last executing test programs: 18m35.99275418s ago: executing program 2 (id=1115): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r3, 0x0) 18m34.223637772s ago: executing program 2 (id=1117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20048840) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x5d) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x15) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r8}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) 18m32.643649049s ago: executing program 2 (id=1120): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x2) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 18m30.744130064s ago: executing program 2 (id=1124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)={0x30, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 18m28.728302352s ago: executing program 2 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f01ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000), 0x8) 18m27.52555201s ago: executing program 2 (id=1128): gettid() timer_create(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) timer_delete(0x0) 18m11.722160436s ago: executing program 32 (id=1128): gettid() timer_create(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) timer_delete(0x0) 13m26.672020101s ago: executing program 4 (id=1747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000400), 0x0, 0x8, 0x20000006) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m20.454750899s ago: executing program 4 (id=1754): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x48}}}, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008000, &(0x7f0000000180)=ANY=[], 0x4, 0x5f2, &(0x7f00000063c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0006800800010000000001200002800c000100706f6c69637930000800020005000002080003000000001e", 0x68}], 0x1}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) 13m18.759751119s ago: executing program 4 (id=1757): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') accept4$inet(r3, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') socket$kcm(0x29, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad2109c752f91b5d470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) 13m14.991468218s ago: executing program 4 (id=1761): open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)="00008634", 0x4) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x1, 0x19e, &(0x7f0000000440)="$eJzs0L1rU1EYx/Hvc87Ji0qVqDhU0IDF65VqXqoOLganCLng4CIYNKSxKSZqejPYUrGLFKTY2dGpzoKOouBcHAQHvS7dpBk6iYNcubkn4v/g+cDld59zX855nm44CHPA773VNjXGNAf5hGCAK5KuKZXmW1v/sLmZBldtvWHzlc3pcHnlXqvX6ywVLxcpJAvxk/RRcbIff98JFccUI6GGfNlbbbfkTkBco6/mAwoNzoJuMvCfM22mOHobTextcE0xEK8Bh0rD/sNSuLxybrHfWugsdO5Xq3OXyhfK5YvV0t3FXqf8BvGfiUIl5wvIBezzH5Np8nTb7FezgvhdFengBWSbbG7rM6dmRyh/lxjhvTci9810i+oGp8nfShqqc0R4iT5gmzGMN6rnuK5eS8V8Nj8zivya1ufbD3rz6zeV/Mpu1WQ3L5UdMl4GqDCXjIbDfGA9YiaiHrEVsfOdk2L+natZI9Zgq+OcgCyPWsPhUiULH8ULqCZXAabGv1MBM43knO/sNzb4OrlxHMdxHMdxHMdx/gN/AgAA//8Dhlz/") timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="020000000980ffff", 0x8) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004840), &(0x7f0000004880)=0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101140, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x0, 0x18, 0x0, 0xc, 0xe, 0x4, 0xb, 0xf, 0x13, 0x0, 0x70, 0x0, 0xd, 0xf, 0x1, 0x3, 0x3, 0x2, '\x00', 0x1, 0x4}) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 13m12.620259114s ago: executing program 4 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4b) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x40) write(r4, &(0x7f0000000280)="719089bbe10c5c9b9ca4d2b606003d6831896da05fa6b6c8448123714abb4f5fc4ed5e185551a678577a51ad1e43d315aef4a2ca5003ab862f744407693658fa6a23bf9f2973f646c6bd398a169521cc6ec59c4931617765f9674d0454e39b28aee5e71cf139fd152eac64ef74020b8bf100640a32eb739b93947b83", 0x7c) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdaf) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000390025082bbd7000fbdbdf25140000001400"], 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x40010) pwritev2(r5, &(0x7f0000001600), 0x0, 0x8, 0x3c, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0x10003) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffc, 0x1000, 0x8000}) bind$bt_rfcomm(r8, &(0x7f0000000180)={0x1f, @any, 0xd}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000400000004", @ANYRES32=0x1, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m9.362652331s ago: executing program 4 (id=1767): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x400000002000) 12m54.22982733s ago: executing program 33 (id=1767): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x400000002000) 4m10.874514451s ago: executing program 0 (id=2775): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000001c0)={0xa, @pix={0x0, 0x1, 0x34565348, 0x2, 0x4, 0x0, 0x2}}) 4m7.679906715s ago: executing program 0 (id=2780): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) r5 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98, 0x0, 0xfffffffd}) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4004810) 4m5.610942543s ago: executing program 0 (id=2784): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) 4m3.026022483s ago: executing program 0 (id=2791): open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x1, 0x19e, &(0x7f0000000440)="$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") timer_settime(0x0, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/318], 0x1, 0x242, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004840), &(0x7f0000004880)=0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101140, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) 3m58.040231448s ago: executing program 0 (id=2799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000001c0), 0x8) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) 3m55.484151267s ago: executing program 0 (id=2802): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x400000002000) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) unshare(0x26020480) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) 3m40.413648437s ago: executing program 34 (id=2802): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000500)="8100dca40704185995cf3ab2f97104ae0480e08ba3fe77bed703ed94bfffa7be5a751dabd5b5d7216ad9d9a57466738e725be872a715547ce60cc623b31aaa8f7e05f88d47bca1273a8db8831af246a7879400ba923e3c80d84ef1fda2357da101585de6727af2a56bf5eb040e40103e513483f8c8be86c0f4f9b218508ee0ccdd857643d0985da78590cf3f885368f4573b893bcc97b9cbfb781aa9e68b2ec3187163db24a64c122bd6238f5a930fef4979ad89f9deac6ae658b56432e0fef545e7d4cd4c1ce6ae4c475a0366a962a74e4d142aef89a308613d58abab", 0xf000}, {0x0, 0x2d}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x400000002000) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) unshare(0x26020480) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) 2m4.41860538s ago: executing program 1 (id=3050): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m59.503650144s ago: executing program 1 (id=3062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 1m59.357559298s ago: executing program 1 (id=3064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m59.117137493s ago: executing program 1 (id=3066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') ioctl(0xffffffffffffffff, 0x4048aec9, 0x0) ioctl(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m57.583380539s ago: executing program 1 (id=3068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r1, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0}) r4 = creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x2284, &(0x7f0000000040)=0x85) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) setns(0xc9, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 1m55.944732767s ago: executing program 1 (id=3071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x598, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c8, 0xffffffff, 0xffffffff, 0x4c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xff, 0x0, 0x0, 0xff000000], 'batadv0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x8, 0x1, 0x1}, 0x0, 0x298, 0x308, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2, 0x6, 0x4, 0x3, 'syz1\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x3, 0x5, 0x1, 0x0, "8aac9b9c52f8bf21b937e9f4ecbfb04ae945800000000000000061a813fb48aa8b18076a1d05fc716edb0a0e2057d0ac3dacfde3ce76bf1900"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 1m29.564028757s ago: executing program 5 (id=3128): r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x8, @raw_data="2e2e6561e2151632518d6dbe27e7e2ba75af11be230be4504581ec42b64b95eb53849763fb132e9c9aefc6e7852f6302ac18d43a388b504a2126525544f7182b5073bfbb1e984be60777a9b7a8384d2f534ec5a703950691a1ceba905f2175e214799dbb527ad73a8de537804213e1cbc6e7285bd707b40b3d52b06ddd00aa1891a2ebf7588be2a4d9a6fdf223ce9f3b90dd12932bbf5400031bba0f0ce3055b3b8d77a7d1e86c138fde65f9b3369a69db2e35c691ddd784210d4c80c2caaaf6ae08e47531990e70"}) 1m29.321799103s ago: executing program 5 (id=3130): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001a80)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX], 0x1, 0x151f, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x80047210, &(0x7f0000001e40)) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") 1m27.239734s ago: executing program 5 (id=3133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4b) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x40) write(r4, 0x0, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdaf) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000390025082bbd7000fbdbdf25140000001400"], 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x40010) pwritev2(r5, &(0x7f0000001600), 0x0, 0x8, 0x3c, 0x8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S\xa8\t\x00\x00\x00\x00\xe4\xff\xff\xff\x00\x00\x00\x00\x00', 0x2) ftruncate(r8, 0x10003) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0xfffffffc, 0x1000, 0x8000}) bind$bt_rfcomm(r9, &(0x7f0000000180)={0x1f, @any, 0xd}, 0xa) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f00000001c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000400000004", @ANYRES32=0x1, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.880847906s ago: executing program 5 (id=3134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4b) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x40) write(r4, &(0x7f0000000280), 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0xfffffffffffffdaf) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000390025082bbd7000fbdbdf25140000001400"], 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x40010) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S\xa8\t\x00\x00\x00\x00\xe4\xff\xff\xff\x00\x00\x00\x00\x00', 0x2) ftruncate(r7, 0x10003) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0xfffffffc, 0x1000, 0x8000}) bind$bt_rfcomm(r8, &(0x7f0000000180)={0x1f, @any, 0xd}, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000400000004", @ANYRES32=0x1, @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m22.501206521s ago: executing program 5 (id=3138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x2040400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) open(0x0, 0x8000, 0x112) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x480, &(0x7f0000000180)={[{@inlinecrypt}, {@grpquota}, {@errors_remount}]}, 0x2, 0x469, &(0x7f0000000800)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x10, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7be, 0x8000, 0x30000000, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8301, 0x8, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8ae, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) write$tun(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 1m17.383975099s ago: executing program 5 (id=3146): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = timerfd_create(0x9, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$eventfd(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0xe, "5c76276f6c86622447099377e66e"}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x201, [[0xffffffff, 0xffffffff, 0xffffffff, 0x7fffffff, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x2, 0xffd, 0x0, 0x0, 0x1}, {0x1003, 0x3ffe, 0x0, 0x0, 0x1}, {0x8, 0xaf1, 0x0, 0x0, 0x1}]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20c00, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) 1m2.054656784s ago: executing program 35 (id=3146): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = timerfd_create(0x9, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$eventfd(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0xe, "5c76276f6c86622447099377e66e"}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x201, [[0xffffffff, 0xffffffff, 0xffffffff, 0x7fffffff, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x2, 0xffd, 0x0, 0x0, 0x1}, {0x1003, 0x3ffe, 0x0, 0x0, 0x1}, {0x8, 0xaf1, 0x0, 0x0, 0x1}]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20c00, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) 10.400442229s ago: executing program 7 (id=3231): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x48, 0x0, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 6.431305832s ago: executing program 3 (id=3237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, 0x0, 0x40010) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) fstat(r4, &(0x7f0000000280)) 5.21583161s ago: executing program 7 (id=3238): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') accept4$inet(r3, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') socket$kcm(0x29, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 4.960653865s ago: executing program 3 (id=3239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x2, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000005580)=""/102392, 0x18ff8) 4.804341279s ago: executing program 6 (id=3240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@empty}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="10", @ANYRES8=r1], 0x4000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0cabad29d7ef53d96a53a52bddad1e974cd78a5debf2a750190c4226911d01ae0bc526db9f726bd50727d3756"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r4, 0x11, 0x0, 0x74000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) 4.513894516s ago: executing program 6 (id=3241): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') ioctl(r2, 0x4048aec9, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.243982062s ago: executing program 6 (id=3242): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_open_dev$vivid(&(0x7f00000000c0), 0x3, 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0x2dff) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) socket$inet(0x2, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2a482, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2004890, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@access_client}, {@noxattr}]}}) 3.870132801s ago: executing program 7 (id=3243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f5080004600000005e0800064000000002080001400000001308000540000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}}, 0x4008000) 3.745315544s ago: executing program 3 (id=3244): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = timerfd_create(0x9, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x201, [[0xffffffff, 0xffffffff, 0xffffffff, 0x7fffffff, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x2, 0xffd, 0x0, 0x0, 0x1}, {0x1003, 0x3ffe, 0x0, 0x0, 0x1}, {0x8, 0xaf1, 0x0, 0x0, 0x1}]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x20c00, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x2) 2.724114328s ago: executing program 6 (id=3245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='measure uid>', 0xc) 2.685731098s ago: executing program 7 (id=3246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, r1, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)) r4 = creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r6, 0x2284, &(0x7f0000000040)=0x85) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) setns(0xc9, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 2.547803521s ago: executing program 3 (id=3247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, 0x0, 0x40010) openat(0xffffffffffffff9c, 0x0, 0x10b442, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) fstat(r4, &(0x7f0000000280)) 2.465759573s ago: executing program 6 (id=3248): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x598, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c8, 0xffffffff, 0xffffffff, 0x4c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xff, 0x0, 0x0, 0xff000000], 'batadv0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x8, 0x1, 0x1}, 0x0, 0x298, 0x308, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2, 0x6, 0x4, 0x3, 'syz1\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x3, 0x5, 0x1, 0x0, "8aac9b9c52f8bf21b937e9f4ecbfb04ae945800000000000000061a813fb48aa8b18076a1d05fc716edb0a0e2057d0ac3dacfde3ce76bf1900"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 1.771647259s ago: executing program 7 (id=3249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@empty}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="10", @ANYRES8=r1], 0x4000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0cabad29d7ef53d96a53a52bddad1e974cd78a5debf2a750190c4226911d01ae0bc526db9f726bd50727d3756"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r4, 0x11, 0x0, 0x74000) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) 980.826188ms ago: executing program 3 (id=3250): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x48, 0x0, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 692.812604ms ago: executing program 7 (id=3251): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') accept4$inet(r3, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') socket$kcm(0x29, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 122.432617ms ago: executing program 6 (id=3252): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x2, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) connect$inet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000005580)=""/102392, 0x18ff8) 0s ago: executing program 3 (id=3253): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) syz_open_dev$vivid(&(0x7f00000000c0), 0x3, 0x2) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0x2dff) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) socket$inet(0x2, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2a482, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x2004890, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@mmap}, {@aname}, {@noxattr}]}}) kernel console output (not intermixed with test programs): Normal: 233*4kB (U) 57*8kB (U) 37*16kB (UME) 34*32kB (UME) 28*64kB (UME) 11*128kB (UME) 5*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 949*4096kB (M) = 3898236kB [ 1329.455394][T14875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.492028][T14839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.509963][T14875] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1329.522514][T14875] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.523253][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.608920][T14839] device bridge_slave_0 entered promiscuous mode [ 1329.659385][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.723521][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.898979][T14839] device bridge_slave_1 entered promiscuous mode [ 1330.032340][T14425] Bluetooth: hci1: command 0x041b tx timeout [ 1331.892796][T14875] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1332.112428][T14425] Bluetooth: hci1: command 0x040f tx timeout [ 1332.360559][T14875] 72010 total pagecache pages [ 1332.442512][T14875] 0 pages in swap cache [ 1332.447602][T14875] Free swap = 124584kB [ 1332.462061][T14875] Total swap = 124996kB [ 1332.472309][T14875] 2097051 pages RAM [ 1332.484659][T14839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.521748][T14875] 0 pages HighMem/MovableOnly [ 1332.546519][T14875] 415223 pages reserved [ 1332.565306][T14875] 0 pages cma reserved [ 1332.661905][T14839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.926946][T14839] team0: Port device team_slave_0 added [ 1334.192564][T14425] Bluetooth: hci1: command 0x0419 tx timeout [ 1334.893026][T14839] team0: Port device team_slave_1 added [ 1334.959182][T14839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.026415][T14915] loop6: detected capacity change from 0 to 512 [ 1335.048764][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.105674][T14915] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.2581: missing EA_INODE flag [ 1335.170874][T14915] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2581: error while reading EA inode 2 err=-117 [ 1335.218530][T14915] EXT4-fs (loop6): 1 orphan inode deleted [ 1335.265743][T14915] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1335.275331][T14839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.512104][T14910] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1335.532527][T14839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.549881][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.631909][T14923] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1335.640931][T14923] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1336.072273][T14839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.168307][T14910] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 1336.204920][T11483] EXT4-fs (loop6): unmounting filesystem. [ 1336.272333][T14425] Bluetooth: hci1: command 0x0405 tx timeout [ 1336.416666][T14839] device hsr_slave_0 entered promiscuous mode [ 1336.443925][T14839] device hsr_slave_1 entered promiscuous mode [ 1336.452975][T14839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1336.477654][T14839] Cannot create hsr debugfs directory [ 1337.612618][ T7712] device hsr_slave_0 left promiscuous mode [ 1337.700609][ T7712] device hsr_slave_1 left promiscuous mode [ 1337.714250][T14941] loop3: detected capacity change from 0 to 8 [ 1337.754216][T14941] squashfs: Unknown parameter 'yzkaller' [ 1337.827303][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.842702][T14457] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1337.860429][T14941] loop3: detected capacity change from 0 to 512 [ 1337.867664][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.881231][T14457] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1337.922598][T14457] Buffer I/O error on dev loop3, logical block 0, async page read [ 1337.958341][ T7712] device bridge_slave_1 left promiscuous mode [ 1337.978061][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.082505][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1338.300689][ T22] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1338.314015][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.417975][ T7712] device bridge_slave_0 left promiscuous mode [ 1338.571005][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.554703][ T22] wacom 0003:056A:033B.0002: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1339.709387][ T22] wacom 0003:056A:033B.0002: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 1339.771733][ T22] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0002/input/input16 [ 1339.953412][ T22] usb 6-1: USB disconnect, device number 3 [ 1340.819421][T14963] fido_id[14963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1341.096716][T14984] loop5: detected capacity change from 0 to 512 [ 1341.279368][T14984] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.2592: missing EA_INODE flag [ 1341.482009][T14984] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2592: error while reading EA inode 2 err=-117 [ 1341.521301][T14984] EXT4-fs (loop5): 1 orphan inode deleted [ 1341.906507][T14984] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1341.955907][T14989] CIFS: Attempting to mount \\127.0.0.1\share [ 1342.341642][T14983] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1342.350845][T14983] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1342.562348][T14989] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 1342.992765][T14989] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1343.016992][T15001] loop1: detected capacity change from 0 to 4096 [ 1343.029295][ T8791] EXT4-fs (loop5): unmounting filesystem. [ 1343.053254][T15001] ntfs3: Unknown parameter 'windows_names' [ 1343.149454][ T7712] team0 (unregistering): Port device team_slave_1 removed [ 1344.314107][ T7712] team0 (unregistering): Port device team_slave_0 removed [ 1344.352914][ T7712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.441127][ T7712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.586386][T15021] loop5: detected capacity change from 0 to 8 [ 1344.620677][T15021] squashfs: Unknown parameter 'yzkaller' [ 1344.755703][T15021] loop5: detected capacity change from 0 to 512 [ 1345.499068][ T7712] bond0 (unregistering): Released all slaves [ 1346.194573][T15039] loop3: detected capacity change from 0 to 512 [ 1346.275153][T14839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1346.328417][T14839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1346.371221][T15039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1346.389131][T14839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1346.410300][T15039] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1346.459139][T15049] loop5: detected capacity change from 0 to 512 [ 1346.943183][ T22] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1347.164540][ T22] usb 4-1: config 128 has an invalid interface number: 5 but max is 0 [ 1347.203853][ T22] usb 4-1: config 128 has no interface number 0 [ 1347.210200][ T22] usb 4-1: config 128 interface 5 has no altsetting 0 [ 1347.295210][ T22] usb 4-1: New USB device found, idVendor=1b80, idProduct=e1cc, bcdDevice=26.cb [ 1347.363069][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.408886][ T22] usb 4-1: Product: syz [ 1347.413713][ T22] usb 4-1: Manufacturer: syz [ 1347.418370][ T22] usb 4-1: SerialNumber: syz [ 1347.540725][T14839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1347.742802][T15049] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.2604: missing EA_INODE flag [ 1347.764261][T15039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2601'. [ 1347.897969][T15064] FAULT_INJECTION: forcing a failure. [ 1347.897969][T15064] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.927699][T15049] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2604: error while reading EA inode 2 err=-117 [ 1348.006541][T15049] EXT4-fs (loop5): 1 orphan inode deleted [ 1348.013038][T15064] CPU: 1 PID: 15064 Comm: syz.6.2606 Not tainted syzkaller #0 [ 1348.020555][T15064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1348.030650][T15064] Call Trace: [ 1348.033965][T15064] [ 1348.037020][T15064] dump_stack_lvl+0x188/0x24e [ 1348.041766][T15064] ? show_regs_print_info+0x12/0x12 [ 1348.047019][T15064] ? load_image+0x410/0x410 [ 1348.051664][T15064] ? __might_sleep+0xd0/0xd0 [ 1348.056335][T15064] ? __lock_acquire+0x7c40/0x7c40 [ 1348.061422][T15064] should_fail_ex+0x390/0x4c0 [ 1348.066191][T15064] should_failslab+0x5/0x20 [ 1348.070760][T15064] slab_pre_alloc_hook+0x59/0x300 [ 1348.075842][T15064] kmem_cache_alloc_lru+0x49/0x2e0 [ 1348.080996][T15064] ? __d_alloc+0x2e/0x6e0 [ 1348.085376][T15064] __d_alloc+0x2e/0x6e0 [ 1348.089572][T15064] ? d_alloc_pseudo+0xe/0x70 [ 1348.094203][T15064] d_alloc_pseudo+0x19/0x70 [ 1348.098773][T15064] alloc_file_pseudo+0xe0/0x200 [ 1348.103695][T15064] ? alloc_empty_file_noaccount+0x80/0x80 [ 1348.109499][T15064] ? alloc_fd+0x590/0x640 [ 1348.113902][T15064] sock_alloc_file+0xb3/0x240 [ 1348.118641][T15064] __sys_socket+0x12d/0x190 [ 1348.123229][T15064] __x64_sys_socket+0x76/0x80 [ 1348.127967][T15064] do_syscall_64+0x4c/0xa0 [ 1348.132439][T15064] ? clear_bhb_loop+0x60/0xb0 [ 1348.137174][T15064] ? clear_bhb_loop+0x60/0xb0 [ 1348.141902][T15064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1348.147874][T15064] RIP: 0033:0x7fca0f99e159 [ 1348.152339][T15064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.172000][T15064] RSP: 002b:00007fca107be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1348.180472][T15064] RAX: ffffffffffffffda RBX: 00007fca0fc25fa0 RCX: 00007fca0f99e159 [ 1348.188495][T15064] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 1348.196511][T15064] RBP: 00007fca0fa35024 R08: 0000000000000000 R09: 0000000000000000 [ 1348.204527][T15064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.212567][T15064] R13: 00007fca0fc26038 R14: 00007fca0fc25fa0 R15: 00007ffe11d42988 [ 1348.220595][T15064] [ 1348.283763][T15049] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1348.717276][T15071] overlayfs: missing 'lowerdir' [ 1349.219116][ T8791] EXT4-fs (loop5): unmounting filesystem. [ 1349.300278][T15063] loop1: detected capacity change from 0 to 32768 [ 1349.328132][T15063] [ 1349.328132][T15063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.328132][T15063] [ 1349.574983][T15063] [ 1349.574983][T15063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.574983][T15063] [ 1349.670673][T15039] bond0 (unregistering): Released all slaves [ 1349.710680][T15063] [ 1349.710680][T15063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.710680][T15063] [ 1349.746493][T15063] [ 1349.746493][T15063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.746493][T15063] [ 1349.820338][T15063] [ 1349.820338][T15063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.820338][T15063] [ 1349.852681][T15063] [ 1349.852681][T15063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1349.852681][T15063] [ 1349.919312][T15074] loop5: detected capacity change from 0 to 4096 [ 1349.983571][T15074] ntfs3: Unknown parameter 'windows_names' [ 1350.055135][ T108] [ 1350.055135][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1350.055135][ T108] [ 1350.244017][ T7703] [ 1350.244017][ T7703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1350.244017][ T7703] [ 1350.277575][ T7703] [ 1350.277575][ T7703] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1350.277575][ T7703] [ 1350.288912][T14839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.310812][T15080] loop6: detected capacity change from 0 to 8 [ 1350.319977][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 1350.339106][ T4274] [ 1350.339106][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1350.339106][ T4274] [ 1350.378396][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1350.385789][ T4274] [ 1350.385789][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1350.385789][ T4274] [ 1350.398159][T15080] squashfs: Unknown parameter 'yzkaller' [ 1350.431346][ T22] usb 4-1: USB disconnect, device number 4 [ 1350.471761][ T107] [ 1350.471761][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1350.471761][ T107] [ 1350.525136][T12130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1350.655275][T14839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.940910][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1351.066677][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1351.123013][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.130209][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.141823][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1351.150191][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1351.180596][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1351.206398][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.213616][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.256207][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1351.330779][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1351.410729][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1351.455886][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1351.483077][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1351.514176][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1351.562169][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1351.725042][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1351.943504][ T7703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1352.694650][T14839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1352.708826][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1352.767680][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1352.811925][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1353.248200][T15119] loop3: detected capacity change from 0 to 512 [ 1353.334433][T15119] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.2616: missing EA_INODE flag [ 1353.372472][ T22] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1353.384380][T15119] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2616: error while reading EA inode 2 err=-117 [ 1354.992842][T15119] EXT4-fs (loop3): 1 orphan inode deleted [ 1355.022379][T15119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1355.154515][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.278729][ T22] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1355.369504][T15130] overlayfs: missing 'lowerdir' [ 1355.405180][ T22] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1355.592421][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.784927][ T22] usb 7-1: config 0 descriptor?? [ 1355.913154][ T22] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1355.919911][ T22] dvb-usb: bulk message failed: -22 (3/0) [ 1355.959821][ T22] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1355.978780][ T22] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1355.987258][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 1355.989036][ T22] usb 7-1: media controller created [ 1356.004015][T15116] dvb-usb: bulk message failed: -22 (2/0) [ 1356.043867][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.248474][ T22] dvb-usb: bulk message failed: -22 (6/0) [ 1356.255374][ T22] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1357.019049][ T22] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input19 [ 1357.032730][ T22] dvb-usb: schedule remote query interval to 150 msecs. [ 1357.039739][ T22] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1357.062500][ T22] usb 7-1: USB disconnect, device number 3 [ 1357.129095][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1357.137794][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1357.157189][ T22] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1357.276727][T14839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.428030][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1357.507239][T15142] loop1: detected capacity change from 0 to 512 [ 1357.514739][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1357.624443][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1357.638231][T15139] loop3: detected capacity change from 0 to 4096 [ 1357.663400][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1357.713747][T15139] ntfs3: Unknown parameter 'windows_names' [ 1357.789314][T14839] device veth0_vlan entered promiscuous mode [ 1357.810253][T15142] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.2621: corrupted inode contents [ 1357.830938][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1357.853205][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1357.891855][T14839] device veth1_vlan entered promiscuous mode [ 1357.975864][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1357.994097][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1358.007723][T15142] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1358.031523][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1358.107885][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1358.157103][T15142] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.2621: corrupted inode contents [ 1358.172653][T14839] device veth0_macvtap entered promiscuous mode [ 1358.193067][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1358.238718][T14839] device veth1_macvtap entered promiscuous mode [ 1358.339002][T15142] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.2621: mark_inode_dirty error [ 1358.383635][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1358.473788][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.506345][T15142] EXT4-fs (loop1): 1 orphan inode deleted [ 1358.521049][T15142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1359.044344][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.152783][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.172239][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.192227][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.202105][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1359.260090][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.392623][T15142] EXT4-fs error (device loop1): __ext4_iget:5102: inode #14: block 1886221359: comm syz.1.2621: invalid block [ 1359.513366][T14839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1359.591489][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.673259][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.782273][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.813144][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.984058][T15168] loop3: detected capacity change from 0 to 32768 [ 1360.046939][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.066229][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.082392][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1360.093143][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.106635][T15168] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1360.108003][T14839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1360.128855][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1360.138151][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1360.152027][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1360.161413][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1360.171312][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1360.337035][T14839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.709728][T15182] loop1: detected capacity change from 0 to 512 [ 1360.929368][T15182] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1360.943773][T14839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1360.993502][T14839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.067123][T15182] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1361.090738][T14839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1361.101241][T15182] EXT4-fs (loop1): mount failed [ 1361.143568][T15190] CIFS: Attempting to mount \\127.0.0.1\share [ 1361.311591][ T4282] ocfs2: Unmounting device (7,3) on (node local) [ 1361.556236][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.562785][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.588849][T15196] loop3: detected capacity change from 0 to 512 [ 1361.629492][T15196] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.2629: missing EA_INODE flag [ 1361.648886][T15196] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2629: error while reading EA inode 2 err=-117 [ 1361.734611][ T7714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1361.756470][T15196] EXT4-fs (loop3): 1 orphan inode deleted [ 1361.762477][T15196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1361.912656][ T7714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1361.923443][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1362.345476][T15199] overlayfs: missing 'lowerdir' [ 1362.423949][T15204] overlayfs: missing 'lowerdir' [ 1363.062591][T15190] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 1363.069591][T15190] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1364.239936][T15214] process 'syz.5.2631' launched './file1' with NULL argv: empty string added [ 1365.056155][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 1365.192809][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.200706][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.261849][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1366.817605][T15227] loop3: detected capacity change from 0 to 256 [ 1367.356772][T15230] loop3: detected capacity change from 0 to 32768 [ 1367.463316][T15230] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1368.349815][ T4282] ocfs2: Unmounting device (7,3) on (node local) [ 1370.291068][T15268] loop1: detected capacity change from 0 to 512 [ 1370.533012][T15275] loop6: detected capacity change from 0 to 512 [ 1370.588201][T15268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.2642: missing EA_INODE flag [ 1370.641388][T15275] EXT4-fs (loop6): 1 truncate cleaned up [ 1370.648170][T15275] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1370.666493][T15281] x_tables: unsorted entry at hook 3 [ 1371.736296][T15281] loop3: detected capacity change from 0 to 64 [ 1371.745127][T15268] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2642: error while reading EA inode 2 err=-117 [ 1371.787037][T15281] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1371.834290][T15268] EXT4-fs (loop1): 1 orphan inode deleted [ 1371.873419][T15268] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1371.885628][T11483] EXT4-fs (loop6): unmounting filesystem. [ 1372.243942][T15264] overlayfs: missing 'workdir' [ 1372.332788][T15289] loop6: detected capacity change from 0 to 32768 [ 1372.567792][T15289] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1373.998038][T11483] ocfs2: Unmounting device (7,6) on (node local) [ 1374.915936][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1377.689601][T15338] loop0: detected capacity change from 0 to 2048 [ 1377.730300][T15341] x_tables: unsorted entry at hook 3 [ 1377.758629][T15338] syz.0.2649: attempt to access beyond end of device [ 1377.758629][T15338] loop0: rw=0, sector=50665495807918160, nr_sectors = 2 limit=2048 [ 1377.808714][T15341] loop1: detected capacity change from 0 to 64 [ 1377.837865][T15338] NILFS (loop0): I/O error reading meta-data file (ino=4, block-offset=0) [ 1377.852450][T15338] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2) [ 1377.921392][T15341] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1378.442565][T15343] overlayfs: failed to clone upperpath [ 1379.901389][T15359] loop3: detected capacity change from 0 to 512 [ 1380.023251][T15359] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.2666: missing EA_INODE flag [ 1380.051842][T15359] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2666: error while reading EA inode 2 err=-117 [ 1380.110579][T15359] EXT4-fs (loop3): 1 orphan inode deleted [ 1380.150321][T15359] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1380.341739][T15351] loop1: detected capacity change from 0 to 32768 [ 1381.064318][T15367] overlayfs: missing 'workdir' [ 1381.963713][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 1383.847174][T15383] loop1: detected capacity change from 0 to 128 [ 1383.968422][T15383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1384.002062][T15383] ext4 filesystem being mounted at /504/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1384.363582][T15389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2674'. [ 1385.072619][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 1387.473447][T15419] kernel profiling enabled (shift: 7) [ 1387.741418][T15423] loop6: detected capacity change from 0 to 512 [ 1387.860624][T15423] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.2680: missing EA_INODE flag [ 1387.926638][T15414] ubi: mtd0 is already attached to ubi0 [ 1387.961522][T15423] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.2680: error while reading EA inode 2 err=-117 [ 1387.989651][T15423] EXT4-fs (loop6): 1 orphan inode deleted [ 1388.004244][T15423] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1389.137251][T15440] overlayfs: missing 'workdir' [ 1391.115358][T11483] EXT4-fs (loop6): unmounting filesystem. [ 1391.320366][T15451] loop6: detected capacity change from 0 to 64 [ 1391.621988][T15453] loop1: detected capacity change from 0 to 32768 [ 1391.743856][T15453] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1392.975884][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 1396.135953][T15486] loop6: detected capacity change from 0 to 2048 [ 1397.721884][T15486] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1397.788185][T15486] EXT4-fs (loop6): shut down requested (1) [ 1397.838855][T15503] loop1: detected capacity change from 0 to 64 [ 1397.915361][T11483] EXT4-fs (loop6): unmounting filesystem. [ 1398.381278][T15515] loop6: detected capacity change from 0 to 512 [ 1399.760357][T15520] loop0: detected capacity change from 0 to 256 [ 1400.563770][T15520] FAT-fs (loop0): Unrecognized mount option "utf8=7" or missing value [ 1400.653315][T14457] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1400.688315][T15530] loop6: detected capacity change from 0 to 64 [ 1400.694836][T15520] loop0: detected capacity change from 0 to 512 [ 1400.705355][T14457] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1400.715740][T15520] EXT4-fs: inline encryption not supported [ 1400.735843][T15520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1400.749702][T15520] EXT4-fs (loop0): Invalid default hash set in the superblock [ 1402.801954][T15543] loop6: detected capacity change from 0 to 64 [ 1403.511657][T15547] loop3: detected capacity change from 0 to 32768 [ 1403.658499][T15547] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1405.187428][T15566] loop0: detected capacity change from 0 to 512 [ 1406.505552][ T4282] ocfs2: Unmounting device (7,3) on (node local) [ 1406.706708][T15575] loop0: detected capacity change from 0 to 64 [ 1407.121305][T15582] loop0: detected capacity change from 0 to 4096 [ 1407.759506][T15587] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1407.900471][T15582] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1408.257305][T15582] Remounting filesystem read-only [ 1412.005915][T15609] loop1: detected capacity change from 0 to 4096 [ 1412.091783][T15609] ntfs3: Unknown parameter 'windows_names' [ 1412.114964][T15616] loop0: detected capacity change from 0 to 64 [ 1412.340286][T15618] loop3: detected capacity change from 0 to 128 [ 1412.671981][T15618] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1412.694972][T15618] hpfs: filesystem error: improperly stopped [ 1412.715189][T15618] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1413.093325][T15618] hpfs: You really don't want any checks? You are crazy... [ 1413.503302][T15618] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 1413.511277][T15618] hpfs: code page support is disabled [ 1413.528080][T15618] hpfs: hpfs_map_4sectors(): unaligned read [ 1413.534510][T15618] hpfs: hpfs_map_4sectors(): unaligned read [ 1413.546983][T15618] hpfs: filesystem error: unable to find root dir [ 1419.073190][T15642] loop1: detected capacity change from 0 to 32768 [ 1419.160985][T15642] XFS (loop1): Mounting V5 Filesystem [ 1419.362676][T15642] XFS (loop1): Ending clean mount [ 1419.649601][T15662] syz.3.2747: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1419.664150][T15662] CPU: 1 PID: 15662 Comm: syz.3.2747 Not tainted syzkaller #0 [ 1419.671651][T15662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1419.681719][T15662] Call Trace: [ 1419.685013][T15662] [ 1419.687956][T15662] dump_stack_lvl+0x188/0x24e [ 1419.692750][T15662] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1419.699185][T15662] ? show_regs_print_info+0x12/0x12 [ 1419.704426][T15662] ? load_image+0x410/0x410 [ 1419.708979][T15662] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1419.715441][T15662] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1419.721967][T15662] warn_alloc+0x242/0x330 [ 1419.726342][T15662] ? zone_watermark_ok_safe+0x270/0x270 [ 1419.731936][T15662] __vmalloc_node_range+0x11e/0x1380 [ 1419.737233][T15662] ? __mutex_trylock_common+0x15c/0x260 [ 1419.742793][T15662] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1419.748965][T15662] ? rcu_is_watching+0x11/0xa0 [ 1419.753746][T15662] ? trace_contention_end+0x5f/0x170 [ 1419.759066][T15662] ? __mutex_lock+0x1ab/0xae0 [ 1419.763795][T15662] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1419.769442][T15662] ? free_vm_area+0x50/0x50 [ 1419.774001][T15662] ? dvb_demux_do_ioctl+0x313/0x530 [ 1419.779223][T15662] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1419.784709][T15662] ? mutex_lock_nested+0x10/0x10 [ 1419.789666][T15662] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1419.795496][T15662] vmalloc+0x75/0x80 [ 1419.799408][T15662] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1419.805237][T15662] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1419.810911][T15662] dvb_demux_do_ioctl+0x450/0x530 [ 1419.816052][T15662] dvb_usercopy+0x191/0x2b0 [ 1419.820623][T15662] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1419.826244][T15662] ? dvb_generic_ioctl+0xb0/0xb0 [ 1419.831261][T15662] ? dvb_demux_poll+0x210/0x210 [ 1419.836193][T15662] dvb_demux_ioctl+0x25/0x30 [ 1419.840810][T15662] __se_sys_ioctl+0xfa/0x170 [ 1419.845419][T15662] do_syscall_64+0x4c/0xa0 [ 1419.849857][T15662] ? clear_bhb_loop+0x60/0xb0 [ 1419.854573][T15662] ? clear_bhb_loop+0x60/0xb0 [ 1419.859287][T15662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1419.865220][T15662] RIP: 0033:0x7faaf3b9e159 [ 1419.869649][T15662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.889285][T15662] RSP: 002b:00007faaf4aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1419.897749][T15662] RAX: ffffffffffffffda RBX: 00007faaf3e25fa0 RCX: 00007faaf3b9e159 [ 1419.905767][T15662] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 1419.913776][T15662] RBP: 00007faaf3c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1419.921756][T15662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.929751][T15662] R13: 00007faaf3e26038 R14: 00007faaf3e25fa0 R15: 00007ffdf3ab38d8 [ 1419.937773][T15662] [ 1419.941321][T15662] Mem-Info: [ 1419.944475][T15662] active_anon:43538 inactive_anon:0 isolated_anon:0 [ 1419.944475][T15662] active_file:18137 inactive_file:43190 isolated_file:0 [ 1419.944475][T15662] unevictable:768 dirty:148 writeback:0 [ 1419.944475][T15662] slab_reclaimable:22295 slab_unreclaimable:100939 [ 1419.944475][T15662] mapped:33903 shmem:37741 pagetables:766 [ 1419.944475][T15662] sec_pagetables:0 bounce:0 [ 1419.944475][T15662] kernel_misc_reclaimable:0 [ 1419.944475][T15662] free:1269598 free_pcp:12763 free_cma:0 [ 1419.990047][T15662] Node 0 active_anon:174152kB inactive_anon:0kB active_file:72548kB inactive_file:172560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139712kB dirty:592kB writeback:0kB shmem:149428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12300kB pagetables:3064kB sec_pagetables:0kB all_unreclaimable? no [ 1420.023250][T15662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1420.054073][T15662] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.081252][T15662] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1420.087143][T15662] Node 0 DMA32 free:1164560kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:174152kB inactive_anon:0kB active_file:72548kB inactive_file:172560kB unevictable:1536kB writepending:592kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:32056kB local_pcp:10336kB free_cma:0kB [ 1420.118324][T15662] lowmem_reserve[]: 0 0 1 1 1 [ 1420.123164][T15662] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1420.150345][T15662] lowmem_reserve[]: 0 0 0 0 0 [ 1420.155124][T15662] Node 1 Normal free:3898236kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19012kB local_pcp:11808kB free_cma:0kB [ 1420.184675][T15662] lowmem_reserve[]: 0 0 0 0 0 [ 1420.189426][T15662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1420.203562][T15662] Node 0 DMA32: 1148*4kB (UME) 2026*8kB (UME) 483*16kB (UME) 405*32kB (UME) 142*64kB (UME) 293*128kB (UM) 135*256kB (UM) 41*512kB (UM) 19*1024kB (ME) 19*2048kB (UME) 235*4096kB (UM) = 1164560kB [ 1420.223052][T15662] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1420.235404][T15662] Node 1 Normal: 233*4kB (U) 57*8kB (U) 37*16kB (UME) 34*32kB (UME) 28*64kB (UME) 11*128kB (UME) 5*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 949*4096kB (M) = 3898236kB [ 1420.252682][T15662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.262333][T15662] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1420.271643][T15662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1420.281247][T15662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1420.290598][T15662] 98988 total pagecache pages [ 1420.295325][T15662] 0 pages in swap cache [ 1420.299489][T15662] Free swap = 124584kB [ 1420.303691][T15662] Total swap = 124996kB [ 1420.307876][T15662] 2097051 pages RAM [ 1420.311689][T15662] 0 pages HighMem/MovableOnly [ 1420.316845][T15662] 415223 pages reserved [ 1420.321015][T15662] 0 pages cma reserved [ 1421.563155][ T4274] XFS (loop1): Unmounting Filesystem [ 1423.001355][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.008122][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.639158][T15693] loop1: detected capacity change from 0 to 8 [ 1424.687231][T15693] squashfs: Unknown parameter 'yzkaller' [ 1424.875259][T15693] loop1: detected capacity change from 0 to 512 [ 1424.916233][T15699] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2762'. [ 1429.243154][T15721] loop0: detected capacity change from 0 to 4096 [ 1430.463982][ T26] audit: type=1807 audit(1788840888.432:38): action=measure uid>+ res=0 [ 1430.478269][ T26] audit: type=1802 audit(1788840888.432:39): pid=15736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.2772" res=0 errno=0 [ 1431.080317][T15734] ima: policy update failed [ 1431.085084][ T26] audit: type=1802 audit(1788840889.052:40): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2772" res=0 errno=0 [ 1431.355994][T15740] syz.1.2774: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1431.370442][T15740] CPU: 0 PID: 15740 Comm: syz.1.2774 Not tainted syzkaller #0 [ 1431.378095][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1431.388249][T15740] Call Trace: [ 1431.391549][T15740] [ 1431.394491][T15740] dump_stack_lvl+0x188/0x24e [ 1431.399228][T15740] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1431.405684][T15740] ? show_regs_print_info+0x12/0x12 [ 1431.410905][T15740] ? load_image+0x410/0x410 [ 1431.415438][T15740] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1431.421894][T15740] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1431.428423][T15740] warn_alloc+0x242/0x330 [ 1431.432781][T15740] ? zone_watermark_ok_safe+0x270/0x270 [ 1431.438385][T15740] __vmalloc_node_range+0x11e/0x1380 [ 1431.443687][T15740] ? __mutex_trylock_common+0x15c/0x260 [ 1431.449253][T15740] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1431.455424][T15740] ? rcu_is_watching+0x11/0xa0 [ 1431.460214][T15740] ? trace_contention_end+0x5f/0x170 [ 1431.465515][T15740] ? __mutex_lock+0x1ab/0xae0 [ 1431.470234][T15740] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1431.475911][T15740] ? free_vm_area+0x50/0x50 [ 1431.480453][T15740] ? dvb_demux_do_ioctl+0x313/0x530 [ 1431.485676][T15740] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1431.491149][T15740] ? mutex_lock_nested+0x10/0x10 [ 1431.496218][T15740] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1431.502047][T15740] vmalloc+0x75/0x80 [ 1431.505958][T15740] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1431.511785][T15740] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1431.517449][T15740] dvb_demux_do_ioctl+0x450/0x530 [ 1431.522519][T15740] dvb_usercopy+0x191/0x2b0 [ 1431.527090][T15740] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1431.532699][T15740] ? dvb_generic_ioctl+0xb0/0xb0 [ 1431.537712][T15740] ? dvb_demux_poll+0x210/0x210 [ 1431.542674][T15740] dvb_demux_ioctl+0x25/0x30 [ 1431.547319][T15740] __se_sys_ioctl+0xfa/0x170 [ 1431.551933][T15740] do_syscall_64+0x4c/0xa0 [ 1431.556369][T15740] ? clear_bhb_loop+0x60/0xb0 [ 1431.561066][T15740] ? clear_bhb_loop+0x60/0xb0 [ 1431.565768][T15740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1431.571682][T15740] RIP: 0033:0x7fc3eb79e159 [ 1431.576129][T15740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.595788][T15740] RSP: 002b:00007fc3ec60a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.604260][T15740] RAX: ffffffffffffffda RBX: 00007fc3eba25fa0 RCX: 00007fc3eb79e159 [ 1431.612279][T15740] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 1431.620286][T15740] RBP: 00007fc3eb835024 R08: 0000000000000000 R09: 0000000000000000 [ 1431.628284][T15740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1431.636269][T15740] R13: 00007fc3eba26038 R14: 00007fc3eba25fa0 R15: 00007fff31f09208 [ 1431.644286][T15740] [ 1431.647895][T15740] Mem-Info: [ 1431.651045][T15740] active_anon:56381 inactive_anon:0 isolated_anon:0 [ 1431.651045][T15740] active_file:18137 inactive_file:43123 isolated_file:0 [ 1431.651045][T15740] unevictable:768 dirty:140 writeback:0 [ 1431.651045][T15740] slab_reclaimable:22371 slab_unreclaimable:100787 [ 1431.651045][T15740] mapped:43273 shmem:50540 pagetables:824 [ 1431.651045][T15740] sec_pagetables:0 bounce:0 [ 1431.651045][T15740] kernel_misc_reclaimable:0 [ 1431.651045][T15740] free:1256798 free_pcp:12828 free_cma:0 [ 1431.697556][T15740] Node 0 active_anon:225524kB inactive_anon:0kB active_file:72548kB inactive_file:172292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:173092kB dirty:560kB writeback:0kB shmem:200624kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11968kB pagetables:3296kB sec_pagetables:0kB all_unreclaimable? no [ 1431.730601][T15740] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1431.761140][T15740] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.788855][T15740] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1431.794854][T15740] Node 0 DMA32 free:1113612kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:225524kB inactive_anon:0kB active_file:72548kB inactive_file:172292kB unevictable:1536kB writepending:560kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:32580kB local_pcp:17508kB free_cma:0kB [ 1431.825570][T15740] lowmem_reserve[]: 0 0 1 1 1 [ 1431.830325][T15740] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1431.857439][T15740] lowmem_reserve[]: 0 0 0 0 0 [ 1431.862240][T15740] Node 1 Normal free:3898236kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19012kB local_pcp:7204kB free_cma:0kB [ 1431.892141][T15740] lowmem_reserve[]: 0 0 0 0 0 [ 1431.896962][T15740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1431.911087][T15740] Node 0 DMA32: 41*4kB (UME) 885*8kB (UME) 430*16kB (U) 13*32kB (ME) 81*64kB (UE) 68*128kB (U) 121*256kB (UM) 61*512kB (UM) 21*1024kB (ME) 19*2048kB (UME) 235*4096kB (UM) = 1113612kB [ 1431.929329][T15740] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1431.941665][T15740] Node 1 Normal: 233*4kB (U) 57*8kB (U) 37*16kB (UME) 34*32kB (UME) 28*64kB (UME) 11*128kB (UME) 5*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 949*4096kB (M) = 3898236kB [ 1431.959272][T15740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.968897][T15740] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1431.978245][T15740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.988199][T15740] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1431.997587][T15740] 111720 total pagecache pages [ 1432.002392][T15740] 0 pages in swap cache [ 1432.006554][T15740] Free swap = 124584kB [ 1432.010718][T15740] Total swap = 124996kB [ 1432.014897][T15740] 2097051 pages RAM [ 1432.018709][T15740] 0 pages HighMem/MovableOnly [ 1432.023461][T15740] 415223 pages reserved [ 1432.027620][T15740] 0 pages cma reserved [ 1432.727275][T15752] loop6: detected capacity change from 0 to 8 [ 1432.748901][T15752] squashfs: Unknown parameter 'yzkaller' [ 1432.821601][T15752] loop6: detected capacity change from 0 to 512 [ 1440.708034][T15814] loop0: detected capacity change from 0 to 8 [ 1440.733834][T15814] squashfs: Unknown parameter 'yzkaller' [ 1441.915566][T15811] loop0: detected capacity change from 0 to 512 [ 1443.575254][T15820] CIFS: Attempting to mount \\127.0.0.1\share [ 1443.821842][T15820] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1446.622412][ T4276] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1446.839326][ T4276] usb 7-1: config index 0 descriptor too short (expected 71, got 53) [ 1446.857519][ T4276] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.927046][ T4276] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 1446.966340][ T4276] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.006521][ T4276] usb 7-1: Product: syz [ 1447.010773][ T4276] usb 7-1: Manufacturer: syz [ 1447.045677][ T4276] usb 7-1: SerialNumber: syz [ 1447.319455][ T4276] usb 7-1: USB disconnect, device number 4 [ 1450.204436][T15876] loop1: detected capacity change from 0 to 8 [ 1450.231663][T15876] squashfs: Unknown parameter 'yzkaller' [ 1451.677887][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 1454.612127][T15900] syz.0.2802: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1455.828855][T15900] CPU: 0 PID: 15900 Comm: syz.0.2802 Not tainted syzkaller #0 [ 1455.836422][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1455.846515][T15900] Call Trace: [ 1455.849818][T15900] [ 1455.852771][T15900] dump_stack_lvl+0x188/0x24e [ 1455.857495][T15900] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1455.864025][T15900] ? show_regs_print_info+0x12/0x12 [ 1455.869254][T15900] ? load_image+0x410/0x410 [ 1455.873796][T15900] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1455.880245][T15900] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1455.886771][T15900] warn_alloc+0x242/0x330 [ 1455.891143][T15900] ? zone_watermark_ok_safe+0x270/0x270 [ 1455.896745][T15900] __vmalloc_node_range+0x11e/0x1380 [ 1455.902149][T15900] ? __mutex_trylock_common+0x15c/0x260 [ 1455.907734][T15900] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1455.913925][T15900] ? rcu_is_watching+0x11/0xa0 [ 1455.918730][T15900] ? trace_contention_end+0x5f/0x170 [ 1455.924045][T15900] ? __mutex_lock+0x1ab/0xae0 [ 1455.928752][T15900] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1455.934416][T15900] ? free_vm_area+0x50/0x50 [ 1455.938949][T15900] ? dvb_demux_do_ioctl+0x313/0x530 [ 1455.944201][T15900] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1455.949702][T15900] ? mutex_lock_nested+0x10/0x10 [ 1455.954673][T15900] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1455.960515][T15900] vmalloc+0x75/0x80 [ 1455.964456][T15900] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1455.970300][T15900] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 1455.975975][T15900] dvb_demux_do_ioctl+0x450/0x530 [ 1455.981042][T15900] dvb_usercopy+0x191/0x2b0 [ 1455.985580][T15900] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 1455.991164][T15900] ? dvb_generic_ioctl+0xb0/0xb0 [ 1455.996157][T15900] ? dvb_demux_poll+0x210/0x210 [ 1456.001045][T15900] dvb_demux_ioctl+0x25/0x30 [ 1456.005675][T15900] __se_sys_ioctl+0xfa/0x170 [ 1456.010310][T15900] do_syscall_64+0x4c/0xa0 [ 1456.014763][T15900] ? clear_bhb_loop+0x60/0xb0 [ 1456.019476][T15900] ? clear_bhb_loop+0x60/0xb0 [ 1456.024188][T15900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.030137][T15900] RIP: 0033:0x7f8a5d99e159 [ 1456.034584][T15900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.054216][T15900] RSP: 002b:00007f8a5e905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.062665][T15900] RAX: ffffffffffffffda RBX: 00007f8a5dc26090 RCX: 00007f8a5d99e159 [ 1456.070690][T15900] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 1456.078699][T15900] RBP: 00007f8a5da35024 R08: 0000000000000000 R09: 0000000000000000 [ 1456.086697][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.094688][T15900] R13: 00007f8a5dc26128 R14: 00007f8a5dc26090 R15: 00007ffde95fba38 [ 1456.102790][T15900] [ 1456.122245][T15900] Mem-Info: [ 1456.132698][T15900] active_anon:74970 inactive_anon:0 isolated_anon:0 [ 1456.132698][T15900] active_file:18137 inactive_file:43129 isolated_file:0 [ 1456.132698][T15900] unevictable:768 dirty:93 writeback:0 [ 1456.132698][T15900] slab_reclaimable:22393 slab_unreclaimable:100052 [ 1456.132698][T15900] mapped:45689 shmem:68099 pagetables:814 [ 1456.132698][T15900] sec_pagetables:0 bounce:0 [ 1456.132698][T15900] kernel_misc_reclaimable:0 [ 1456.132698][T15900] free:1240603 free_pcp:10968 free_cma:0 [ 1456.190817][T15900] Node 0 active_anon:297480kB inactive_anon:0kB active_file:72548kB inactive_file:172316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:182756kB dirty:372kB writeback:0kB shmem:268560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11944kB pagetables:3256kB sec_pagetables:0kB all_unreclaimable? no [ 1456.282306][T15900] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1456.322334][T15900] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.359699][T15900] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1456.572031][T15900] Node 0 DMA32 free:1085300kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:264680kB inactive_anon:0kB active_file:72548kB inactive_file:172316kB unevictable:1536kB writepending:372kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:23348kB local_pcp:18644kB free_cma:0kB [ 1456.643426][T15900] lowmem_reserve[]: 0 0 1 1 1 [ 1456.648367][T15900] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1456.678031][T15900] lowmem_reserve[]: 0 0 0 0 0 [ 1456.840436][T15900] Node 1 Normal free:3898236kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19012kB local_pcp:7204kB free_cma:0kB [ 1456.891689][T15900] lowmem_reserve[]: 0 0 0 0 0 [ 1456.901802][T15900] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1456.927103][T15900] Node 0 DMA32: 469*4kB (UME) 1531*8kB (UME) 1357*16kB (UME) 1001*32kB (UME) 602*64kB (UME) 147*128kB (UM) 77*256kB (UM) 29*512kB (M) 17*1024kB (UME) 10*2048kB (UME) 225*4096kB (UM) = 1119260kB [ 1456.947143][T15900] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1456.991310][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2812'. [ 1458.472712][T15900] Node 1 Normal: 233*4kB (U) 57*8kB (U) 37*16kB (UME) 34*32kB (UME) 28*64kB (UME) 11*128kB (UME) 5*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 949*4096kB (M) = 3898236kB [ 1459.575379][T15900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1459.700289][T15900] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1459.710247][T15900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1459.722348][T15900] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1459.731829][T15900] 109481 total pagecache pages [ 1459.745836][T15900] 0 pages in swap cache [ 1459.750171][T15900] Free swap = 124584kB [ 1459.756307][T15900] Total swap = 124996kB [ 1459.760602][T15900] 2097051 pages RAM [ 1459.764869][T15900] 0 pages HighMem/MovableOnly [ 1459.769764][T15900] 415223 pages reserved [ 1459.776149][T15900] 0 pages cma reserved [ 1460.010411][T15936] loop6: detected capacity change from 0 to 8 [ 1460.056314][T15936] squashfs: Unknown parameter 'yzkaller' [ 1462.263592][T15957] FAULT_INJECTION: forcing a failure. [ 1462.263592][T15957] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.317649][T15957] CPU: 1 PID: 15957 Comm: syz.1.2819 Not tainted syzkaller #0 [ 1462.325211][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1462.335319][T15957] Call Trace: [ 1462.338639][T15957] [ 1462.341610][T15957] dump_stack_lvl+0x188/0x24e [ 1462.346360][T15957] ? show_regs_print_info+0x12/0x12 [ 1462.351617][T15957] ? load_image+0x410/0x410 [ 1462.356180][T15957] ? __might_sleep+0xd0/0xd0 [ 1462.360816][T15957] ? __lock_acquire+0x7c40/0x7c40 [ 1462.365902][T15957] should_fail_ex+0x390/0x4c0 [ 1462.370635][T15957] should_failslab+0x5/0x20 [ 1462.375181][T15957] slab_pre_alloc_hook+0x59/0x300 [ 1462.380258][T15957] kmem_cache_alloc_lru+0x49/0x2e0 [ 1462.385507][T15957] ? __d_alloc+0x2e/0x6e0 [ 1462.389890][T15957] __d_alloc+0x2e/0x6e0 [ 1462.394171][T15957] ? d_alloc_pseudo+0xe/0x70 [ 1462.398812][T15957] d_alloc_pseudo+0x19/0x70 [ 1462.403383][T15957] alloc_file_pseudo+0xe0/0x200 [ 1462.408293][T15957] ? alloc_empty_file_noaccount+0x80/0x80 [ 1462.414069][T15957] ? alloc_fd+0x590/0x640 [ 1462.418469][T15957] sock_alloc_file+0xb3/0x240 [ 1462.423205][T15957] __sys_socket+0x12d/0x190 [ 1462.427779][T15957] __x64_sys_socket+0x76/0x80 [ 1462.432504][T15957] do_syscall_64+0x4c/0xa0 [ 1462.436979][T15957] ? clear_bhb_loop+0x60/0xb0 [ 1462.441739][T15957] ? clear_bhb_loop+0x60/0xb0 [ 1462.446481][T15957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1462.452427][T15957] RIP: 0033:0x7fc3eb79e159 [ 1462.456879][T15957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.476532][T15957] RSP: 002b:00007fc3ec60a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1462.484999][T15957] RAX: ffffffffffffffda RBX: 00007fc3eba25fa0 RCX: 00007fc3eb79e159 [ 1462.493014][T15957] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 1462.501038][T15957] RBP: 00007fc3eb835024 R08: 0000000000000000 R09: 0000000000000000 [ 1462.509080][T15957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.517101][T15957] R13: 00007fc3eba26038 R14: 00007fc3eba25fa0 R15: 00007fff31f09208 [ 1462.525135][T15957] [ 1465.082034][T14425] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1465.095368][T14425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1465.103766][T14425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1465.111753][T14425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1465.120986][T14425] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1465.133239][T14425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1467.262377][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 1467.285250][T15999] loop3: detected capacity change from 0 to 32768 [ 1467.366929][T15999] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1469.460521][T14425] Bluetooth: hci5: command 0x041b tx timeout [ 1469.613913][ T4282] ocfs2: Unmounting device (7,3) on (node local) [ 1470.059101][T14623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.160480][T15974] chnl_net:caif_netlink_parms(): no params data found [ 1471.753879][T14425] Bluetooth: hci5: command 0x040f tx timeout [ 1471.949611][T14623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.969342][T16017] loop6: detected capacity change from 0 to 64 [ 1472.010447][T16017] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1472.208810][T16011] loop3: detected capacity change from 0 to 40427 [ 1472.269342][T16011] F2FS-fs (loop3): build fault injection attr: rate: 174, type: 0x3ffff [ 1472.391078][T14623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.419812][T14623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.538164][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.567017][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.682672][T15974] device bridge_slave_0 entered promiscuous mode [ 1473.721924][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.744666][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.783643][T15974] device bridge_slave_1 entered promiscuous mode [ 1473.792331][T14425] Bluetooth: hci5: command 0x0419 tx timeout [ 1473.952507][T13570] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1473.961539][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.018462][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.121216][T15974] team0: Port device team_slave_0 added [ 1474.152410][T13570] usb 4-1: Using ep0 maxpacket: 32 [ 1474.164848][T13570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.185830][T13570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.210106][T15974] team0: Port device team_slave_1 added [ 1474.217514][T13570] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1474.268792][T13570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.344382][T13570] usb 4-1: config 0 descriptor?? [ 1474.381212][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.421411][T16041] loop1: detected capacity change from 0 to 256 [ 1474.433132][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.475025][T16041] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1475.583329][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.765835][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.821891][T13570] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1475.826381][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.865913][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.882309][ T26] audit: type=1800 audit(1788840933.822:41): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2845" name="file1" dev="loop1" ino=1048733 res=0 errno=0 [ 1476.032599][ T26] audit: type=1800 audit(1788840933.832:42): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2845" name="file1" dev="loop1" ino=1048733 res=0 errno=0 [ 1476.137280][T11679] usb 4-1: USB disconnect, device number 5 [ 1476.213407][T13924] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1476.241297][T15974] device hsr_slave_0 entered promiscuous mode [ 1476.257712][T16049] fido_id[16049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1476.284673][T15974] device hsr_slave_1 entered promiscuous mode [ 1476.303131][T15974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1476.310772][T15974] Cannot create hsr debugfs directory [ 1476.328895][ T9800] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1476.393173][ T9800] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1476.434549][T13924] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1476.475528][T13924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.502982][T13924] usb 7-1: Product: syz [ 1476.507222][T13924] usb 7-1: Manufacturer: syz [ 1476.511859][T13924] usb 7-1: SerialNumber: syz [ 1476.534584][T13924] usb 7-1: config 0 descriptor?? [ 1476.609602][T13924] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1476.639532][T16058] fido_id[16058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1476.683571][T13924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1476.701978][T13924] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1476.761136][T13924] usb 7-1: media controller created [ 1476.816926][T13924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1476.904199][T16063] loop3: detected capacity change from 0 to 64 [ 1476.966858][T16063] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1477.254920][T13924] DVB: Unable to find symbol mt352_attach() [ 1477.268093][T16068] loop1: detected capacity change from 0 to 32768 [ 1477.355096][T16068] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1478.453506][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 1479.049964][T13924] DVB: Unable to find symbol nxt6000_attach() [ 1479.065385][T13924] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1480.073193][T13924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20 [ 1480.173229][T13924] dvb-usb: schedule remote query interval to 1000 msecs. [ 1480.182248][T13924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1480.195762][T13924] dvb-usb: bulk message failed: -22 (7/0) [ 1480.203329][T13924] dvb-usb: bulk message failed: -22 (7/0) [ 1480.220701][T13924] usb 7-1: USB disconnect, device number 5 [ 1480.397061][T13924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1480.923466][T16104] loop6: detected capacity change from 0 to 256 [ 1481.010761][T16104] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1481.081103][T15974] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1481.295155][T15974] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1481.332060][ T26] audit: type=1800 audit(1788840939.292:43): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2863" name="file1" dev="loop6" ino=1048735 res=0 errno=0 [ 1481.355069][ T26] audit: type=1800 audit(1788840939.322:44): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2863" name="file1" dev="loop6" ino=1048735 res=0 errno=0 [ 1481.533657][T15974] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1481.586768][T15974] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1483.764273][T14623] device hsr_slave_0 left promiscuous mode [ 1483.798943][T14623] device hsr_slave_1 left promiscuous mode [ 1483.838358][T14623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1483.902928][T14623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.951958][T14623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.974318][T14623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1484.034720][T14623] device bridge_slave_1 left promiscuous mode [ 1484.068984][T14623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.078680][T14623] device bridge_slave_0 left promiscuous mode [ 1484.094225][T14623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.308515][T14623] device veth1_macvtap left promiscuous mode [ 1484.319640][T14623] device veth0_macvtap left promiscuous mode [ 1484.338376][T14623] device veth1_vlan left promiscuous mode [ 1484.354297][T14623] device veth0_vlan left promiscuous mode [ 1484.408704][T16159] loop3: detected capacity change from 0 to 256 [ 1484.445390][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.484400][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.582285][T13923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1484.691162][T16159] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1485.247133][ T26] audit: type=1800 audit(1788840943.212:45): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2878" name="file1" dev="loop3" ino=1048737 res=0 errno=0 [ 1485.362633][ T26] audit: type=1800 audit(1788840943.232:46): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2878" name="file1" dev="loop3" ino=1048737 res=0 errno=0 [ 1485.472885][T13923] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1485.566438][T16165] loop6: detected capacity change from 0 to 4096 [ 1485.573760][T16165] ntfs3: Unknown parameter 'windows_names' [ 1485.593973][T13923] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1485.615431][T13923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.623977][T13923] usb 2-1: Product: syz [ 1485.628161][T13923] usb 2-1: Manufacturer: syz [ 1485.633922][T13923] usb 2-1: SerialNumber: syz [ 1485.647339][T13923] usb 2-1: config 0 descriptor?? [ 1485.662760][T11653] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1486.644424][T13924] usb 2-1: USB disconnect, device number 5 [ 1487.578167][T16186] loop6: detected capacity change from 0 to 164 [ 1491.111236][T14623] team0 (unregistering): Port device team_slave_1 removed [ 1491.179873][T14623] team0 (unregistering): Port device team_slave_0 removed [ 1491.258744][T14623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.333556][T14623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1492.793816][T16206] loop1: detected capacity change from 0 to 4096 [ 1492.800904][T16206] ntfs3: Unknown parameter 'windows_names' [ 1492.844920][T14457] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1494.394684][T14623] bond0 (unregistering): Released all slaves [ 1494.581949][T15974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.682419][T15974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.804526][T16225] loop1: detected capacity change from 0 to 32768 [ 1494.975551][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1495.008014][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1495.053404][T16225] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1495.120312][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1495.167004][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1495.213912][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.221121][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.328267][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1495.337293][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1495.346575][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.353760][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.372000][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1495.431630][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1496.013322][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1496.024971][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1496.069844][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 1496.091652][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1496.262598][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1496.324122][T16237] loop3: detected capacity change from 0 to 4096 [ 1496.331224][T16237] ntfs3: Unknown parameter 'windows_names' [ 1496.389517][T15974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1496.406191][T11653] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1496.522947][T15974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1496.585225][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1496.602358][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1496.637969][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1496.686162][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1496.733202][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1496.763114][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1496.823262][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1497.834703][T16254] loop3: detected capacity change from 0 to 512 [ 1497.898630][T16254] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1498.009039][T16254] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1498.113699][T16254] EXT4-fs (loop3): mount failed [ 1498.265704][T16265] loop6: detected capacity change from 0 to 1024 [ 1498.468130][T16265] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1498.503747][T16265] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1498.530854][T16265] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.2912: lblock 3 mapped to illegal pblock 3 (length 1) [ 1498.655948][T16265] EXT4-fs (loop6): Remounting filesystem read-only [ 1498.753969][T16265] EXT4-fs error (device loop6): ext4_ext_remove_space:2945: inode #15: comm syz.6.2912: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1499.070446][T16265] EXT4-fs (loop6): Remounting filesystem read-only [ 1499.179571][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1499.202517][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1499.226943][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.689740][T11483] EXT4-fs (loop6): unmounting filesystem. [ 1500.893430][T16290] loop6: detected capacity change from 0 to 4096 [ 1500.900874][T16290] ntfs3: Unknown parameter 'windows_names' [ 1500.961071][T14457] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1502.019068][ T26] audit: type=1807 audit(1788840959.982:47): action=measure uid>+ res=0 [ 1502.037519][T16304] ima: policy update failed [ 1502.071533][ T26] audit: type=1802 audit(1788840959.992:48): pid=16305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2921" res=0 errno=0 [ 1502.241412][ T26] audit: type=1802 audit(1788840960.092:49): pid=16304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2921" res=0 errno=0 [ 1502.529253][T16313] loop1: detected capacity change from 0 to 512 [ 1502.704263][T16313] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1502.783964][T16313] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1502.802661][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1502.831895][T16313] EXT4-fs (loop1): mount failed [ 1502.834031][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1502.885400][T15974] device veth0_vlan entered promiscuous mode [ 1502.993265][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1503.039983][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1503.106389][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1503.145836][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1504.253891][T16329] loop1: detected capacity change from 0 to 128 [ 1504.734334][T16329] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1504.790329][T16329] hpfs: filesystem error: improperly stopped [ 1504.830855][T16329] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1504.863000][T16329] hpfs: You really don't want any checks? You are crazy... [ 1504.919570][T16329] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 1504.956486][T16329] hpfs: code page support is disabled [ 1504.983557][T16329] hpfs: hpfs_map_4sectors(): unaligned read [ 1504.989600][T16329] hpfs: hpfs_map_4sectors(): unaligned read [ 1505.002237][T11679] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1505.059570][T16329] hpfs: filesystem error: unable to find root dir [ 1505.194078][T11679] usb 7-1: config index 0 descriptor too short (expected 55, got 36) [ 1505.217600][T15974] device veth1_vlan entered promiscuous mode [ 1505.243882][ T7714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1505.251459][T11679] usb 7-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1505.342112][T15974] device veth0_macvtap entered promiscuous mode [ 1505.368894][T11679] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.387113][T11679] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1505.401010][T11679] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1505.409514][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1505.427998][T11679] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1505.439625][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1505.449368][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1505.457368][T11679] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.470634][T15974] device veth1_macvtap entered promiscuous mode [ 1505.485629][T11679] usb 7-1: config 0 descriptor?? [ 1505.522518][T11679] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1505.545228][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1505.595911][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1505.618274][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1505.649829][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1505.682272][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1505.700915][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1505.731884][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1505.751121][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1505.796109][T15974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1505.842885][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1505.873173][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1505.891070][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1505.946220][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1505.972221][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.002226][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.043828][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.083318][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.117639][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.168375][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1506.257020][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.297727][T15974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1506.338332][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1507.371272][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1507.433467][T11679] usb 7-1: USB disconnect, device number 6 [ 1507.450342][T15974] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.460125][T15974] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.471609][T15974] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.481459][T15974] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.984975][T16361] loop1: detected capacity change from 0 to 4096 [ 1507.994562][T16361] ntfs3: Unknown parameter 'nocase' [ 1508.610028][T16364] loop6: detected capacity change from 0 to 512 [ 1508.712781][T16364] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1508.833763][T11124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.841650][T11124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.905928][T11124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1508.934670][T14565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.955469][T16364] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1509.026299][T14565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.067101][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1509.080337][T16364] EXT4-fs (loop6): mount failed [ 1512.222918][T16395] loop6: detected capacity change from 0 to 4096 [ 1512.230285][T16395] ntfs3: Unknown parameter 'windows_names' [ 1512.340335][T14457] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1514.823606][ T26] audit: type=1807 audit(1788840972.792:50): action=measure uid>+ res=0 [ 1514.832792][T16417] ima: policy update failed [ 1514.856520][ T26] audit: type=1802 audit(1788840972.802:51): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.2947" res=0 errno=0 [ 1514.941328][ T26] audit: type=1802 audit(1788840972.802:52): pid=16417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2947" res=0 errno=0 [ 1515.142792][T16421] loop1: detected capacity change from 0 to 512 [ 1515.200399][T16421] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1515.311549][T16421] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1515.453783][T16421] EXT4-fs (loop1): mount failed [ 1516.944161][T16449] loop6: detected capacity change from 0 to 4096 [ 1516.951314][T16449] ntfs3: Unknown parameter 'windows_names' [ 1517.051104][T14457] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1519.711893][T16480] loop7: detected capacity change from 0 to 512 [ 1519.896767][T16480] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1522.177000][T16480] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1522.227766][T16480] EXT4-fs (loop7): mount failed [ 1526.427667][T16532] loop1: detected capacity change from 0 to 4096 [ 1526.437651][T16532] ntfs3: Unknown parameter 'windows_names' [ 1528.258078][T16547] loop1: detected capacity change from 0 to 512 [ 1528.274416][T16547] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1528.394518][T16547] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1528.466301][T16547] EXT4-fs (loop1): mount failed [ 1532.090186][T16603] loop1: detected capacity change from 0 to 64 [ 1532.227556][T16607] loop6: detected capacity change from 0 to 512 [ 1532.253278][ T26] audit: type=1800 audit(1788840990.222:53): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2990" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 1532.281065][T16603] syz.1.2990: attempt to access beyond end of device [ 1532.281065][T16603] loop1: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 1533.306698][T16607] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1533.326852][T16603] syz.1.2990: attempt to access beyond end of device [ 1533.326852][T16603] loop1: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 1533.464145][T16607] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1533.479957][T16603] syz.1.2990: attempt to access beyond end of device [ 1533.479957][T16603] loop1: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 1533.543440][T16607] EXT4-fs (loop6): mount failed [ 1533.562513][T16603] syz.1.2990: attempt to access beyond end of device [ 1533.562513][T16603] loop1: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 1533.619813][T16603] syz.1.2990: attempt to access beyond end of device [ 1533.619813][T16603] loop1: rw=34817, sector=179, nr_sectors = 371 limit=64 [ 1535.092390][T16628] loop6: detected capacity change from 0 to 32768 [ 1535.145327][T16628] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1536.018829][T11483] ocfs2: Unmounting device (7,6) on (node local) [ 1538.409690][T16678] loop6: detected capacity change from 0 to 32768 [ 1538.489999][T16678] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1538.677731][T16683] loop1: detected capacity change from 0 to 512 [ 1538.875539][T16683] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1539.578829][T16683] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1539.638076][T11483] ocfs2: Unmounting device (7,6) on (node local) [ 1539.663341][T16683] EXT4-fs (loop1): mount failed [ 1541.207095][T16705] loop3: detected capacity change from 0 to 256 [ 1541.371898][T16705] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1541.572993][ T26] audit: type=1800 audit(1788840999.542:54): pid=16705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3012" name="file1" dev="loop3" ino=1048742 res=0 errno=0 [ 1541.836557][ T26] audit: type=1800 audit(1788840999.562:55): pid=16705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3012" name="file1" dev="loop3" ino=1048742 res=0 errno=0 [ 1543.820387][T16737] loop6: detected capacity change from 0 to 512 [ 1543.853718][T16737] EXT4-fs: inline encryption not supported [ 1543.900361][T16737] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1543.915680][T16741] loop7: detected capacity change from 0 to 512 [ 1543.942167][T16737] EXT4-fs (loop6): Invalid default hash set in the superblock [ 1543.962635][T16741] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1544.022390][T16741] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1544.121679][T16741] EXT4-fs (loop7): mount failed [ 1545.985052][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.991403][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.255270][T16772] loop6: detected capacity change from 0 to 64 [ 1547.333084][T16772] hfs: found bad thread record in catalog [ 1547.339494][T16772] hfs: get root inode failed [ 1547.432330][T16754] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1547.626181][T16754] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1547.642180][T16754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.676913][T16754] usb 8-1: Product: syz [ 1547.688196][T16754] usb 8-1: Manufacturer: syz [ 1547.715213][T16754] usb 8-1: SerialNumber: syz [ 1547.745540][T16754] usb 8-1: config 0 descriptor?? [ 1547.787065][T16754] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1547.827191][T16754] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1547.873293][T16754] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1547.913267][T16754] usb 8-1: media controller created [ 1547.977250][T16754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1548.003386][T16768] dvb-usb: bulk message failed: -22 (7/0) [ 1548.501893][T16787] loop1: detected capacity change from 0 to 256 [ 1548.566566][T16754] DVB: Unable to find symbol mt352_attach() [ 1548.615264][T16787] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1548.704991][ T26] audit: type=1800 audit(1788841006.672:56): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3024" name="file1" dev="loop1" ino=1048744 res=0 errno=0 [ 1548.834889][ T26] audit: type=1800 audit(1788841006.672:57): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3024" name="file1" dev="loop1" ino=1048744 res=0 errno=0 [ 1548.850993][T16793] loop6: detected capacity change from 0 to 512 [ 1548.930717][T16754] DVB: Unable to find symbol nxt6000_attach() [ 1548.962595][T16754] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1548.980549][T16793] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1550.542743][T16754] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input34 [ 1550.590688][T16754] dvb-usb: schedule remote query interval to 1000 msecs. [ 1550.598583][T16754] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1550.609496][T16754] dvb-usb: bulk message failed: -22 (7/0) [ 1550.624016][T16754] dvb-usb: bulk message failed: -22 (7/0) [ 1550.657549][T16793] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1550.723257][T16754] usb 8-1: USB disconnect, device number 2 [ 1550.793837][T16793] EXT4-fs (loop6): mount failed [ 1550.845490][T16807] loop7: detected capacity change from 0 to 512 [ 1550.877220][T16754] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1551.882346][T16807] EXT4-fs: inline encryption not supported [ 1551.915365][T16807] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1551.966074][T16807] EXT4-fs (loop7): Invalid default hash set in the superblock [ 1553.797781][T16844] loop6: detected capacity change from 0 to 256 [ 1553.845041][T16844] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1553.902919][ T26] audit: type=1800 audit(1788841011.872:58): pid=16844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3045" name="file1" dev="loop6" ino=1048746 res=0 errno=0 [ 1553.984616][ T26] audit: type=1800 audit(1788841011.892:59): pid=16844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3045" name="file1" dev="loop6" ino=1048746 res=0 errno=0 [ 1558.679269][T16864] loop3: detected capacity change from 0 to 32768 [ 1558.687775][T16879] loop6: detected capacity change from 0 to 512 [ 1558.737016][T16879] EXT4-fs: inline encryption not supported [ 1558.790952][T16879] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1558.817955][T16864] XFS (loop3): Mounting V5 Filesystem [ 1558.832326][T16879] EXT4-fs (loop6): Invalid default hash set in the superblock [ 1559.027219][T16864] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1559.126588][T16864] XFS (loop3): Starting recovery (logdev: internal) [ 1559.231138][T16864] XFS (loop3): Ending recovery (logdev: internal) [ 1559.478352][ T4282] XFS (loop3): Unmounting Filesystem [ 1561.168945][T16903] loop1: detected capacity change from 0 to 512 [ 1561.263427][T16903] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1561.373844][T16903] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1561.413468][T16903] EXT4-fs (loop1): mount failed [ 1562.785237][T16926] loop3: detected capacity change from 0 to 256 [ 1562.838657][T16926] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 1563.682261][ T26] audit: type=1800 audit(1788841021.642:60): pid=16942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3057" name="file1" dev="loop3" ino=1048748 res=0 errno=0 [ 1563.862238][ T26] audit: type=1800 audit(1788841021.642:61): pid=16939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3057" name="file1" dev="loop3" ino=1048748 res=0 errno=0 [ 1567.087079][T16965] loop6: detected capacity change from 0 to 512 [ 1568.641828][T16965] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1568.810621][T16965] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1568.863706][T16965] EXT4-fs (loop6): mount failed [ 1571.184259][T17009] loop7: detected capacity change from 0 to 1024 [ 1571.225913][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1571.236454][T11486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1571.245758][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1571.255235][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1571.263125][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1571.270616][T11486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1573.312549][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 1573.686725][T17029] loop6: detected capacity change from 0 to 512 [ 1573.736233][T17029] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1573.869832][T17029] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1574.013727][T17029] EXT4-fs (loop6): mount failed [ 1574.108330][T17010] chnl_net:caif_netlink_parms(): no params data found [ 1575.285998][T17010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.302268][T17010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.323084][T17010] device bridge_slave_0 entered promiscuous mode [ 1575.332039][T17010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.340993][T17010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.349935][T17010] device bridge_slave_1 entered promiscuous mode [ 1575.376751][T17010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.389676][T17010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.398978][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 1575.443885][T17010] team0: Port device team_slave_0 added [ 1575.592983][T17052] loop7: detected capacity change from 0 to 8 [ 1575.619633][T17052] squashfs: Unknown parameter 'yzkaller' [ 1575.690873][T17052] loop7: detected capacity change from 0 to 512 [ 1575.877280][T17010] team0: Port device team_slave_1 added [ 1577.669033][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 1577.995500][T17072] loop6: detected capacity change from 0 to 512 [ 1578.036490][T16095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.054787][T17072] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #15: comm syz.6.3095: inode has both inline data and extents flags [ 1578.068514][T17072] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.3095: couldn't read orphan inode 15 (err -117) [ 1578.088574][T17072] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1578.123172][T17010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1578.130182][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.248758][T17010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.385894][T17080] loop7: detected capacity change from 0 to 512 [ 1578.391784][T16095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.449003][T17080] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1578.469432][T17010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.479274][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1578.548531][T17080] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1578.589644][T17080] EXT4-fs (loop7): mount failed [ 1578.598707][T17010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.739034][T16095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.328470][T17010] device hsr_slave_0 entered promiscuous mode [ 1579.394421][T17010] device hsr_slave_1 entered promiscuous mode [ 1579.492315][T17010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1579.499960][T17010] Cannot create hsr debugfs directory [ 1579.659863][T16095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.723261][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 1580.456360][T17097] ima: policy update failed [ 1580.471247][ T26] audit: type=1802 audit(1788841038.432:62): pid=17097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3099" res=0 errno=0 [ 1580.709276][T16095] tipc: Disabling bearer [ 1580.716793][T16095] tipc: Left network mode [ 1580.774698][T11483] EXT4-fs (loop6): unmounting filesystem. [ 1581.781641][T17124] loop7: detected capacity change from 0 to 8 [ 1581.821674][T17124] squashfs: Unknown parameter 'yzkaller' [ 1581.908758][T17124] loop7: detected capacity change from 0 to 512 [ 1584.770370][T17138] ima: policy update failed [ 1584.782324][ T26] audit: type=1802 audit(1788841042.752:63): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3109" res=0 errno=0 [ 1585.090303][T17144] loop7: detected capacity change from 0 to 1024 [ 1585.130470][T17144] EXT4-fs: Ignoring removed oldalloc option [ 1585.162220][T17144] EXT4-fs: Ignoring removed orlov option [ 1585.233150][T17144] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1585.417530][T17010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1585.479785][T15974] EXT4-fs (loop7): unmounting filesystem. [ 1585.800556][T17156] loop3: detected capacity change from 0 to 512 [ 1585.828820][T17156] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1585.867910][T17010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1586.010365][T17010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1586.018932][T17156] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1586.062991][T17010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1586.082878][T17156] EXT4-fs (loop3): mount failed [ 1586.842168][T17010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.902040][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1586.926530][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1587.024740][T17010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1587.640901][T17180] loop6: detected capacity change from 0 to 8 [ 1587.661587][T17180] squashfs: Unknown parameter 'yzkaller' [ 1587.760153][T17180] loop6: detected capacity change from 0 to 512 [ 1587.807204][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1587.876302][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1589.683347][T14425] Bluetooth: hci5: command 0x0406 tx timeout [ 1589.728419][T14623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.735642][T14623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.333295][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1590.349176][T17192] loop7: detected capacity change from 0 to 1024 [ 1590.357131][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1590.396999][T17192] EXT4-fs: Ignoring removed oldalloc option [ 1590.406005][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1590.417900][T14623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.425118][T14623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.433797][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1590.605951][T17192] EXT4-fs: Ignoring removed orlov option [ 1590.644567][T17192] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1590.675979][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1590.701428][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1590.771705][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1590.818250][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1590.878366][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1590.897564][T15974] EXT4-fs (loop7): unmounting filesystem. [ 1590.934062][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1590.943588][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1591.040364][T16095] device hsr_slave_0 left promiscuous mode [ 1591.099719][T16095] device hsr_slave_1 left promiscuous mode [ 1591.133725][T16095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.141256][T16095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.156002][T16095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.172230][T16095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.300083][T16095] device bridge_slave_1 left promiscuous mode [ 1591.410589][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.329866][T16095] device bridge_slave_0 left promiscuous mode [ 1592.340162][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.360289][T17215] ima: policy update failed [ 1592.389764][ T26] audit: type=1802 audit(1788841050.352:64): pid=17215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3119" res=0 errno=0 [ 1594.402504][T14425] Bluetooth: hci1: command 0x0405 tx timeout [ 1597.626613][T16095] device veth1_macvtap left promiscuous mode [ 1597.653065][T16095] device veth0_macvtap left promiscuous mode [ 1597.659247][T16095] device veth1_vlan left promiscuous mode [ 1597.692229][T16095] device veth0_vlan left promiscuous mode [ 1598.402440][T13926] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1599.556683][T13926] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1599.576206][T13926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.585241][T16095] bond1 (unregistering): (slave veth5): Releasing active interface [ 1599.600786][T13926] usb 7-1: Product: syz [ 1599.603041][T16095] device dummy0 entered promiscuous mode [ 1599.612054][T13926] usb 7-1: Manufacturer: syz [ 1599.637536][T13926] usb 7-1: SerialNumber: syz [ 1599.657284][T13926] usb 7-1: config 0 descriptor?? [ 1599.674955][T13926] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1599.696501][T13926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1599.732452][T13926] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1599.741901][T13926] usb 7-1: media controller created [ 1599.811708][T13926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1600.762263][T13926] DVB: Unable to find symbol mt352_attach() [ 1600.865930][T13926] DVB: Unable to find symbol nxt6000_attach() [ 1600.885592][T13926] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1600.898699][T17273] ima: policy update failed [ 1600.905886][T13926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input36 [ 1600.917590][ T26] audit: type=1802 audit(1788841058.882:65): pid=17273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3139" res=0 errno=0 [ 1601.030289][T17278] overlayfs: missing 'lowerdir' [ 1601.109708][T13926] dvb-usb: schedule remote query interval to 1000 msecs. [ 1601.130899][T13926] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1601.221436][T13926] dvb-usb: bulk message failed: -22 (7/0) [ 1601.311405][T13926] dvb-usb: bulk message failed: -22 (7/0) [ 1601.970588][T13926] usb 7-1: USB disconnect, device number 7 [ 1602.124189][T13926] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1602.163098][T16095] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1602.171172][T16095] device dummy0 left promiscuous mode [ 1602.203335][T16095] bond1 (unregistering): Released all slaves [ 1604.053683][T17287] CIFS: Attempting to mount \\127.0.0.1\share [ 1604.873764][T17287] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1607.875868][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.882246][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.507673][T17330] ima: policy update failed [ 1612.519905][ T26] audit: type=1802 audit(1788841070.482:66): pid=17330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3150" res=0 errno=0 [ 1612.665531][T17334] loop3: detected capacity change from 0 to 512 [ 1612.693000][T17334] EXT4-fs: inline encryption not supported [ 1612.712224][T17334] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1612.740926][T17334] EXT4-fs (loop3): Invalid default hash set in the superblock [ 1612.898957][T16095] team0 (unregistering): Port device team_slave_1 removed [ 1613.040764][T16095] team0 (unregistering): Port device team_slave_0 removed [ 1613.133560][T16095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1613.250553][T16095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1613.512218][T13924] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1613.744711][T13924] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1613.784222][T13924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.844046][T13924] usb 4-1: Product: syz [ 1613.877827][T13924] usb 4-1: Manufacturer: syz [ 1613.910066][T13924] usb 4-1: SerialNumber: syz [ 1613.996252][T13924] usb 4-1: config 0 descriptor?? [ 1614.103174][T13924] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1614.204168][T13924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1614.236470][T13924] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1617.053380][T13924] usb 4-1: media controller created [ 1617.109776][T13924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1617.341451][T13924] DVB: Unable to find symbol mt352_attach() [ 1618.350277][T13924] DVB: Unable to find symbol nxt6000_attach() [ 1618.372628][T13924] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1618.412640][T13924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 1618.434936][T13924] dvb-usb: schedule remote query interval to 1000 msecs. [ 1618.452295][T13924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1619.932223][T13924] dvb-usb: bulk message failed: -22 (7/0) [ 1619.938124][T13924] dvb-usb: bulk message failed: -22 (7/0) [ 1620.005453][T13924] usb 4-1: USB disconnect, device number 6 [ 1620.159916][T13924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1620.545445][T17366] loop6: detected capacity change from 0 to 32768 [ 1620.623807][T17366] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1621.040327][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1621.051472][T11486] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1621.060037][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1621.069689][T11486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1621.092707][T11486] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1621.100021][T11486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1621.196774][T16095] bond0 (unregistering): Released all slaves [ 1621.251650][T11483] ocfs2: Unmounting device (7,6) on (node local) [ 1621.932218][T17010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1621.984338][T17010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1622.010286][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1622.028915][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1622.064644][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1624.387057][T11486] Bluetooth: hci2: command 0x0409 tx timeout [ 1626.438430][T11486] Bluetooth: hci2: command 0x041b tx timeout [ 1626.597793][T17375] chnl_net:caif_netlink_parms(): no params data found [ 1627.084756][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1627.129470][ T7699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1627.184744][T17375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.191913][T17375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.235541][T17375] device bridge_slave_0 entered promiscuous mode [ 1627.281752][T17010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.323528][T17375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.330657][T17375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.381293][T17375] device bridge_slave_1 entered promiscuous mode [ 1627.574483][T16095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.532271][T11486] Bluetooth: hci2: command 0x040f tx timeout [ 1630.804265][T16095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.883451][T17375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.926027][T17375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.992455][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 1631.234733][T16095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.355273][T17375] team0: Port device team_slave_0 added [ 1631.514157][T16095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.620444][T17375] team0: Port device team_slave_1 added [ 1631.721849][T17375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.822309][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.958346][T17375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.004253][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1632.015155][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1632.024454][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1632.034279][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1632.041823][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1632.049201][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1633.592948][T17375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.599984][T17375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.687270][T17375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1634.388896][T17375] device hsr_slave_0 entered promiscuous mode [ 1634.435329][T17375] device hsr_slave_1 entered promiscuous mode [ 1634.537710][T17375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1634.579405][T17375] Cannot create hsr debugfs directory [ 1635.774513][T11486] Bluetooth: hci0: command 0x0409 tx timeout [ 1636.359305][T16095] tipc: Disabling bearer [ 1636.367847][T16095] tipc: Left network mode [ 1637.653832][T17454] chnl_net:caif_netlink_parms(): no params data found [ 1637.792369][T11486] Bluetooth: hci0: command 0x041b tx timeout [ 1640.669934][T11486] Bluetooth: hci0: command 0x040f tx timeout [ 1641.198612][T17525] loop6: detected capacity change from 0 to 32768 [ 1641.273893][T17525] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1641.424337][T17454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.431643][T17454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.508131][T17454] device bridge_slave_0 entered promiscuous mode [ 1641.659712][T11483] ocfs2: Unmounting device (7,6) on (node local) [ 1641.698537][T17454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.712801][T17454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.762989][T17454] device bridge_slave_1 entered promiscuous mode [ 1642.032302][T17375] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1642.116271][T17375] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1642.356035][T17454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.412277][T17375] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1642.697874][T17541] loop6: detected capacity change from 0 to 4096 [ 1642.710970][T17541] ntfs3: Unknown parameter 'windows_names' [ 1642.752506][T11486] Bluetooth: hci0: command 0x0419 tx timeout [ 1643.368947][T17454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.454411][T17375] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1643.613019][T17548] siw: device registration error -23 [ 1644.589069][T17454] team0: Port device team_slave_0 added [ 1644.832462][T11486] Bluetooth: hci0: command 0x0405 tx timeout [ 1646.324084][T17559] CIFS: Attempting to mount \\127.0.0.1\share [ 1646.619723][T17559] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1646.627336][T17559] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1646.834692][T17454] team0: Port device team_slave_1 added [ 1649.183153][T17454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.201720][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.370146][T17454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.489336][T17454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.514657][T17454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.687468][T17454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1650.677376][T16095] device hsr_slave_0 left promiscuous mode [ 1650.702928][T16095] device hsr_slave_1 left promiscuous mode [ 1650.789068][T16095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1650.802168][T16095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1650.842964][T16095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1650.850454][T16095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.956896][T16095] device bridge_slave_1 left promiscuous mode [ 1650.983581][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.082859][T16095] device bridge_slave_0 left promiscuous mode [ 1651.089189][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.372744][T16095] device veth1_macvtap left promiscuous mode [ 1651.378865][T16095] device veth0_macvtap left promiscuous mode [ 1651.395719][T16095] device veth1_vlan left promiscuous mode [ 1651.401645][T16095] device veth0_vlan left promiscuous mode [ 1658.540964][T17629] siw: device registration error -23 [ 1661.445496][T17638] overlayfs: missing 'lowerdir' [ 1663.117290][ T26] audit: type=1807 audit(1788841121.082:67): action=measure UNKNOWN=ui res=0 [ 1663.126594][T17646] ima: policy update failed [ 1663.136526][ T26] audit: type=1802 audit(1788841121.092:68): pid=17647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3216" res=0 errno=0 [ 1663.154835][ T26] audit: type=1802 audit(1788841121.092:69): pid=17646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3216" res=0 errno=0 [ 1663.503334][T16095] team0 (unregistering): Port device team_slave_1 removed [ 1663.564736][T17649] loop6: detected capacity change from 0 to 32768 [ 1663.603215][T17649] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1663.709572][T16095] team0 (unregistering): Port device team_slave_0 removed [ 1663.816221][T17653] loop7: detected capacity change from 0 to 512 [ 1663.883116][T17653] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1664.243002][T17653] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1664.326568][T17653] EXT4-fs (loop7): mount failed [ 1664.388172][T16095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.558020][T11483] ocfs2: Unmounting device (7,6) on (node local) [ 1664.633107][T16095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1666.983966][T17672] overlayfs: missing 'lowerdir' [ 1668.761482][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.768223][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.889352][T17683] CIFS: Attempting to mount \\127.0.0.1\share [ 1669.064250][T17685] loop7: detected capacity change from 0 to 32768 [ 1669.125680][T17685] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1669.316187][T16095] bond0 (unregistering): Released all slaves [ 1669.984238][T17683] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1670.039246][T15974] ocfs2: Unmounting device (7,7) on (node local) [ 1671.894022][T17699] loop6: detected capacity change from 0 to 4096 [ 1671.906025][T17699] ntfs3: Unknown parameter 'windows_names' [ 1672.349803][T17375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.498130][T17710] overlayfs: missing 'lowerdir' [ 1673.246514][T17454] device hsr_slave_0 entered promiscuous mode [ 1673.346663][T17454] device hsr_slave_1 entered promiscuous mode [ 1673.403232][T17454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1673.548049][T17454] Cannot create hsr debugfs directory [ 1673.620919][T17375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.689382][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1673.712985][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1673.749046][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1673.788122][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1673.812369][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.819552][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.849253][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1673.913123][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1673.941059][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.948331][ T7701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.962286][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1674.001431][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1674.112942][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1674.148042][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1674.232951][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1674.293093][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1674.375545][T14350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1674.413275][T14350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1674.453254][T14350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1674.492975][T14350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1674.523180][T14350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1674.562859][T14350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1674.896282][T17375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1675.313666][T17737] loop7: detected capacity change from 0 to 512 [ 1675.360940][T17737] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1675.583434][T17737] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1675.683184][T17737] EXT4-fs (loop7): mount failed [ 1677.303251][T17753] CIFS: Attempting to mount \\127.0.0.1\share [ 1677.401666][T17758] siw: device registration error -23 [ 1678.000883][T17753] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1678.065790][T17454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1678.197660][T17454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1678.228970][T17454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1678.346301][T17454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1678.426839][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1678.510393][T14623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1678.937761][T17375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.059352][T16095] device hsr_slave_0 left promiscuous mode [ 1679.150626][T16095] device hsr_slave_1 left promiscuous mode [ 1679.214732][T16095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.224813][T16095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.241171][T16095] device bridge_slave_1 left promiscuous mode [ 1679.285886][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.383131][T16095] device bridge_slave_0 left promiscuous mode [ 1679.389734][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.417087][ T26] audit: type=1807 audit(1788841137.382:70): action=measure UNKNOWN=uid> res=0 [ 1679.426808][T17788] ima: policy update failed [ 1679.443434][ T26] audit: type=1802 audit(1788841137.392:71): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3245" res=0 errno=0 [ 1679.681968][ T26] audit: type=1802 audit(1788841137.392:72): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3245" res=0 errno=0 [ 1679.837265][T17798] overlayfs: missing 'lowerdir' [ 1681.083804][T17806] siw: device registration error -23 [ 1681.607856][T17813] CIFS: Attempting to mount \\127.0.0.1\share [ 1682.210178][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1682.238992][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1682.252608][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1682.263766][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1682.274328][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1682.284020][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1682.364659][T17813] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1682.371553][T17815] ================================================================== [ 1682.379638][T17815] BUG: KASAN: use-after-free in string+0x204/0x290 [ 1682.386156][T17815] Read of size 1 at addr ffff88801debdc41 by task cifsd/17815 [ 1682.393629][T17815] [ 1682.395968][T17815] CPU: 1 PID: 17815 Comm: cifsd Not tainted syzkaller #0 [ 1682.402999][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1682.413085][T17815] Call Trace: [ 1682.416415][T17815] [ 1682.419388][T17815] dump_stack_lvl+0x188/0x24e [ 1682.424143][T17815] ? __lock_acquire+0x7c40/0x7c40 [ 1682.429200][T17815] ? show_regs_print_info+0x12/0x12 [ 1682.434416][T17815] ? load_image+0x410/0x410 [ 1682.438932][T17815] ? __virt_addr_valid+0x467/0x540 [ 1682.444073][T17815] ? string+0x204/0x290 [ 1682.448244][T17815] print_report+0xa8/0x210 [ 1682.452691][T17815] kasan_report+0x10b/0x140 [ 1682.457209][T17815] ? string+0x204/0x290 [ 1682.461382][T17815] string+0x204/0x290 [ 1682.465384][T17815] vsnprintf+0x10db/0x1c20 [ 1682.469817][T17815] scnprintf+0xfb/0x180 [ 1682.473981][T17815] ? snprintf+0x140/0x140 [ 1682.478327][T17815] ? reconn_set_ipaddr_from_hostname+0x112/0x600 [ 1682.484697][T17815] ? rcu_is_watching+0x11/0xa0 [ 1682.489487][T17815] ? reconn_set_ipaddr_from_hostname+0x112/0x600 [ 1682.495822][T17815] ? __kmalloc+0xe4/0x240 [ 1682.500174][T17815] reconn_set_ipaddr_from_hostname+0x152/0x600 [ 1682.506336][T17815] ? cifs_abort_connection+0x1050/0x1050 [ 1682.511988][T17815] ? cifs_tcp_ses_needs_reconnect+0x4c0/0x4c0 [ 1682.518085][T17815] ? do_raw_spin_unlock+0x11d/0x230 [ 1682.523324][T17815] __cifs_reconnect+0x1a5/0x870 [ 1682.528235][T17815] cifs_reconnect+0x231/0xd20 [ 1682.532945][T17815] ? cifs_readv_from_socket+0x4c3/0x8d0 [ 1682.538513][T17815] ? cifs_mark_tcp_ses_conns_for_reconnect+0x770/0x770 [ 1682.545400][T17815] ? __rwlock_init+0x140/0x140 [ 1682.550193][T17815] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1682.555504][T17815] ? security_socket_recvmsg+0x85/0xb0 [ 1682.560990][T17815] ? do_raw_spin_unlock+0x11d/0x230 [ 1682.566206][T17815] cifs_readv_from_socket+0x782/0x8d0 [ 1682.571606][T17815] cifs_demultiplex_thread+0x523/0x35b0 [ 1682.577185][T17815] ? __lock_acquire+0x1465/0x7c40 [ 1682.582370][T17815] ? cifs_resolve_server+0x240/0x240 [ 1682.587703][T17815] ? verify_lock_unused+0x140/0x140 [ 1682.592923][T17815] ? finish_task_switch+0x25d/0x8e0 [ 1682.598173][T17815] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1682.604179][T17815] ? read_lock_is_recursive+0x10/0x10 [ 1682.609564][T17815] ? lock_chain_count+0x20/0x20 [ 1682.614429][T17815] ? finish_task_switch+0x262/0x8e0 [ 1682.619678][T17815] ? __lock_acquire+0x7c40/0x7c40 [ 1682.624735][T17815] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1682.630651][T17815] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1682.636555][T17815] ? __kthread_parkme+0x71/0x1c0 [ 1682.641522][T17815] ? __kthread_parkme+0x15b/0x1c0 [ 1682.646587][T17815] kthread+0x29d/0x330 [ 1682.650684][T17815] ? cifs_resolve_server+0x240/0x240 [ 1682.655987][T17815] ? kthread_blkcg+0xd0/0xd0 [ 1682.660591][T17815] ret_from_fork+0x1f/0x30 [ 1682.665044][T17815] [ 1682.668071][T17815] [ 1682.670445][T17815] Allocated by task 17813: [ 1682.674862][T17815] kasan_set_track+0x4b/0x70 [ 1682.679474][T17815] __kasan_kmalloc+0x8e/0xa0 [ 1682.684087][T17815] __kmalloc_node_track_caller+0xb0/0x240 [ 1682.689837][T17815] kstrdup+0x37/0x70 [ 1682.693748][T17815] cifs_get_tcp_session+0xea/0x1ad0 [ 1682.698966][T17815] mount_get_conns+0xb6/0xec0 [ 1682.703650][T17815] cifs_mount+0x16a/0x13c0 [ 1682.708091][T17815] cifs_smb3_do_mount+0x366/0x760 [ 1682.713121][T17815] smb3_get_tree+0x5a1/0xa90 [ 1682.717734][T17815] vfs_get_tree+0x88/0x270 [ 1682.722155][T17815] do_new_mount+0x247/0xa40 [ 1682.726663][T17815] __se_sys_mount+0x2e3/0x3d0 [ 1682.731352][T17815] do_syscall_64+0x4c/0xa0 [ 1682.735777][T17815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.741682][T17815] [ 1682.744012][T17815] Freed by task 17813: [ 1682.748078][T17815] kasan_set_track+0x4b/0x70 [ 1682.752688][T17815] kasan_save_free_info+0x27/0x40 [ 1682.757717][T17815] ____kasan_slab_free+0x126/0x1f0 [ 1682.762849][T17815] slab_free_freelist_hook+0x133/0x1b0 [ 1682.768354][T17815] __kmem_cache_free+0xb6/0x200 [ 1682.773215][T17815] cifs_put_tcp_session+0x319/0x400 [ 1682.778452][T17815] mount_put_conns+0xb0/0x270 [ 1682.783157][T17815] cifs_mount+0x1097/0x13c0 [ 1682.787675][T17815] cifs_smb3_do_mount+0x366/0x760 [ 1682.792725][T17815] smb3_get_tree+0x5a1/0xa90 [ 1682.797329][T17815] vfs_get_tree+0x88/0x270 [ 1682.801757][T17815] do_new_mount+0x247/0xa40 [ 1682.806266][T17815] __se_sys_mount+0x2e3/0x3d0 [ 1682.810949][T17815] do_syscall_64+0x4c/0xa0 [ 1682.815387][T17815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1682.821307][T17815] [ 1682.823656][T17815] The buggy address belongs to the object at ffff88801debdc40 [ 1682.823656][T17815] which belongs to the cache kmalloc-16 of size 16 [ 1682.837541][T17815] The buggy address is located 1 bytes inside of [ 1682.837541][T17815] 16-byte region [ffff88801debdc40, ffff88801debdc50) [ 1682.850555][T17815] [ 1682.852875][T17815] The buggy address belongs to the physical page: [ 1682.859306][T17815] page:ffffea000077af40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1debd [ 1682.869487][T17815] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1682.877061][T17815] raw: 00fff00000000200 ffffea0000a73740 dead000000000002 ffff8880174413c0 [ 1682.885654][T17815] raw: 0000000000000000 0000000000800080 00000001ffffffff 0000000000000000 [ 1682.894241][T17815] page dumped because: kasan: bad access detected [ 1682.900661][T17815] page_owner tracks the page as allocated [ 1682.906377][T17815] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4272, tgid 4272 (syz-executor), ts 442699358723, free_ts 442067015117 [ 1682.924804][T17815] post_alloc_hook+0x173/0x1a0 [ 1682.929587][T17815] get_page_from_freelist+0x206b/0x2180 [ 1682.935148][T17815] __alloc_pages+0x1ec/0x4f0 [ 1682.939752][T17815] alloc_slab_page+0x4f/0x180 [ 1682.944455][T17815] new_slab+0x87/0x2d0 [ 1682.948537][T17815] ___slab_alloc+0xbc5/0x1240 [ 1682.953222][T17815] __kmem_cache_alloc_node+0x126/0x270 [ 1682.958689][T17815] __kmalloc_node+0xa2/0x240 [ 1682.963392][T17815] kvmalloc_node+0x6c/0x180 [ 1682.967935][T17815] xt_replace_table+0x176/0x790 [ 1682.972868][T17815] __do_replace+0x16a/0x980 [ 1682.977404][T17815] do_ip6t_set_ctl+0xb3d/0xe10 [ 1682.982270][T17815] nf_setsockopt+0x25f/0x280 [ 1682.986876][T17815] __sys_setsockopt+0x2bf/0x3d0 [ 1682.991740][T17815] __x64_sys_setsockopt+0xb1/0xc0 [ 1682.996778][T17815] do_syscall_64+0x4c/0xa0 [ 1683.001230][T17815] page last free stack trace: [ 1683.005902][T17815] free_unref_page_prepare+0x8e5/0x9e0 [ 1683.011375][T17815] free_unref_page_list+0xbb/0x8e0 [ 1683.016501][T17815] release_pages+0x20d1/0x2340 [ 1683.021276][T17815] tlb_flush_mmu+0x105/0x220 [ 1683.025886][T17815] tlb_finish_mmu+0xf0/0x220 [ 1683.030485][T17815] exit_mmap+0x388/0x970 [ 1683.034736][T17815] __mmput+0x118/0x3a0 [ 1683.038811][T17815] exit_mm+0x24d/0x350 [ 1683.042918][T17815] do_exit+0x958/0x2570 [ 1683.047086][T17815] do_group_exit+0x229/0x2e0 [ 1683.051689][T17815] get_signal+0x1259/0x1340 [ 1683.056206][T17815] arch_do_signal_or_restart+0xc4/0x1310 [ 1683.061849][T17815] exit_to_user_mode_loop+0x70/0x110 [ 1683.067176][T17815] exit_to_user_mode_prepare+0xee/0x180 [ 1683.072753][T17815] syscall_exit_to_user_mode+0x16/0x40 [ 1683.078248][T17815] do_syscall_64+0x58/0xa0 [ 1683.082699][T17815] [ 1683.085026][T17815] Memory state around the buggy address: [ 1683.090675][T17815] ffff88801debdb00: fa fb fc fc 00 04 fc fc fa fb fc fc fa fb fc fc [ 1683.098749][T17815] ffff88801debdb80: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 1683.106819][T17815] >ffff88801debdc00: fa fb fc fc fa fb fc fc fa fb fc fc 00 06 fc fc [ 1683.114906][T17815] ^ [ 1683.121080][T17815] ffff88801debdc80: fa fb fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 1683.129156][T17815] ffff88801debdd00: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 1683.137222][T17815] ================================================================== [ 1683.520360][T16095] team0 (unregistering): Port device team_slave_1 removed [ 1683.685778][T17815] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1683.693059][T17815] CPU: 1 PID: 17815 Comm: cifsd Not tainted syzkaller #0 [ 1683.700087][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1683.710150][T17815] Call Trace: [ 1683.713453][T17815] [ 1683.716387][T17815] dump_stack_lvl+0x188/0x24e [ 1683.721116][T17815] ? memcpy+0x3c/0x60 [ 1683.725125][T17815] ? show_regs_print_info+0x12/0x12 [ 1683.730423][T17815] ? load_image+0x410/0x410 [ 1683.734957][T17815] panic+0x2d3/0x710 [ 1683.738891][T17815] ? bpf_jit_dump+0xd0/0xd0 [ 1683.743433][T17815] ? check_panic_on_warn+0x6c/0xa0 [ 1683.748599][T17815] check_panic_on_warn+0x80/0xa0 [ 1683.753765][T17815] ? string+0x204/0x290 [ 1683.757942][T17815] end_report+0x66/0x110 [ 1683.762231][T17815] kasan_report+0x118/0x140 [ 1683.766819][T17815] ? string+0x204/0x290 [ 1683.771020][T17815] string+0x204/0x290 [ 1683.775029][T17815] vsnprintf+0x10db/0x1c20 [ 1683.779503][T17815] scnprintf+0xfb/0x180 [ 1683.783691][T17815] ? snprintf+0x140/0x140 [ 1683.788053][T17815] ? reconn_set_ipaddr_from_hostname+0x112/0x600 [ 1683.794419][T17815] ? rcu_is_watching+0x11/0xa0 [ 1683.799216][T17815] ? reconn_set_ipaddr_from_hostname+0x112/0x600 [ 1683.805573][T17815] ? __kmalloc+0xe4/0x240 [ 1683.809938][T17815] reconn_set_ipaddr_from_hostname+0x152/0x600 [ 1683.816128][T17815] ? cifs_abort_connection+0x1050/0x1050 [ 1683.821794][T17815] ? cifs_tcp_ses_needs_reconnect+0x4c0/0x4c0 [ 1683.827916][T17815] ? do_raw_spin_unlock+0x11d/0x230 [ 1683.833142][T17815] __cifs_reconnect+0x1a5/0x870 [ 1683.838022][T17815] cifs_reconnect+0x231/0xd20 [ 1683.842853][T17815] ? cifs_readv_from_socket+0x4c3/0x8d0 [ 1683.848427][T17815] ? cifs_mark_tcp_ses_conns_for_reconnect+0x770/0x770 [ 1683.855303][T17815] ? __rwlock_init+0x140/0x140 [ 1683.860089][T17815] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1683.865397][T17815] ? security_socket_recvmsg+0x85/0xb0 [ 1683.870891][T17815] ? do_raw_spin_unlock+0x11d/0x230 [ 1683.876117][T17815] cifs_readv_from_socket+0x782/0x8d0 [ 1683.881527][T17815] cifs_demultiplex_thread+0x523/0x35b0 [ 1683.887138][T17815] ? __lock_acquire+0x1465/0x7c40 [ 1683.892205][T17815] ? cifs_resolve_server+0x240/0x240 [ 1683.897525][T17815] ? verify_lock_unused+0x140/0x140 [ 1683.902766][T17815] ? finish_task_switch+0x25d/0x8e0 [ 1683.908005][T17815] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1683.914015][T17815] ? read_lock_is_recursive+0x10/0x10 [ 1683.919416][T17815] ? lock_chain_count+0x20/0x20 [ 1683.924289][T17815] ? finish_task_switch+0x262/0x8e0 [ 1683.929518][T17815] ? __lock_acquire+0x7c40/0x7c40 [ 1683.934599][T17815] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1683.940522][T17815] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1683.946438][T17815] ? __kthread_parkme+0x71/0x1c0 [ 1683.951444][T17815] ? __kthread_parkme+0x15b/0x1c0 [ 1683.956499][T17815] kthread+0x29d/0x330 [ 1683.960593][T17815] ? cifs_resolve_server+0x240/0x240 [ 1683.965992][T17815] ? kthread_blkcg+0xd0/0xd0 [ 1683.970603][T17815] ret_from_fork+0x1f/0x30 [ 1683.975056][T17815] [ 1683.978775][T17815] Kernel Offset: disabled [ 1683.983117][T17815] Rebooting in 86400 seconds..