last executing test programs: 4m54.977612135s ago: executing program 0 (id=261): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r8, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) 4m51.75599359s ago: executing program 2 (id=266): syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000001400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm_detail={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$FUSE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f7000000", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xa8, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_LABELS_MASK={0x8, 0x17, [0x5ebd75d1]}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x15) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) 4m48.032001205s ago: executing program 0 (id=274): r0 = getpgrp(0x0) sched_setaffinity(r0, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') r3 = semget$private(0x0, 0x2, 0x0) semop(r3, &(0x7f0000000100)=[{0x1, 0x8, 0x1800}], 0x1) getgid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xffffffffffffffd1, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0xffffffc, {0x20000000000040, 0x8d08, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r5, 0x903, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, 0x0) 4m47.973570679s ago: executing program 2 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@remote, @in6=@private2, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0xa0, 0x1}, {0x2, 0x100000001, 0xffffffffffffffff, 0x7, 0x3, 0xc67d, 0x6, 0x32e}, {0x7fffffff, 0x4, 0x7, 0x2}, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d5}, 0x2, @in=@multicast1, 0x3501, 0x1, 0x1, 0x3b, 0x1c000, 0xd596, 0x4}}, 0xe8) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0xc000) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000100000", @ANYRES32, @ANYBLOB="00000400"], 0x28}}, 0x200080c2) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m47.671920936s ago: executing program 2 (id=278): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x3, 0x8d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000200)={[0x80000001, 0x7, 0x10000, 0x80000000, 0x1, 0xa, 0xc, 0x7, 0x10001, 0x6, 0x9, 0x2b5, 0x63, 0xe, 0x3, 0x8, 0x3c11, 0x4, 0x5, 0x4, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x7, 0x7, 0xa, 0x4ec0, 0x8, 0x1, 0x3ff, 0x1000, 0x80000000, 0x2, 0x8, 0xf4, 0x3, 0xa, 0x2, 0x3, 0x7, 0xc, 0x8, 0x7, 0x8, 0x3, 0x0, 0x99, 0x4, 0x8, 0x1000, 0x3, 0x4, 0x10, 0xffff0001, 0x1, 0x1, 0x9, 0x8, 0xf, 0xa, 0x7, 0x1, 0x5e3, 0x4, 0x5, 0x3, 0x7, 0x9, 0x1, 0x2, 0x5, 0x2, 0x8, 0x6, 0x2, 0x9, 0x7f, 0xffff, 0x91, 0xd, 0x7, 0x9, 0x7, 0x8000, 0x8, 0x50, 0xa000, 0x3ff, 0x432, 0x7, 0x7, 0x7, 0xc, 0x7, 0xb53, 0x7, 0x36c, 0xa9e, 0x3, 0xc5b, 0x1, 0x9, 0x4, 0x6, 0x6, 0x649, 0x9, 0x2, 0x8001, 0x3, 0xcb, 0x4, 0xb, 0x6, 0xfffffffb, 0xd, 0x5, 0x7, 0x1, 0xfffff800, 0x9, 0x0, 0xfffffe00, 0x7ff, 0x1, 0x62, 0xca, 0x5, 0x7, 0x6, 0x8c, 0x2, 0x7, 0x9, 0x26, 0x0, 0x1, 0xffffa042, 0xd1d, 0xd2c0, 0x7, 0x7, 0x10000, 0xf, 0x6, 0x8, 0x1, 0x9, 0x3, 0x6, 0x2, 0x9, 0x677, 0x40, 0x0, 0x9, 0x400, 0x0, 0x8000, 0xe, 0x8, 0x6, 0x9, 0x401, 0x40, 0xa, 0x3, 0x8, 0x437, 0x7fffffff, 0x8fae, 0x5, 0xf, 0x6, 0x8, 0x8, 0xf12, 0x91a, 0x7fffffff, 0x401, 0x7, 0x1, 0xf, 0x2, 0x4, 0x7f, 0x7ff, 0x5, 0x0, 0x40, 0x1000, 0x1, 0x0, 0x5, 0xb, 0x1000, 0xe750, 0x9, 0x8, 0xb58d, 0x3, 0x6e13800, 0x9, 0x8, 0x5, 0x0, 0xfffffff8, 0x3ff, 0x4, 0x26c, 0x0, 0x81, 0x4, 0x5, 0x7fff, 0xfffffff8, 0x2, 0x7ff, 0x1, 0x7f, 0x2, 0x10001, 0x7, 0x5, 0x10000, 0x59, 0x0, 0x3, 0x6, 0x9, 0x1, 0x0, 0x7, 0x0, 0x1, 0xe, 0x0, 0xcd, 0x2, 0x2598, 0x4, 0x4, 0xc9c, 0xd, 0x2, 0x5, 0x5, 0x5, 0x5, 0x0, 0x2, 0x7, 0x9, 0x6, 0x1, 0xfffffffc, 0x2c5, 0x7, 0x7, 0x2, 0x80000001, 0x6, 0x6504, 0x5, 0x110, 0x0, 0x6, 0x8, 0x35aa, 0x80000001, 0x100, 0x7d3, 0xffffff1d, 0x4, 0x0, 0x84e4, 0x0, 0x400, 0x7, 0x5, 0x2, 0x2, 0x100, 0x2, 0x1ff, 0x89, 0x5, 0xe, 0x2, 0x1000, 0xd76, 0x7f, 0x2, 0xfffffff0, 0x5, 0x22ef, 0x3, 0x401, 0x4, 0x1, 0x401, 0x8, 0xf89a, 0x4, 0x9e, 0xe714, 0xcf6f, 0x7fffffff, 0x5, 0xe, 0x9e, 0x4, 0x3, 0xf5, 0x8, 0x5, 0x18, 0x9a, 0x7fff, 0x6, 0x5, 0xb2fc, 0x4, 0x8, 0x8001, 0x5, 0x9, 0x0, 0x5, 0x101, 0xffffffff, 0x8, 0x4, 0xffffffff, 0xffffffff, 0x1, 0x7, 0x7fff, 0x4, 0x1, 0x2, 0xad21, 0x7, 0x1, 0xd, 0x200, 0x3, 0x8, 0x9, 0x1, 0x8001, 0x9, 0xd6f, 0x1, 0xa55, 0x101, 0x3, 0x1, 0x401, 0x2, 0x401, 0x9, 0x1, 0x9e45, 0x1000, 0x5, 0x3, 0x1ff, 0x8ffd, 0x8001, 0x2, 0x422, 0x7f, 0x34b, 0x50000000, 0x6, 0x1748, 0xfffffffe, 0x0, 0xffff, 0x800, 0x9, 0x7fffffff, 0xff, 0x5, 0xfe05, 0x0, 0x8, 0x5, 0xd, 0x8, 0x400, 0x9, 0x9, 0x9, 0x0, 0x800, 0x2, 0x1, 0x8, 0x6, 0x3ff, 0x8001, 0xe, 0x3, 0x3, 0x0, 0x4, 0x7, 0x800, 0x5b3, 0x7, 0x7fff, 0x1, 0xc, 0x0, 0x2, 0xd02e, 0x7796, 0x4, 0x2, 0x6, 0xbc9, 0x7, 0xffffff1e, 0x8e8, 0x1, 0x2, 0x800, 0xb, 0x0, 0x8, 0x401, 0x4, 0x6, 0xf4, 0xc, 0x6, 0xfffffffa, 0x1000, 0x1c05, 0x6, 0x10001, 0x2, 0x7, 0x4, 0x0, 0x7, 0xed, 0x8, 0x8, 0x4, 0x2, 0x8, 0x8, 0x6, 0xc2, 0x7, 0xb, 0xcb, 0x8b, 0x4, 0x200, 0x2, 0x5, 0x7, 0x2, 0x8, 0x0, 0x4d1, 0x3, 0xb30, 0x2, 0x923c, 0x7d0, 0x9, 0x4, 0x2, 0xffffffff, 0xb, 0x4, 0x57, 0x9, 0x0, 0x6, 0x5, 0x7b3e, 0xf2, 0x180f34bc, 0x0, 0x4, 0x3dde, 0x81, 0x7, 0xf8, 0x7, 0x5, 0x4, 0x4, 0x6, 0x6, 0x401, 0x5, 0x4, 0xfffffffa, 0x9, 0x1, 0x3, 0xfffffffd, 0x3, 0x5, 0xb, 0x3, 0x155c, 0x81d, 0x34, 0x7, 0x7, 0x4, 0x80000001, 0x81, 0x4, 0x1, 0x5ac7, 0x1, 0x7f, 0x0, 0x0, 0x8, 0x5, 0x48, 0xb85, 0x5, 0x2, 0x4, 0xa, 0x101, 0x1a, 0x401, 0x7fffffff, 0x0, 0x7, 0x3, 0x6, 0x6, 0x8, 0x210c8c47, 0x100, 0x401, 0x800, 0x0, 0xfffff121, 0x9, 0x3, 0x1, 0x634, 0x2, 0x0, 0x4e9, 0x6, 0x80000001, 0x8e38, 0x40, 0x5, 0x5, 0x400, 0xffffff80, 0x4, 0x2, 0x7f, 0x9, 0x5, 0x0, 0xc00, 0x1, 0x2, 0xfffffffd, 0x1, 0x3, 0x4, 0x2f29, 0x57c, 0x3, 0x865, 0x80000001, 0x80000000, 0x6, 0xfffffffa, 0x6, 0x1, 0x2, 0x9, 0x9, 0x6, 0x9, 0xffffffff, 0x6, 0x0, 0x5, 0x4, 0xffff, 0xfffffff7, 0x0, 0x4, 0x0, 0x7, 0x8, 0x0, 0xffffff2e, 0x6, 0x80000001, 0xbb62, 0xfffff801, 0x4cff, 0xa000, 0x4, 0x101, 0x5, 0x800, 0x4, 0x7, 0x1, 0x9, 0x8, 0x0, 0x4, 0xe, 0x3, 0x7, 0x81, 0x2, 0x2, 0x2, 0x4, 0x8, 0x5, 0x4, 0x0, 0x2, 0xfffffff7, 0x10000, 0x3, 0x5b, 0x400, 0x31c, 0x9, 0xbd11055, 0x7ff, 0x7a62b741, 0x80000000, 0x80000000, 0x2, 0x7fffffff, 0x4, 0x9, 0x81, 0x8, 0x8, 0x2, 0x35, 0x3, 0xcb, 0x2, 0x2, 0x9, 0x4, 0x6, 0xa08, 0x1, 0x2, 0x6d, 0x4, 0x8, 0x4, 0x8, 0x1, 0xffffffff, 0x4, 0x0, 0x7, 0x4, 0x4, 0xe, 0x1, 0xfff, 0x6, 0xc, 0x4, 0x3, 0x8001, 0x9b, 0x1, 0x0, 0x5, 0x0, 0xe6, 0x800, 0xb993, 0x80000000, 0x8, 0x9, 0x2, 0x3, 0x7ff, 0x1000, 0x9, 0x6, 0x3, 0x1ff, 0x2b288c37, 0x3, 0x1000, 0x5, 0x4, 0x400, 0x3, 0x9, 0x0, 0x4, 0x9, 0x9, 0x7, 0x4f9eafe8, 0x8, 0xfffffff9, 0x4, 0x7, 0x3, 0x8, 0xe1, 0x2a41268e, 0x3, 0x9, 0x5, 0x800, 0x0, 0x6, 0x81, 0x10, 0x6, 0x10001, 0x0, 0x5, 0x8000, 0x3, 0x0, 0x8001, 0x9, 0x8, 0x1ff, 0x1, 0x0, 0x7f, 0x80000001, 0x4, 0x4, 0xb, 0xfffffff7, 0x869, 0x0, 0x8001, 0x7, 0xd7eb, 0x7fff, 0xb5, 0x4, 0x9, 0x49, 0x9f, 0x8ae3, 0xc6, 0x8001, 0x1, 0x9b3d, 0xf97, 0x200, 0x0, 0x10, 0x5, 0x6, 0x5, 0x8, 0x0, 0x4, 0xffff, 0x6, 0x7, 0x0, 0x1, 0x4, 0x40, 0x3, 0x40, 0x6, 0x2, 0x6fa, 0xffffffff, 0x9, 0x6, 0xc3, 0xfffff29b, 0x9, 0x3, 0x200, 0x0, 0x2, 0x7ff, 0x7, 0x0, 0xd0000000, 0x9, 0x3b59, 0x1, 0x7, 0x3, 0xfffffff9, 0xd18, 0x5, 0xfffff801, 0x7, 0x590, 0x8000, 0x7, 0x2, 0x4f, 0x849, 0x7, 0x4, 0x7, 0xffffffff, 0x800, 0x0, 0xc, 0xc9f, 0x6, 0x80000000, 0x1, 0x5, 0x9, 0x1, 0x8, 0x3, 0x9, 0x4, 0x5, 0x55, 0x6, 0x4, 0x4b, 0x3, 0x9, 0x10001, 0x8, 0x7ba, 0x101, 0x8, 0x10, 0x0, 0x1000, 0xffffffff, 0x7, 0xffff, 0x4, 0x7a, 0x4, 0x3a, 0x7, 0x2, 0xffffffff, 0x0, 0xc0, 0x6, 0xda5, 0xb, 0x7, 0x74e, 0x9, 0x7, 0x8, 0x8, 0xfffffffc, 0xe000, 0x7, 0x1, 0xd0, 0x6, 0x8, 0x8e8, 0xf, 0x1, 0xe, 0x6, 0xe8fb77a8, 0x2, 0x80000000, 0x4, 0x9, 0x1a3e, 0x9, 0x3640d867, 0x4, 0x9f58, 0x5, 0x6, 0x6, 0x0, 0xd, 0x3, 0xd, 0xffff466b, 0x23, 0x2, 0x3, 0x3, 0x3, 0x5f, 0x1, 0x1d000000, 0x8001, 0x4, 0x7fffffff, 0x2, 0xc, 0x7, 0x9, 0x2, 0x7, 0x9, 0xfffffffb, 0x6ebf, 0x8001, 0xfffffc01, 0x3, 0x7, 0x2, 0xb, 0x4, 0x401, 0x0, 0x8, 0x28000000, 0x8, 0x5, 0xad, 0x4, 0x68cc, 0x5, 0x7ff, 0x8, 0xdf, 0x8, 0x7, 0x0, 0x4, 0x800, 0x1bcf, 0x7, 0x3, 0x6, 0x8f6, 0x2, 0xffff7fff, 0x1, 0x5, 0xf5c2, 0x2, 0x80, 0xe1, 0x3ff, 0x0, 0x0, 0x0, 0x2800, 0x6, 0x4ea2, 0x4, 0x0, 0x4, 0xfb, 0xfffffffc, 0x2, 0x6, 0x800, 0x9, 0xfffffffe, 0x5, 0x7, 0x6, 0x9, 0x10000, 0xfffffff8, 0xfffffffa, 0xeae1, 0x0, 0x7, 0x8, 0x3ff, 0x2, 0x1, 0xf1, 0x7, 0x4, 0x5, 0x9, 0x6, 0x5, 0x8001, 0x2b31, 0x48ee, 0x9, 0x6, 0x7, 0x1, 0x5, 0x8, 0xfffffffb, 0x3, 0x64e2, 0x50, 0x8, 0x4, 0x9, 0x3]}) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000080)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', r6}, 0x94) 4m46.063644608s ago: executing program 0 (id=281): socket$packet(0x11, 0x3, 0x300) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m42.73989922s ago: executing program 0 (id=285): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m42.609691458s ago: executing program 2 (id=286): syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000001400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm_detail={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='environ\x00') read$FUSE(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f7000000", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xa8, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0x4}, @CTA_LABELS_MASK={0x8, 0x17, [0x5ebd75d1]}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x15) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'pim6reg\x00'}) 4m41.624931684s ago: executing program 0 (id=288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@remote, @in6=@private2, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0xa0, 0x1}, {0x2, 0x100000001, 0xffffffffffffffff, 0x7, 0x3, 0xc67d, 0x6, 0x32e}, {0x7fffffff, 0x4, 0x7, 0x2}, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d5}, 0x2, @in=@multicast1, 0x3501, 0x1, 0x1, 0x3b, 0x1c000, 0xd596, 0x4}}, 0xe8) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0xc000) sendmsg$nl_route_sched(r2, 0x0, 0x24040084) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000100000", @ANYRES32, @ANYBLOB="00000400"], 0x28}}, 0x200080c2) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m41.194833519s ago: executing program 0 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@remote, @in6=@private2, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0xa0, 0x1}, {0x2, 0x100000001, 0xffffffffffffffff, 0x7, 0x3, 0xc67d, 0x6, 0x32e}, {0x7fffffff, 0x4, 0x7, 0x2}, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d5}, 0x2, @in=@multicast1, 0x3501, 0x1, 0x1, 0x3b, 0x1c000, 0xd596, 0x4}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x200080c2) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x2, 0x0, 0x32}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m38.257732819s ago: executing program 2 (id=295): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x100000000, 0x80000) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x4042, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setopts(0x4206, r4, 0x3, 0x42) shmctl$IPC_RMID(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r6, &(0x7f0000000080), 0x1004) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0xffffffff}) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000180)={0x8, {"2ac38e4efcac6dfa719e63f0d3fe13be", "3500000000000000bbf4ffff00", "47eb3a0900002980da92927b129f992a"}, 0x4, 0x5}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) 4m35.868270826s ago: executing program 2 (id=296): syz_io_uring_setup(0x2afc, 0x0, &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x1fffc, 0x400000, 0x100}, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x3}, 0x10) getpeername$llc(r3, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x97, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4m26.134008048s ago: executing program 32 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@remote, @in6=@private2, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x80, 0xa0, 0x1}, {0x2, 0x100000001, 0xffffffffffffffff, 0x7, 0x3, 0xc67d, 0x6, 0x32e}, {0x7fffffff, 0x4, 0x7, 0x2}, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4d5}, 0x2, @in=@multicast1, 0x3501, 0x1, 0x1, 0x3b, 0x1c000, 0xd596, 0x4}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x200080c2) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x2, 0x0, 0x32}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m20.640276074s ago: executing program 33 (id=296): syz_io_uring_setup(0x2afc, 0x0, &(0x7f0000000400), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x1fffc, 0x400000, 0x100}, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0xee01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x3}, 0x10) getpeername$llc(r3, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x97, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m42.675201051s ago: executing program 6 (id=534): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) 2m42.221629808s ago: executing program 6 (id=536): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000140)={[{@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000280)=0x3, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) 2m41.063719624s ago: executing program 6 (id=539): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCGETS(r2, 0x8926, &(0x7f0000000180)) 2m36.064154243s ago: executing program 6 (id=551): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x8, 0x2, 0x3004}, 0x50) close(0x3) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e0cff1c20"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) write(r1, &(0x7f0000000000)="2e000000010002", 0x7) 2m33.804157243s ago: executing program 6 (id=556): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES64], 0x0, 0x1cc, &(0x7f00000006c0)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2m33.385485937s ago: executing program 6 (id=560): write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 2m17.55361755s ago: executing program 34 (id=560): write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 14.268813297s ago: executing program 4 (id=924): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) writev(r6, &(0x7f00000005c0)=[{&(0x7f00000004c0)='F', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.046337658s ago: executing program 4 (id=928): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x650ce4b086bd440d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.816839151s ago: executing program 5 (id=930): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da91", 0x73}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0) 12.288166801s ago: executing program 5 (id=932): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x5}, {0x2, 0x4, 0x1800}], 0x2, 0x0) semop(r1, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r1, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000008c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r7, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0xb00, 0x0) pipe2$9p(&(0x7f0000000800), 0x84880) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000001c0)={0xb0000000}) 11.034258574s ago: executing program 5 (id=935): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) 9.599845957s ago: executing program 7 (id=941): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\t\t'}]}, 0x11) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000080)={'nr0\x00', 0x5, 0x5}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}, {&(0x7f0000000200)={0xad4, 0x24, 0x1, 0x70bd28, 0x25dfdbfc, "", [@generic="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", @generic="43e74ae9a18e6d1006d21345ff36206051edf3324bcd6f748e8329de8bf43210fe758f7258080e023838add69aa6b9fc9670c8b2d5c21127f32f99cdcb71a24f25dc97a53e080c7f7a9859a62bf8b94c9bed00992a036052653ccf25c3a6a25f495c4d822e1e8737bc4b0333cafcceeac639fa1bf32adf6ed8b77e7f709ac7f9", @generic]}, 0xad4}], 0x2}, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9.431032106s ago: executing program 1 (id=942): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da91", 0x73}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 9.430235046s ago: executing program 7 (id=943): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x400000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x3, 0x1}) close_range(r7, 0xffffffffffffffff, 0x0) 9.145758803s ago: executing program 1 (id=944): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) fsetxattr$security_capability(r0, &(0x7f0000003840), 0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) connect(r2, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000100), 0x4044804) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x28043) ioctl$CEC_S_MODE(r4, 0x40046109, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000140)=0xd0) 8.932792605s ago: executing program 7 (id=945): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x100000000, 0x80000) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x4042, 0x0) mmap$fb(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x4010, r3, 0x59000) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setopts(0x4206, r5, 0x3, 0x42) shmctl$IPC_RMID(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, r7, &(0x7f0000000080), 0x1004) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0xffffffff}) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000180)={0x8, {"2ac38e4efcac6dfa719e63f0d3fe13be", "3500000000000000bbf4ffff00", "47eb3a0900002980da92927b129f992a"}, 0x4, 0x5}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) 7.97082142s ago: executing program 7 (id=946): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x3, 0x8d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', r5}, 0x94) 7.743147103s ago: executing program 4 (id=947): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4004a040) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) timer_settime(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a800000000000000000000008000400", @ANYBLOB="08000300", @ANYRES32=0x0], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x2400c007}, 0x4048004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000082005400000000d140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 7.339187437s ago: executing program 1 (id=948): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x631c, &(0x7f00000027c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x85a4c8, 0x0, 0xff, 0x0, &(0x7f0000000040)) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000540)={0x0, 0x6}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./bus\x00', 0x0, 0x18}, 0x18) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) r2 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4c0000001300ff09fffd956fa283b700008c0e440000000002007d3540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r5, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) 6.543482003s ago: executing program 4 (id=949): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x650ce4b086bd440d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 6.333738565s ago: executing program 3 (id=950): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) writev(r6, &(0x7f00000005c0)=[{&(0x7f00000004c0)='F', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.360174291s ago: executing program 3 (id=951): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) 5.109619546s ago: executing program 3 (id=952): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) ioctl$BLKDISCARD(r1, 0x1277, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r2, 0xa0a4e000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = eventfd(0x4100) r8 = eventfd2(0xd, 0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r7, 0x3b, 0x2, r8}) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x30, 0xf5) 5.005202541s ago: executing program 4 (id=953): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x40, 0x0, 0x4, "c4244ae4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000140)={0x0, 0x0, 0x2, '\x00\v'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000002c80)={0x84, &(0x7f0000002800)={0x40, 0xc, 0x1, "95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000580)={0x20, 0x17, 0x4, "0a11c24e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000001080)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="203e4900000049034cfdffbfa768f0d8f7b2243a783ecdff5d1d85f39d35e26ea98cf0cb994e0f5fc76993a9db826179a0697cbe42834d8c38add051b38ab947f49606943065be547c66f98294905a"], &(0x7f0000000f80)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "88b1ea35763dd63cdcbb2fe060680846ba2ee3a5fdfd00f6ebaef20553233408c3aeeefbdf08c04b93e64d8abd5a18485a8aae223760ee67db3f6f870a82222c2c5b3b1ac181116283d5a0abfe232e71e5272e96f92944dbd7fd5293cdde313ec21e28eaa5ebbef40115ff61e166a4722f1e600fb9456f3bbebe29085457d2f055db09b89150a4d6cc219308782809633a7c38e77a763c30f85f44357dafe3fca501ae7566524a6f88c3e51fe97180efd36168d691241b28ec3f05dbc0397ebacc3c854e40f7758ffd9e7622392513698d3c8b4a0a0d"}}}, &(0x7f0000001580)={0x1c, &(0x7f00000010c0)={0x20, 0xe, 0x2a, "ce0cecdf25e5f82b859dd2efac340d313cd9945b81630a5ba417721080377fdb999c42d915d294b6d607"}, &(0x7f0000001100)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001540)={0x21, 0x0, 0x3, '+nn'}}) removexattr(&(0x7f0000000080)='./file2\x00', &(0x7f0000000140)=@known='system.advise\x00') r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$eJzs3EtvVFUcAPD/nbaUCtiKTx7KKBobjZSW58IFEE3YmJhoDC5rWwhSwNCaAGmkGAOJCw2fwMfOxE/gSjdGjQuNW4lbY0JMN6ALc82duVOnvZ2+mHYs/f2SGc6999w55z/3HuY8ZhrAulXOnpKIzRHxa0R0VzdnZihX/7kzNTH019TEUBJp+tqfSSXf7amJoVrW2nmb8o3eUkTpgyR2FIvtHLt0+czg6OjIhXxH33gpT50dPDVyauTcwOHD+/d1HTo4cKApcWZ1ur39vfM7tx1/88YrQyduvPX9l1l90/x4fRxVPZXnDYsuoa2wpxzlme9lnWcWX/U1YUtdOmnPnkutqwyLlt212eXqqLT/7mirbFV1x8vvt7RywIpK0zTtLOyd/iybTOslSfWENL2aAveAJFpdA6A1ah/0t6eykerEUHEcfG+7dTQqI6As7jv5o3qkvTKCLfdUx0YdK1T+QxFxYvLvT7JHzDkPAQDQXF8fjbh+rNrvqD2qR0rxSF2++/O1oZ6IeCAitkbEg3n/5eGISt5HI+KxunM2L2IVoDxru9j/+bkrT9R3V5sm6/+9mK9tzez/Tde8py3f2lKJvyM5eXp0ZG/+nvRGR2e23V986elptW9e+uXjRuWX6/p/2SMrv9YXzOvxR/usCbrhwfHBu4275tbVyht7pRh/Eu1JLRWxLSK2L+P1s/fs9HNf7Gx0fEb8WZyF+D9q/OLty6jQLOlnEc9Wr/9kzIo/8vW/pLI+efadvrFLl184Xb8+2X/o4MCBvo0xOrK3r3ZXFP3w07VX82RhGDHP9a81jRVdSMuu/31z3v/TK5c9WWp6vXZs6WVcu3m94Zhmuff/huT1Srq2PntxcHz8Qn/EhmSyuH/gv3MvDnbNyJ/F37t77va/NeKfT/PzdkREdhM/HhFPRMSuvO5PRsRTEbF7nvi/O/b0242GkAvHv7Ky+IeXdP0bJY78GDH3obYz335VKPjDciH+jmh0/fdXUr35nuHB8Y0LxTVfTesTd/0GAgAAwBqwqzJPm5T25BNNm6NU2rMnYtP0DMrY+PMnz797brg6n9sTHaXaTFd33Xxofz43nG1nZw3UbWfH91XmjdM0Tbuy7Wz8PrqltaHDurepQfvP/F78SQtwr1nSOlqjX7QBa9Ls9n9z0Wc2/wsZwOpqwvdogDVK+4f1a9Htf6V+BQe0zFzt/0rEnRZUBVhlc7X/Nwp7jqxKXYDVZfwP69fy278vA8Ba5/Mf1qVF/Uh+GYmtx+fJk7SvTKGNE6WY/68A9ETU9tT6NPO/4G+liObUsK2pkXbNuKalOfNsjGaUFaUF87Qv4Q8xrG6i9P+oRjXRGREL3L3TN9uVWuLySles0gg+b+3/TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfv3wAAAP//C4DT6g==") ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x0, 0xc, 0x1, 0x8440}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000007000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsuid(r1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) 4.790363264s ago: executing program 3 (id=954): syz_open_dev$dvb_frontend(0x0, 0x81, 0xc1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="f0000000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100000000000000000000000000010000000000000000000000000000000000000000000011000000000000000000001000000000000000000000000000edf60000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000004000000002000000cd00000000000000"], 0xf0}}, 0x800) recvmmsg(r0, 0x0, 0x0, 0x60, &(0x7f0000019500)={0x77359400}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000019400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0) socket$tipc(0x1e, 0x2, 0x0) shutdown(r0, 0x1) syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x51c900) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140), 0x4) read$dsp(r2, &(0x7f00000001c0)=""/95, 0x5f) 3.765628373s ago: executing program 7 (id=955): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x400000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x3, 0x1}) close_range(r7, 0xffffffffffffffff, 0x0) 3.617876012s ago: executing program 5 (id=956): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) unshare(0x68040200) 3.29159583s ago: executing program 1 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)=@newqdisc={0x204, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1d4, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0xc8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x2, 0x3e}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x7, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xffffdb68, 0xf, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x1, 0x8, 0x85bc, 0x1ff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x8000000, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x5, 0x7, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4794826, 0x3, 0x2, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x8, 0x50195274, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x0, 0x59, 0x2}}]}, @TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x7, 0xfffff000, 0x3a2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4, 0x3, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x7, 0x200, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffff54, 0x3, 0x1, 0x3c9, 0xc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x9, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x204}}, 0x0) 3.2898788s ago: executing program 7 (id=958): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) capset(0x0, 0x0) getpriority(0x0, r1) 1.601970768s ago: executing program 5 (id=959): syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x6c, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}], "84269064e02fda16d3040d75ff1ade9eb0791cfba6ee74ae33d9777c01c6838c14"}, 0x79) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x8001020, r1, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000300)=0x1c, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f000000a040)=[{{&(0x7f00000015c0)={0xa, 0x4e22, 0x76, @ipv4={'\x00', '\xff\xff', @empty}, 0xd1fc}, 0x1c, 0x0, 0x0, &(0x7f0000002800)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xb}}, @rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x2, 0x2}}}], 0x30}}, {{&(0x7f0000003a00)={0xa, 0x4e20, 0xf, @mcast1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000004140)=[@dontfrag={{0x14, 0x29, 0x3e, 0xffffad2c}}], 0x18}}], 0x2, 0x4000) 1.575363619s ago: executing program 1 (id=960): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4004a040) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) timer_settime(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a800000000000000000000008000400", @ANYBLOB="08000300", @ANYRES32=0x0], 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x2400c007}, 0x4048004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000082005400000000d140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 1.55371903s ago: executing program 4 (id=961): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x0, 0x0, 0x3, 0xffff, 0xa, 0x2, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 1.535713701s ago: executing program 3 (id=962): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, 0x0}) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r2, 0x3, 0x11, r1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r1, r3, 0xe2e20001) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) lstat(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000c80)={[{@umask={'umask', 0x3d, 0xe}}, {@nobarrier}, {@uid}, {@nobarrier}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'iso8859-13'}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '(&t-[$)@{^#'}}]}, 0x0, 0x6ff, &(0x7f0000000500)="$eJzs3U1sHGf5APBn1uu1N5XcbZu0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRhN9Pmp13Zt6PZ57OvN6dbbQB/M9afDsmtyOJxQtvbaXbD3bqzQc79dWiHBFTEVGKKLdXkaxFJJ9FXI32Ev+X7sy7S/Yb542Hn354/v7H9fZWOV+y+qVh7Xa1hoywnS8xGxET+XpM5f36ux5vDvR3b6yuk07cacLOFYmDk9YasD1O8xHuW+BJdy9iYnKP/bWIUxExnb8PiHx2KB1zeIdurFkOAAAAnkwTB1V4/lE8iq2YOZ5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NmQtH8zMMmXUlGejaT4/f9Kvi9VqZxwvMN95YDjH9w8pkAAAAAAAAAA4Eh8kn9xf/ZRPIqtmCn2t5LsO//Xso3T2etz8V5sxFKsx8XYikZsxmasx3zE5ExXh5Wtxubm+vxgy19H2rLVat3LWy5ERG2g5cI+gZYO+cQBAAAAAAAA4Nn0k1iMmZMOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuiURE+1VtpwuyrUolSNiOiIqab3tiD8V5afZn086AAAAADh61Xw9k/ynXWgl2Wf+l7PP/dPxXqzFZizHZjRjKW5kzwLan/pLf9+uNx/s1FfTZbDjb/9rrDiyHiNiIt7fZ+S5rMaZTovF+G58Py7EbFyL9ViOH0YjNmMpZqOankQ0Iolatf30olbEuXe8V3u2rvXHdrZv+9UskmrcjOUstotxvRLtxybZOaRjvto12h8qEX0jvp9mJ/lWbsQc3ej67/Wr/LlMrvX8iH0cjVp25pOdjMyluc+z8cLw3I95nfSPNB+lzjOo07ujpJv9IxU5/8E4OT/VXk2nLz/vzflhG/NRWn8mFqKUX30RL/fm/PYX77/Y2/jL//jLtVultZVbNzcuHOEpPY7ZgypMFoX+TNS7MvHK8Ksvz0QzzcT26JmY7N8xPWrLo1XJs5FNRSPOlt/JSo14resSfDduxFJcjrmYjysxF9+Ihah3rrB0OdOT13J9tTcn2b1WGpzfqkOCP/elrkq/OKDy8Urz8kJXXrtnulp2LN9z9Zcx13X1vTj86hv7r0A6/v/n5XSMn3b+4jwJejKRz81FdC8Nz8RvWunrRnNtZf1W4/aI453P1+lt+0Hv3Pzb0aPu/+t+GNLrJZ1xy9lWlpNqcb2kx17qRNubr0r+jUu7XWng2JnOsVrMxHJ8b987tZK/hxvsqX3sle5j/9ydOSv5+5viWM+7nHg3mtm7kD4HTtUAHLNTr5+qVB9W/1b9qPqz6q3qW9NvTl2Z+kIlJv9a/uPE70u/K30zeT0+ih/HzElHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4KNO3dXGs3m0nqnENP9ex63UNl3rOGFKB1YZ+e50TqMWsTwsZK8UDncc38aC9Xo21P8wtLj9vxJRAypU3ns4JOxr7GxC2keDqXDVqud1GxPa2KM5uWi1d51yrExHSuNpLzHHTe1exdEbaXR/Herp3k1um4Z4Bl3aXP19qWNO3e/urzaeGfpnaW1hSuXr1yuf33+a5duLjeX5tqvJx0lcBQ27tyd2GP3wC/dAgAAAAAAAAAAAE+O/P/+3/zc/5ihfECdyvrG3iOfPe5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5Si2/H5HYkMT93cS7dfrBTb6ZLUd6tWY6IUkQkP4pIPou4Gu0lal3dJfuN88bDTz88f//j+m5f5aJ+aVi70WznS8xGxES+PtjUHt0M9ne9q7/tzxVe0jnDNGHnisTBSftvAAAA//9u//cB") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) clock_adjtime(0x0, &(0x7f0000000000)={0x3fc, 0x4, 0x0, 0xc, 0x7d45, 0x4000000000000000, 0x5, 0x200000000000000, 0x0, 0x0, 0x0, 0x204, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8001000, 0x8, 0x2, 0x7, 0xffffeffffffffffa, 0x7}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r6, 0x25, 0x2, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x29229, 0x5c56}}, 0x20}}, 0x0) syz_kvm_assert_syzos_uexit$x86(r1, r3, 0xffffffffffffffff) 39.467727ms ago: executing program 3 (id=963): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x650ce4b086bd440d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 740.31µs ago: executing program 5 (id=964): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) ioctl$BLKDISCARD(r1, 0x1277, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r2, 0xa0a4e000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = eventfd(0x4100) r8 = eventfd2(0xd, 0x1) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000000c0)={r7, 0x3b, 0x2, r8}) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x30, 0xf5) 0s ago: executing program 1 (id=965): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x3, 0x8d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', r5}, 0x94) kernel console output (not intermixed with test programs): 1, 0] type 2 family 0 port 6081 - 0 [ 225.098826][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.115029][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.144828][ T5467] device bridge_slave_1 entered promiscuous mode [ 225.219916][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.409402][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.509833][ T5539] misc userio: No port type given on /dev/userio [ 225.543904][ T5539] netlink: 56 bytes leftover after parsing attributes in process `syz.4.333'. [ 225.720413][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.266126][ T5467] team0: Port device team_slave_0 added [ 226.349018][ T5504] chnl_net:caif_netlink_parms(): no params data found [ 226.544132][ T5467] team0: Port device team_slave_1 added [ 226.576053][ T4441] Bluetooth: hci1: command 0x040f tx timeout [ 226.645753][ T5548] misc userio: No port type given on /dev/userio [ 227.430541][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.454357][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.674992][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.767578][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.775584][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.862971][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.698840][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 229.858715][ T5575] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 229.866343][ T5575] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 230.673546][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.692658][ T5504] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.724539][ T5504] device bridge_slave_0 entered promiscuous mode [ 230.767485][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.835182][ T5504] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.858558][ T5504] device bridge_slave_1 entered promiscuous mode [ 230.905234][ T5467] device hsr_slave_0 entered promiscuous mode [ 230.938102][ T5467] device hsr_slave_1 entered promiscuous mode [ 230.977079][ T5467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.997270][ T5467] Cannot create hsr debugfs directory [ 231.133403][ T5504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.200812][ T5504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.413068][ T5504] team0: Port device team_slave_0 added [ 231.479766][ T5504] team0: Port device team_slave_1 added [ 231.495014][ T4297] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 231.688460][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.724242][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.821493][ T5504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.857073][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.864073][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.876132][ T4297] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 231.944234][ T4297] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.975196][ T4297] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 232.065367][ T4297] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.085397][ T5504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.095449][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 232.124421][ T4297] usb 5-1: SerialNumber: syz [ 232.345937][ T5467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.468917][ T5467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.494276][ T5467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.527020][ T5504] device hsr_slave_0 entered promiscuous mode [ 232.545133][ T5504] device hsr_slave_1 entered promiscuous mode [ 232.555587][ T5504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.563205][ T5504] Cannot create hsr debugfs directory [ 232.615947][ T5467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.737944][ T4297] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 232.795291][ T4297] usb 5-1: USB disconnect, device number 3 [ 233.215764][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.248661][ T154] device hsr_slave_0 left promiscuous mode [ 233.299564][ T154] device hsr_slave_1 left promiscuous mode [ 233.326663][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.334187][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.406293][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.442248][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.477594][ T154] device bridge_slave_1 left promiscuous mode [ 233.567180][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.672269][ T154] device bridge_slave_0 left promiscuous mode [ 233.722053][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.874445][ T154] device veth1_macvtap left promiscuous mode [ 233.887791][ T154] device veth0_macvtap left promiscuous mode [ 233.894181][ T154] device veth1_vlan left promiscuous mode [ 233.910543][ T154] device veth0_vlan left promiscuous mode [ 235.419874][ T5652] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 235.427720][ T5652] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 236.667457][ T154] team0 (unregistering): Port device team_slave_1 removed [ 236.907897][ T154] team0 (unregistering): Port device team_slave_0 removed [ 236.961832][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.014323][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.165286][ T154] bond0 (unregistering): Released all slaves [ 237.535616][ T5467] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.597648][ T5504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.631592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.641859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.702462][ T5676] misc userio: No port type given on /dev/userio [ 238.391682][ T5504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.443454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.458464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.484338][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.491539][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.508657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.523469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.565136][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.572360][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.625082][ T5504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.663328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.681217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.739209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.811770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.858900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.875855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.249951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.904052][ T5699] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 239.911686][ T5699] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 240.804679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.864599][ T5467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.898773][ T5467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.007571][ T5504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 241.298350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.348319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.408875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.459440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.519520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.513680][ T5504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.562775][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.571753][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.613774][ T5504] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.657508][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.666429][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.699346][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.737655][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.771826][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.823702][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.830882][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.875364][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.895571][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.917481][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.924594][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.006062][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.033131][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.042872][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.066470][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.120564][ T5740] misc userio: No port type given on /dev/userio [ 243.657454][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.756001][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.911656][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.943736][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.000481][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.046966][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.086994][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.131541][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.181561][ T5504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.675325][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.705799][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.789421][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.804669][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.866317][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.874276][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.914016][ T5467] device veth0_vlan entered promiscuous mode [ 244.985893][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.993730][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.024576][ T5467] device veth1_vlan entered promiscuous mode [ 245.054199][ T5504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.478469][ T5778] sp0: Synchronizing with TNC [ 246.110657][ T5467] device veth0_macvtap entered promiscuous mode [ 246.124659][ T5467] device veth1_macvtap entered promiscuous mode [ 246.143177][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.154059][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.164582][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.204682][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.215132][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.226382][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.236306][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.274932][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.302319][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.316793][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.333360][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.518054][ T5789] Zero length message leads to an empty skb [ 246.903774][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.917282][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.931566][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.949932][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.965987][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.981037][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.072233][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.125088][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.264147][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.313368][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.376790][ T5799] misc userio: No port type given on /dev/userio [ 247.454005][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.648255][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.088230][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.163886][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.199278][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.214747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.263052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.314794][ T5467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.344236][ T5467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.386226][ T5467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.395604][ T5467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.767683][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.787077][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.917240][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.963590][ T5504] device veth0_vlan entered promiscuous mode [ 249.973676][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.021076][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.047515][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.079033][ T5840] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 250.129696][ T5504] device veth1_vlan entered promiscuous mode [ 250.175016][ T5840] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 250.572736][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.988226][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.042958][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.082493][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.158420][ T5845] sp0: Synchronizing with TNC [ 251.228697][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.320635][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.343087][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.592577][ T5855] misc userio: No port type given on /dev/userio [ 252.558054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.572516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.587295][ T5504] device veth0_macvtap entered promiscuous mode [ 252.611790][ T5504] device veth1_macvtap entered promiscuous mode [ 252.734649][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.783377][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.810401][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.832857][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.853449][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.374764][ T5880] nvme_fabrics: unknown parameter or missing value 'd:' in ctrl creation request [ 254.555001][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.575020][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.615736][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.627493][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.640891][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.661594][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.680144][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.761625][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.770910][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.813941][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.853885][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.869016][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.885165][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.928891][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.968949][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.002839][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.044671][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.081961][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.106963][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.142639][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.164795][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.199804][ T3039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.231375][ T5504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.260804][ T5504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.311422][ T5504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.341459][ T5504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.098079][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.104529][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.988795][ T3039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.033395][ T3039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.124422][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.758664][ T5929] device syzkaller0 entered promiscuous mode [ 259.786078][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.807572][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.899602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.684829][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.698186][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.983062][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.176858][ T5995] device syzkaller0 entered promiscuous mode [ 265.375446][ T4846] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 265.776482][ T4846] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 265.821626][ T4846] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.892356][ T4846] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 266.046824][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.146046][ T4846] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.169186][ T4846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 266.177550][ T4846] usb 4-1: SerialNumber: syz [ 269.066490][ T4846] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 269.123434][ T4846] usb 4-1: USB disconnect, device number 4 [ 271.015212][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 273.998632][ T6084] nvme_fabrics: unknown parameter or missing value 'd:' in ctrl creation request [ 277.085415][ T4846] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 277.493153][ T4846] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 277.536882][ T4846] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.658869][ T4846] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 277.947991][ T4846] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.070144][ T4846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.289909][ T6114] loop4: detected capacity change from 0 to 128 [ 278.348893][ T4846] usb 7-1: SerialNumber: syz [ 278.567207][ T6114] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.673448][ T154] device hsr_slave_0 left promiscuous mode [ 278.698691][ T154] device hsr_slave_1 left promiscuous mode [ 278.733883][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.757740][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.780445][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.816115][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.845456][ T154] device bridge_slave_1 left promiscuous mode [ 278.910580][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.955768][ T154] device bridge_slave_0 left promiscuous mode [ 278.981549][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.996047][ T6130] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 279.020943][ T6130] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 279.049898][ T154] device veth1_macvtap left promiscuous mode [ 279.087710][ T154] device veth0_macvtap left promiscuous mode [ 279.114164][ T154] device veth1_vlan left promiscuous mode [ 279.137164][ T154] device veth0_vlan left promiscuous mode [ 279.236138][ T4846] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 279.292064][ T4846] usb 7-1: USB disconnect, device number 2 [ 283.309831][ T154] team0 (unregistering): Port device team_slave_1 removed [ 283.368185][ T154] team0 (unregistering): Port device team_slave_0 removed [ 283.434215][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.494512][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.378981][ T154] bond0 (unregistering): Released all slaves [ 287.803717][ T6171] loop5: detected capacity change from 0 to 4096 [ 287.845230][ T6171] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 288.035655][ T6179] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 288.043186][ T6179] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 288.137676][ T6171] ntfs3: loop5: Failed to load root. [ 288.384954][ T13] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 288.795268][ T13] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 288.878657][ T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.180658][ T13] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 291.193775][ T13] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.264972][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 291.314917][ T13] usb 7-1: SerialNumber: syz [ 291.395234][ T13] usb 7-1: can't set config #1, error -71 [ 291.416090][ T13] usb 7-1: USB disconnect, device number 3 [ 292.460797][ T6223] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 292.484988][ T6223] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 292.755453][ T6233] loop6: detected capacity change from 0 to 128 [ 292.878663][ T6233] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 292.924808][ T6232] loop4: detected capacity change from 0 to 4096 [ 292.953602][ T6233] hpfs: filesystem error: improperly stopped [ 292.994956][ T6233] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 293.025052][ T6233] hpfs: You really don't want any checks? You are crazy... [ 293.086000][ T6233] hpfs: hpfs_map_sector(): read error [ 293.146831][ T6233] hpfs: code page support is disabled [ 293.185520][ T6233] hpfs: hpfs_map_4sectors(): unaligned read [ 293.191837][ T6233] hpfs: hpfs_map_4sectors(): unaligned read [ 293.322557][ T6233] hpfs: filesystem error: unable to find root dir [ 293.758286][ T6244] loop4: detected capacity change from 0 to 4096 [ 294.121340][ T6255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.946191][ T6262] loop3: detected capacity change from 0 to 2048 [ 296.361047][ T6262] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.369530][ T6277] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 298.191432][ T6277] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 128 with error 28 [ 298.206727][ T6277] EXT4-fs (loop3): This should not happen!! Data will be lost [ 298.206727][ T6277] [ 298.526110][ T6277] EXT4-fs (loop3): Total free blocks count 0 [ 298.532160][ T6277] EXT4-fs (loop3): Free/Dirty block details [ 298.548270][ T6277] EXT4-fs (loop3): free_blocks=2415919504 [ 298.554360][ T6277] EXT4-fs (loop3): dirty_blocks=144 [ 298.616971][ T6277] EXT4-fs (loop3): Block reservation details [ 298.657837][ T6277] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 298.754518][ T6288] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 298.795427][ T6288] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 299.412279][ T6302] loop3: detected capacity change from 0 to 512 [ 299.534764][ T6302] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.934966][ T4441] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 302.985175][ T4441] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 303.050502][ T4441] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.097457][ T4441] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 303.235134][ T4441] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.260854][ T4441] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 303.304961][ T4441] usb 7-1: SerialNumber: syz [ 304.665895][ T4441] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 304.700601][ T4441] usb 7-1: USB disconnect, device number 4 [ 305.210603][ T6375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.502'. [ 305.874301][ T6376] loop4: detected capacity change from 0 to 256 [ 305.965607][ T6376] exfat: Deprecated parameter 'namecase' [ 306.079887][ T6376] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 310.986948][ T6425] loop3: detected capacity change from 0 to 4096 [ 311.352986][ T6425] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 311.726386][ T6441] loop4: detected capacity change from 0 to 16 [ 311.818283][ T6441] erofs: (device loop4): mounted with root inode @ nid 36. [ 313.060319][ T6436] loop5: detected capacity change from 0 to 32768 [ 313.302852][ T6436] [ 313.302852][ T6436] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.302852][ T6436] [ 313.555392][ T6436] ERROR: (device loop5): diWrite: ixpxd invalid [ 313.555392][ T6436] [ 313.640779][ T6436] ERROR: (device loop5): txCommit: [ 313.640779][ T6436] [ 313.731127][ T6469] ERROR: (device loop5): diWrite: ixpxd invalid [ 313.731127][ T6469] [ 313.774803][ T6469] ERROR: (device loop5): txCommit: [ 313.774803][ T6469] [ 314.172644][ T5467] [ 314.172644][ T5467] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.172644][ T5467] [ 314.345656][ T5467] [ 314.345656][ T5467] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 314.345656][ T5467] [ 316.040171][ T6493] loop4: detected capacity change from 0 to 64 [ 316.344475][ T6499] loop6: detected capacity change from 0 to 512 [ 316.543336][ T6499] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 316.565286][ T6499] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.729822][ T6510] loop4: detected capacity change from 0 to 164 [ 317.226912][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.233302][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.462713][ T6510] isofs_fill_super: get root inode failed [ 317.721662][ T6518] loop4: detected capacity change from 0 to 512 [ 318.117812][ T6518] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.847775][ T6527] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #15: comm syz.4.540: verity is only allowed on extent-based files [ 319.011521][ T6529] loop5: detected capacity change from 0 to 128 [ 319.300468][ T6529] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 319.350524][ T6529] hpfs: filesystem error: improperly stopped [ 319.398021][ T6529] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 319.435244][ T6529] hpfs: You really don't want any checks? You are crazy... [ 319.442845][ T6529] hpfs: hpfs_map_sector(): read error [ 319.486955][ T6529] hpfs: code page support is disabled [ 319.492597][ T6529] hpfs: hpfs_map_4sectors(): unaligned read [ 319.737166][ T6541] loop3: detected capacity change from 0 to 32768 [ 319.749833][ T6529] hpfs: hpfs_map_4sectors(): unaligned read [ 319.764966][ T6529] hpfs: filesystem error: unable to find root dir [ 319.800468][ T6541] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 319.809499][ T6541] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 319.857582][ T6541] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 319.857582][ T6541] bh = 52 (type: exp=5, found=8) [ 319.857582][ T6541] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 319.873095][ T6529] hpfs: hpfs_map_4sectors(): unaligned read [ 319.877816][ T6541] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 319.891060][ T6541] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 319.899938][ T6541] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 319.906638][ T6541] gfs2: fsid=syz:syz.s: File system withdrawn [ 319.913599][ T6541] CPU: 1 PID: 6541 Comm: syz.3.543 Not tainted syzkaller #0 [ 319.920946][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 319.931042][ T6541] Call Trace: [ 319.934358][ T6541] [ 319.937321][ T6541] dump_stack_lvl+0x188/0x250 [ 319.942028][ T6541] ? kobject_uevent_env+0x371/0x890 [ 319.947919][ T6541] ? show_regs_print_info+0x20/0x20 [ 319.953150][ T6541] ? load_image+0x400/0x400 [ 319.957669][ T6541] ? kobject_uevent_env+0x371/0x890 [ 319.962894][ T6541] gfs2_withdraw+0x1149/0x1490 [ 319.967782][ T6541] ? gfs2_lm+0x240/0x240 [ 319.972040][ T6541] ? gfs2_meta_read+0x8a9/0xa60 [ 319.976932][ T6541] ? gfs2_meta_new+0x160/0x160 [ 319.981783][ T6541] gfs2_metatype_check_ii+0x74/0x90 [ 319.987062][ T6541] gfs2_meta_buffer+0x262/0x310 [ 319.991991][ T6541] __fillup_metapath+0x14d/0x340 [ 319.997148][ T6541] __gfs2_iomap_get+0x709/0x1400 [ 320.002111][ T6541] ? gfs2_alloc_extent+0x580/0x580 [ 320.007267][ T6541] ? rcu_is_watching+0x11/0xa0 [ 320.012054][ T6541] gfs2_block_map+0x2a0/0x740 [ 320.016757][ T6541] ? gfs2_iomap_end+0x6b0/0x6b0 [ 320.021623][ T6541] ? mark_lock+0x94/0x320 [ 320.025958][ T6541] ? verify_lock_unused+0x140/0x140 [ 320.031166][ T6541] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 320.037172][ T6541] ? lockdep_hardirqs_on+0x94/0x140 [ 320.042414][ T6541] gfs2_write_alloc_required+0x3ae/0x680 [ 320.048060][ T6541] ? gfs2_map_journal_extents+0xb10/0xb10 [ 320.053798][ T6541] ? _raw_spin_unlock+0x24/0x40 [ 320.058654][ T6541] ? gfs2_glock_nq+0xcb0/0x1550 [ 320.063522][ T6541] gfs2_jdesc_check+0x1c3/0x290 [ 320.068383][ T6541] check_journal_clean+0x186/0x360 [ 320.073633][ T6541] ? gfs2_trans_remove_revoke+0x370/0x370 [ 320.079367][ T6541] ? check_journal_clean+0x142/0x360 [ 320.084663][ T6541] ? __rwlock_init+0x140/0x140 [ 320.089443][ T6541] ? do_raw_spin_unlock+0x11d/0x230 [ 320.094655][ T6541] ? _raw_spin_unlock+0x24/0x40 [ 320.099518][ T6541] ? gfs2_jdesc_find+0xa7/0xc0 [ 320.104293][ T6541] init_journal+0x17a5/0x22f0 [ 320.108997][ T6541] ? end_bio_io_page+0x100/0x100 [ 320.113972][ T6541] ? vsnprintf+0x1b21/0x1c20 [ 320.118599][ T6541] ? snprintf+0xe5/0x140 [ 320.122903][ T6541] ? init_journal+0x74d/0x22f0 [ 320.127789][ T6541] ? vscnprintf+0x80/0x80 [ 320.132159][ T6541] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 320.137289][ T6541] init_inodes+0xdb/0x320 [ 320.141634][ T6541] gfs2_fill_super+0x16b2/0x1f00 [ 320.146839][ T6541] ? gfs2_reconfigure+0xd30/0xd30 [ 320.151918][ T6541] ? gfs2_glock_nq_num+0x82/0x1b0 [ 320.156965][ T6541] ? sb_set_blocksize+0xa5/0xe0 [ 320.161839][ T6541] get_tree_bdev+0x3f1/0x610 [ 320.166462][ T6541] ? gfs2_reconfigure+0xd30/0xd30 [ 320.171548][ T6541] gfs2_get_tree+0x4d/0x1e0 [ 320.176104][ T6541] vfs_get_tree+0x88/0x270 [ 320.180569][ T6541] do_new_mount+0x24a/0xa40 [ 320.185115][ T6541] __se_sys_mount+0x2e3/0x3d0 [ 320.189852][ T6541] ? __x64_sys_mount+0xc0/0xc0 [ 320.194632][ T6541] ? lockdep_hardirqs_on+0x94/0x140 [ 320.199842][ T6541] ? __x64_sys_mount+0x1c/0xc0 [ 320.204646][ T6541] do_syscall_64+0x4c/0xa0 [ 320.209076][ T6541] ? clear_bhb_loop+0x30/0x80 [ 320.213762][ T6541] ? clear_bhb_loop+0x30/0x80 [ 320.218459][ T6541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 320.224388][ T6541] RIP: 0033:0x7fcee637b14a [ 320.228815][ T6541] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.248445][ T6541] RSP: 002b:00007fcee45d4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 320.256887][ T6541] RAX: ffffffffffffffda RBX: 00007fcee45d4ee0 RCX: 00007fcee637b14a [ 320.264921][ T6541] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fcee45d4ea0 [ 320.272982][ T6541] RBP: 000020000001f680 R08: 00007fcee45d4ee0 R09: 0000000000000084 [ 320.280989][ T6541] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 320.289062][ T6541] R13: 00007fcee45d4ea0 R14: 000000000001f707 R15: 00002000000000c0 [ 320.297060][ T6541] [ 320.301826][ T6541] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 321.342498][ T6554] loop5: detected capacity change from 0 to 128 [ 321.472548][ T6554] FAT-fs (loop5): Directory bread(block 414) failed [ 321.504093][ T6554] FAT-fs (loop5): Directory bread(block 415) failed [ 321.590102][ T6554] FAT-fs (loop5): Directory bread(block 416) failed [ 321.622666][ T6554] FAT-fs (loop5): Directory bread(block 417) failed [ 321.686020][ T6554] FAT-fs (loop5): Directory bread(block 418) failed [ 321.752450][ T6554] FAT-fs (loop5): Directory bread(block 419) failed [ 321.809401][ T6554] FAT-fs (loop5): Directory bread(block 420) failed [ 321.877061][ T6554] FAT-fs (loop5): Directory bread(block 421) failed [ 321.950279][ T6561] misc userio: No port type given on /dev/userio [ 321.993481][ T6554] FAT-fs (loop5): Directory bread(block 414) failed [ 322.085848][ T6554] FAT-fs (loop5): Directory bread(block 415) failed [ 322.376614][ T6566] loop5: detected capacity change from 0 to 128 [ 324.787987][ T6599] loop6: detected capacity change from 0 to 16 [ 324.871271][ T6599] erofs: (device loop6): mounted with root inode @ nid 36. [ 325.071063][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.105845][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.138104][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.170478][ T6606] loop5: detected capacity change from 0 to 2048 [ 325.183442][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.237308][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.260672][ T6606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.287118][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.322659][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.487007][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.555571][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 325.564309][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 326.135149][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 326.144087][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 326.165608][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 326.182812][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 326.238182][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 326.287075][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 326.317812][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.018983][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.241310][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.267277][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.361234][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.436593][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.446037][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.454985][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.463817][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.515679][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.540573][ T6630] loop5: detected capacity change from 0 to 128 [ 327.586917][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.653527][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.662362][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.671928][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.680799][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.689591][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.700146][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.710952][ T6630] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 327.712673][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 327.827351][ T6630] hpfs: filesystem error: improperly stopped [ 327.887366][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.020795][ T6630] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 328.058202][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.211998][ T6630] hpfs: You really don't want any checks? You are crazy... [ 328.235795][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.309192][ T6630] hpfs: hpfs_map_sector(): read error [ 328.314641][ T6630] hpfs: code page support is disabled [ 328.341711][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.401819][ T6630] hpfs: hpfs_map_4sectors(): unaligned read [ 328.422743][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.485194][ T6630] hpfs: hpfs_map_4sectors(): unaligned read [ 328.491162][ T6630] hpfs: filesystem error: unable to find root dir [ 328.514434][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.591171][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.601086][ T6630] hpfs: hpfs_map_4sectors(): unaligned read [ 328.635739][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.683507][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.772534][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.828757][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.830526][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.832278][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.832954][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.841530][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.858351][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.860192][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.863073][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.865403][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.867210][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.871113][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.871764][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.874103][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.877467][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.880641][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.881301][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.883453][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.884173][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.892231][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.892880][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.901376][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.912941][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.915758][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.919742][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.925296][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.928782][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.932677][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.937625][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.938319][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.942209][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.945690][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.948541][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.954548][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.958913][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.962853][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 328.963529][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.173395][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.174769][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.185652][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.186297][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.186933][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.187687][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.188426][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.189553][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.190149][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.190768][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.191382][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.192037][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.192649][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.193300][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.246532][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.283925][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.298761][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.299427][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.475010][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.475764][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.476980][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.477656][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.478337][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.478939][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.479565][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.480221][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.480883][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.481507][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.482127][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.482750][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.483374][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.484031][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.484687][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.582403][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.583040][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.583685][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.584570][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.617117][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.618089][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.633764][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.634456][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.662220][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.662899][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.663516][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.677066][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.677747][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.678436][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.679045][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.679720][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.680380][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.681001][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.681672][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.682292][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.683443][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.684041][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.718126][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.718923][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.719593][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.720248][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 329.737969][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.456022][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.481935][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.535660][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.611838][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.656772][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.705835][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.714701][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.805651][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.865806][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 330.933255][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 331.255648][ T6663] loop3: detected capacity change from 0 to 40427 [ 331.441506][ T6667] device syzkaller0 entered promiscuous mode [ 331.573492][ T6663] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 331.581774][ T6663] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.624236][ T6663] F2FS-fs (loop3): invalid crc value [ 331.784522][ T6663] F2FS-fs (loop3): Found nat_bits in checkpoint [ 331.896803][ T6663] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 331.904272][ T6663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 332.021570][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 332.075566][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 332.163708][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 333.127162][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 333.216387][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 333.365368][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 333.374159][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 333.536440][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 333.636902][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 334.049573][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 334.552004][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 334.606163][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 334.681909][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 334.722704][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 334.820731][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 334.830426][ T6709] loop5: detected capacity change from 0 to 512 [ 334.837513][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 334.865994][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 334.905316][ T6709] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 334.953459][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 334.994466][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.325133][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.570617][ T6709] EXT4-fs (loop5): orphan cleanup on readonly fs [ 335.590477][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.620140][ T6709] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.582: inode #15: comm syz.5.582: iget: illegal inode # [ 335.675501][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.739265][ T6709] EXT4-fs (loop5): Remounting filesystem read-only [ 335.743276][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.776121][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.795142][ T6709] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.582: couldn't read orphan inode 15 (err -117) [ 335.807850][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.825332][ T6709] EXT4-fs (loop5): Remounting filesystem read-only [ 335.842936][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.851266][ T6709] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=remount-ro,data=journal,usrjquota=,init_itable=0x0000000000000022,. Quota mode: none. [ 335.875679][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.900389][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 335.954900][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.015060][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.071802][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.115452][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.146872][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.195878][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.204763][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.275680][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.284410][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.360654][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.415908][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.443191][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.503258][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.545721][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.583699][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.622943][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.663992][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.705538][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.720448][ T6728] device syzkaller0 entered promiscuous mode [ 336.747693][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.776918][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.805654][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.855848][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.864583][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.915614][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.952719][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.974376][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.024032][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.073710][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.115304][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.165088][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.185870][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.216056][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.246950][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.275782][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.295894][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.304700][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.365080][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.415246][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.424605][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.474147][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.504937][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.513854][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.578395][ T6721] loop5: detected capacity change from 0 to 32768 [ 337.598716][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.638833][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.692968][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.723871][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.733548][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.743329][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.752252][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.766153][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.780507][ T6721] [ 337.780507][ T6721] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 337.780507][ T6721] [ 337.819348][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.837573][ T6721] ERROR: (device loop5): diWrite: ixpxd invalid [ 337.837573][ T6721] [ 337.860312][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.870165][ T6721] ERROR: (device loop5): txCommit: [ 337.870165][ T6721] [ 337.896177][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 337.925642][ T6746] ERROR: (device loop5): diWrite: ixpxd invalid [ 337.925642][ T6746] [ 337.957908][ T6746] ERROR: (device loop5): txCommit: [ 337.957908][ T6746] [ 337.975916][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 338.008366][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 338.026747][ T6721] ERROR: (device loop5): diWrite: ixpxd invalid [ 338.026747][ T6721] [ 338.057725][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 338.076797][ T6721] ERROR: (device loop5): txCommit: [ 338.076797][ T6721] [ 338.093652][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 338.607087][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 339.156773][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 339.195898][ T5504] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 339.763974][ T5467] [ 339.763974][ T5467] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.763974][ T5467] [ 339.784950][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 339.807548][ T5467] [ 339.807548][ T5467] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.807548][ T5467] [ 340.759643][ T5504] syz-executor (5504) used greatest stack depth: 20944 bytes left [ 343.084018][ T6791] loop3: detected capacity change from 0 to 32768 [ 343.364421][ T6791] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 343.372931][ T6791] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 343.386379][ T6791] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 343.386379][ T6791] bh = 52 (type: exp=5, found=8) [ 343.386379][ T6791] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 343.406404][ T6791] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 343.413679][ T6791] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 343.422647][ T6791] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 343.429570][ T6791] gfs2: fsid=syz:syz.s: File system withdrawn [ 343.435705][ T6791] CPU: 1 PID: 6791 Comm: syz.3.595 Not tainted syzkaller #0 [ 343.443043][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 343.453171][ T6791] Call Trace: [ 343.456491][ T6791] [ 343.459483][ T6791] dump_stack_lvl+0x188/0x250 [ 343.464335][ T6791] ? kobject_uevent_env+0x371/0x890 [ 343.469583][ T6791] ? show_regs_print_info+0x20/0x20 [ 343.474832][ T6791] ? load_image+0x400/0x400 [ 343.479606][ T6791] ? kobject_uevent_env+0x371/0x890 [ 343.484863][ T6791] gfs2_withdraw+0x1149/0x1490 [ 343.489691][ T6791] ? gfs2_lm+0x240/0x240 [ 343.493981][ T6791] ? gfs2_meta_read+0x8a9/0xa60 [ 343.498882][ T6791] ? gfs2_meta_new+0x160/0x160 [ 343.503728][ T6791] gfs2_metatype_check_ii+0x74/0x90 [ 343.508994][ T6791] gfs2_meta_buffer+0x262/0x310 [ 343.513902][ T6791] __fillup_metapath+0x14d/0x340 [ 343.518896][ T6791] __gfs2_iomap_get+0x709/0x1400 [ 343.523901][ T6791] ? gfs2_alloc_extent+0x580/0x580 [ 343.529067][ T6791] ? rcu_is_watching+0x11/0xa0 [ 343.533884][ T6791] gfs2_block_map+0x2a0/0x740 [ 343.538971][ T6791] ? gfs2_iomap_end+0x6b0/0x6b0 [ 343.544064][ T6791] ? mark_lock+0x94/0x320 [ 343.548441][ T6791] ? verify_lock_unused+0x140/0x140 [ 343.553693][ T6791] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 343.559790][ T6791] ? lockdep_hardirqs_on+0x94/0x140 [ 343.565052][ T6791] gfs2_write_alloc_required+0x3ae/0x680 [ 343.570922][ T6791] ? gfs2_map_journal_extents+0xb10/0xb10 [ 343.576798][ T6791] ? _raw_spin_unlock+0x24/0x40 [ 343.581699][ T6791] ? gfs2_glock_nq+0xcb0/0x1550 [ 343.586612][ T6791] gfs2_jdesc_check+0x1c3/0x290 [ 343.591512][ T6791] check_journal_clean+0x186/0x360 [ 343.596909][ T6791] ? gfs2_trans_remove_revoke+0x370/0x370 [ 343.602684][ T6791] ? check_journal_clean+0x142/0x360 [ 343.608033][ T6791] ? __rwlock_init+0x140/0x140 [ 343.612856][ T6791] ? do_raw_spin_unlock+0x11d/0x230 [ 343.618121][ T6791] ? _raw_spin_unlock+0x24/0x40 [ 343.623028][ T6791] ? gfs2_jdesc_find+0xa7/0xc0 [ 343.627848][ T6791] init_journal+0x17a5/0x22f0 [ 343.632600][ T6791] ? end_bio_io_page+0x100/0x100 [ 343.637596][ T6791] ? vsnprintf+0x1b21/0x1c20 [ 343.642366][ T6791] ? snprintf+0xe5/0x140 [ 343.646673][ T6791] ? init_journal+0x74d/0x22f0 [ 343.651602][ T6791] ? vscnprintf+0x80/0x80 [ 343.656344][ T6791] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 343.661592][ T6791] init_inodes+0xdb/0x320 [ 343.666030][ T6791] gfs2_fill_super+0x16b2/0x1f00 [ 343.671198][ T6791] ? gfs2_reconfigure+0xd30/0xd30 [ 343.676478][ T6791] ? gfs2_glock_nq_num+0x82/0x1b0 [ 343.681575][ T6791] ? sb_set_blocksize+0xa5/0xe0 [ 343.686479][ T6791] get_tree_bdev+0x3f1/0x610 [ 343.691127][ T6791] ? gfs2_reconfigure+0xd30/0xd30 [ 343.696245][ T6791] gfs2_get_tree+0x4d/0x1e0 [ 343.700808][ T6791] vfs_get_tree+0x88/0x270 [ 343.705291][ T6791] do_new_mount+0x24a/0xa40 [ 343.709857][ T6791] __se_sys_mount+0x2e3/0x3d0 [ 343.714583][ T6791] ? __x64_sys_mount+0xc0/0xc0 [ 343.719394][ T6791] ? lockdep_hardirqs_on+0x94/0x140 [ 343.724635][ T6791] ? __x64_sys_mount+0x1c/0xc0 [ 343.729455][ T6791] do_syscall_64+0x4c/0xa0 [ 343.733914][ T6791] ? clear_bhb_loop+0x30/0x80 [ 343.738635][ T6791] ? clear_bhb_loop+0x30/0x80 [ 343.743370][ T6791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.749313][ T6791] RIP: 0033:0x7fcee637b14a [ 343.753775][ T6791] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.773508][ T6791] RSP: 002b:00007fcee45d4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.781974][ T6791] RAX: ffffffffffffffda RBX: 00007fcee45d4ee0 RCX: 00007fcee637b14a [ 343.790039][ T6791] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fcee45d4ea0 [ 343.798096][ T6791] RBP: 000020000001f680 R08: 00007fcee45d4ee0 R09: 0000000000000084 [ 343.806113][ T6791] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 343.814132][ T6791] R13: 00007fcee45d4ea0 R14: 000000000001f707 R15: 00002000000000c0 [ 343.822301][ T6791] [ 343.827443][ T6791] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 344.737123][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.296271][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.914712][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.225286][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.847361][ T4846] Bluetooth: hci1: command 0x0409 tx timeout [ 346.989830][ T6841] loop3: detected capacity change from 0 to 32768 [ 347.063370][ T6841] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 347.072320][ T6841] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 347.082179][ T6841] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 347.082179][ T6841] bh = 52 (type: exp=5, found=8) [ 347.082179][ T6841] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 347.102438][ T6841] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 347.109848][ T6841] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 347.118708][ T6841] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 347.137497][ T6841] gfs2: fsid=syz:syz.s: File system withdrawn [ 347.143999][ T6841] CPU: 1 PID: 6841 Comm: syz.3.604 Not tainted syzkaller #0 [ 347.151452][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 347.161553][ T6841] Call Trace: [ 347.164960][ T6841] [ 347.167935][ T6841] dump_stack_lvl+0x188/0x250 [ 347.172672][ T6841] ? kobject_uevent_env+0x371/0x890 [ 347.177928][ T6841] ? show_regs_print_info+0x20/0x20 [ 347.183178][ T6841] ? load_image+0x400/0x400 [ 347.187731][ T6841] ? kobject_uevent_env+0x371/0x890 [ 347.192990][ T6841] gfs2_withdraw+0x1149/0x1490 [ 347.197822][ T6841] ? gfs2_lm+0x240/0x240 [ 347.202114][ T6841] ? gfs2_meta_read+0x8a9/0xa60 [ 347.207031][ T6841] ? gfs2_meta_new+0x160/0x160 [ 347.211848][ T6841] gfs2_metatype_check_ii+0x74/0x90 [ 347.217099][ T6841] gfs2_meta_buffer+0x262/0x310 [ 347.222013][ T6841] __fillup_metapath+0x14d/0x340 [ 347.227005][ T6841] __gfs2_iomap_get+0x709/0x1400 [ 347.232019][ T6841] ? gfs2_alloc_extent+0x580/0x580 [ 347.237182][ T6841] ? rcu_is_watching+0x11/0xa0 [ 347.241999][ T6841] gfs2_block_map+0x2a0/0x740 [ 347.246748][ T6841] ? gfs2_iomap_end+0x6b0/0x6b0 [ 347.251665][ T6841] ? mark_lock+0x94/0x320 [ 347.256070][ T6841] ? verify_lock_unused+0x140/0x140 [ 347.261325][ T6841] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 347.267377][ T6841] ? lockdep_hardirqs_on+0x94/0x140 [ 347.272645][ T6841] gfs2_write_alloc_required+0x3ae/0x680 [ 347.278329][ T6841] ? gfs2_map_journal_extents+0xb10/0xb10 [ 347.284121][ T6841] ? _raw_spin_unlock+0x24/0x40 [ 347.289162][ T6841] ? gfs2_glock_nq+0xcb0/0x1550 [ 347.294082][ T6841] gfs2_jdesc_check+0x1c3/0x290 [ 347.298995][ T6841] check_journal_clean+0x186/0x360 [ 347.304165][ T6841] ? gfs2_trans_remove_revoke+0x370/0x370 [ 347.309942][ T6841] ? check_journal_clean+0x142/0x360 [ 347.315380][ T6841] ? __rwlock_init+0x140/0x140 [ 347.320292][ T6841] ? do_raw_spin_unlock+0x11d/0x230 [ 347.325712][ T6841] ? _raw_spin_unlock+0x24/0x40 [ 347.330605][ T6841] ? gfs2_jdesc_find+0xa7/0xc0 [ 347.335415][ T6841] init_journal+0x17a5/0x22f0 [ 347.340155][ T6841] ? end_bio_io_page+0x100/0x100 [ 347.345165][ T6841] ? vsnprintf+0x1b21/0x1c20 [ 347.349816][ T6841] ? snprintf+0xe5/0x140 [ 347.354112][ T6841] ? init_journal+0x74d/0x22f0 [ 347.358971][ T6841] ? vscnprintf+0x80/0x80 [ 347.363360][ T6841] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 347.368532][ T6841] init_inodes+0xdb/0x320 [ 347.372918][ T6841] gfs2_fill_super+0x16b2/0x1f00 [ 347.377930][ T6841] ? gfs2_reconfigure+0xd30/0xd30 [ 347.383013][ T6841] ? gfs2_glock_nq_num+0x82/0x1b0 [ 347.388109][ T6841] ? sb_set_blocksize+0xa5/0xe0 [ 347.393008][ T6841] get_tree_bdev+0x3f1/0x610 [ 347.397661][ T6841] ? gfs2_reconfigure+0xd30/0xd30 [ 347.402742][ T6841] gfs2_get_tree+0x4d/0x1e0 [ 347.407296][ T6841] vfs_get_tree+0x88/0x270 [ 347.411932][ T6841] do_new_mount+0x24a/0xa40 [ 347.416577][ T6841] __se_sys_mount+0x2e3/0x3d0 [ 347.421318][ T6841] ? __x64_sys_mount+0xc0/0xc0 [ 347.426146][ T6841] ? lockdep_hardirqs_on+0x94/0x140 [ 347.431408][ T6841] ? __x64_sys_mount+0x1c/0xc0 [ 347.436235][ T6841] do_syscall_64+0x4c/0xa0 [ 347.440692][ T6841] ? clear_bhb_loop+0x30/0x80 [ 347.445406][ T6841] ? clear_bhb_loop+0x30/0x80 [ 347.450139][ T6841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.456170][ T6841] RIP: 0033:0x7fcee637b14a [ 347.460630][ T6841] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.480290][ T6841] RSP: 002b:00007fcee45d4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.489282][ T6841] RAX: ffffffffffffffda RBX: 00007fcee45d4ee0 RCX: 00007fcee637b14a [ 347.497300][ T6841] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fcee45d4ea0 [ 347.505337][ T6841] RBP: 000020000001f680 R08: 00007fcee45d4ee0 R09: 0000000000000084 [ 347.513356][ T6841] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 347.521365][ T6841] R13: 00007fcee45d4ea0 R14: 000000000001f707 R15: 00002000000000c0 [ 347.529493][ T6841] [ 347.533770][ T6841] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 348.754282][ T6800] chnl_net:caif_netlink_parms(): no params data found [ 348.905128][ T4848] Bluetooth: hci1: command 0x041b tx timeout [ 349.090087][ T6864] loop3: detected capacity change from 0 to 32768 [ 350.087831][ T6864] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 350.096243][ T6864] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 350.113521][ T6864] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 350.113521][ T6864] bh = 52 (type: exp=5, found=8) [ 350.113521][ T6864] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 350.134395][ T6864] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 350.141720][ T6864] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 350.150590][ T6864] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 350.157319][ T6864] gfs2: fsid=syz:syz.s: File system withdrawn [ 350.163430][ T6864] CPU: 1 PID: 6864 Comm: syz.3.608 Not tainted syzkaller #0 [ 350.170754][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 350.180862][ T6864] Call Trace: [ 350.184181][ T6864] [ 350.187146][ T6864] dump_stack_lvl+0x188/0x250 [ 350.191877][ T6864] ? kobject_uevent_env+0x371/0x890 [ 350.197121][ T6864] ? show_regs_print_info+0x20/0x20 [ 350.202381][ T6864] ? load_image+0x400/0x400 [ 350.206949][ T6864] ? kobject_uevent_env+0x371/0x890 [ 350.212219][ T6864] gfs2_withdraw+0x1149/0x1490 [ 350.217047][ T6864] ? gfs2_lm+0x240/0x240 [ 350.221338][ T6864] ? gfs2_meta_read+0x8a9/0xa60 [ 350.226246][ T6864] ? gfs2_meta_new+0x160/0x160 [ 350.231060][ T6864] gfs2_metatype_check_ii+0x74/0x90 [ 350.236309][ T6864] gfs2_meta_buffer+0x262/0x310 [ 350.241221][ T6864] __fillup_metapath+0x14d/0x340 [ 350.246205][ T6864] __gfs2_iomap_get+0x709/0x1400 [ 350.251200][ T6864] ? gfs2_alloc_extent+0x580/0x580 [ 350.256364][ T6864] ? rcu_is_watching+0x11/0xa0 [ 350.261186][ T6864] gfs2_block_map+0x2a0/0x740 [ 350.265925][ T6864] ? gfs2_iomap_end+0x6b0/0x6b0 [ 350.270825][ T6864] ? mark_lock+0x94/0x320 [ 350.275203][ T6864] ? verify_lock_unused+0x140/0x140 [ 350.280464][ T6864] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 350.286507][ T6864] ? lockdep_hardirqs_on+0x94/0x140 [ 350.291758][ T6864] gfs2_write_alloc_required+0x3ae/0x680 [ 350.297444][ T6864] ? gfs2_map_journal_extents+0xb10/0xb10 [ 350.303224][ T6864] ? _raw_spin_unlock+0x24/0x40 [ 350.308116][ T6864] ? gfs2_glock_nq+0xcb0/0x1550 [ 350.313022][ T6864] gfs2_jdesc_check+0x1c3/0x290 [ 350.317918][ T6864] check_journal_clean+0x186/0x360 [ 350.323513][ T6864] ? gfs2_trans_remove_revoke+0x370/0x370 [ 350.329281][ T6864] ? check_journal_clean+0x142/0x360 [ 350.334619][ T6864] ? __rwlock_init+0x140/0x140 [ 350.339490][ T6864] ? do_raw_spin_unlock+0x11d/0x230 [ 350.344739][ T6864] ? _raw_spin_unlock+0x24/0x40 [ 350.349664][ T6864] ? gfs2_jdesc_find+0xa7/0xc0 [ 350.354474][ T6864] init_journal+0x17a5/0x22f0 [ 350.359213][ T6864] ? end_bio_io_page+0x100/0x100 [ 350.364192][ T6864] ? vsnprintf+0x1b21/0x1c20 [ 350.368845][ T6864] ? snprintf+0xe5/0x140 [ 350.373131][ T6864] ? init_journal+0x74d/0x22f0 [ 350.377940][ T6864] ? vscnprintf+0x80/0x80 [ 350.382316][ T6864] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 350.387476][ T6864] init_inodes+0xdb/0x320 [ 350.391942][ T6864] gfs2_fill_super+0x16b2/0x1f00 [ 350.396939][ T6864] ? gfs2_reconfigure+0xd30/0xd30 [ 350.402013][ T6864] ? gfs2_glock_nq_num+0x82/0x1b0 [ 350.407092][ T6864] ? sb_set_blocksize+0xa5/0xe0 [ 350.411985][ T6864] get_tree_bdev+0x3f1/0x610 [ 350.416621][ T6864] ? gfs2_reconfigure+0xd30/0xd30 [ 350.421701][ T6864] gfs2_get_tree+0x4d/0x1e0 [ 350.426248][ T6864] vfs_get_tree+0x88/0x270 [ 350.430707][ T6864] do_new_mount+0x24a/0xa40 [ 350.435269][ T6864] __se_sys_mount+0x2e3/0x3d0 [ 350.439999][ T6864] ? __x64_sys_mount+0xc0/0xc0 [ 350.444901][ T6864] ? lockdep_hardirqs_on+0x94/0x140 [ 350.450142][ T6864] ? __x64_sys_mount+0x1c/0xc0 [ 350.455058][ T6864] do_syscall_64+0x4c/0xa0 [ 350.459536][ T6864] ? clear_bhb_loop+0x30/0x80 [ 350.464299][ T6864] ? clear_bhb_loop+0x30/0x80 [ 350.469027][ T6864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.474966][ T6864] RIP: 0033:0x7fcee637b14a [ 350.479455][ T6864] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.499189][ T6864] RSP: 002b:00007fcee45d4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.507653][ T6864] RAX: ffffffffffffffda RBX: 00007fcee45d4ee0 RCX: 00007fcee637b14a [ 350.515669][ T6864] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fcee45d4ea0 [ 350.523805][ T6864] RBP: 000020000001f680 R08: 00007fcee45d4ee0 R09: 0000000000000084 [ 350.531831][ T6864] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 350.539854][ T6864] R13: 00007fcee45d4ea0 R14: 000000000001f707 R15: 00002000000000c0 [ 350.547893][ T6864] [ 350.552006][ T6864] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 350.620141][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.667817][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.743780][ T6800] device bridge_slave_0 entered promiscuous mode [ 350.880799][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.925842][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.994967][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 351.006502][ T6800] device bridge_slave_1 entered promiscuous mode [ 351.626739][ T6887] netlink: 340 bytes leftover after parsing attributes in process `syz.3.612'. [ 351.814062][ T6893] loop3: detected capacity change from 0 to 1024 [ 351.826057][ T6893] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 351.895733][ T6800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.914088][ T6893] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 352.195896][ T6800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.310513][ T6800] team0: Port device team_slave_0 added [ 352.328717][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 352.437701][ T6800] team0: Port device team_slave_1 added [ 352.592476][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.638689][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.756082][ T6800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.533756][ T4848] Bluetooth: hci1: command 0x0419 tx timeout [ 353.610744][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.618100][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.655569][ T6800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.741546][ T6914] loop5: detected capacity change from 0 to 512 [ 353.951560][ T6912] loop3: detected capacity change from 0 to 32768 [ 354.011159][ T6912] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 354.019614][ T6912] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 354.029836][ T6912] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 354.029836][ T6912] bh = 52 (type: exp=5, found=8) [ 354.029836][ T6912] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 354.049955][ T6912] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 354.057405][ T6912] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 354.066382][ T6912] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 354.108840][ T6912] gfs2: fsid=syz:syz.s: File system withdrawn [ 354.115565][ T6912] CPU: 0 PID: 6912 Comm: syz.3.617 Not tainted syzkaller #0 [ 354.122973][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 354.133081][ T6912] Call Trace: [ 354.134417][ T6914] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.136402][ T6912] [ 354.136412][ T6912] dump_stack_lvl+0x188/0x250 [ 354.136442][ T6912] ? kobject_uevent_env+0x371/0x890 [ 354.136470][ T6912] ? show_regs_print_info+0x20/0x20 [ 354.136496][ T6912] ? load_image+0x400/0x400 [ 354.136523][ T6912] ? kobject_uevent_env+0x371/0x890 [ 354.136582][ T6912] gfs2_withdraw+0x1149/0x1490 [ 354.179887][ T6912] ? gfs2_lm+0x240/0x240 [ 354.184179][ T6912] ? gfs2_meta_read+0x8a9/0xa60 [ 354.189085][ T6912] ? gfs2_meta_new+0x160/0x160 [ 354.193951][ T6912] gfs2_metatype_check_ii+0x74/0x90 [ 354.199292][ T6912] gfs2_meta_buffer+0x262/0x310 [ 354.204203][ T6912] __fillup_metapath+0x14d/0x340 [ 354.209202][ T6912] __gfs2_iomap_get+0x709/0x1400 [ 354.214327][ T6912] ? gfs2_alloc_extent+0x580/0x580 [ 354.219500][ T6912] ? rcu_is_watching+0x11/0xa0 [ 354.224328][ T6912] gfs2_block_map+0x2a0/0x740 [ 354.229080][ T6912] ? gfs2_iomap_end+0x6b0/0x6b0 [ 354.234073][ T6912] ? mark_lock+0x94/0x320 [ 354.238454][ T6912] ? verify_lock_unused+0x140/0x140 [ 354.243725][ T6912] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 354.249791][ T6912] ? lockdep_hardirqs_on+0x94/0x140 [ 354.255053][ T6912] gfs2_write_alloc_required+0x3ae/0x680 [ 354.260756][ T6912] ? gfs2_map_journal_extents+0xb10/0xb10 [ 354.266547][ T6912] ? _raw_spin_unlock+0x24/0x40 [ 354.271449][ T6912] ? gfs2_glock_nq+0xcb0/0x1550 [ 354.276363][ T6912] gfs2_jdesc_check+0x1c3/0x290 [ 354.281272][ T6912] check_journal_clean+0x186/0x360 [ 354.286476][ T6912] ? gfs2_trans_remove_revoke+0x370/0x370 [ 354.292226][ T6912] ? check_journal_clean+0x142/0x360 [ 354.297525][ T6912] ? __rwlock_init+0x140/0x140 [ 354.302302][ T6912] ? do_raw_spin_unlock+0x11d/0x230 [ 354.307512][ T6912] ? _raw_spin_unlock+0x24/0x40 [ 354.312369][ T6912] ? gfs2_jdesc_find+0xa7/0xc0 [ 354.317153][ T6912] init_journal+0x17a5/0x22f0 [ 354.321875][ T6912] ? end_bio_io_page+0x100/0x100 [ 354.326825][ T6912] ? vsnprintf+0x1b21/0x1c20 [ 354.331443][ T6912] ? snprintf+0xe5/0x140 [ 354.335703][ T6912] ? init_journal+0x74d/0x22f0 [ 354.340533][ T6912] ? vscnprintf+0x80/0x80 [ 354.344881][ T6912] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 354.350043][ T6912] init_inodes+0xdb/0x320 [ 354.354392][ T6912] gfs2_fill_super+0x16b2/0x1f00 [ 354.359382][ T6912] ? gfs2_reconfigure+0xd30/0xd30 [ 354.364420][ T6912] ? gfs2_glock_nq_num+0x82/0x1b0 [ 354.369465][ T6912] ? sb_set_blocksize+0xa5/0xe0 [ 354.374328][ T6912] get_tree_bdev+0x3f1/0x610 [ 354.378946][ T6912] ? gfs2_reconfigure+0xd30/0xd30 [ 354.383986][ T6912] gfs2_get_tree+0x4d/0x1e0 [ 354.388502][ T6912] vfs_get_tree+0x88/0x270 [ 354.392946][ T6912] do_new_mount+0x24a/0xa40 [ 354.397468][ T6912] __se_sys_mount+0x2e3/0x3d0 [ 354.402166][ T6912] ? __x64_sys_mount+0xc0/0xc0 [ 354.407061][ T6912] ? lockdep_hardirqs_on+0x94/0x140 [ 354.412271][ T6912] ? __x64_sys_mount+0x1c/0xc0 [ 354.417045][ T6912] do_syscall_64+0x4c/0xa0 [ 354.421470][ T6912] ? clear_bhb_loop+0x30/0x80 [ 354.426304][ T6912] ? clear_bhb_loop+0x30/0x80 [ 354.431006][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 354.436919][ T6912] RIP: 0033:0x7fcee637b14a [ 354.441340][ T6912] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.460959][ T6912] RSP: 002b:00007fcee45d4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 354.469386][ T6912] RAX: ffffffffffffffda RBX: 00007fcee45d4ee0 RCX: 00007fcee637b14a [ 354.477366][ T6912] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fcee45d4ea0 [ 354.485360][ T6912] RBP: 000020000001f680 R08: 00007fcee45d4ee0 R09: 0000000000000084 [ 354.493349][ T6912] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 354.501361][ T6912] R13: 00007fcee45d4ea0 R14: 000000000001f707 R15: 00002000000000c0 [ 354.511734][ T6912] [ 354.515508][ T6912] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 354.944453][ T26] audit: type=1804 audit(1770470467.572:2): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.618" name="/newroot/51/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 355.598748][ T6800] device hsr_slave_0 entered promiscuous mode [ 355.620276][ T6800] device hsr_slave_1 entered promiscuous mode [ 356.663568][ T6800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.725201][ T6800] Cannot create hsr debugfs directory [ 357.028139][ T6940] device syzkaller0 entered promiscuous mode [ 358.661179][ T6970] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 360.685555][ T154] device hsr_slave_0 left promiscuous mode [ 360.728703][ T154] device hsr_slave_1 left promiscuous mode [ 361.181967][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.237731][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.276621][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.314104][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.383429][ T154] device bridge_slave_1 left promiscuous mode [ 361.393575][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.442865][ T6991] loop5: detected capacity change from 0 to 128 [ 361.482564][ T154] device bridge_slave_0 left promiscuous mode [ 361.502686][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.538206][ T154] device veth1_macvtap left promiscuous mode [ 361.554487][ T154] device veth0_macvtap left promiscuous mode [ 361.572138][ T154] device veth1_vlan left promiscuous mode [ 361.582087][ T6991] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 361.605134][ T154] device veth0_vlan left promiscuous mode [ 361.634967][ T6991] hpfs: filesystem error: improperly stopped [ 361.641018][ T6991] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 361.665348][ T6991] hpfs: You really don't want any checks? You are crazy... [ 361.690906][ T6991] hpfs: hpfs_map_sector(): read error [ 361.702623][ T6991] hpfs: code page support is disabled [ 361.755896][ T6991] hpfs: hpfs_map_4sectors(): unaligned read [ 361.765015][ T6991] hpfs: hpfs_map_4sectors(): unaligned read [ 361.782385][ T6991] hpfs: filesystem error: unable to find root dir [ 361.995183][ T6993] netlink: 'syz.5.635': attribute type 29 has an invalid length. [ 362.420368][ T154] team0 (unregistering): Port device team_slave_1 removed [ 363.699530][ T154] team0 (unregistering): Port device team_slave_0 removed [ 363.749326][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.905480][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.783705][ T154] bond0 (unregistering): Released all slaves [ 366.049537][ T6993] netlink: 'syz.5.635': attribute type 29 has an invalid length. [ 366.068943][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 366.618798][ T6800] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 366.744101][ T6800] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 366.819954][ T6800] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 366.927533][ T6800] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.887468][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.976654][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.005796][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.064200][ T6800] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.133542][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.153205][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.232514][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.239931][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.323127][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.408074][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.465715][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.480387][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.487607][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.552613][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.622852][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.669503][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.754315][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.804458][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.842772][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.021950][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.040283][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.052778][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.104084][ T6800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.155950][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.185415][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.208722][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.774627][ T7092] misc userio: No port type given on /dev/userio [ 369.783603][ T7092] netlink: 56 bytes leftover after parsing attributes in process `syz.4.652'. [ 370.019117][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.047024][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.095163][ T6800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.592650][ T7109] device syzkaller0 entered promiscuous mode [ 372.621240][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.657'. [ 372.950344][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.970550][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.026274][ T4229] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 373.193244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.395167][ T4229] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 373.512115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.527214][ T4229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.673143][ T4229] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 373.699728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.730736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.775466][ T4229] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.923740][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 373.932629][ T4229] usb 5-1: SerialNumber: syz [ 373.958677][ T6800] device veth0_vlan entered promiscuous mode [ 373.985961][ T4229] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 373.997350][ T6800] device veth1_vlan entered promiscuous mode [ 374.127525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.146995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.191435][ T6800] device veth0_macvtap entered promiscuous mode [ 374.207488][ T7151] loop5: detected capacity change from 0 to 512 [ 374.228257][ T6800] device veth1_macvtap entered promiscuous mode [ 374.305924][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.374898][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.426355][ T7151] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.675919][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.968668][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.058910][ T4229] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 375.109397][ T4229] usb 5-1: USB disconnect, device number 4 [ 375.133792][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.217030][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.255119][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.316887][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.370220][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.430511][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 375.451570][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.501382][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.553642][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 375.658395][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.892197][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.966206][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.992570][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.198973][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.574243][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.723055][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.777730][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.852099][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.907519][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.950567][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.999053][ T6800] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.017981][ T6800] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.045953][ T6800] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.077831][ T6800] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.437103][ T5103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.477550][ T5103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.510750][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 377.665827][ T5103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.673706][ T5103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.749824][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 377.897562][ T7198] netlink: 'syz.4.677': attribute type 29 has an invalid length. [ 377.925506][ T7198] netlink: 'syz.4.677': attribute type 29 has an invalid length. [ 378.668540][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.675386][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.550844][ T7231] loop7: detected capacity change from 0 to 512 [ 379.817046][ T7233] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 379.824491][ T7233] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 380.626343][ T7231] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.362163][ T7258] loop7: detected capacity change from 0 to 256 [ 385.572199][ T7312] nvme_fabrics: unknown parameter or missing value 'd:' in ctrl creation request [ 387.115415][ T4258] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 387.394933][ T4258] usb 8-1: Using ep0 maxpacket: 32 [ 387.626553][ T4258] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 387.814935][ T4258] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.826176][ T4258] usb 8-1: config 0 descriptor?? [ 387.867504][ T7350] Cannot find set identified by id 0 to match [ 387.883751][ T4258] gspca_main: sunplus-2.14.0 probing 041e:400b [ 391.095065][ T4258] gspca_sunplus: reg_w_riv err -71 [ 391.100434][ T4258] sunplus: probe of 8-1:0.0 failed with error -71 [ 391.121852][ T4258] usb 8-1: USB disconnect, device number 2 [ 391.197651][ T7391] nvme_fabrics: unknown parameter or missing value 'd:' in ctrl creation request [ 393.633597][ T7412] loop7: detected capacity change from 0 to 131072 [ 393.739072][ T7412] F2FS-fs (loop7): Invalid log sectorsize (67108873) [ 393.746747][ T7412] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 393.758886][ T7412] F2FS-fs (loop7): invalid crc value [ 393.796885][ T7412] F2FS-fs (loop7): Found nat_bits in checkpoint [ 393.976525][ T7412] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 393.983845][ T7412] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 394.745160][ T7430] loop5: detected capacity change from 0 to 128 [ 395.099643][ T7439] loop3: detected capacity change from 0 to 512 [ 395.356070][ T7439] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 395.447349][ T7439] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.525080][ T4847] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 395.999297][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.7.728'. [ 396.249178][ T4850] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 396.305154][ T4847] usb 6-1: Using ep0 maxpacket: 32 [ 396.426339][ T4847] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 396.444383][ T4847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.490789][ T4847] usb 6-1: config 0 descriptor?? [ 396.667611][ T4847] gspca_main: sunplus-2.14.0 probing 041e:400b [ 396.749755][ T4850] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.595025][ T4850] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 397.624048][ T4850] usb 5-1: can't read configurations, error -71 [ 399.272176][ T7494] loop3: detected capacity change from 0 to 131072 [ 399.357439][ T7502] loop4: detected capacity change from 0 to 128 [ 400.476114][ T4847] gspca_sunplus: reg_w_riv err -110 [ 400.481565][ T4847] sunplus: probe of 6-1:0.0 failed with error -110 [ 400.540171][ T7494] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 400.546970][ T7494] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 400.562016][ T7494] F2FS-fs (loop3): invalid crc value [ 400.613059][ T7509] device syzkaller0 entered promiscuous mode [ 400.615973][ T4258] usb 6-1: USB disconnect, device number 2 [ 400.637679][ T7494] F2FS-fs (loop3): Found nat_bits in checkpoint [ 400.886229][ T7494] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 400.893408][ T7494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 401.963911][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 402.550551][ T7553] Bluetooth: hci0: unsupported parameter 255 [ 402.557246][ T7553] Bluetooth: hci0: unsupported parameter 255 [ 402.693611][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 404.229802][ T7571] sp0: Synchronizing with TNC [ 404.945311][ T4297] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 405.210790][ T7579] loop3: detected capacity change from 0 to 1024 [ 405.244960][ T4297] usb 6-1: Using ep0 maxpacket: 32 [ 405.335600][ T7579] hfsplus: unable to parse mount options [ 405.365146][ T4297] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 405.374255][ T4297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.456873][ T4297] usb 6-1: config 0 descriptor?? [ 405.507014][ T4297] gspca_main: sunplus-2.14.0 probing 041e:400b [ 405.678228][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 406.141302][ T7596] Cannot find set identified by id 0 to match [ 406.166054][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.7.766'. [ 407.329471][ T7623] loop3: detected capacity change from 0 to 128 [ 407.564959][ T4297] gspca_sunplus: reg_w_riv err -71 [ 407.570204][ T4297] sunplus: probe of 6-1:0.0 failed with error -71 [ 407.598549][ T4297] usb 6-1: USB disconnect, device number 3 [ 407.685691][ T7623] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 407.947220][ T7623] hpfs: filesystem error: improperly stopped [ 407.953368][ T7623] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 407.975452][ T7623] hpfs: You really don't want any checks? You are crazy... [ 407.983334][ T7623] hpfs: hpfs_map_sector(): read error [ 408.017640][ T7623] hpfs: code page support is disabled [ 408.023201][ T7623] hpfs: hpfs_map_4sectors(): unaligned read [ 408.045139][ T7623] hpfs: hpfs_map_4sectors(): unaligned read [ 408.051180][ T7623] hpfs: filesystem error: unable to find root dir [ 408.526870][ T7645] loop3: detected capacity change from 0 to 512 [ 408.594058][ T7645] FAT-fs (loop3): Unrecognized mount option "time_offset=0x0" or missing value [ 410.363354][ T7662] loop4: detected capacity change from 0 to 1024 [ 410.391308][ T7662] hfsplus: unable to parse mount options [ 410.600838][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.782'. [ 410.733722][ T7670] loop4: detected capacity change from 0 to 1024 [ 412.223918][ T4334] hfsplus: b-tree write err: -5, ino 4 [ 413.074914][ T4850] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 413.311187][ T7710] loop4: detected capacity change from 0 to 512 [ 413.475157][ T4850] usb 6-1: not running at top speed; connect to a high speed hub [ 413.516179][ T7710] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 413.528562][ T7710] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.563671][ T4850] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.772248][ T4850] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.605424][ T4850] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.614649][ T4850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.655488][ T4850] usb 6-1: Product: ᐁ [ 414.660076][ T4850] usb 6-1: Manufacturer: 㰲 [ 414.789837][ T4850] usb 6-1: SerialNumber: з [ 415.645004][ T4850] usb 6-1: can't set config #1, error -71 [ 415.670841][ T4850] usb 6-1: USB disconnect, device number 4 [ 415.905421][ T7734] loop4: detected capacity change from 0 to 1024 [ 415.988551][ T7734] hfsplus: unable to parse mount options [ 416.131890][ T7748] sp0: Synchronizing with TNC [ 416.207799][ T7750] loop3: detected capacity change from 0 to 128 [ 417.180779][ T7757] loop4: detected capacity change from 0 to 1024 [ 418.667462][ T7776] misc userio: Invalid payload size [ 419.428572][ T4337] hfsplus: b-tree write err: -5, ino 4 [ 422.019576][ T7803] loop3: detected capacity change from 0 to 1024 [ 422.167999][ T7803] EXT4-fs (loop3): inline encryption not supported [ 422.315996][ T7803] EXT4-fs error (device loop3): ext4_free_blocks:6234: comm syz.3.806: Freeing blocks not in datazone - block = 0, count = 4096 [ 422.425865][ T7803] EXT4-fs (loop3): Remounting filesystem read-only [ 422.455248][ T7803] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.806: Invalid inode bitmap blk 0 in block_group 0 [ 422.501319][ T7803] EXT4-fs (loop3): Remounting filesystem read-only [ 422.522889][ T7803] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 422.562529][ T7803] EXT4-fs (loop3): Remounting filesystem read-only [ 422.592567][ T7803] EXT4-fs (loop3): 1 orphan inode deleted [ 422.611315][ T7803] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; noblock_validity,min_batch_time=0x0000000000000008,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 422.714027][ T7803] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.806: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 422.809150][ T7803] EXT4-fs (loop3): Remounting filesystem read-only [ 423.045095][ T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 423.345119][ T23] usb 8-1: Using ep0 maxpacket: 32 [ 423.593462][ T23] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 423.602655][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.619080][ T23] usb 8-1: config 0 descriptor?? [ 424.397972][ T23] gspca_main: sunplus-2.14.0 probing 041e:400b [ 424.643662][ T7861] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 425.924961][ T23] gspca_sunplus: reg_w_riv err -110 [ 425.940494][ T23] sunplus: probe of 8-1:0.0 failed with error -110 [ 426.021147][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.817'. [ 427.009583][ T4850] usb 8-1: USB disconnect, device number 3 [ 427.426268][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 427.436979][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.819'. [ 429.129832][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 433.068088][ T7972] loop5: detected capacity change from 0 to 128 [ 433.210163][ T7972] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 433.383647][ T7972] hpfs: filesystem error: improperly stopped [ 434.134266][ T7972] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 434.183528][ T7972] hpfs: You really don't want any checks? You are crazy... [ 434.255242][ T7972] hpfs: hpfs_map_sector(): read error [ 434.261297][ T7972] hpfs: code page support is disabled [ 434.277875][ T7972] hpfs: hpfs_map_4sectors(): unaligned read [ 434.299863][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.840'. [ 434.309276][ T7972] hpfs: hpfs_map_4sectors(): unaligned read [ 434.335469][ T7972] hpfs: filesystem error: unable to find root dir [ 435.239719][ T7999] loop5: detected capacity change from 0 to 131072 [ 435.336112][ T7999] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 435.342859][ T7999] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 435.352231][ T7999] F2FS-fs (loop5): invalid crc value [ 435.443012][ T7999] F2FS-fs (loop5): Found nat_bits in checkpoint [ 435.532861][ T7999] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 435.540342][ T7999] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 435.605643][ T26] audit: type=1800 audit(1770470548.244:3): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.843" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 436.431552][ T8022] loop4: detected capacity change from 0 to 128 [ 437.648136][ T8035] loop3: detected capacity change from 0 to 512 [ 438.497712][ T8035] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 438.922697][ T8050] nvme_fabrics: unknown parameter or missing value 'd:' in ctrl creation request [ 438.977804][ T26] audit: type=1804 audit(1770470551.594:4): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.842" name="/newroot/174/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 438.999510][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 440.166903][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.176303][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.749221][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.760491][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.851191][ T23] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 440.879202][ T23] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.946458][ T23] usb 5-1: Manufacturer: syz [ 441.011064][ T23] usb 5-1: config 0 descriptor?? [ 442.836386][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 442.843830][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 442.859123][ T23] usb 5-1: USB disconnect, device number 7 [ 442.965427][ T8079] loop4: detected capacity change from 0 to 1024 [ 443.022341][ T8073] device syzkaller0 entered promiscuous mode [ 443.030095][ T8079] hfsplus: unable to parse mount options [ 446.149541][ T8111] loop3: detected capacity change from 0 to 512 [ 446.260275][ T8111] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 446.344270][ T8115] loop4: detected capacity change from 0 to 256 [ 446.366186][ T8111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 446.434285][ T8111] System zones: 1-12 [ 446.463492][ T8111] EXT4-fs (loop3): orphan cleanup on readonly fs [ 446.521080][ T8111] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.863: invalid indirect mapped block 12 (level 1) [ 446.628524][ T8111] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.863: invalid indirect mapped block 2 (level 2) [ 446.724711][ T8111] EXT4-fs (loop3): 1 truncate cleaned up [ 446.738247][ T8111] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 447.444618][ T8111] overlayfs: upper fs is r/o, try multi-lower layers mount [ 448.831644][ T8149] device syzkaller0 entered promiscuous mode [ 451.214711][ T8191] loop7: detected capacity change from 0 to 512 [ 451.702302][ T8191] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 451.825622][ T8191] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.556013][ T8227] loop5: detected capacity change from 0 to 128 [ 454.612381][ T8227] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 454.785089][ T8227] hpfs: filesystem error: improperly stopped [ 454.820698][ T8227] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 454.934994][ T8227] hpfs: You really don't want any checks? You are crazy... [ 454.955188][ T8227] hpfs: hpfs_map_sector(): read error [ 454.960878][ T8227] hpfs: code page support is disabled [ 455.010075][ T8227] hpfs: hpfs_map_4sectors(): unaligned read [ 455.034978][ T8227] hpfs: hpfs_map_4sectors(): unaligned read [ 455.075061][ T8227] hpfs: filesystem error: unable to find root dir [ 456.236917][ T8272] loop5: detected capacity change from 0 to 512 [ 456.375000][ T13] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 456.845200][ T13] usb 8-1: not running at top speed; connect to a high speed hub [ 457.360308][ T8272] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.894: bg 0: block 248: padding at end of block bitmap is not set [ 457.431641][ T8272] Quota error (device loop5): write_blk: dquota write failed [ 457.465303][ T13] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.471591][ T8272] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 457.502700][ T13] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.567302][ T8272] EXT4-fs error (device loop5): ext4_acquire_dquot:6234: comm syz.5.894: Failed to acquire dquot type 1 [ 457.674287][ T8272] EXT4-fs (loop5): 1 truncate cleaned up [ 457.680092][ T8272] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,barrier,,errors=continue. Quota mode: writeback. [ 457.695237][ T13] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.715431][ T8272] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.734945][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.772534][ T13] usb 8-1: Product: ᐁ [ 457.963513][ T13] usb 8-1: Manufacturer: 㰲 [ 457.991586][ T13] usb 8-1: SerialNumber: з [ 458.324291][ T8272] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.894: path /111/file0: bad entry in directory: rec_len is smaller than minimal - offset=323, inode=0, rec_len=0, size=4096 fake=0 [ 458.365230][ T13] usb 8-1: 0:2 : does not exist [ 458.421439][ T13] usb 8-1: USB disconnect, device number 4 [ 458.707883][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.729556][ T8309] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.901'. [ 458.820198][ T8315] loop4: detected capacity change from 0 to 512 [ 458.885462][ T8318] loop7: detected capacity change from 0 to 128 [ 458.917601][ T8315] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 458.940752][ T8318] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 458.974715][ T8315] EXT4-fs (loop4): Ignoring removed bh option [ 459.026681][ T8318] hpfs: filesystem error: improperly stopped [ 459.032750][ T8318] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 459.129124][ T8318] hpfs: You really don't want any checks? You are crazy... [ 459.222672][ T8318] hpfs: hpfs_map_sector(): read error [ 459.260943][ T8318] hpfs: code page support is disabled [ 459.286189][ T8318] hpfs: hpfs_map_4sectors(): unaligned read [ 459.342802][ T8315] EXT4-fs (loop4): Test dummy encryption mode enabled [ 459.395135][ T8315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 459.418632][ T8318] hpfs: hpfs_map_4sectors(): unaligned read [ 459.424580][ T8318] hpfs: filesystem error: unable to find root dir [ 459.459358][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.494576][ T8315] EXT4-fs (loop4): 1 truncate cleaned up [ 459.503969][ T8315] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,mblk_io_submit,bh,bsddf,grpquota,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: writeback. [ 460.462202][ T8315] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 460.487313][ T8348] loop5: detected capacity change from 0 to 128 [ 460.495335][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.503643][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.182770][ T8366] loop7: detected capacity change from 0 to 256 [ 461.285473][ T8364] capability: warning: `syz.1.914' uses deprecated v2 capabilities in a way that may be insecure [ 461.496229][ T8372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 461.535511][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.655777][ T8377] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.916'. [ 462.199513][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.356729][ T8391] loop5: detected capacity change from 0 to 128 [ 462.480160][ T8391] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 462.565034][ T8391] hpfs: filesystem error: improperly stopped [ 462.575599][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.610706][ T8391] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 462.663555][ T8391] hpfs: You really don't want any checks? You are crazy... [ 462.701311][ T8391] hpfs: hpfs_map_sector(): read error [ 462.885898][ T8391] hpfs: code page support is disabled [ 463.633071][ T3576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.672501][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.685254][ T8391] hpfs: hpfs_map_4sectors(): unaligned read [ 463.696158][ T8391] hpfs: hpfs_map_4sectors(): unaligned read [ 463.702309][ T8391] hpfs: filesystem error: unable to find root dir [ 464.655309][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.456162][ T8417] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 465.580101][ T8429] loop4: detected capacity change from 0 to 512 [ 465.697848][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.794833][ T8429] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 466.066415][ T8438] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.930'. [ 466.141702][ T8442] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #15: comm syz.4.928: verity is only allowed on extent-based files [ 466.503557][ T8447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.513072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.779211][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.468043][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.774969][ T4297] Bluetooth: hci1: command 0x0406 tx timeout [ 467.855367][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.912337][ T8458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.167541][ T8489] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.942'. [ 469.239645][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.943'. [ 470.428421][ T8503] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 470.435773][ T8503] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 470.520537][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.533029][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.829084][ T4850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.223971][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 471.241244][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 471.974144][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.025810][ T8515] loop4: detected capacity change from 0 to 512 [ 472.392889][ T8515] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 473.165916][ T26] audit: type=1800 audit(1770470585.813:5): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.949" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 473.429327][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.535218][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.770474][ T8540] loop4: detected capacity change from 0 to 512 [ 474.685349][ T8540] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 474.782922][ T8540] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 474.797649][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.818270][ T8540] System zones: 1-12 [ 474.896076][ T8540] EXT4-fs (loop4): orphan cleanup on readonly fs [ 474.946130][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.955'. [ 474.985633][ T8540] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.953: invalid indirect mapped block 12 (level 1) [ 475.033590][ T8540] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.953: invalid indirect mapped block 2 (level 2) [ 475.099819][ T8540] EXT4-fs (loop4): 1 truncate cleaned up [ 475.129403][ T8540] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 475.216204][ T8540] overlayfs: upper fs is r/o, try multi-lower layers mount [ 475.835755][ T8570] loop9: detected capacity change from 0 to 7 [ 476.712393][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.741977][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.753215][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.767924][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.795988][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.807036][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.853054][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.864070][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.875459][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.886482][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.949061][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.960039][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.969752][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 476.980835][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 477.013560][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.024608][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 477.146979][ T8570] ldm_validate_partition_table(): Disk read failed. [ 477.170757][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.181766][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 477.200195][ T8581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.209523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.238872][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 477.249886][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 477.261563][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 477.272885][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 477.787552][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.227339][ T8582] loop3: detected capacity change from 0 to 1024 [ 478.250730][ T8582] hfsplus: unable to parse mount options [ 478.378428][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.389618][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 478.489083][ T8570] Dev loop9: unable to read RDB block 0 [ 478.495922][ T8570] loop9: unable to read partition table [ 478.501725][ T8570] loop9: partition table beyond EOD, truncated [ 478.505629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.507989][ T8570] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 478.507989][ T8570] ) failed (rc=-5) [ 478.530311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.601574][ T4187] [ 478.603970][ T4187] ====================================================== [ 478.611005][ T4187] WARNING: possible circular locking dependency detected [ 478.618056][ T4187] syzkaller #0 Not tainted [ 478.622493][ T4187] ------------------------------------------------------ [ 478.629524][ T4187] syz-executor/4187 is trying to acquire lock: [ 478.635788][ T4187] ffff88807940c138 ((wq_completion)loop4){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 478.645585][ T4187] [ 478.645585][ T4187] but task is already holding lock: [ 478.652974][ T4187] ffff88814764e468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 478.661806][ T4187] [ 478.661806][ T4187] which lock already depends on the new lock. [ 478.661806][ T4187] [ 478.672235][ T4187] [ 478.672235][ T4187] the existing dependency chain (in reverse order) is: [ 478.681281][ T4187] [ 478.681281][ T4187] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 478.688887][ T4187] __mutex_lock_common+0x1e3/0x2400 [ 478.694664][ T4187] mutex_lock_killable_nested+0x17/0x20 [ 478.700861][ T4187] lo_open+0x6a/0x100 [ 478.705397][ T4187] blkdev_get_whole+0x90/0x390 [ 478.710714][ T4187] blkdev_get_by_dev+0x2d0/0xa60 [ 478.716218][ T4187] blkdev_open+0x12d/0x2c0 [ 478.721187][ T4187] do_dentry_open+0x7ff/0xf80 [ 478.726419][ T4187] path_openat+0x26f5/0x2fa0 [ 478.731562][ T4187] do_filp_open+0x1e2/0x410 [ 478.736617][ T4187] do_sys_openat2+0x150/0x4b0 [ 478.741843][ T4187] __x64_sys_openat+0x135/0x160 [ 478.747250][ T4187] do_syscall_64+0x4c/0xa0 [ 478.752223][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.758713][ T4187] [ 478.758713][ T4187] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 478.766570][ T4187] __mutex_lock_common+0x1e3/0x2400 [ 478.772324][ T4187] mutex_lock_nested+0x17/0x20 [ 478.777644][ T4187] blkdev_get_by_dev+0x157/0xa60 [ 478.783181][ T4187] swsusp_check+0xa1/0x2b0 [ 478.788147][ T4187] software_resume+0xc6/0x3b0 [ 478.793355][ T4187] resume_store+0xe4/0x130 [ 478.798297][ T4187] kernfs_fop_write_iter+0x379/0x4c0 [ 478.804108][ T4187] vfs_write+0x745/0xd60 [ 478.808874][ T4187] ksys_write+0x152/0x260 [ 478.813728][ T4187] do_syscall_64+0x4c/0xa0 [ 478.818668][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.825095][ T4187] [ 478.825095][ T4187] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 478.833646][ T4187] __mutex_lock_common+0x1e3/0x2400 [ 478.839378][ T4187] mutex_lock_nested+0x17/0x20 [ 478.844675][ T4187] software_resume+0x7c/0x3b0 [ 478.849906][ T4187] resume_store+0xe4/0x130 [ 478.854858][ T4187] kernfs_fop_write_iter+0x379/0x4c0 [ 478.860671][ T4187] vfs_write+0x745/0xd60 [ 478.865436][ T4187] ksys_write+0x152/0x260 [ 478.870288][ T4187] do_syscall_64+0x4c/0xa0 [ 478.875240][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.881677][ T4187] [ 478.881677][ T4187] -> #3 (&of->mutex){+.+.}-{3:3}: [ 478.888907][ T4187] __mutex_lock_common+0x1e3/0x2400 [ 478.894637][ T4187] mutex_lock_nested+0x17/0x20 [ 478.899925][ T4187] kernfs_seq_start+0x51/0x3c0 [ 478.905212][ T4187] seq_read_iter+0x3c4/0xd50 [ 478.910328][ T4187] vfs_read+0x759/0xd60 [ 478.915003][ T4187] ksys_read+0x152/0x260 [ 478.919770][ T4187] do_syscall_64+0x4c/0xa0 [ 478.924797][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 478.931264][ T4187] [ 478.931264][ T4187] -> #2 (&p->lock){+.+.}-{3:3}: [ 478.938306][ T4187] __mutex_lock_common+0x1e3/0x2400 [ 478.944060][ T4187] mutex_lock_nested+0x17/0x20 [ 478.949419][ T4187] seq_read_iter+0xad/0xd50 [ 478.954477][ T4187] do_iter_readv_writev+0x47e/0x5f0 [ 478.960225][ T4187] do_iter_read+0x20b/0x7c0 [ 478.965269][ T4187] loop_process_work+0x16dd/0x24a0 [ 478.970899][ T4187] process_one_work+0x85f/0x1010 [ 478.976358][ T4187] worker_thread+0xaa6/0x1290 [ 478.981554][ T4187] kthread+0x436/0x520 [ 478.986144][ T4187] ret_from_fork+0x1f/0x30 [ 478.991083][ T4187] [ 478.991083][ T4187] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 479.000252][ T4187] process_one_work+0x7bb/0x1010 [ 479.005719][ T4187] worker_thread+0xaa6/0x1290 [ 479.010922][ T4187] kthread+0x436/0x520 [ 479.015508][ T4187] ret_from_fork+0x1f/0x30 [ 479.020547][ T4187] [ 479.020547][ T4187] -> #0 ((wq_completion)loop4){+.+.}-{0:0}: [ 479.028624][ T4187] __lock_acquire+0x2c42/0x7d10 [ 479.034008][ T4187] lock_acquire+0x19e/0x400 [ 479.039088][ T4187] flush_workqueue+0x16c/0x13d0 [ 479.044477][ T4187] drain_workqueue+0xcf/0x380 [ 479.049688][ T4187] destroy_workqueue+0x7b/0xb20 [ 479.055067][ T4187] __loop_clr_fd+0x234/0xb90 [ 479.060175][ T4187] blkdev_put+0x53f/0x7d0 [ 479.065027][ T4187] deactivate_locked_super+0x93/0xf0 [ 479.070852][ T4187] cleanup_mnt+0x42d/0x4e0 [ 479.075790][ T4187] task_work_run+0x125/0x1a0 [ 479.080904][ T4187] exit_to_user_mode_loop+0x10f/0x130 [ 479.086799][ T4187] exit_to_user_mode_prepare+0xee/0x180 [ 479.092875][ T4187] syscall_exit_to_user_mode+0x16/0x40 [ 479.098857][ T4187] do_syscall_64+0x58/0xa0 [ 479.103793][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 479.110221][ T4187] [ 479.110221][ T4187] other info that might help us debug this: [ 479.110221][ T4187] [ 479.120449][ T4187] Chain exists of: [ 479.120449][ T4187] (wq_completion)loop4 --> &disk->open_mutex --> &lo->lo_mutex [ 479.120449][ T4187] [ 479.133924][ T4187] Possible unsafe locking scenario: [ 479.133924][ T4187] [ 479.141379][ T4187] CPU0 CPU1 [ 479.146751][ T4187] ---- ---- [ 479.152128][ T4187] lock(&lo->lo_mutex); [ 479.156377][ T4187] lock(&disk->open_mutex); [ 479.163488][ T4187] lock(&lo->lo_mutex); [ 479.170260][ T4187] lock((wq_completion)loop4); [ 479.175117][ T4187] [ 479.175117][ T4187] *** DEADLOCK *** [ 479.175117][ T4187] [ 479.183270][ T4187] 2 locks held by syz-executor/4187: [ 479.188554][ T4187] #0: ffff8880208e0518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 479.197873][ T4187] #1: ffff88814764e468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 479.207231][ T4187] [ 479.207231][ T4187] stack backtrace: [ 479.213125][ T4187] CPU: 0 PID: 4187 Comm: syz-executor Not tainted syzkaller #0 [ 479.220688][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 479.230864][ T4187] Call Trace: [ 479.234167][ T4187] [ 479.237141][ T4187] dump_stack_lvl+0x188/0x250 [ 479.241831][ T4187] ? load_image+0x400/0x400 [ 479.246368][ T4187] ? show_regs_print_info+0x20/0x20 [ 479.251575][ T4187] ? print_circular_bug+0x12b/0x1a0 [ 479.256800][ T4187] check_noncircular+0x296/0x330 [ 479.261746][ T4187] ? add_chain_block+0x940/0x940 [ 479.266686][ T4187] ? lockdep_lock+0xf1/0x1f0 [ 479.271304][ T4187] ? mark_lock+0x94/0x320 [ 479.275639][ T4187] __lock_acquire+0x2c42/0x7d10 [ 479.280510][ T4187] ? verify_lock_unused+0x140/0x140 [ 479.285716][ T4187] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 479.291707][ T4187] ? verify_lock_unused+0x140/0x140 [ 479.296904][ T4187] ? verify_lock_unused+0x140/0x140 [ 479.302124][ T4187] ? memset+0x1e/0x40 [ 479.306110][ T4187] lock_acquire+0x19e/0x400 [ 479.310626][ T4187] ? flush_workqueue+0x150/0x13d0 [ 479.315677][ T4187] ? __mutex_trylock_common+0x155/0x260 [ 479.321231][ T4187] ? read_lock_is_recursive+0x10/0x10 [ 479.326608][ T4187] ? __init_swait_queue_head+0xa5/0x150 [ 479.332253][ T4187] flush_workqueue+0x16c/0x13d0 [ 479.337124][ T4187] ? flush_workqueue+0x150/0x13d0 [ 479.342152][ T4187] ? __lock_acquire+0x7d10/0x7d10 [ 479.347193][ T4187] ? lock_chain_count+0x20/0x20 [ 479.352068][ T4187] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 479.357532][ T4187] ? lockdep_hardirqs_off+0x70/0x100 [ 479.362821][ T4187] ? rcu_work_rcufn+0x120/0x120 [ 479.367680][ T4187] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 479.373344][ T4187] ? finish_wait+0xc0/0x1d0 [ 479.377857][ T4187] drain_workqueue+0xcf/0x380 [ 479.382563][ T4187] destroy_workqueue+0x7b/0xb20 [ 479.387417][ T4187] __loop_clr_fd+0x234/0xb90 [ 479.392009][ T4187] ? lo_release+0x172/0x1f0 [ 479.396511][ T4187] ? lo_open+0x100/0x100 [ 479.400758][ T4187] blkdev_put+0x53f/0x7d0 [ 479.405114][ T4187] deactivate_locked_super+0x93/0xf0 [ 479.410410][ T4187] cleanup_mnt+0x42d/0x4e0 [ 479.414853][ T4187] ? lockdep_hardirqs_on+0x94/0x140 [ 479.420065][ T4187] task_work_run+0x125/0x1a0 [ 479.424671][ T4187] exit_to_user_mode_loop+0x10f/0x130 [ 479.430063][ T4187] exit_to_user_mode_prepare+0xee/0x180 [ 479.435636][ T4187] syscall_exit_to_user_mode+0x16/0x40 [ 479.441120][ T4187] do_syscall_64+0x58/0xa0 [ 479.445549][ T4187] ? clear_bhb_loop+0x30/0x80 [ 479.450241][ T4187] ? clear_bhb_loop+0x30/0x80 [ 479.454943][ T4187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 479.460890][ T4187] RIP: 0033:0x7fc45a14b117 [ 479.465544][ T4187] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 479.485160][ T4187] RSP: 002b:00007ffe225e05b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 479.493843][ T4187] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc45a14b117 [ 479.501948][ T4187] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe225e0670 [ 479.509938][ T4187] RBP: 00007ffe225e0670 R08: 00007ffe225e1670 R09: 00000000ffffffff [ 479.517939][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe225e1700 [ 479.525924][ T4187] R13: 00007fc45a1b371f R14: 0000000000074059 R15: 00007ffe225e1740 [ 479.533927][ T4187] [ 479.854311][ T8598] loop3: detected capacity change from 0 to 512 [ 480.018859][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.049248][ T4847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.999140][ T4850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.025519][ T8598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 481.405679][ T26] audit: type=1804 audit(1770470593.902:6): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.963" name="/newroot/193/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 482.175401][ T7719] net_ratelimit: 2 callbacks suppressed [ 482.175418][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.057823][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.225202][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.256581][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.295317][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.094997][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.175616][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.184871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.335449][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.385486][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.415403][ T7719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog