+HWB47dpI7G+cGx1cTZ45M8rOd8e60H7Wxg+/3L+XLbHDdYhbXWgPoOn2nYg4Mzy8ef5L8vlv7840Lh5vb2Mbbea/+mg0pmKgix5k+c9rW+U/haf5T2yR/xzaInb3Yuf4LzzqQjNtZfnfO7F1/3NjQ3ntf42cbyS5fKWcnomI/0fEyRgZzerb3c85u/qw3m5da/6XLVn7zVww349Hw6PPPme2VCs9T59bPb4T8dJ6/pvEpvl/fyPX3Tj+2etxscM2jqf3X263buf+t+p+Blz/LuKVLcd//Y5Wsv39yYnG8TDRPCo2+/3u8Z/atb+7/ndfNv4Ht+//WNJ6v7a6+za+3f9n2m7dXo//fcnHjXLznPVGqVZbnIzYl3yw+fGp9ec2683ts/6fPLH9/LfV8X8gIj7psP93j91tu2k/jP/srsZ/94WH73/6Tbv2Oxv/1xulk/kjncx/ne7g87x2AAAAAAAA0G8KEXE4kkLxablQKBbX3t9xLA4WypVq7dTlytLV2Wh8VnYsRgrNO91HWt4PMZm/H7ZZn9pQn46IoxHx5dCBRr04UynP9rrzAAAAAAAAAAAAAAAAAAAA0CcOtfn8f+bnoV7vHfC385XfMLh2jP9ufNMT0Jf8/4fBJf5hcIl/GFziHwaX+IfBJf5hcIl/GFziHwAAAAAAAAAAAAAAAAAAAAAAAAAAALrq4oUL2VJffXJzJqvPXl9emq9cPz2bVueLC0szxZnK4rXiXKUyV06LM5WFnf5euVK5NjkVSzcmamm1NlFdXrm0UFm6Wrt0ZaE0l15KR/6RXgEAAAAAAAAAAAAAAAAAAMC/S3V5Zb5ULqeLCm0L56IvdmPPhWSnUT6XHwx7amK49x1U6LAw+lvnG/d4YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFn8FAAD//4WDL3k=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f00000002c0)=""/144) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(r3, 0x0) setgroups(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd9ba8d938c14d7f3}, 0xc, 0x0}, 0x20008844) msgctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/133) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000001380)=[{0x0, 0xd36c, 0x1000}], 0x1, 0x0) 3.055154128s ago: executing program 5 (id=3933): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, 0x0, 0x80) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 2.94621367s ago: executing program 4 (id=3923): syz_open_dev$mouse(0x0, 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x200000000000011, 0x4000000000080002, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x24000002}, 0x80) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 2.894118241s ago: executing program 3 (id=3924): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 2.888979191s ago: executing program 2 (id=3925): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xb8, 0x464, 0x21, 0x70bd2b, 0x25dfdbff, "c089652d9fa22687ca4280abdef2da471b679d867a239075832c8cd968908e564f3ab5892dfc0bdc51ce174a300c87904ebe002d3d196f877d21a62e89d6bbef922d61756d2efda50033c963ea8508799b3c64d2d3d58966cbd5fcd56b0db51964e3826eeb6c22c1f14d0f3b3fa87a00fe6fcd266ab73e3dfe04020cfd4b0b4d91122fd4ace30ef6ad187d92d341429252124abf263c40e1646bd7ff069967d639cdba3fcd3abe", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0xfffffffffffffe9a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@gid}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_lower}]}, 0x1, 0x23e, &(0x7f0000000880)="$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") pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) close_range(r1, r1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.808267659s ago: executing program 4 (id=3926): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 1.249654668s ago: executing program 1 (id=3927): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) io_submit(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x6700000000000000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000180)={0x6, 0x7, 0xfffff374}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) 1.193192069s ago: executing program 5 (id=3928): r0 = semget$private(0x0, 0x3, 0x40) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@noblock_validity}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000002b40)="$eJzs3V9rW+UfAPDvSdt1/36/dTCGeiGFXTiZS9fWPxOEzUvR4UDvZ2jPymi6jCYdax1su3A33sgQRByIL8B7L4dvwFcx0MGQUfXCm8hJT9asbdq0iyaazwdO+zw5J33Ok+d8n37POQkJYGCNZz8KES9GxBdJxJGWdcORrxxf2271yc2ZbEmiXv/o1ySS/LHm9kn++1BeeSEifvws4lRhc7vV5ZX5UrmcLub1idrCtYnq8srpKwuluXQuvTo1PX32jempt996s2t9ffXiH19/+OC9s5+fWP3q+0dH7yVxPg7n61r78Rxut1bGYzx/TUbi/IYNJ7vQWD9Jer0D7MlQHucjkc0BR2Ioj3rgv+9WRNSBAZWIfxhQzTwgO//d19tUpCcev7t2AtS8trF+HWB47dpI7G+cGx1cTZ45M8rOd8e60H7Wxg+/3L+XLbHDdYhbXWgPoOn2nYg4Mzy8ef5L8vlv7840Lh5vb2Mbbea/+mg0pmKgix5k+c9rW+U/haf5T2yR/xzaInb3Yuf4LzzqQjNtZfnfO7F1/3NjQ3ntf42cbyS5fKWcnomI/0fEyRgZzerb3c85u/qw3m5da/6XLVn7zVww349Hw6PPPme2VCs9T59bPb4T8dJ6/pvEpvl/fyPX3Tj+2etxscM2jqf3X263buf+t+p+Blz/LuKVLcd//Y5Wsv39yYnG8TDRPCo2+/3u8Z/atb+7/ndfNv4Ht+//WNJ6v7a6+za+3f9n2m7dXo//fcnHjXLznPVGqVZbnIzYl3yw+fGp9ec2683ts/6fPLH9/LfV8X8gIj7psP93j91tu2k/jP/srsZ/94WH73/6Tbv2Oxv/1xulk/kjncx/ne7g87x2AAAAAAAA0G8KEXE4kkLxablQKBbX3t9xLA4WypVq7dTlytLV2Wh8VnYsRgrNO91HWt4PMZm/H7ZZn9pQn46IoxHx5dCBRr04UynP9rrzAAAAAAAAAAAAAAAAAAAA0CcOtfn8f+bnoV7vHfC385XfMLh2jP9ufNMT0Jf8/4fBJf5hcIl/GFziHwaX+IfBJf5hcIl/GFziHwAAAAAAAAAAAAAAAAAAAAAAAAAAALrq4oUL2VJffXJzJqvPXl9emq9cPz2bVueLC0szxZnK4rXiXKUyV06LM5WFnf5euVK5NjkVSzcmamm1NlFdXrm0UFm6Wrt0ZaE0l15KR/6RXgEAAAAAAAAAAAAAAAAAAMC/S3V5Zb5ULqeLCm0L56IvdmPPhWSnUT6XHwx7amK49x1U6LAw+lvnG/d4YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFn8FAAD//4WDL3k=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f00000002c0)=""/144) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(r3, 0x0) setgroups(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd9ba8d938c14d7f3}, 0xc, 0x0}, 0x20008844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x20, 0x5a, 0x4, 0x70bd25, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x28048850}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x40) msgctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/133) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000001380)=[{0x0, 0xd36c, 0x1000}], 0x1, 0x0) 1.107841651s ago: executing program 4 (id=3930): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r7 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1.106854071s ago: executing program 3 (id=3931): r0 = semget$private(0x0, 0x3, 0x40) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000ac0)={[{@noblock_validity}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000002b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f00000002c0)=""/144) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) setns(r3, 0x0) setgroups(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd9ba8d938c14d7f3}, 0xc, 0x0}, 0x20008844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x20, 0x5a, 0x4, 0x70bd25, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x28048850}, 0x0) msgctl$IPC_RMID(0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/133) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000001380)=[{0x0, 0xd36c, 0x1000}], 0x1, 0x0) 804.647576ms ago: executing program 1 (id=3932): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0xfffffffffffffe9a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@fat=@gid}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@numtail}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_lower}]}, 0x1, 0x23e, &(0x7f0000000880)="$eJzs2s9rXFUUB/DzYiUxJZ2IP0oL4kUX6uaRZO2iQVoQBxTtCFWQvpoZHeY5E+YNgRExWenWP8G1uHQnSJdusvEvcNFdNll2IT7JjLZJOxaLtFPC57OZA+d9Z+7lDpezeAdvfvdFr1PlnWIUC1kWC5diL25nsRoL8Y+9eOO1a7++9MG1j97ZbDYvv5/Slc2r6xsppXMv//LxVz++cnN09sOfzv28GPurnxwcbtzaf3H/wsGfVz/vVqlbpf5glIp0YzAYFTfKdtrqVr08pfeWoqjaqduv2sMT/U452N4ep6K/tbK8PWxXVSr649Rrj9NokEbDcSo+K7r9lOd5WlkOHt7inar1w+26jsP66etR1/Uz38fZm7HyezQiezZlz13KXriend/LLhzWdWOuK+ZRefD5r4TzP92OXepLEeW3O62d1vRz2t/sRDfKaMdaNOKPOPqb7NYTk7q+8nbz8lqaWI1vyt2/87s7radO5tejEavTzL359Wk+ncwvxvLx/EY04vnZ+Y2Z+aV4/dVj+Twa8dunMYgytuIoezf/9XpKb73bvCd/cfIcAMBpk6c7Zs5vef5v/Wl+xnx433y2NnM+OxMXz8x370RU4y97RVm2h4+8WH6Mv6VQKP5zcXQP39ea983E43D30Oe9EgAAAAAAAAAAAB7G/3t58Nb56bc8+OF57xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiy/RUAAP//S/HPKg==") pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) close_range(r1, r1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x200000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r5, 0x0, 0x0, 0xe7b, 0x0, 0x0) 67.974528ms ago: executing program 4 (id=3934): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4, 0x1}, 'syz1\x00', 0x35}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0x0, 0x2000000, 0x3, 0x101}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r6, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 0s ago: executing program 2 (id=3935): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) kernel console output (not intermixed with test programs): 1044.847804][T15275] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1044.912651][T10902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.223772][T10902] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.472058][T10902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.524288][T10902] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.708918][T15282] loop2: detected capacity change from 0 to 128 [ 1046.488912][T14197] Bluetooth: hci2: command 0x0409 tx timeout [ 1047.122562][T13382] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1047.130864][T13382] Bluetooth: hci0: Injecting HCI hardware error event [ 1047.140071][T15292] loop2: detected capacity change from 0 to 128 [ 1047.254156][T15289] loop1: detected capacity change from 0 to 4096 [ 1047.268935][ T4175] Bluetooth: hci0: hardware error 0x00 [ 1048.451673][T15289] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1048.506314][ T4354] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1048.514700][ T4354] Bluetooth: hci5: Injecting HCI hardware error event [ 1048.522013][T12956] Bluetooth: hci5: hardware error 0x00 [ 1048.575025][T13377] Bluetooth: hci2: command 0x041b tx timeout [ 1048.585428][T15301] loop4: detected capacity change from 0 to 512 [ 1048.825569][T15301] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1048.842545][T15301] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.866044][T15264] chnl_net:caif_netlink_parms(): no params data found [ 1049.542625][T13146] Bluetooth: hci5: unexpected event for opcode 0x203d [ 1049.553752][T15316] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.3119: corrupted inode contents [ 1050.207639][T15316] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.3119: mark_inode_dirty error [ 1050.236215][T15316] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.3119: corrupted inode contents [ 1050.249665][T15316] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.3119: mark_inode_dirty error [ 1050.642460][T10605] Bluetooth: hci2: command 0x040f tx timeout [ 1050.807792][T15264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.829109][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.874023][T15264] device bridge_slave_0 entered promiscuous mode [ 1050.912688][T15264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.934648][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.956082][T15264] device bridge_slave_1 entered promiscuous mode [ 1051.065491][T15324] loop4: detected capacity change from 0 to 8192 [ 1051.099095][T15264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.100083][T15334] loop1: detected capacity change from 0 to 128 [ 1051.143478][T15324] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1051.210702][T15264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.242473][T15324] REISERFS (device loop4): using ordered data mode [ 1051.249018][T15324] reiserfs: using flush barriers [ 1051.378994][T15324] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1051.449015][T15324] REISERFS (device loop4): checking transaction log (loop4) [ 1051.451522][T15339] loop2: detected capacity change from 0 to 32768 [ 1051.461299][T15324] REISERFS (device loop4): Using r5 hash to sort names [ 1052.037785][T15324] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1052.352651][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3126'. [ 1052.362258][T15344] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3126'. [ 1052.722621][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 1053.783491][T15264] team0: Port device team_slave_0 added [ 1054.080126][T15356] loop2: detected capacity change from 0 to 128 [ 1054.251179][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.258224][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.421155][T15264] team0: Port device team_slave_1 added [ 1055.033226][T15366] loop4: detected capacity change from 0 to 512 [ 1055.075199][T15368] loop1: detected capacity change from 0 to 128 [ 1055.168500][T15264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.196762][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.302135][T15264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.329089][T15264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.336942][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.371525][T15264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.379567][T15366] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1056.196560][T15366] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.378652][T15264] device hsr_slave_0 entered promiscuous mode [ 1056.686377][T15377] loop2: detected capacity change from 0 to 512 [ 1056.696528][T15264] device hsr_slave_1 entered promiscuous mode [ 1057.173011][T13146] Bluetooth: hci5: unexpected event for opcode 0x203d [ 1057.215505][T15386] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.3133: corrupted inode contents [ 1057.280404][T15386] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.3133: mark_inode_dirty error [ 1057.295390][T15386] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.3133: corrupted inode contents [ 1057.309473][T15386] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.3133: mark_inode_dirty error [ 1057.571450][T15377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1057.600063][T15377] ext4 filesystem being mounted at /623/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.134322][T15397] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.3134: corrupted inode contents [ 1058.150586][T15397] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.3134: mark_inode_dirty error [ 1058.166480][T15397] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.3134: corrupted inode contents [ 1058.298982][T15397] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.3134: mark_inode_dirty error [ 1059.415258][T15408] loop2: detected capacity change from 0 to 8192 [ 1059.442239][T15412] loop1: detected capacity change from 0 to 128 [ 1059.510417][T10902] device bond0 left promiscuous mode [ 1060.067469][T10902] device bond_slave_0 left promiscuous mode [ 1060.349280][T10902] device bond_slave_1 left promiscuous mode [ 1060.393381][T10902] device hsr_slave_0 left promiscuous mode [ 1060.513489][T15423] loop1: detected capacity change from 0 to 128 [ 1060.588356][T10902] device hsr_slave_1 left promiscuous mode [ 1060.645855][T10902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.836250][T10902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.033996][T10902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.142164][T10902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.191235][T10902] device bridge_slave_1 left promiscuous mode [ 1061.200799][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.214426][T10902] device bridge_slave_0 left promiscuous mode [ 1061.230870][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.260834][T10902] device team_slave_0 left promiscuous mode [ 1061.267449][T10902] device team_slave_1 left promiscuous mode [ 1061.365500][T10902] device veth1_macvtap left promiscuous mode [ 1061.371700][T10902] device veth0_macvtap left promiscuous mode [ 1061.412634][T10902] device veth1_vlan left promiscuous mode [ 1061.433182][T10902] device veth0_vlan left promiscuous mode [ 1061.497145][T15436] loop1: detected capacity change from 0 to 4096 [ 1061.513140][T15436] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1061.698781][T10902] bond9 (unregistering): Released all slaves [ 1061.722859][T10902] bond8 (unregistering): Released all slaves [ 1061.779180][T10902] bond7 (unregistering): Released all slaves [ 1061.879275][T10902] bond6 (unregistering): Released all slaves [ 1062.022543][T10902] bond5 (unregistering): Released all slaves [ 1062.052387][T10902] bond4 (unregistering): Released all slaves [ 1062.190162][T10902] bond3 (unregistering): Released all slaves [ 1062.268077][T10902] bond2 (unregistering): Released all slaves [ 1062.346638][T10902] bond1 (unregistering): Released all slaves [ 1062.668210][T10902] team0 (unregistering): Port device team_slave_1 removed [ 1062.672577][T13382] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1062.684857][T10902] team0 (unregistering): Port device team_slave_0 removed [ 1062.722182][T10902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.741976][T10902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.932434][T13382] usb 2-1: Using ep0 maxpacket: 8 [ 1062.984673][T10902] bond0 (unregistering): Released all slaves [ 1063.062688][T13382] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1063.222608][T15432] device syzkaller0 entered promiscuous mode [ 1063.248571][T15441] IPv6: Can't replace route, no match found [ 1063.392649][T13382] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1063.408109][T13382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1063.446825][T13382] usb 2-1: Product: syz [ 1063.461356][T13382] usb 2-1: Manufacturer: syz [ 1063.476322][T13382] usb 2-1: SerialNumber: syz [ 1063.534268][T13382] usb 2-1: config 0 descriptor?? [ 1063.724764][T15458] loop2: detected capacity change from 0 to 32768 [ 1065.192007][T15473] loop2: detected capacity change from 0 to 8192 [ 1065.204104][ T4329] usb 2-1: USB disconnect, device number 54 [ 1065.332153][T15473] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1065.402446][T15473] REISERFS (device loop2): using ordered data mode [ 1065.408995][T15473] reiserfs: using flush barriers [ 1065.436727][T15476] device syzkaller0 entered promiscuous mode [ 1065.515313][T15473] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1065.555647][T15487] loop4: detected capacity change from 0 to 128 [ 1065.609429][T15473] REISERFS (device loop2): checking transaction log (loop2) [ 1065.696828][T15473] REISERFS (device loop2): Using r5 hash to sort names [ 1065.733661][T15473] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1066.323402][T15491] loop1: detected capacity change from 0 to 8192 [ 1066.625834][T15491] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1066.685725][T15491] REISERFS (device loop1): using ordered data mode [ 1066.750341][T15491] reiserfs: using flush barriers [ 1066.781151][T15491] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1066.874270][T15491] REISERFS (device loop1): checking transaction log (loop1) [ 1066.945458][T15491] REISERFS (device loop1): Using r5 hash to sort names [ 1066.967180][T15491] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1069.098872][T15264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1070.024363][T15519] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1070.024863][T15264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1070.033839][T15519] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1070.050303][T15519] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1072.235767][T15529] loop4: detected capacity change from 0 to 1024 [ 1072.531114][T15529] hfsplus: xattr searching failed [ 1072.559537][T15529] hfsplus: xattr searching failed [ 1072.566222][T15529] hfsplus: xattr searching failed [ 1072.792747][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1072.801767][T15264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1072.840775][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1072.963373][T15264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1073.079538][T15534] IPv6: Can't replace route, no match found [ 1073.847170][T15546] device syzkaller0 entered promiscuous mode [ 1073.966456][T15548] loop1: detected capacity change from 0 to 4096 [ 1074.044733][T15548] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1074.218997][T15264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.474550][T15560] loop2: detected capacity change from 0 to 4096 [ 1074.624575][T15560] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1074.669455][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1074.851195][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1074.955375][T15264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.085788][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 1075.204343][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 1075.944665][T15576] device vlan2 entered promiscuous mode [ 1075.985505][T15576] device macvlan1 entered promiscuous mode [ 1075.991905][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1076.004610][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1076.139143][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.146534][T12240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.563911][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1076.653348][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1076.661932][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.669126][T12240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.775001][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1076.857808][T15581] device dummy0 entered promiscuous mode [ 1076.884931][T15588] IPv6: Can't replace route, no match found [ 1076.902770][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1076.928141][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1076.981503][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1077.034293][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1077.070057][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1077.159723][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1077.291962][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1077.361990][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1077.404117][T15605] loop1: detected capacity change from 0 to 32768 [ 1077.455446][T15264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1077.493125][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1077.519706][T15605] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1077.529645][T15605] BTRFS info (device loop1): enabling ssd optimizations [ 1077.536747][T15605] BTRFS info (device loop1): turning on sync discard [ 1077.543564][T15605] BTRFS info (device loop1): max_inline at 3 [ 1077.549588][T15605] BTRFS info (device loop1): not using ssd optimizations [ 1077.556726][T15605] BTRFS info (device loop1): using free space tree [ 1077.563302][T15605] BTRFS info (device loop1): has skinny extents [ 1077.571250][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1077.583890][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1077.603585][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1077.904995][T15605] BTRFS info (device loop1): checking UUID tree [ 1078.380269][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1078.389739][T15642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1078.947705][ T1108] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1079.120886][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1079.142636][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1079.158172][T15264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.242354][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 1079.255197][T12051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1079.275059][T12051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1079.362910][T15264] device veth0_vlan entered promiscuous mode [ 1079.367614][ T1108] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1079.429582][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1079.450203][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1079.519427][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1079.562666][ T1108] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1079.574066][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1079.584941][T15264] device veth1_vlan entered promiscuous mode [ 1079.596904][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1079.625628][ T1108] usb 1-1: Product: syz [ 1079.629842][ T1108] usb 1-1: Manufacturer: syz [ 1079.656034][ T1108] usb 1-1: SerialNumber: syz [ 1079.676261][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1079.711437][ T1108] usb 1-1: config 0 descriptor?? [ 1079.721952][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1079.763539][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1079.845172][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1079.887311][T15264] device veth0_macvtap entered promiscuous mode [ 1079.912957][T15264] device veth1_macvtap entered promiscuous mode [ 1079.990514][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.042615][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.072832][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.134561][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.182372][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.260785][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.295817][T15264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.375104][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.437397][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.452630][T15667] loop4: detected capacity change from 0 to 4096 [ 1080.494509][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.513498][T15667] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1080.524689][T15679] loop2: detected capacity change from 0 to 128 [ 1080.551537][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.580856][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.611934][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.728514][T15264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.759156][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1080.783344][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1080.827199][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1080.885287][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1080.952343][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1081.006511][T12344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.381776][T15676] device syzkaller0 entered promiscuous mode [ 1081.423998][T15264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.471277][T15264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.493554][T15264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.513867][T15264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.529345][ T1108] usb 1-1: can't set config #0, error -71 [ 1081.538284][ T1108] usb 1-1: USB disconnect, device number 55 [ 1081.670851][T15693] loop2: detected capacity change from 0 to 128 [ 1082.075335][T15700] IPv6: Can't replace route, no match found [ 1083.002556][ T1108] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1083.029885][T10811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.137333][T15712] loop2: detected capacity change from 0 to 512 [ 1083.148235][T10811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.165888][T15702] loop1: detected capacity change from 0 to 4096 [ 1083.211760][T15714] loop4: detected capacity change from 0 to 128 [ 1083.226640][ T9193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.236561][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1083.253383][T15702] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1083.272730][ T9193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.322644][T15712] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1083.332404][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 1083.356661][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1083.463755][ T1108] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1083.473361][T15712] ext4 filesystem being mounted at /636/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.712796][ T1108] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1083.762265][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1083.923613][ T1108] usb 1-1: Product: syz [ 1083.933625][T15722] ubi0: attaching mtd0 [ 1083.938317][ T1108] usb 1-1: Manufacturer: syz [ 1083.983226][T15722] ubi0: scanning is finished [ 1084.111286][ T1108] usb 1-1: SerialNumber: syz [ 1084.145685][ T1108] usb 1-1: config 0 descriptor?? [ 1084.193835][T15722] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1084.281631][T15729] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.3188: corrupted inode contents [ 1084.300066][T15722] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1084.313148][T15729] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.3188: mark_inode_dirty error [ 1084.431505][T15729] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.3188: corrupted inode contents [ 1084.446043][T15729] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.3188: mark_inode_dirty error [ 1084.494269][T15722] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1084.575299][T15722] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1084.780112][T15722] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1084.817135][T15722] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1084.836846][T15732] loop4: detected capacity change from 0 to 32768 [ 1084.872266][T15722] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 490431270 [ 1084.929660][T15732] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.3190 (15732) [ 1084.953214][T15722] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1084.971439][T15728] ubi0: background thread "ubi_bgt0d" started, PID 15728 [ 1084.980031][T15724] ubi0: detaching mtd0 [ 1085.007989][T15732] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1085.016914][T15732] BTRFS info (device loop4): enabling ssd optimizations [ 1085.023959][T15732] BTRFS info (device loop4): turning on sync discard [ 1085.030692][T15732] BTRFS info (device loop4): max_inline at 3 [ 1085.036764][T15732] BTRFS info (device loop4): not using ssd optimizations [ 1085.043918][T15732] BTRFS info (device loop4): using free space tree [ 1085.050533][T15732] BTRFS info (device loop4): has skinny extents [ 1085.061608][T15724] ubi0: mtd0 is detached [ 1085.842416][ T4269] usb 1-1: USB disconnect, device number 56 [ 1086.338188][T15732] BTRFS info (device loop4): checking UUID tree [ 1086.895052][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 1087.310138][ T9124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.469407][ T9124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.435417][T13375] Bluetooth: hci4: command 0x0409 tx timeout [ 1088.450133][ T9124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.646434][T15756] chnl_net:caif_netlink_parms(): no params data found [ 1088.759535][ T9124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.813377][T15785] device syzkaller0 entered promiscuous mode [ 1088.825836][T15787] loop1: detected capacity change from 0 to 4096 [ 1088.858805][T15787] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1088.872753][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1088.888327][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 1090.451263][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.504614][T15756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.561896][T13375] Bluetooth: hci4: command 0x041b tx timeout [ 1091.974583][T15756] device bridge_slave_0 entered promiscuous mode [ 1092.111600][T15756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.209352][T15756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.299269][T15803] loop3: detected capacity change from 0 to 512 [ 1092.321999][T15756] device bridge_slave_1 entered promiscuous mode [ 1092.404789][T15756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.417457][T15756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.426912][T15805] IPv6: Can't replace route, no match found [ 1092.571372][T15803] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1092.763331][T15803] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.963232][T15756] team0: Port device team_slave_0 added [ 1093.203240][T15817] ubi0: attaching mtd0 [ 1093.205079][T15756] team0: Port device team_slave_1 added [ 1093.214741][T15817] ubi0: scanning is finished [ 1093.307957][T15822] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3202: corrupted inode contents [ 1093.328656][T15822] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.3202: mark_inode_dirty error [ 1093.349581][T15822] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3202: corrupted inode contents [ 1093.364600][T15822] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.3202: mark_inode_dirty error [ 1093.755890][T15827] loop1: detected capacity change from 0 to 128 [ 1093.763855][T15756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.770831][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.851289][T15756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.870760][T15756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.874856][T15817] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1093.918662][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.082487][ T4353] Bluetooth: hci4: command 0x040f tx timeout [ 1094.455581][T15756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.531898][T15837] loop4: detected capacity change from 0 to 128 [ 1094.838106][T15756] device hsr_slave_0 entered promiscuous mode [ 1094.868823][T15756] device hsr_slave_1 entered promiscuous mode [ 1094.977534][T15756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.012339][T15756] Cannot create hsr debugfs directory [ 1095.489105][T15846] device syzkaller0 entered promiscuous mode [ 1095.702045][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3209'. [ 1097.489024][T13376] Bluetooth: hci4: command 0x0419 tx timeout [ 1097.579134][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3209'. [ 1097.710719][T15865] device veth1_macvtap left promiscuous mode [ 1097.771819][T15867] IPv6: Can't replace route, no match found [ 1097.841522][T15874] ubi0: attaching mtd0 [ 1097.857124][T15874] ubi0: scanning is finished [ 1098.441756][T15874] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1098.543896][T15874] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1098.576724][T15870] loop1: detected capacity change from 0 to 4096 [ 1098.691279][ T9124] bond2: (slave gretap1): Releasing active interface [ 1098.795953][T15870] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1098.828756][T15874] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1098.932621][T15874] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1098.940050][T15874] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1098.999692][T15874] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1099.036779][T15874] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 490431270 [ 1099.047315][T15874] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1099.057999][T15879] ubi0: background thread "ubi_bgt0d" started, PID 15879 [ 1099.083714][T15876] ubi0: detaching mtd0 [ 1099.121962][T15884] loop4: detected capacity change from 0 to 512 [ 1099.122358][T15876] ubi0: mtd0 is detached [ 1099.270828][T15884] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1099.312840][T15884] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.329956][ T9124] bond0: (slave wlan1): Releasing backup interface [ 1099.810868][T15899] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.3218: corrupted inode contents [ 1099.853730][T15899] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.3218: mark_inode_dirty error [ 1099.878309][T15899] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.3218: corrupted inode contents [ 1099.893422][T15899] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.3218: mark_inode_dirty error [ 1100.824331][ T9124] device hsr_slave_0 left promiscuous mode [ 1101.181112][T15906] loop4: detected capacity change from 0 to 1024 [ 1101.249132][ T9124] device hsr_slave_1 left promiscuous mode [ 1101.358817][T15906] hfsplus: xattr searching failed [ 1101.384423][T15906] hfsplus: xattr searching failed [ 1101.390793][T15906] hfsplus: xattr searching failed [ 1101.866242][ T9124] bond12 (unregistering): Released all slaves [ 1102.221702][ T9124] bond11 (unregistering): Released all slaves [ 1102.504193][ T9124] bond10 (unregistering): Released all slaves [ 1102.690597][T15916] loop1: detected capacity change from 0 to 32768 [ 1102.701102][T15916] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.3223 (15916) [ 1102.720198][T15916] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1102.729685][T15916] BTRFS info (device loop1): enabling ssd optimizations [ 1102.736820][T15916] BTRFS info (device loop1): turning on sync discard [ 1102.743690][T15916] BTRFS info (device loop1): max_inline at 3 [ 1102.749807][T15916] BTRFS info (device loop1): not using ssd optimizations [ 1102.757047][T15916] BTRFS info (device loop1): using free space tree [ 1102.759279][ T9124] bond9 (unregistering): Released all slaves [ 1102.763688][T15916] BTRFS info (device loop1): has skinny extents [ 1102.879514][ T9124] bond8 (unregistering): Released all slaves [ 1103.045455][T15916] BTRFS info (device loop1): checking UUID tree [ 1103.407898][ T9124] bond7 (unregistering): Released all slaves [ 1104.602402][ T9124] bond6 (unregistering): Released all slaves [ 1105.703888][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1105.809879][ T9124] bond5 (unregistering): Released all slaves [ 1105.838428][ T9124] bond4 (unregistering): Released all slaves [ 1105.859155][ T9124] bond3 (unregistering): Released all slaves [ 1105.880983][ T9124] bond2 (unregistering): Released all slaves [ 1105.976098][ T9124] bond1 (unregistering): Released all slaves [ 1107.854748][T15954] loop3: detected capacity change from 0 to 128 [ 1108.678884][ T9124] bond0 (unregistering): Released all slaves [ 1108.851207][T15959] loop3: detected capacity change from 0 to 512 [ 1108.859815][T15756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1108.869692][T15756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1108.879029][T15930] netlink: 'syz.0.3224': attribute type 1 has an invalid length. [ 1108.915935][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3224'. [ 1108.933939][T15756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1108.996555][T15756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1109.009789][T15959] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1109.027832][T15959] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.006700][T15969] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3230: corrupted inode contents [ 1110.019059][T15969] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.3230: mark_inode_dirty error [ 1110.031245][T15969] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3230: corrupted inode contents [ 1110.043559][T15969] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.3230: mark_inode_dirty error [ 1110.929457][T15975] loop3: detected capacity change from 0 to 128 [ 1110.996311][T15756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.028994][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1111.075302][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1111.151152][T15756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.386111][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1111.468785][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1111.673751][T10902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.681024][T10902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.878772][T15982] IPv6: Can't replace route, no match found [ 1111.888230][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1111.982721][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1112.016326][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1112.038772][T15990] ubi0: attaching mtd0 [ 1112.063461][T15990] ubi0: scanning is finished [ 1112.064277][T10902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.075335][T10902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.135746][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1112.176192][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1112.210039][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1112.231148][T15990] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1112.261692][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1112.272787][T15990] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1112.317604][T15990] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1112.365082][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1112.382897][T15990] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1112.417269][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1112.432688][T15990] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1112.495171][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1112.523650][T15990] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1112.565022][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1112.592443][T15990] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 490431270 [ 1112.634841][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1112.672531][T15990] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1112.805038][T15999] ubi0: background thread "ubi_bgt0d" started, PID 15999 [ 1112.813058][T15994] ubi0: detaching mtd0 [ 1112.825205][T15756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1112.864472][T15994] ubi0: mtd0 is detached [ 1112.879945][T15756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1112.943050][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1112.953413][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1113.476875][ T1108] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1115.148431][ T1108] Bluetooth: hci2: Injecting HCI hardware error event [ 1115.150725][T16005] loop1: detected capacity change from 0 to 8192 [ 1115.172800][ T4175] Bluetooth: hci2: hardware error 0x00 [ 1115.355576][T16005] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1115.406576][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1115.420320][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1115.450433][T16005] REISERFS (device loop1): using ordered data mode [ 1115.528413][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.542737][T16005] reiserfs: using flush barriers [ 1115.692486][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.699427][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.496476][T16027] netlink: 'syz.0.3240': attribute type 1 has an invalid length. [ 1116.504676][T16005] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1116.612220][T16005] REISERFS (device loop1): checking transaction log (loop1) [ 1116.660536][T16027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1116.674492][T16005] REISERFS (device loop1): Using r5 hash to sort names [ 1116.682774][T16005] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1116.713679][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1116.714365][T16028] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1116.727650][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1116.731271][T16028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1116.749249][T16028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1116.801738][T16034] loop3: detected capacity change from 0 to 4096 [ 1116.869766][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 1116.882857][T16034] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1116.931375][T15756] device veth0_vlan entered promiscuous mode [ 1116.945712][T16042] loop4: detected capacity change from 0 to 128 [ 1117.026056][T16035] bond1: (slave dummy0): making interface the new active one [ 1117.074526][T16035] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1117.222906][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1117.243778][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1117.253486][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1117.265018][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1117.274147][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1118.011184][T16054] loop1: detected capacity change from 0 to 4096 [ 1118.093994][T16054] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1118.130448][T15756] device veth1_vlan entered promiscuous mode [ 1118.179801][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1118.223520][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1118.236352][T15756] device veth0_macvtap entered promiscuous mode [ 1118.301712][T15756] device veth1_macvtap entered promiscuous mode [ 1118.383652][T15756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.580015][T15756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.788154][T15756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.307055][T15756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.373304][T15756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.432410][T15756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.478393][T15756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1119.523096][T15756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.601323][T15756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.675832][T16066] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1119.685333][T16066] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1119.695029][T16066] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1120.067462][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1120.199798][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1120.314900][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1120.448802][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1120.757728][T15756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.455500][T15756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.545697][T15756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.697109][T15756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.433744][T15756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.521495][T15756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.562633][T15756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.573752][T15756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.589875][T15756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.600036][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1124.682542][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1124.750362][T16086] IPv6: Can't replace route, no match found [ 1126.793925][T15756] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.017382][T15756] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.192404][T15756] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.214138][T15756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.370167][T16097] loop1: detected capacity change from 0 to 128 [ 1128.233881][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 1128.513243][T16101] netlink: 'syz.4.3255': attribute type 1 has an invalid length. [ 1129.108506][T16101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1129.191329][T16102] device dummy0 entered promiscuous mode [ 1129.438671][T16102] bond1: (slave dummy0): making interface the new active one [ 1129.484624][T16102] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1129.503006][ T4606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.513239][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1129.668948][ T4606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.751151][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1130.387125][T12905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.464735][T16123] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1130.474048][T16123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1130.483737][T16123] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1130.528996][T12905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.618382][T12014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1131.053354][T16136] IPv6: Can't replace route, no match found [ 1131.922887][T13376] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1132.924524][T16148] loop4: detected capacity change from 0 to 128 [ 1132.992462][T13376] usb 4-1: Using ep0 maxpacket: 8 [ 1133.113059][T13376] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1133.364973][T13376] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1133.418286][T13376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1133.561284][T13376] usb 4-1: Product: syz [ 1133.634633][T13376] usb 4-1: Manufacturer: syz [ 1133.766587][T13376] usb 4-1: SerialNumber: syz [ 1134.332551][T13376] usb 4-1: config 0 descriptor?? [ 1134.452525][T13376] usb 4-1: can't set config #0, error -71 [ 1134.587778][T13376] usb 4-1: USB disconnect, device number 60 [ 1135.022691][T16158] loop3: detected capacity change from 0 to 1024 [ 1135.138724][T16158] hfsplus: xattr searching failed [ 1135.197574][T16158] hfsplus: xattr searching failed [ 1135.203906][T16158] hfsplus: xattr searching failed [ 1136.380283][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3269'. [ 1137.046072][T16175] loop1: detected capacity change from 0 to 128 [ 1137.362883][T16170] loop2: detected capacity change from 0 to 4096 [ 1137.456710][T16170] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1137.500598][T16177] loop4: detected capacity change from 0 to 1024 [ 1137.601688][T16177] hfsplus: xattr searching failed [ 1137.615644][T16177] hfsplus: xattr searching failed [ 1137.620959][T16177] hfsplus: xattr searching failed [ 1140.578330][T16196] IPv6: Can't replace route, no match found [ 1140.764657][T16198] device veth1_macvtap left promiscuous mode [ 1141.789142][T16203] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 1141.810364][T16206] loop2: detected capacity change from 0 to 128 [ 1141.851911][T16203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1141.886471][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1141.911587][T16203] device dummy0 entered promiscuous mode [ 1141.961124][T16203] bond1: (slave dummy0): making interface the new active one [ 1142.026136][T16203] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1142.059908][T10144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1142.712398][T15661] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1143.302421][T15661] usb 5-1: Using ep0 maxpacket: 8 [ 1143.435544][T15661] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1143.893941][T16222] loop4: detected capacity change from 0 to 128 [ 1143.922713][T15661] usb 5-1: string descriptor 0 read error: -71 [ 1143.929048][T15661] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1146.172594][T16231] loop1: detected capacity change from 0 to 1024 [ 1147.170008][T16231] hfsplus: xattr searching failed [ 1147.196976][T15661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1147.437180][T15661] usb 5-1: config 0 descriptor?? [ 1147.568111][T15661] usb 5-1: can't set config #0, error -71 [ 1147.710815][T15661] usb 5-1: USB disconnect, device number 58 [ 1148.411489][T16234] loop3: detected capacity change from 0 to 128 [ 1152.422016][T16249] loop4: detected capacity change from 0 to 128 [ 1154.215585][T16260] IPv6: Can't replace route, no match found [ 1154.253257][T16262] ubi0: attaching mtd0 [ 1154.299333][T16262] ubi0: scanning is finished [ 1154.341109][T16258] loop4: detected capacity change from 0 to 128 [ 1154.832421][T15659] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1155.162470][T15659] usb 1-1: Using ep0 maxpacket: 8 [ 1155.292557][T15659] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1155.323424][T16262] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1155.472603][T15659] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1155.487901][T16274] loop1: detected capacity change from 0 to 128 [ 1155.492000][T15659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1155.509357][T16266] loop3: detected capacity change from 0 to 8192 [ 1155.536153][T15659] usb 1-1: Product: syz [ 1155.540434][T15659] usb 1-1: Manufacturer: syz [ 1155.556415][T15659] usb 1-1: SerialNumber: syz [ 1155.565528][T15659] usb 1-1: config 0 descriptor?? [ 1156.152631][T16277] loop1: detected capacity change from 0 to 128 [ 1156.248161][T16279] loop3: detected capacity change from 0 to 128 [ 1157.329349][T15657] usb 1-1: USB disconnect, device number 57 [ 1160.373069][T16293] loop3: detected capacity change from 0 to 1024 [ 1161.356267][T16293] hfsplus: xattr searching failed [ 1161.398729][T16293] hfsplus: xattr searching failed [ 1161.405567][T16293] hfsplus: xattr searching failed [ 1161.557814][T16295] loop2: detected capacity change from 0 to 128 [ 1162.427682][T16302] loop1: detected capacity change from 0 to 1024 [ 1164.009013][T16302] hfsplus: xattr searching failed [ 1164.060194][T16302] hfsplus: xattr searching failed [ 1164.066696][T16302] hfsplus: xattr searching failed [ 1165.159471][T16310] loop4: detected capacity change from 0 to 4096 [ 1165.279693][T16310] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1165.395993][T16314] loop3: detected capacity change from 0 to 128 [ 1165.407276][T16312] loop2: detected capacity change from 0 to 128 [ 1166.468837][T16322] IPv6: Can't replace route, no match found [ 1167.399258][T14197] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1167.506906][T16340] loop3: detected capacity change from 0 to 1024 [ 1167.627160][T16340] hfsplus: xattr searching failed [ 1167.665843][T16340] hfsplus: xattr searching failed [ 1167.672561][T16340] hfsplus: xattr searching failed [ 1168.092351][T14197] usb 3-1: Using ep0 maxpacket: 8 [ 1168.238112][T14197] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1169.102518][T14197] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1169.111762][T14197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1169.955464][T14197] usb 3-1: Product: syz [ 1169.959677][T14197] usb 3-1: Manufacturer: syz [ 1169.965410][T14197] usb 3-1: SerialNumber: syz [ 1169.971905][T14197] usb 3-1: config 0 descriptor?? [ 1170.002524][T14197] usb 3-1: can't set config #0, error -71 [ 1170.011538][T14197] usb 3-1: USB disconnect, device number 53 [ 1170.790236][T16354] loop1: detected capacity change from 0 to 1024 [ 1173.233359][T16354] hfsplus: xattr searching failed [ 1173.251174][T16354] hfsplus: xattr searching failed [ 1173.415146][T16359] loop3: detected capacity change from 0 to 128 [ 1173.526727][T16363] loop4: detected capacity change from 0 to 128 [ 1174.737108][T16367] loop1: detected capacity change from 0 to 128 [ 1174.764415][T16369] loop3: detected capacity change from 0 to 128 [ 1174.876647][T16372] loop2: detected capacity change from 0 to 512 [ 1175.891628][T16372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1175.919429][T16380] IPv6: Can't replace route, no match found [ 1176.063554][T16373] loop4: detected capacity change from 0 to 4096 [ 1176.070251][T16372] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1176.232551][T16373] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1176.432472][T13375] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1176.702589][T13375] usb 2-1: Using ep0 maxpacket: 8 [ 1176.823287][T13375] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1177.097117][T13375] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1177.126646][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.133042][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.173495][T13375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1177.238552][T13375] usb 2-1: Product: syz [ 1177.247581][T13375] usb 2-1: Manufacturer: syz [ 1177.257529][T13375] usb 2-1: SerialNumber: syz [ 1177.936861][T16391] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.3332: corrupted inode contents [ 1178.092746][T16391] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #2: comm syz.2.3332: mark_inode_dirty error [ 1178.104906][T16391] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #2: comm syz.2.3332: corrupted inode contents [ 1178.118034][T16391] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.3332: mark_inode_dirty error [ 1178.362875][T13375] usb 2-1: config 0 descriptor?? [ 1178.664709][T16397] loop2: detected capacity change from 0 to 128 [ 1178.802820][T16401] loop4: detected capacity change from 0 to 1024 [ 1180.776587][T16402] loop3: detected capacity change from 0 to 1024 [ 1181.897713][ T4353] usb 2-1: USB disconnect, device number 55 [ 1182.172563][T14197] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1182.243990][T16402] hfsplus: xattr searching failed [ 1182.309588][T14197] Bluetooth: hci4: Injecting HCI hardware error event [ 1182.322687][T16402] hfsplus: xattr searching failed [ 1182.432671][T13146] Bluetooth: hci4: hardware error 0x00 [ 1182.546112][T16406] loop1: detected capacity change from 0 to 128 [ 1183.948045][T16417] loop1: detected capacity change from 0 to 128 [ 1186.343140][T16424] loop2: detected capacity change from 0 to 16 [ 1186.954147][T16430] loop1: detected capacity change from 0 to 128 [ 1186.974308][T16424] erofs: (device loop2): mounted with root inode @ nid 36. [ 1187.003785][T16432] loop4: detected capacity change from 0 to 128 [ 1187.061052][ T4175] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 1187.647471][T16424] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 1187.690826][T16438] device veth1_macvtap left promiscuous mode [ 1187.712113][ T26] audit: type=1800 audit(1750780697.595:1901): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3343" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1188.232035][T16447] loop3: detected capacity change from 0 to 128 [ 1188.723955][T16448] loop2: detected capacity change from 0 to 128 [ 1188.822936][T16456] loop1: detected capacity change from 0 to 128 [ 1190.010907][T16466] loop2: detected capacity change from 0 to 128 [ 1191.785791][T16481] loop2: detected capacity change from 0 to 128 [ 1193.727929][T16489] loop3: detected capacity change from 0 to 1024 [ 1194.746713][T16489] hfsplus: xattr searching failed [ 1194.788048][T16489] hfsplus: xattr searching failed [ 1195.120614][T16495] loop1: detected capacity change from 0 to 1024 [ 1195.220710][T16495] hfsplus: xattr searching failed [ 1195.841620][T16507] loop2: detected capacity change from 0 to 1024 [ 1196.518012][T16507] hfsplus: xattr searching failed [ 1197.413413][T16511] loop3: detected capacity change from 0 to 1024 [ 1201.993141][T16521] loop4: detected capacity change from 0 to 128 [ 1202.178164][T16523] loop3: detected capacity change from 0 to 1024 [ 1202.325180][T16523] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1202.515267][T16523] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #32: comm syz.3.3369: iget: special inode unallocated [ 1202.823091][T16523] EXT4-fs (loop3): no journal found [ 1202.839228][T16523] EXT4-fs (loop3): can't get journal size [ 1202.882061][T16523] EXT4-fs (loop3): filesystem is read-only [ 1202.912455][T16523] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1205.063434][T16531] loop4: detected capacity change from 0 to 128 [ 1206.416168][T16538] loop2: detected capacity change from 0 to 1024 [ 1206.583586][T16538] hfsplus: xattr searching failed [ 1206.617159][T16538] hfsplus: xattr searching failed [ 1207.131183][T16545] loop1: detected capacity change from 0 to 128 [ 1207.208338][T16542] loop3: detected capacity change from 0 to 1024 [ 1207.291092][T16542] hfsplus: xattr searching failed [ 1207.356314][T16548] loop4: detected capacity change from 0 to 1024 [ 1207.861920][T16542] hfsplus: xattr searching failed [ 1207.956393][T16548] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1208.046215][T16552] loop2: detected capacity change from 0 to 512 [ 1208.052593][T16548] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.3377: iget: special inode unallocated [ 1208.128526][T16548] EXT4-fs (loop4): no journal found [ 1208.154262][T16552] EXT4-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 1208.194552][T16548] EXT4-fs (loop4): can't get journal size [ 1208.393847][T16548] EXT4-fs (loop4): filesystem is read-only [ 1208.399805][T16548] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1209.630040][T15659] Bluetooth: hci3: command 0x0409 tx timeout [ 1210.524636][T16565] loop3: detected capacity change from 0 to 1024 [ 1210.560045][T16563] loop1: detected capacity change from 0 to 1024 [ 1211.111847][T16565] hfsplus: xattr searching failed [ 1211.123871][T16565] hfsplus: xattr searching failed [ 1211.152339][T16563] hfsplus: xattr searching failed [ 1211.159896][T10186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.171365][T16563] hfsplus: xattr searching failed [ 1211.964891][T15659] Bluetooth: hci3: command 0x041b tx timeout [ 1212.705566][T16581] loop4: detected capacity change from 0 to 1024 [ 1212.857603][T16581] hfsplus: xattr searching failed [ 1212.898683][T16581] hfsplus: xattr searching failed [ 1212.934667][T16540] chnl_net:caif_netlink_parms(): no params data found [ 1213.117295][T10186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.327703][T10186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.409041][T16591] loop4: detected capacity change from 0 to 128 [ 1214.394888][T10186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.472670][T16540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.479824][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.489660][T16540] device bridge_slave_0 entered promiscuous mode [ 1214.501379][T16540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.509969][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.518186][T16540] device bridge_slave_1 entered promiscuous mode [ 1214.530137][T16600] loop4: detected capacity change from 0 to 128 [ 1214.561346][T16602] loop3: detected capacity change from 0 to 128 [ 1214.609786][T16540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.776509][T16540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.887567][T14197] Bluetooth: hci3: command 0x040f tx timeout [ 1215.327009][T16607] loop1: detected capacity change from 0 to 1024 [ 1215.884151][T16607] hfsplus: xattr searching failed [ 1215.929082][T16607] hfsplus: xattr searching failed [ 1216.335671][T16540] team0: Port device team_slave_0 added [ 1216.404457][T16540] team0: Port device team_slave_1 added [ 1216.422305][T16615] loop3: detected capacity change from 0 to 128 [ 1217.213037][T14197] Bluetooth: hci3: command 0x0419 tx timeout [ 1217.304938][T16540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.421296][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.472892][T16540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.559871][T16622] loop4: detected capacity change from 0 to 512 [ 1217.580056][T16540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.604835][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.746157][T16629] loop1: detected capacity change from 0 to 1024 [ 1217.773705][T16622] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1217.918397][T16629] hfsplus: xattr searching failed [ 1217.950548][T16629] hfsplus: xattr searching failed [ 1217.958694][T16629] hfsplus: xattr searching failed [ 1217.973539][T16622] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.031215][T16540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.776425][T16641] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.3395: corrupted inode contents [ 1218.788828][T16641] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #2: comm syz.4.3395: mark_inode_dirty error [ 1218.801349][T16641] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #2: comm syz.4.3395: corrupted inode contents [ 1218.813643][T16641] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.3395: mark_inode_dirty error [ 1219.047873][T16540] device hsr_slave_0 entered promiscuous mode [ 1219.115908][T16540] device hsr_slave_1 entered promiscuous mode [ 1219.195959][T16646] loop2: detected capacity change from 0 to 128 [ 1219.206406][T16540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1219.260098][T16540] Cannot create hsr debugfs directory [ 1220.010523][T16654] loop3: detected capacity change from 0 to 128 [ 1220.987647][T16662] loop4: detected capacity change from 0 to 1024 [ 1220.995082][T16661] loop2: detected capacity change from 0 to 128 [ 1221.071469][T16662] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1221.082962][T16662] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.3401: iget: special inode unallocated [ 1221.124780][T16665] loop1: detected capacity change from 0 to 128 [ 1221.173556][T16662] EXT4-fs (loop4): no journal found [ 1221.178903][T16662] EXT4-fs (loop4): can't get journal size [ 1221.427765][T16662] EXT4-fs (loop4): filesystem is read-only [ 1221.510403][T16662] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1221.674148][T16670] loop3: detected capacity change from 0 to 512 [ 1223.712430][T16670] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1223.762716][T16670] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1223.978517][T16691] loop2: detected capacity change from 0 to 1024 [ 1224.009770][T16690] loop4: detected capacity change from 0 to 1024 [ 1224.181924][T16540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1224.590932][T16693] loop1: detected capacity change from 0 to 1024 [ 1224.667218][T16694] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3402: corrupted inode contents [ 1224.855094][T16694] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.3402: mark_inode_dirty error [ 1225.521129][T16690] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1226.042670][T16540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1226.130574][T16693] hfsplus: xattr searching failed [ 1226.166450][T16693] hfsplus: xattr searching failed [ 1226.172681][T16693] hfsplus: xattr searching failed [ 1226.228165][T16694] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3402: corrupted inode contents [ 1226.240401][T16694] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.3402: mark_inode_dirty error [ 1226.306326][T16690] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.3406: iget: special inode unallocated [ 1226.408715][T16684] hfsplus: xattr searching failed [ 1226.435855][T16690] EXT4-fs (loop4): no journal found [ 1226.441200][T16690] EXT4-fs (loop4): can't get journal size [ 1226.445502][T16684] hfsplus: xattr searching failed [ 1226.452156][T16684] hfsplus: xattr searching failed [ 1226.754906][T16690] EXT4-fs (loop4): filesystem is read-only [ 1226.763381][T16540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1226.788141][T16690] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1226.902587][T16540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1227.591255][T16706] loop3: detected capacity change from 0 to 1024 [ 1227.724802][T16706] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1227.811893][T16706] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #32: comm syz.3.3408: iget: special inode unallocated [ 1227.865006][T16706] EXT4-fs (loop3): no journal found [ 1227.870260][T16706] EXT4-fs (loop3): can't get journal size [ 1227.952896][T16706] EXT4-fs (loop3): filesystem is read-only [ 1228.014341][T16706] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1228.111415][T10186] device hsr_slave_0 left promiscuous mode [ 1228.163891][T16714] loop1: detected capacity change from 0 to 1024 [ 1228.207635][T10186] device hsr_slave_1 left promiscuous mode [ 1228.328294][T16714] hfsplus: xattr searching failed [ 1228.363896][T16714] hfsplus: xattr searching failed [ 1228.370277][T16714] hfsplus: xattr searching failed [ 1228.455093][T10186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.547735][T10186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.635352][T10186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.647349][T10186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.655386][T10186] device bridge_slave_1 left promiscuous mode [ 1228.661759][T10186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.671004][T10186] device bridge_slave_0 left promiscuous mode [ 1228.694046][T10186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.717056][T10186] device veth0_macvtap left promiscuous mode [ 1228.721859][T16720] loop2: detected capacity change from 0 to 128 [ 1228.733141][T10186] device veth1_vlan left promiscuous mode [ 1228.739003][T10186] device veth0_vlan left promiscuous mode [ 1229.577798][T16727] loop3: detected capacity change from 0 to 128 [ 1230.143805][T16730] loop2: detected capacity change from 0 to 1024 [ 1230.161602][T10186] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1230.185250][T10186] bond1 (unregistering): Released all slaves [ 1230.246656][T16730] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1230.263866][T16730] EXT4-fs error (device loop2): ext4_get_journal_inode:5160: inode #32: comm syz.2.3414: iget: special inode unallocated [ 1230.310731][T16730] EXT4-fs (loop2): no journal found [ 1230.342639][T16730] EXT4-fs (loop2): can't get journal size [ 1230.416814][T16730] EXT4-fs (loop2): filesystem is read-only [ 1230.452888][T16730] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1232.631514][T16740] loop2: detected capacity change from 0 to 1024 [ 1232.767215][T16740] hfsplus: xattr searching failed [ 1232.802531][T16740] hfsplus: xattr searching failed [ 1232.808928][T16740] hfsplus: xattr searching failed [ 1233.125320][T10186] team0 (unregistering): Port device team_slave_1 removed [ 1233.139964][T10186] team0 (unregistering): Port device team_slave_0 removed [ 1233.154451][T10186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.168133][T10186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.240909][T10186] bond0 (unregistering): Released all slaves [ 1233.448166][T16540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.459186][T16748] loop3: detected capacity change from 0 to 128 [ 1233.629175][T16753] loop1: detected capacity change from 0 to 1024 [ 1233.852409][T16753] hfsplus: xattr searching failed [ 1233.873735][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1233.891200][T16753] hfsplus: xattr searching failed [ 1233.897702][T16753] hfsplus: xattr searching failed [ 1234.019905][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1234.632123][T16540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.760724][T16765] loop2: detected capacity change from 0 to 1024 [ 1234.924963][T16765] hfsplus: xattr searching failed [ 1235.372800][T10811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1235.381590][T10811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1235.446590][T16768] loop3: detected capacity change from 0 to 1024 [ 1236.870659][T16768] hfsplus: xattr searching failed [ 1236.933075][T16768] hfsplus: xattr searching failed [ 1236.939615][T16768] hfsplus: xattr searching failed [ 1237.062484][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.069627][T10811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.452721][T10811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1237.461515][T10811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1237.470449][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.477549][T10811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.485356][T10811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1237.543715][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1237.584162][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1237.604661][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1237.625936][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1237.649700][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1237.677969][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1237.750519][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1237.826701][T16781] loop1: detected capacity change from 0 to 128 [ 1237.841379][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1237.861371][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1237.914704][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1237.938178][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1238.543676][T16540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1238.566281][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.572643][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.718446][T16790] loop1: detected capacity change from 0 to 1024 [ 1238.875482][T16790] hfsplus: xattr searching failed [ 1241.665847][T16813] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1242.530871][T16814] loop3: detected capacity change from 0 to 1024 [ 1242.710830][T16814] hfsplus: xattr searching failed [ 1242.740396][T16814] hfsplus: xattr searching failed [ 1242.746841][T16814] hfsplus: xattr searching failed [ 1243.039661][T16817] loop4: detected capacity change from 0 to 2048 [ 1243.108232][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1243.118542][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1243.157287][T16540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.180259][T16817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1243.200573][T16825] loop2: detected capacity change from 0 to 2048 [ 1243.330717][T16825] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1243.692288][T16840] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1244.562446][T16817] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 1244.614791][T16817] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 1244.628555][T16822] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 1244.693362][T16822] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 1244.759985][T16850] device veth1_macvtap left promiscuous mode [ 1244.994668][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1245.027570][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1245.100260][T16540] device veth0_vlan entered promiscuous mode [ 1245.139349][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1245.172732][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1245.213069][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1245.253219][T12905] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1245.279775][T16866] device veth1_macvtap left promiscuous mode [ 1245.298580][T16540] device veth1_vlan entered promiscuous mode [ 1245.436656][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1245.452032][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1245.509100][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1245.543459][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1245.571580][T16540] device veth0_macvtap entered promiscuous mode [ 1245.614174][T16540] device veth1_macvtap entered promiscuous mode [ 1245.709348][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.760586][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.798084][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.845660][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.892340][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.922447][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1245.952291][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.992476][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.023948][T16540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.031991][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1246.052820][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1246.081417][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1246.111721][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1246.145823][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.202273][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.242378][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.277996][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.320718][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.361908][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.388476][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.430092][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.477724][T16540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.507398][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1246.524164][ T9193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1246.571734][T16540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.601193][T16540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.621452][T16540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.652369][T16540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.875521][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.927879][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.978099][T12905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.986650][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1247.017059][T12905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.045078][T16876] loop1: detected capacity change from 0 to 2048 [ 1247.067784][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1247.250815][T16876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1247.420167][T16886] loop3: detected capacity change from 0 to 1024 [ 1247.454082][T16890] loop5: detected capacity change from 0 to 128 [ 1247.506919][T16886] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1247.547855][T16886] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #32: comm syz.3.3442: iget: special inode unallocated [ 1247.615310][T16886] EXT4-fs (loop3): no journal found [ 1247.620710][T16886] EXT4-fs (loop3): can't get journal size [ 1247.772383][T16886] EXT4-fs (loop3): filesystem is read-only [ 1247.822468][T16886] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1247.985281][T16876] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 1248.042116][T16876] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 1249.636213][T16915] IPv6: Can't replace route, no match found [ 1251.249535][T16933] loop3: detected capacity change from 0 to 1024 [ 1252.227247][T16937] loop5: detected capacity change from 0 to 256 [ 1252.803018][T16929] hfsplus: xattr searching failed [ 1252.819397][T16929] hfsplus: xattr searching failed [ 1252.824719][T16929] hfsplus: xattr searching failed [ 1253.555336][ T4353] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1253.752829][T16937] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x09567547, utbl_chksum : 0xe619d30d) [ 1254.335089][ T4353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1254.349458][ T4353] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 1254.358862][ T4353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.369915][ T4353] usb 5-1: config 0 descriptor?? [ 1254.392618][T16942] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1254.628863][T16968] loop5: detected capacity change from 0 to 128 [ 1254.972799][ T4353] usbhid 5-1:0.0: can't add hid device: -71 [ 1255.232394][ T4353] usbhid: probe of 5-1:0.0 failed with error -71 [ 1255.280786][ T4353] usb 5-1: USB disconnect, device number 59 [ 1256.598423][T16989] loop5: detected capacity change from 0 to 128 [ 1258.049941][T17007] IPv6: Can't replace route, no match found [ 1258.053933][T17003] loop3: detected capacity change from 0 to 512 [ 1258.134594][T17003] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1258.522501][T17003] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 1258.584526][T17003] System zones: 1-12 [ 1258.785391][T17003] EXT4-fs (loop3): 1 truncate cleaned up [ 1258.901314][T17003] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,lazytime,journal_path=./file0,bsdgroups,debug,noload,,errors=continue. Quota mode: none. [ 1260.382421][ T4353] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1261.502516][ T4353] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1261.718673][T17046] loop5: detected capacity change from 0 to 128 [ 1261.739222][ T4353] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 1261.815236][ T4353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.354107][ T4353] usb 5-1: config 0 descriptor?? [ 1262.483664][T17031] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1263.817387][ T4353] usbhid 5-1:0.0: can't add hid device: -71 [ 1263.835734][ T4353] usbhid: probe of 5-1:0.0 failed with error -71 [ 1263.850603][ T4353] usb 5-1: USB disconnect, device number 60 [ 1264.111114][T17082] loop3: detected capacity change from 0 to 128 [ 1264.616730][T17089] loop5: detected capacity change from 0 to 128 [ 1265.771987][T17093] IPv6: Can't replace route, no match found [ 1266.790299][T17096] loop3: detected capacity change from 0 to 4096 [ 1266.934516][T17096] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 1270.585078][T17143] netlink: 'syz.4.3495': attribute type 4 has an invalid length. [ 1270.615129][T17142] loop5: detected capacity change from 0 to 1764 [ 1270.670101][T17146] netlink: 'syz.4.3495': attribute type 4 has an invalid length. [ 1272.757879][T17170] loop5: detected capacity change from 0 to 1024 [ 1274.429102][T17170] hfsplus: xattr searching failed [ 1277.518921][T17200] netlink: 'syz.2.3505': attribute type 4 has an invalid length. [ 1285.702555][T14197] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1287.085036][T17279] loop5: detected capacity change from 0 to 128 [ 1287.142540][T14197] usb 4-1: device descriptor read/all, error -71 [ 1287.803227][T17288] IPv6: Can't replace route, no match found [ 1287.842395][T12965] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1288.812566][T14197] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1289.372327][T14197] usb 4-1: device descriptor read/64, error -71 [ 1289.642281][T14197] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1289.654801][T12965] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1289.709232][T12965] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1289.758351][T17301] loop5: detected capacity change from 0 to 4096 [ 1289.807059][T17301] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1289.865491][T14197] usb 4-1: device descriptor read/64, error -71 [ 1289.912573][T12965] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1289.951191][T12965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.959788][T17307] fuse: Unknown parameter 'group_i00000000000000000000' [ 1289.988611][T12965] usb 5-1: Product: syz [ 1289.994027][T14197] usb usb4-port1: attempt power cycle [ 1290.019080][T12965] usb 5-1: Manufacturer: syz [ 1290.039214][T12965] usb 5-1: SerialNumber: syz [ 1290.081345][T12965] usb 5-1: config 0 descriptor?? [ 1290.262427][T12965] usb 5-1: can't set config #0, error -71 [ 1290.271654][T12965] usb 5-1: USB disconnect, device number 61 [ 1290.572256][T14197] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1290.785174][T14197] usb 4-1: device descriptor read/8, error -71 [ 1291.145435][T17315] ax25_connect(): syz.2.3533 uses autobind, please contact jreuter@yaina.de [ 1291.192081][T17327] loop3: detected capacity change from 0 to 512 [ 1291.726349][T17327] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1292.589413][T17341] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3536'. [ 1293.638298][T17345] loop3: detected capacity change from 0 to 512 [ 1293.707753][T17345] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1294.415422][T17359] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3540'. [ 1295.504126][T17365] netlink: 'syz.3.3545': attribute type 4 has an invalid length. [ 1296.081929][T17373] IPv6: Can't replace route, no match found [ 1296.984758][T17383] loop3: detected capacity change from 0 to 128 [ 1297.036091][T17386] netlink: 'syz.5.3549': attribute type 4 has an invalid length. [ 1297.647919][T17392] netlink: 'syz.5.3549': attribute type 4 has an invalid length. [ 1297.805143][T17399] loop3: detected capacity change from 0 to 128 [ 1298.158987][T17402] loop5: detected capacity change from 0 to 4096 [ 1298.637407][T17402] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1299.348102][T17430] IPv6: Can't replace route, no match found [ 1299.922474][T12965] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1300.007896][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.015082][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.172558][T12965] usb 2-1: device descriptor read/64, error -71 [ 1300.362353][T14653] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1300.370146][T15651] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1300.742565][T15651] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1300.774102][T14653] usb 3-1: config 0 has no interfaces? [ 1300.852347][T12965] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1301.082578][T12965] usb 2-1: device descriptor read/64, error -71 [ 1301.182728][T15651] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1301.201364][T17440] loop5: detected capacity change from 0 to 128 [ 1301.222481][T12965] usb usb2-port1: attempt power cycle [ 1301.302461][T14653] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1301.353020][T15651] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1301.383537][T14653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.391787][T14653] usb 3-1: Product: syz [ 1301.396156][T15651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.495931][T17442] loop5: detected capacity change from 0 to 128 [ 1301.614430][T15651] usb 4-1: Product: syz [ 1301.618650][T15651] usb 4-1: Manufacturer: syz [ 1301.623376][T14653] usb 3-1: Manufacturer: syz [ 1301.628078][T14653] usb 3-1: SerialNumber: syz [ 1301.634376][T15651] usb 4-1: SerialNumber: syz [ 1301.662429][T12965] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1301.662820][T15651] usb 4-1: config 0 descriptor?? [ 1301.676414][T14653] usb 3-1: config 0 descriptor?? [ 1301.703280][T17427] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1301.768557][T17427] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1301.832936][T12965] usb 2-1: device descriptor read/8, error -71 [ 1302.193183][T12965] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1302.205264][T14653] usb 3-1: USB disconnect, device number 54 [ 1302.222780][T17427] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1302.229890][T17427] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1302.558679][T12965] usb 2-1: device descriptor read/8, error -71 [ 1302.711388][T12965] usb usb2-port1: unable to enumerate USB device [ 1303.755587][T17462] netlink: 'syz.2.3567': attribute type 13 has an invalid length. [ 1303.771191][T17462] netlink: 944 bytes leftover after parsing attributes in process `syz.2.3567'. [ 1304.762862][T15651] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1305.461112][T15651] dm9601 4-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 1305.516539][T15651] usb 4-1: USB disconnect, device number 67 [ 1305.527483][T15651] dm9601 4-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 1305.671875][T17487] loop3: detected capacity change from 0 to 128 [ 1305.969152][T17494] loop3: detected capacity change from 0 to 128 [ 1306.567275][T17498] IPv6: Can't replace route, no match found [ 1307.172497][T15780] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1307.432507][T15780] usb 4-1: device descriptor read/64, error -71 [ 1307.960860][T15780] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1308.192627][T15780] usb 4-1: device descriptor read/64, error -71 [ 1308.695615][T15780] usb usb4-port1: attempt power cycle [ 1308.806402][T17514] loop5: detected capacity change from 0 to 128 [ 1312.778853][T17530] loop5: detected capacity change from 0 to 512 [ 1312.926717][T17530] EXT4-fs (loop5): Ignoring removed orlov option [ 1312.985863][T17530] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1313.078596][T17530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1313.273917][T17530] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.3582: corrupted in-inode xattr [ 1313.332835][T17530] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3582: couldn't read orphan inode 15 (err -117) [ 1313.382696][T17530] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 1316.401361][T17569] loop5: detected capacity change from 0 to 1024 [ 1319.563952][T17586] netlink: 'syz.4.3593': attribute type 10 has an invalid length. [ 1319.829050][T17586] device syz_tun entered promiscuous mode [ 1319.839044][T17586] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1322.215674][T17605] netlink: 'syz.1.3596': attribute type 10 has an invalid length. [ 1322.267654][T17605] device syz_tun entered promiscuous mode [ 1322.277863][T17605] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1326.381932][T17663] bond0: (slave syz_tun): Releasing backup interface [ 1326.553467][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1326.610412][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1326.687949][T17663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1326.751702][T17663] device bridge_slave_0 left promiscuous mode [ 1326.801849][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.863881][T17663] device bridge_slave_1 left promiscuous mode [ 1326.877298][T17663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.910201][T17663] bond0: (slave bond_slave_0): Releasing backup interface [ 1326.962754][T17663] bond0: (slave bond_slave_1): Releasing backup interface [ 1327.112847][T17663] team0: Port device team_slave_0 removed [ 1327.222389][T17663] team0: Port device team_slave_1 removed [ 1327.229109][T17663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.322156][T17674] loop5: detected capacity change from 0 to 512 [ 1327.332320][T17663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.381253][T17674] EXT4-fs (loop5): Ignoring removed orlov option [ 1327.393984][T17674] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1327.423357][T17674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1327.433014][T17663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.438831][T17678] loop3: detected capacity change from 0 to 512 [ 1327.450997][T17663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.571651][T17674] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.3611: corrupted in-inode xattr [ 1327.633036][T17674] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3611: couldn't read orphan inode 15 (err -117) [ 1327.651518][T17674] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 1328.035737][T17678] EXT4-fs (loop3): Ignoring removed orlov option [ 1328.104531][T17678] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1328.193461][T17678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1328.265365][T17678] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.3613: corrupted in-inode xattr [ 1328.496720][T17678] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.3613: couldn't read orphan inode 15 (err -117) [ 1328.510881][T17678] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 1333.164503][T10605] Bluetooth: hci3: command 0x0406 tx timeout [ 1335.253331][T17765] netlink: 'syz.1.3628': attribute type 10 has an invalid length. [ 1335.266277][T17765] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1335.552660][T17759] netlink: 'syz.4.3629': attribute type 10 has an invalid length. [ 1336.301019][T17788] loop5: detected capacity change from 0 to 2048 [ 1336.401457][T17786] netlink: 'syz.2.3630': attribute type 10 has an invalid length. [ 1336.438887][T17788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1336.570071][T17786] device syz_tun entered promiscuous mode [ 1336.581194][T17786] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1336.595561][T17792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1336.681261][T17792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1336.732614][T17792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1336.893132][T17796] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1336.924126][T17796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1336.952048][T17796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1337.678466][T17808] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1337.804606][T17808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1337.878138][T17808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1337.932641][T17808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1338.155775][T17820] netlink: 'syz.1.3638': attribute type 10 has an invalid length. [ 1339.010111][T17834] netlink: 'syz.5.3642': attribute type 10 has an invalid length. [ 1339.790172][T17840] loop3: detected capacity change from 0 to 2048 [ 1339.796873][T17834] device syz_tun entered promiscuous mode [ 1339.807775][T17834] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1340.532845][T17849] loop5: detected capacity change from 0 to 512 [ 1340.583972][T17849] EXT4-fs (loop5): Ignoring removed orlov option [ 1340.596202][T17840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1340.615790][T17849] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1340.839614][T17849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1340.862385][T17849] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.3646: corrupted in-inode xattr [ 1340.945219][T17849] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3646: couldn't read orphan inode 15 (err -117) [ 1341.875273][T17849] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 1345.716480][T17873] loop5: detected capacity change from 0 to 128 [ 1346.949983][T17883] loop5: detected capacity change from 0 to 512 [ 1347.079464][T17883] EXT4-fs (loop5): Ignoring removed orlov option [ 1347.131557][T17883] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1347.236804][T17883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1347.254266][T17883] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.3656: corrupted in-inode xattr [ 1347.317794][T17883] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3656: couldn't read orphan inode 15 (err -117) [ 1347.418412][T17883] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 1347.503968][T17887] netlink: 'syz.3.3649': attribute type 10 has an invalid length. [ 1347.524560][T17887] device syz_tun entered promiscuous mode [ 1347.733266][T17887] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1355.379276][T17931] IPv6: Can't replace route, no match found [ 1355.564546][T13379] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1356.602341][T13379] usb 2-1: Using ep0 maxpacket: 16 [ 1356.722716][T13379] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.908923][T13379] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1357.083045][T13379] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1357.238041][T13379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.292277][T13379] usb 2-1: Product: syz [ 1357.296703][T13379] usb 2-1: Manufacturer: syz [ 1357.362414][T13379] usb 2-1: SerialNumber: syz [ 1358.510126][T17959] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1358.519224][T17959] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1358.976908][T13379] usb 2-1: 0:2 : does not exist [ 1359.036017][T17950] overlayfs: failed to clone upperpath [ 1359.463961][T13379] usb 2-1: USB disconnect, device number 60 [ 1361.415295][T17969] loop3: detected capacity change from 0 to 1024 [ 1361.446741][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.453107][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.874648][ T4282] udevd[4282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1362.948034][T17969] hfsplus: xattr searching failed [ 1363.529896][T17981] IPv6: Can't replace route, no match found [ 1363.742562][T10605] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1364.032422][T10605] usb 2-1: Using ep0 maxpacket: 16 [ 1364.042362][T13379] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1364.172653][T10605] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.282303][T13379] usb 6-1: Using ep0 maxpacket: 8 [ 1364.388974][T10605] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1364.406650][T13379] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.433639][T13379] usb 6-1: config 0 has no interfaces? [ 1364.583593][T10605] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1364.671080][T10605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.882406][T10605] usb 2-1: Product: syz [ 1364.896879][T10605] usb 2-1: Manufacturer: syz [ 1364.901539][T10605] usb 2-1: SerialNumber: syz [ 1365.242602][T13379] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1365.276262][T13379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1365.293469][T13379] usb 6-1: Product: syz [ 1365.308774][T13379] usb 6-1: Manufacturer: syz [ 1365.342301][T13379] usb 6-1: SerialNumber: syz [ 1365.429387][T13379] usb 6-1: config 0 descriptor?? [ 1365.432482][T10605] usb 2-1: 0:2 : does not exist [ 1365.892916][T10605] usb 2-1: USB disconnect, device number 61 [ 1366.869376][ T4282] udevd[4282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1367.201210][T18004] overlayfs: failed to clone upperpath [ 1371.188717][T18045] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1371.197753][T18045] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1372.485975][T18053] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1372.495022][T18053] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1374.352369][T18067] loop3: detected capacity change from 0 to 128 [ 1375.389224][T12965] usb 6-1: USB disconnect, device number 2 [ 1376.148399][T18083] loop5: detected capacity change from 0 to 1024 [ 1376.568386][T18083] hfsplus: xattr searching failed [ 1376.594541][T18083] hfsplus: xattr searching failed [ 1376.600955][T18083] hfsplus: xattr searching failed [ 1385.483997][T18126] loop5: detected capacity change from 0 to 128 [ 1388.045577][T18147] loop5: detected capacity change from 0 to 128 [ 1390.385956][T18161] loop3: detected capacity change from 0 to 128 [ 1394.464824][T18171] loop5: detected capacity change from 0 to 128 [ 1394.515067][T18171] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1394.612316][T18171] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1398.295713][T10811] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1398.409006][T18188] loop3: detected capacity change from 0 to 512 [ 1398.576207][T18188] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1398.901469][T18200] loop5: detected capacity change from 0 to 512 [ 1400.297328][T18188] EXT4-fs (loop3): 1 truncate cleaned up [ 1400.601586][T18188] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1400.695407][T18200] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1400.841277][T18200] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1400.856073][T18200] EXT4-fs (loop5): 1 truncate cleaned up [ 1400.861807][T18200] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x000000000000cd29,noblock_validity,init_itable=0x0000000000001002,journal_dev=0x0000000000000002,oldalloc,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 1401.623112][T18230] loop5: detected capacity change from 0 to 256 [ 1401.672865][T18230] exfat: Unknown parameter 'utf8errors' [ 1401.818637][T18238] loop3: detected capacity change from 0 to 256 [ 1401.844167][T18230] loop5: detected capacity change from 0 to 512 [ 1401.924993][T18230] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1401.933477][T18238] exfat: Unknown parameter 'utf8errors' [ 1402.043546][T18230] EXT4-fs (loop5): 1 truncate cleaned up [ 1402.087231][T18238] loop3: detected capacity change from 0 to 512 [ 1402.145676][T18230] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1402.246196][T18238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1402.379852][T18238] EXT4-fs (loop3): 1 truncate cleaned up [ 1402.409183][T18238] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1402.635359][T18245] loop5: detected capacity change from 0 to 256 [ 1402.674579][T18245] exfat: Unknown parameter 'utf8errors' [ 1402.821271][T18245] loop5: detected capacity change from 0 to 512 [ 1402.901742][T18245] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1402.954506][T18245] EXT4-fs (loop5): 1 truncate cleaned up [ 1403.001914][T18249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3759'. [ 1403.011165][T18245] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1403.281642][T18253] ceph: Unexpected value for 'acl' [ 1403.739760][T18259] ceph: Unexpected value for 'acl' [ 1403.773553][T18262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3761'. [ 1403.787739][T18257] loop5: detected capacity change from 0 to 512 [ 1403.835699][T18264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3762'. [ 1403.979074][T18257] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1404.143642][T18257] EXT4-fs (loop5): 1 truncate cleaned up [ 1404.218636][T18271] ceph: Unexpected value for 'acl' [ 1404.267995][T18257] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1407.434515][T18296] loop5: detected capacity change from 0 to 2048 [ 1407.493738][T18095] Alternate GPT is invalid, using primary GPT. [ 1407.530244][T18095] loop5: p1 p2 p3 [ 1407.875739][T18296] Alternate GPT is invalid, using primary GPT. [ 1407.882393][T18296] loop5: p1 p2 p3 [ 1408.666117][T18151] udevd[18151]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1408.666498][T18110] udevd[18110]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1408.690234][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1409.934882][T18151] udevd[18151]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1410.007261][T18110] udevd[18110]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1410.046356][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1411.366262][T18320] ceph: Unexpected value for 'acl' [ 1411.488899][T18305] loop3: detected capacity change from 0 to 32768 [ 1411.721386][T18305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3774 (18305) [ 1412.017759][T18305] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1412.028378][T18332] IPv6: Can't replace route, no match found [ 1412.212379][T18333] xt_NFQUEUE: number of total queues is 0 [ 1412.515291][T18305] BTRFS info (device loop3): using free space tree [ 1412.806572][T18305] BTRFS info (device loop3): has skinny extents [ 1415.352817][T18305] BTRFS error (device loop3): open_ctree failed: -12 [ 1415.747763][T18370] loop3: detected capacity change from 0 to 256 [ 1415.856720][T18370] FAT-fs (loop3): Unrecognized mount option "nonumtaûl=0" or missing value [ 1416.018793][T18374] loop5: detected capacity change from 0 to 4096 [ 1416.514660][T18378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1416.847695][T18380] sd 0:0:1:0: PR command failed: 2 [ 1416.853054][T18380] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1416.859945][T18380] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1417.164042][T18374] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1417.889983][T18397] IPv6: Can't replace route, no match found [ 1419.726603][T18407] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3798'. [ 1419.856054][T18408] loop3: detected capacity change from 0 to 1764 [ 1421.136454][T18415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3800'. [ 1421.218602][T18415] fuse: Bad value for 'fd' [ 1421.286281][T18412] loop3: detected capacity change from 0 to 1024 [ 1421.935897][T18411] hfsplus: xattr searching failed [ 1422.036186][T18422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1422.349492][T18427] sd 0:0:1:0: PR command failed: 2 [ 1422.354941][T18427] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1422.361858][T18427] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1422.885381][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.891741][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.994084][T18412] hfsplus: xattr searching failed [ 1423.047871][T18412] hfsplus: xattr searching failed [ 1424.897627][T18434] IPv6: Can't replace route, no match found [ 1425.502513][T15651] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1426.099964][T18442] loop5: detected capacity change from 0 to 2048 [ 1426.142230][T15651] usb 3-1: Using ep0 maxpacket: 8 [ 1426.164375][T18110] Alternate GPT is invalid, using primary GPT. [ 1426.807586][T18110] loop5: p1 p2 p3 [ 1427.352354][T15651] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.487245][T15651] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1429.684050][T18442] Alternate GPT is invalid, using primary GPT. [ 1429.690352][T18442] loop5: p1 p2 p3 [ 1429.733340][T15651] usb 3-1: string descriptor 0 read error: -71 [ 1429.739952][T15651] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1429.957896][T15651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1429.968544][T15651] usb 3-1: config 0 descriptor?? [ 1429.992343][T15651] usb 3-1: can't set config #0, error -71 [ 1430.029314][T15651] usb 3-1: USB disconnect, device number 55 [ 1430.090434][T18193] udevd[18193]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1430.090661][T18110] udevd[18110]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1430.129672][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1430.175484][T18465] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3814'. [ 1430.320979][T18466] loop5: detected capacity change from 0 to 1764 [ 1431.327936][T18151] udevd[18151]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1431.341882][T18110] udevd[18110]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1431.345517][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1431.561309][T18471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3819'. [ 1431.673171][T18471] fuse: Bad value for 'fd' [ 1431.755408][T18472] loop5: detected capacity change from 0 to 256 [ 1432.023159][T18472] FAT-fs (loop5): Unrecognized mount option "nonumtaûl=0" or missing value [ 1435.879310][T18496] loop5: detected capacity change from 0 to 2048 [ 1436.078322][T18095] Alternate GPT is invalid, using primary GPT. [ 1436.087487][T18095] loop5: p1 p2 p3 [ 1436.292537][T18496] Alternate GPT is invalid, using primary GPT. [ 1436.298870][T18496] loop5: p1 p2 p3 [ 1436.311493][T18506] xt_NFQUEUE: number of total queues is 0 [ 1437.610402][T18110] udevd[18110]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1437.629381][T18151] udevd[18151]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1437.639619][T18517] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3832'. [ 1437.651794][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1437.710868][T18516] loop3: detected capacity change from 0 to 256 [ 1437.892768][T18522] loop5: detected capacity change from 0 to 2048 [ 1438.770594][T18522] Alternate GPT is invalid, using primary GPT. [ 1438.777159][T18522] loop5: p1 p2 p3 [ 1439.197997][T18516] FAT-fs (loop3): Unrecognized mount option "nonumtaûl=0" or missing value [ 1439.223801][T18521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3834'. [ 1442.071223][ T3546] Alternate GPT is invalid, using primary GPT. [ 1442.133438][ T3546] loop5: p1 p2 p3 [ 1442.417193][T18532] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3838'. [ 1442.515293][T18532] fuse: Bad value for 'fd' [ 1443.077273][T18540] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3841'. [ 1444.211114][T18540] loop5: detected capacity change from 0 to 1764 [ 1445.544947][T18546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3843'. [ 1445.556328][T18547] sd 0:0:1:0: PR command failed: 2 [ 1445.561649][T18547] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1445.568616][T18547] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1446.188496][T18551] sd 0:0:1:0: PR command failed: 2 [ 1446.193895][T18551] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1446.200809][T18551] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1446.501086][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1446.639249][T18151] udevd[18151]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1446.639383][T18110] udevd[18110]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1447.195977][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3845'. [ 1447.248417][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1447.261805][T18193] udevd[18193]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1447.262840][T18301] udevd[18301]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1448.343950][T18556] loop5: detected capacity change from 0 to 1764 [ 1448.851914][T18566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1448.875633][T18569] loop3: detected capacity change from 0 to 256 [ 1449.890931][T18569] FAT-fs (loop3): Unrecognized mount option "nonumtaûl=0" or missing value [ 1450.982941][T18577] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3852'. [ 1451.006619][T18572] udevd[18572]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1451.009392][T18564] udevd[18564]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1451.026284][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1451.061165][T18582] loop5: detected capacity change from 0 to 2048 [ 1451.663602][T18577] fuse: Bad value for 'fd' [ 1451.703310][T18582] Alternate GPT is invalid, using primary GPT. [ 1451.709580][T18582] loop5: p1 p2 p3 [ 1452.112130][T18595] netlink: 'syz.4.3855': attribute type 1 has an invalid length. [ 1452.291543][T18601] loop5: detected capacity change from 0 to 1024 [ 1452.324272][T18595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1452.481318][T18601] hfsplus: xattr searching failed [ 1452.499188][T18598] bond1: (slave dummy0): Releasing active interface [ 1452.545078][T18603] loop3: detected capacity change from 0 to 128 [ 1452.583813][T18598] bond2: (slave dummy0): making interface the new active one [ 1452.596711][T18151] udevd[18151]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1452.596832][T18110] udevd[18110]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1452.610585][T18572] udevd[18572]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1452.680694][T18598] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1452.772490][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1454.202854][T18616] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3860'. [ 1454.417291][T18620] loop5: detected capacity change from 0 to 1764 [ 1455.270096][T18624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1456.132564][T18628] loop3: detected capacity change from 0 to 1764 [ 1456.507311][T18095] udevd[18095]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1456.521508][T18151] udevd[18151]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1456.521606][T18564] udevd[18564]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1456.761398][T18151] udevd[18151]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1456.771673][T18572] udevd[18572]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1456.877244][T18564] udevd[18564]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1457.087594][T18633] loop5: detected capacity change from 0 to 4096 [ 1457.890380][T18633] ntfs3: loop5: Failed to load $MFT. [ 1458.378129][T18652] netlink: 'syz.3.3870': attribute type 1 has an invalid length. [ 1458.649965][T18652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1459.221419][T18656] bond1: (slave dummy0): Releasing active interface [ 1459.571948][T18656] bond2: (slave dummy0): making interface the new active one [ 1459.681670][T18656] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1459.795655][T12324] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1460.251347][T18667] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3875'. [ 1460.994205][T18672] loop3: detected capacity change from 0 to 1024 [ 1461.356451][T18672] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1461.610890][T18672] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #32: comm syz.3.3877: iget: special inode unallocated [ 1461.633347][T18672] EXT4-fs (loop3): no journal found [ 1461.638669][T18672] EXT4-fs (loop3): can't get journal size [ 1461.729355][T18672] EXT4-fs (loop3): filesystem is read-only [ 1461.744710][T18672] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1461.935248][T18682] xt_NFQUEUE: number of total queues is 0 [ 1463.151674][T18692] loop3: detected capacity change from 0 to 128 [ 1463.220741][T18693] loop5: detected capacity change from 0 to 512 [ 1463.495948][T18693] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1463.557926][T18693] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1464.325950][T18693] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #2: comm syz.5.3882: corrupted inode contents [ 1464.338673][T18693] EXT4-fs error (device loop5): ext4_dirty_inode:6039: inode #2: comm syz.5.3882: mark_inode_dirty error [ 1464.350983][T18693] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #2: comm syz.5.3882: corrupted inode contents [ 1464.363468][T18693] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.3882: mark_inode_dirty error [ 1464.962276][T18716] netlink: 'syz.5.3886': attribute type 1 has an invalid length. [ 1465.195930][T18716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1465.229639][T18718] device dummy0 entered promiscuous mode [ 1465.343532][T18718] bond1: (slave dummy0): making interface the new active one [ 1465.364468][T18718] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1465.373977][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1465.671792][T18725] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3889'. [ 1465.695679][T18725] loop5: detected capacity change from 0 to 1764 [ 1466.913780][T18749] loop3: detected capacity change from 0 to 512 [ 1469.434431][T12965] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1469.632857][T12965] Bluetooth: hci3: Injecting HCI hardware error event [ 1469.667350][T18749] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1469.762438][T18749] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1469.782817][T12956] Bluetooth: hci3: hardware error 0x00 [ 1471.114806][T18764] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3897: corrupted inode contents [ 1471.128495][T18764] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.3897: mark_inode_dirty error [ 1471.145401][T18764] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3897: corrupted inode contents [ 1471.159404][T18764] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.3897: mark_inode_dirty error [ 1471.303187][T18768] loop5: detected capacity change from 0 to 1024 [ 1472.245091][T18768] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1472.265092][T18768] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: inode #32: comm syz.5.3900: iget: special inode unallocated [ 1472.439884][T18768] EXT4-fs (loop5): no journal found [ 1472.511672][T18768] EXT4-fs (loop5): can't get journal size [ 1472.634826][T18768] EXT4-fs (loop5): filesystem is read-only [ 1472.641610][T18768] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1473.835224][T18795] loop5: detected capacity change from 0 to 1024 [ 1474.990294][T18795] hfsplus: xattr searching failed [ 1475.149483][T18796] netlink: 'syz.3.3902': attribute type 1 has an invalid length. [ 1476.943951][T18796] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1476.991964][T18801] bond2: (slave dummy0): Releasing active interface [ 1477.023932][T18801] bond3: (slave dummy0): making interface the new active one [ 1477.033462][T18801] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1477.052299][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1477.967362][T18816] loop3: detected capacity change from 0 to 512 [ 1479.103523][T18816] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1479.649398][T18816] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1479.715521][T18816] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3915: corrupted inode contents [ 1479.728193][T18816] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #2: comm syz.3.3915: mark_inode_dirty error [ 1479.740616][T18816] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #2: comm syz.3.3915: corrupted inode contents [ 1479.754636][T18816] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.3915: mark_inode_dirty error [ 1481.609009][T18857] netlink: 'syz.1.3927': attribute type 1 has an invalid length. [ 1481.625092][T18859] loop5: detected capacity change from 0 to 1024 [ 1481.667961][T18862] loop3: detected capacity change from 0 to 1024 [ 1481.685332][T18857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1481.699617][T18865] bond1: (slave dummy0): making interface the new active one [ 1481.709042][T18865] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1481.718947][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1481.734278][T18862] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1481.779162][T18859] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1481.830395][T18862] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #32: comm syz.3.3931: iget: special inode unallocated [ 1481.844599][T18859] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: inode #32: comm syz.5.3928: iget: special inode unallocated [ 1481.915210][T18859] EXT4-fs (loop5): no journal found [ 1481.920456][T18859] EXT4-fs (loop5): can't get journal size [ 1481.938154][T18859] EXT4-fs (loop5): filesystem is read-only [ 1481.972761][T18859] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1481.995441][T18862] EXT4-fs (loop3): no journal found [ 1482.048795][T18862] EXT4-fs (loop3): can't get journal size [ 1482.277468][T18862] EXT4-fs (loop3): filesystem is read-only [ 1482.449024][T18862] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 1587.922091][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1587.928774][ C0] rcu: 0-...!: (10500 ticks this GP) idle=315/1/0x4000000000000000 softirq=73355/73355 fqs=3 [ 1587.940989][ C0] (t=10502 jiffies g=102261 q=1) [ 1587.946028][ C0] rcu: rcu_preempt kthread starved for 10497 jiffies! g102261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1587.957323][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1587.967383][ C0] rcu: RCU grace-period kthread stack dump: [ 1587.973298][ C0] task:rcu_preempt state:R running task stack:26496 pid: 15 ppid: 2 flags:0x00004000 [ 1587.984105][ C0] Call Trace: [ 1587.987396][ C0] [ 1587.990341][ C0] __schedule+0x11b8/0x43b0 [ 1587.994876][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 1588.000269][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1588.006189][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1588.012104][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1588.017005][ C0] ? rcu_is_watching+0x11/0xa0 [ 1588.021789][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1588.027716][ C0] schedule+0x11b/0x1e0 [ 1588.031895][ C0] schedule_timeout+0x15c/0x280 [ 1588.036766][ C0] ? console_conditional_schedule+0x40/0x40 [ 1588.042680][ C0] ? update_process_times+0x200/0x200 [ 1588.048084][ C0] ? prepare_to_swait_event+0x331/0x350 [ 1588.053747][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 1588.058634][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1588.064803][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 1588.069587][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1588.074811][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1588.080020][ C0] rcu_gp_kthread+0x98/0x350 [ 1588.084632][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1588.089773][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1588.095684][ C0] ? __kthread_parkme+0x157/0x1b0 [ 1588.100730][ C0] kthread+0x436/0x520 [ 1588.104811][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1588.109943][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1588.114551][ C0] ret_from_fork+0x1f/0x30 [ 1588.119000][ C0] [ 1588.122034][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1588.128364][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1588.133584][ C1] NMI backtrace for cpu 1 [ 1588.133599][ C1] CPU: 1 PID: 18859 Comm: syz.5.3928 Not tainted 5.15.185-syzkaller #0 [ 1588.133614][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1588.133626][ C1] RIP: 0010:_raw_spin_lock_irq+0x9a/0xe0 [ 1588.133646][ C1] Code: 02 00 00 74 05 e8 a6 19 d3 f7 bf 01 00 00 00 e8 0c 94 a6 f7 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 75 08 e1 1a b1 f7 48 83 c4 08 48 89 df e8 35 6d b2 f7 48 c7 04 24 0e [ 1588.133663][ C1] RSP: 0018:ffffc90000dd0c78 EFLAGS: 00000046 [ 1588.133676][ C1] RAX: 0000000000010002 RBX: ffff8880b912a200 RCX: 0000000000000000 [ 1588.133687][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b912a218 [ 1588.133697][ C1] RBP: ffffc90000dd0d10 R08: 0000000000000001 R09: 0000000000000000 [ 1588.133706][ C1] R10: fffffbfff1ad157e R11: 1ffffffff1ad157d R12: ffff8880b912a290 [ 1588.133718][ C1] R13: 1ffff11017225452 R14: 1ffff920001ba190 R15: dffffc0000000000 [ 1588.133729][ C1] FS: 00007f8f54be06c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1588.133742][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1588.133752][ C1] CR2: 000020000006b000 CR3: 0000000069041000 CR4: 00000000003506e0 [ 1588.133765][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1588.133791][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1588.133802][ C1] Call Trace: [ 1588.133808][ C1] [ 1588.133813][ C1] ? __hrtimer_run_queues+0x5ff/0xc40 [ 1588.133832][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1588.133852][ C1] ? posix_timer_fn+0x2dd/0x3d0 [ 1588.133878][ C1] __hrtimer_run_queues+0x5ff/0xc40 [ 1588.133901][ C1] ? common_timer_wait_running+0x10/0x10 [ 1588.133924][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1588.133941][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1588.133961][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 1588.134001][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1588.134017][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1588.134035][ C1] [ 1588.134040][ C1] [ 1588.134045][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1588.134060][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 1588.134076][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 9a b1 f7 48 89 df e8 56 6f b2 f7 e8 a1 13 d3 f7 fb bf 01 00 00 00 86 93 a6 f7 65 8b 05 27 a3 57 76 85 c0 74 02 5b c3 e8 d4 ad 55 [ 1588.134089][ C1] RSP: 0018:ffffc90002eafbc0 EFLAGS: 00000282 [ 1588.134100][ C1] RAX: a95dfa0b9d14a400 RBX: ffff88802a4fdc80 RCX: a95dfa0b9d14a400 [ 1588.134111][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 [ 1588.134122][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100549fb91 [ 1588.134132][ C1] R10: ffffed100549fb91 R11: 1ffff1100549fb90 R12: ffff88802a4fdc80 [ 1588.134143][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 1588.134162][ C1] get_signal+0x11d6/0x12c0 [ 1588.134185][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 1588.134203][ C1] ? _copy_from_user+0x111/0x170 [ 1588.134221][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 1588.134241][ C1] ? load_gs_index+0x120/0x120 [ 1588.134258][ C1] ? get_sigframe_size+0x10/0x10 [ 1588.134284][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 1588.134303][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 1588.134320][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 1588.134338][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1588.134355][ C1] do_syscall_64+0x58/0xa0 [ 1588.134369][ C1] ? clear_bhb_loop+0x30/0x80 [ 1588.134382][ C1] ? clear_bhb_loop+0x30/0x80 [ 1588.134396][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1588.134414][ C1] RIP: 0033:0x7f8f56d78927 [ 1588.134432][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1588.134445][ C1] RSP: 002b:00007f8f54be00e8 EFLAGS: 00000246 [ 1588.134455][ C1] RAX: 00000000000000ca RBX: 00007f8f56f9ffa8 RCX: 00007f8f56d78929 [ 1588.134465][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f56f9ffa8 [ 1588.134475][ C1] RBP: 00007f8f56f9ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.134484][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f56f9ffac [ 1588.134494][ C1] R13: 0000000000000000 R14: 00007fffcceb5b40 R15: 00007fffcceb5c28 [ 1588.134511][ C1] [ 1588.134582][ C0] NMI backtrace for cpu 0 [ 1588.560627][ C0] CPU: 0 PID: 18862 Comm: syz.3.3931 Not tainted 5.15.185-syzkaller #0 [ 1588.568887][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1588.578963][ C0] Call Trace: [ 1588.582270][ C0] [ 1588.585144][ C0] dump_stack_lvl+0x168/0x230 [ 1588.589869][ C0] ? show_regs_print_info+0x20/0x20 [ 1588.595103][ C0] ? load_image+0x3b0/0x3b0 [ 1588.599661][ C0] ? try_to_wake_up+0x3d4/0x1050 [ 1588.604634][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 1588.609609][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1588.615814][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1588.621219][ C0] ? _raw_spin_lock+0x40/0x40 [ 1588.625927][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1588.632022][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1588.638044][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 1588.643193][ C0] print_cpu_stall+0x31d/0x5f0 [ 1588.647992][ C0] rcu_sched_clock_irq+0x6d8/0x1110 [ 1588.653229][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 1588.658113][ C0] ? account_process_tick+0x227/0x3a0 [ 1588.663509][ C0] update_process_times+0x193/0x200 [ 1588.668738][ C0] tick_sched_timer+0x37d/0x560 [ 1588.673626][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 1588.678871][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 1588.684461][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1588.689600][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1588.695696][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 1588.700688][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1588.706697][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1588.712355][ C0] [ 1588.715305][ C0] [ 1588.718253][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1588.724252][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 1588.729555][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 1588.749176][ C0] RSP: 0018:ffffc900031dfb20 EFLAGS: 00000206 [ 1588.755262][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: e297ddde42738c00 [ 1588.763257][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2460 RDI: ffffffff8a59a740 [ 1588.771245][ C0] RBP: ffffc900031dfc28 R08: dffffc0000000000 R09: fffffbfff1ff361f [ 1588.779238][ C0] R10: fffffbfff1ff361f R11: 1ffffffff1ff361e R12: ffff88807df51d28 [ 1588.787226][ C0] R13: 1ffff9200063bf70 R14: 0000000000000246 R15: dffffc0000000000 [ 1588.795233][ C0] ? __might_sleep+0xf0/0xf0 [ 1588.799838][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1588.805228][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 1588.810262][ C0] ? _raw_spin_unlock_irq+0x2a/0x40 [ 1588.815475][ C0] ? get_signal+0x1200/0x12c0 [ 1588.820170][ C0] __might_fault+0xb3/0x110 [ 1588.824686][ C0] ? __might_fault+0x90/0x110 [ 1588.829390][ C0] clear_user+0xd2/0x150 [ 1588.833657][ C0] copy_siginfo_to_user+0x57/0x80 [ 1588.838696][ C0] arch_do_signal_or_restart+0xd56/0x1300 [ 1588.844435][ C0] ? _copy_from_user+0x111/0x170 [ 1588.849411][ C0] ? get_sigframe_size+0x10/0x10 [ 1588.854391][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 1588.859882][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 1588.865187][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1588.870757][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1588.876236][ C0] do_syscall_64+0x58/0xa0 [ 1588.880675][ C0] ? clear_bhb_loop+0x30/0x80 [ 1588.885366][ C0] ? clear_bhb_loop+0x30/0x80 [ 1588.890060][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1588.895997][ C0] RIP: 0033:0x7f05faf25927 [ 1588.900433][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1588.920055][ C0] RSP: 002b:00007f05f8d8d0e8 EFLAGS: 00000246 [ 1588.926141][ C0] RAX: 00000000000000ca RBX: 00007f05fb14cfa8 RCX: 00007f05faf25929 [ 1588.934135][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f05fb14cfa8 [ 1588.942124][ C0] RBP: 00007f05fb14cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.950111][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05fb14cfac [ 1588.958104][ C0] R13: 0000000000000000 R14: 00007ffc3ea9d850 R15: 00007ffc3ea9d938 [ 1588.966212][ C0] [ 1589.012966][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1589.019367][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=27632 sent=0 n=-1 (errno 104: Connection reset by peer) [ 1590.869718][T18858] bond0: (slave syz_tun): Releasing backup interface [ 1591.133383][T18871] bond0: (slave syz_tun): Releasing backup interface [ 1591.347327][T15756] bond0: (slave syz_tun): Releasing backup interface [ 1591.489364][T15264] bond0: (slave syz_tun): Releasing backup interface [ 1591.545643][T14482] bond0: (slave syz_tun): Releasing backup interface [ 1591.617122][ T9195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.678033][ T9195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.749005][ T9195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.808256][ T9195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.906211][ T9195] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.979739][ T9195] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.034047][ T9195] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.098552][ T9195] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.214399][ T9195] device hsr_slave_0 left promiscuous mode [ 1593.221392][ T9195] device hsr_slave_1 left promiscuous mode [ 1593.230727][ T9195] device hsr_slave_0 left promiscuous mode [ 1593.237585][ T9195] device hsr_slave_1 left promiscuous mode [ 1593.244242][ T9195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1593.251661][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.260399][ T9195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1593.268217][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.276374][ T9195] device bridge_slave_1 left promiscuous mode [ 1593.283400][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.291909][ T9195] device bridge_slave_0 left promiscuous mode [ 1593.298669][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.313067][ T9195] device veth0_macvtap left promiscuous mode [ 1593.319226][ T9195] device veth1_vlan left promiscuous mode [ 1593.325096][ T9195] device veth0_vlan left promiscuous mode [ 1593.331711][ T9195] device veth1_macvtap left promiscuous mode [ 1593.337867][ T9195] device veth0_macvtap left promiscuous mode [ 1593.344261][ T9195] device veth1_vlan left promiscuous mode [ 1593.350147][ T9195] device veth0_vlan left promiscuous mode [ 1593.504331][ T9195] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1593.514082][ T9195] bond1 (unregistering): Released all slaves [ 1593.657945][ T9195] bond0 (unregistering): Released all slaves [ 1593.697379][ T9195] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1593.706403][ T9195] bond1 (unregistering): Released all slaves [ 1593.781531][ T9195] team0 (unregistering): Port device team_slave_1 removed [ 1593.799886][ T9195] team0 (unregistering): Port device team_slave_0 removed [ 1593.812712][ T9195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.826423][ T9195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.893286][ T9195] bond0 (unregistering): Released all slaves [ 1596.136885][ T9195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.181860][ T9195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.248556][ T9195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.289679][ T9195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.426525][ T9195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.478626][ T9195] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.538747][ T9195] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.588265][ T9195] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.688552][ T9195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.741715][ T9195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.788894][ T9195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.851699][ T9195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0