last executing test programs: 7m4.057900203s ago: executing program 32 (id=327): syz_open_dev$usbmon(&(0x7f0000000540), 0x1, 0x1eb081) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000080)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2c2, &(0x7f0000000180)="$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") utime(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001940)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001980)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000019c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001a40)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001ac0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x6) read$FUSE(r0, &(0x7f0000001b80)={0x2020}, 0x2020) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="9f2000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0xfffffffffffffff3) 6m42.170205187s ago: executing program 33 (id=412): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000005c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x105042, 0x15) ioctl$FIBMAP(r0, 0x1, &(0x7f00000012c0)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001340)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001480)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001500), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001580)=0x6) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000015c0), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x6, 0x0, &(0x7f00000016c0), &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001740)='ext4\x00', &(0x7f0000001780)='./file0\x00', 0x0, &(0x7f00000017c0), 0x1, 0x4f1, &(0x7f0000001800)="$eJzs3U9rHGUYAPBndjepSdakgoiKh4igopg/TcV6USv01oOgNxEazKYN3SYhiWByas56kNIvILlIT4VeRETEr+DFe29CFdF7ZDIzm5jsNivJOrbz+8Fs3nff3bwz++TZnXnIzgRQWZPpTS3iuYi4kkRMHBhrRD44mT1uZ+7utXRJYnf3w9+TSCLi1tzda8Xjk/znWP60CxHxfiNirHZ03vXNrevz7XZrLe9Pb9xYnV7f3Hpj6cb81dbV1vLc3JtvvzVzYfb8+VPb1sUXf7uzOn75m3ufDE9cunTvh3R9m/nYwe04LZMx2XlNDps+7clK1iXEPALqeZ4PRcQzMRH1POuBx99uPWIXqKhE/kNFFfsB6fFvsZS7R8J/6cHF7ADwVl7b2enEv5HVhuKJvWPD0T+TfxwZJkXt6ITS3/Hs/S9fS5cYUB0GAIB9N7cjYqbROLr/n5x4/+69Ph5zeA77fwAweD9eTD//u9X/ap36T3Sp/zSzp52Yz/9yFfW/nSP1v/3413vU/z7oc44vluN+r7GD9b90SecvaoEM3oPtiOe7xj/pxD/pEv9aRFzpc453R6a/7TUm/uXa/Trilege/0Ly8P/PnF5cardmstuuc7zw/c/bveYX/3Kl+T/aI/7Hvf+v9jnHd82P7/QaOz7+tV+Hk4/2/hiH83s+n9/YWJuNGE4uH73/3L/Z+uopXqPiNUzj/+pLD//87/b+PxIRN/uc8+U/xs/0GpP/5Urjv3BM/neLf3rfV33Ocfund8QfAAAAAAAAAAAAAAAAAAAAAAAA8vN4NiOpTXXatdrUVHYN76djtNZeWd94fXHls+WF7Jy/Z2OoVpzpcSLrJ2l/dq+93z93qD8XEU9FxO36yF5/6tOV9kLZGw8AAAAAAAAAAAAAAAAAAAD/E2OHvv//Vz37/j9QEY2yVwAojfyH6pL/UF3yH6pL/kN1yX+oLvkP1SX/obrkP1SX/Ifqkv8AAAAAAAAAAAAAAAAAAAAAAAAAADAQzUPX/29Gdv3/JyPibAwli0vt1kxEjEfEL/WhM2l/tuyVBgAAAAAAAAAAAAAAAAAAgMfM+ubW9fl2u7WmoaGh0WmU/c4EAAAAAAAAAAAAAAAAAADVs/+l37LXBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADKs3/9/8E1yt5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR9HcAAAD//6D00WM=") mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) 5m43.410344754s ago: executing program 34 (id=716): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000c46000/0x2000)=nil, 0x2000, 0x1000009) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000440), 0x651, 0x0) syz_create_resource$futex(0x0) recvmmsg(r7, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) mprotect(&(0x7f00005d4000/0x2000)=nil, 0x2000, 0x8) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48801}, 0x8000) 5m12.654896262s ago: executing program 7 (id=849): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4f23, @empty}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5m12.505295618s ago: executing program 7 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f00000002c0)='.\x00', 0x0, 0x9a5840, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x84000, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 5m11.814889578s ago: executing program 7 (id=852): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x5452, &(0x7f0000000440)={'gre0\x00', 0x0}) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f0000000580)=[{{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) syz_usb_connect(0x0, 0x4c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4b, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4400, &(0x7f0000000300)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYBLOB="f144ef566aaa2604da071bbeb6f430dfed6346ac280ad0be1430acfe313e69a2fa6cfe678c61c9f409a06bfd99bec80be2031abda528aae9370d25e0b4fbf0cf85b7fb437e3447f576f632761291515cb5463d90d1bb7568142a060494f630902b3ef5334efb547f8cf0b2458c7979b0db9ca4f520c1f1b85f556cf01d", @ANYBLOB="e18d8e322868343b38d9db095899a1945e4a12ea0f3ebe5067157346e5624f6d506a1c219ece53b17b14f64e7fa1124f331eb2d46b4e89a95ce23ee44d7d"], 0xf6, 0xa2a, &(0x7f0000001780)="$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") 5m10.687205383s ago: executing program 7 (id=857): r0 = syz_open_dev$sndpcmp(&(0x7f0000001940), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001980)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001e40)='./trace\x00', &(0x7f0000001ec0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./trace/error_log\x00', 0x20000, 0x4) pread64(r2, &(0x7f0000001f40)=""/145, 0x91, 0x7fffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000001c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a30080601103c80fffffe0068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a850307010103020341000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x10e, 0xfffffffffffffffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0xe, 0x4, 0x4, 0xfd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x2, 0x4, 0x8, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001e00)={r6, &(0x7f0000001e40), &(0x7f0000001e80)=@tcp, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x2, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r7, 0x0, 0xe, 0x0, &(0x7f0000001900)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000400)='lp', 0x2) connect$inet(r8, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r8, &(0x7f0000000480)={0x0, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000500)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000540)={0x0, 0x2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 5m10.260774757s ago: executing program 35 (id=857): r0 = syz_open_dev$sndpcmp(&(0x7f0000001940), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001980)={0x0, [[0xffffffff, 0xffffffdf, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000001e40)='./trace\x00', &(0x7f0000001ec0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./trace/error_log\x00', 0x20000, 0x4) pread64(r2, &(0x7f0000001f40)=""/145, 0x91, 0x7fffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000001c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a30080601103c80fffffe0068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a850307010103020341000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x10e, 0xfffffffffffffffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0xe, 0x4, 0x4, 0xfd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x2, 0x4, 0x8, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001e00)={r6, &(0x7f0000001e40), &(0x7f0000001e80)=@tcp, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x2, 0x14, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018010000756c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r7, 0x0, 0xe, 0x0, &(0x7f0000001900)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000400)='lp', 0x2) connect$inet(r8, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r8, &(0x7f0000000480)={0x0, 0x14, &(0x7f00000004c0)=[{&(0x7f0000000500)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000540)={0x0, 0x2, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 3m1.939494912s ago: executing program 2 (id=1588): futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x1) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 3m1.47302964s ago: executing program 2 (id=1593): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) 3m1.322894775s ago: executing program 2 (id=1597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4000804) 3m0.260573744s ago: executing program 2 (id=1602): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000600)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) 3m0.027322027s ago: executing program 2 (id=1607): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2m58.910647661s ago: executing program 2 (id=1616): semtimedop(0x0, &(0x7f0000000300)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000340)=[{0x4}, {0x2}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0)) 2m58.785116154s ago: executing program 36 (id=1616): semtimedop(0x0, &(0x7f0000000300)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000340)=[{0x4}, {0x2}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0)) 2m58.025296862s ago: executing program 5 (id=1627): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2m57.176508458s ago: executing program 5 (id=1636): getpgrp(0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x39d88, 0x17294}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x8100, 0x0, 0x4010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 2m55.703687589s ago: executing program 5 (id=1647): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) r4 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000b80)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000e00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000ec0)=0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000380)={[{@shortname_winnt}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffff}}, {@uni_xlateno}, {@utf8}, {@utf8}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000006c0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0) r7 = fsmount(r6, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, r7, 0x16, 0x0, @void}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000b00)=ANY=[], 0x90) 2m54.749587066s ago: executing program 5 (id=1648): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) 2m54.531792108s ago: executing program 5 (id=1650): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2020) 2m53.646519409s ago: executing program 5 (id=1654): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') pread64(r1, &(0x7f00000007c0)=""/102400, 0x19020, 0x1000000000) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mknod$loop(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x81, 0x0) 2m53.33912545s ago: executing program 37 (id=1654): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') pread64(r1, &(0x7f00000007c0)=""/102400, 0x19020, 0x1000000000) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mknod$loop(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x81, 0x0) 2m43.630001831s ago: executing program 9 (id=1618): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000002000)={{0x0, 0x1, 0x10000, 0x3, 0xffffffff}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002040), 0x80001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000002080)={{0x1}}) 2m43.54178315s ago: executing program 9 (id=1698): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x80000) add_key(&(0x7f00000005c0)='dns_resolver\x00', 0x0, &(0x7f0000000600)='\x00\x00', 0x2, 0xfffffffffffffffb) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/unix\x00') pread64(r1, &(0x7f0000000500)=""/172, 0xac, 0x38) syz_genetlink_get_family_id$net_dm(0x0, r0) socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./file0\x00', 0xc41a, &(0x7f00000008c0)={[], [], 0x2c}, 0x1, 0x47c, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000d80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000dc0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000e00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000e80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000f40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28642, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001800)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f00000018c0)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x6e20, @multicast1}}}, 0x108) 2m41.440901404s ago: executing program 9 (id=1706): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="ed", 0x1, 0x20008005, &(0x7f0000000600)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000001dc0)=""/4104, 0x1008, 0x10002, 0x0, 0x0) sendto(r0, &(0x7f0000002e00)="5bea", 0x2, 0x8001, 0x0, 0x0) 2m41.110446898s ago: executing program 9 (id=1710): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000600)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) 2m40.900380099s ago: executing program 9 (id=1711): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000f00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001040), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000001080), 0xf, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x13, 0x1, &(0x7f0000001040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3}, {0x3, 0x2, 0x4}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@unspec=@mac={{0x30}, {@local, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) 2m39.878816434s ago: executing program 9 (id=1720): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000600)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) 2m39.745114228s ago: executing program 38 (id=1720): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000600)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0) 59.242999304s ago: executing program 4 (id=2323): mknod(&(0x7f0000000440)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000f00)='./bus\x00', 0x143142, 0xa2) read$FUSE(r0, &(0x7f0000000fc0)={0x2020}, 0x2020) write$cgroup_int(r0, &(0x7f00000006c0)=0x4, 0x12) 58.472698733s ago: executing program 4 (id=2324): r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc4a42, 0x80) fallocate(r1, 0x0, 0x0, 0x8ffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo\x00') getdents(r5, 0x0, 0x0) write(r0, &(0x7f0000000080)="240000001a005f0214f9f407000901000000000000000001000000000800040001000000", 0x24) 54.317196367s ago: executing program 4 (id=2351): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="200200001000130726bd70000000000064010101000000000000000000000000ff0200000000000000000000000000014e2200004e230003", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140a0000000000000000000000000300000000000000020000000000000005000000000000000a00000000000000060000000000000000000000000000008953000000000000030000000000000000000000000000000000000000000000020000000000000004000000000000000c00000000000000020000002cbd7000000000000a0001002800000000000000080016000200000025011200726663343534332867636d286165732929000000000000000000000000000000000000000000000000000000000000000000530760ed00000000000000000000c806000080"], 0x220}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 53.281558133s ago: executing program 4 (id=2355): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20702, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 52.291741643s ago: executing program 4 (id=2361): mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./mysys\x00', 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000000500)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1fffffff}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0xff4, &(0x7f0000000580)=""/4084}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./mysys\x00', 0x17f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001840)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001880)={r2, 0x1, 0x6, @random="8075b79d57b3"}, 0x10) mount(0x0, &(0x7f0000001700)='./mysys\x00', &(0x7f0000001740)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001780)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x40080, 0x0, 0x16, 0x0, 0x0, 0x0) 51.986961275s ago: executing program 4 (id=2362): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) mlock(&(0x7f00009b8000/0x1000)=nil, 0x1000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r1, 0x0, 0x0, 0x20008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) mlock(&(0x7f0000800000/0x3000)=nil, 0x3000) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f00000008c0)='1', 0x1) 36.427280703s ago: executing program 39 (id=2362): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00', 0x100}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) mlock(&(0x7f00009b8000/0x1000)=nil, 0x1000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(r1, 0x0, 0x0, 0x20008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./tracing\x00', &(0x7f00000007c0)='tracefs\x00', 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000840)='p:s/p ./file0:0', 0xf) mlock(&(0x7f0000800000/0x3000)=nil, 0x3000) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f00000008c0)='1', 0x1) 16.66291457s ago: executing program 1 (id=2563): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x0, 0x1e}, 0x28) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file2\x00', 0x80, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="0279d2e93a6aa58e817c47279715c654addaab1bd47e5db7fa14eabcda24b34b86381d6a6d30132f150c9107afb67c5bfedc5dc2f689b30441658dcfcb364ae14ca83aef00ca31430dd2b831e0955e07bc2736c337ce6a5c08a62a04813eb9c01e38715eb26d27b846447bb3d167b3f7f23907d07f695403f946f83eb570c547de936140e61ce959e804be5346bd98c2ac9a0b8af576739d17d19b0b6a7e4260505818fa68cb47038cf95da7d472b772c621d057d6706b0719d79289e3c79af226ed8cdb7091a2dc1f64ecd757ab4c77e790e8369d90febf767ec9c15d4cff7d08fe3f5b2325a7792916f672", @ANYRESDEC], 0xfe, 0x122a, &(0x7f0000002200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000003440)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000003480)='./file1\x00', 0x1c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x1000401, &(0x7f00000003c0)={[{@test_dummy_encryption_v1}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000bc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000010c0)={0x1, &(0x7f0000001100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000ac0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000001140)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000034c0)='./file1/file3\x00', 0x1c0) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0xb8cd}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt(r3, 0x29, 0x24, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000580)={'wlan0\x00', {0x2, 0x4e22, @empty=0x7f0000fd}}) 14.958687913s ago: executing program 1 (id=2571): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000140)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 14.346971986s ago: executing program 1 (id=2576): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(0x0, 0x80000) syz_genetlink_get_family_id$net_dm(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000d80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000dc0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000e00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001800)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000018c0)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x6e20, @multicast1}}}, 0x108) 13.101816023s ago: executing program 1 (id=2577): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000300)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESOCT, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a85035eb86c32a59f1f3acdb98c", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX, @ANYRES8=0x0], 0x2, 0x6eb, &(0x7f0000000dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 12.656908298s ago: executing program 1 (id=2584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x15c, &(0x7f0000000240)=""/256, 0x7376c40bedd761a3, 0xa}, 0x56) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x801, &(0x7f0000000e00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@privport}, {@directio}, {@access_uid={'access', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '$'}}, {@cache_fscache}, {@cache_readahead}]}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10d}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000bc0)=0x2, 0x4) setuid(0xee00) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000c40)=0x8, 0x4) bind$inet(r4, &(0x7f0000000c80)={0x2, 0x5e21, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000001080)=""/152, 0x0, 0x98, 0x1}, 0x28) add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000ac0)='asymmetric\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000b40)='asymmetric\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x0, 0x0, 0x0, 0x3ad, 0xee, &(0x7f0000000600)=""/238, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x2, 0x2, 0x9, 0x10}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff71ba}, 0x94) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r5, &(0x7f0000000d00)=[{&(0x7f0000000d40)='0', 0x1}], 0x1, 0x8, 0xa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000622c, 0x0) syz_usb_connect$uac1(0x2, 0x9a, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 12.195053066s ago: executing program 1 (id=2587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000d80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000dc0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000e00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001800)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000018c0)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x6e20, @multicast1}}}, 0x108) 11.300484077s ago: executing program 40 (id=2587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000d80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000dc0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000e00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000f00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f80)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001800)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000018c0)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x6e20, @multicast1}}}, 0x108) 10.377715821s ago: executing program 0 (id=2598): syz_mount_image$udf(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x18411, &(0x7f0000000380)=ANY=[], 0xfe, 0x4c4, &(0x7f00000003c0)="$eJzs20tsVFUcx/Hff+50mA5VysMChkATTawg0AcWSE0MDxtNeGihGomPVDrFSh+kU5QSEJbqzgVLFy7cunBl3BoSl8aFwRgWJsjGzazAHebcua8Z2s5UOjOUfj8Ezr13/nc45/zvnXPOZK4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB0+LVD3T3W7FoAAIBGOnFqqLuP8R8AgFXlNOt/AACA1cTk6U+Zdp8v2nF/vyR7bHzq4qXho4Pzn9ZqMqXk+fHub7ant2/fy/37D4Tl4ucvt606eer0oc4j05MXZvKFQn60c3hq/Oz0aL7md3jU8yvt9Dugc/L8xdGxsUJn756+spcvtd9ds7ajfaD//SOZMHb46ODgqURMuuV//+8PWWiGn5GnF2X65Mfv7YSklB69L6pcO/XW6jdip9+I4aODfkMmxkemZt2LlgqiUuV9kgn7qAG5eCQpydXLMsuzZmuRp59kOry3aCcleWE/7PK/GK6pPs2QdktXSV1aATl7jK2Rpw9lurm3XW8G/ernPyNdaXblUHfp4P6ftqK95X8euPvJfWwee7vzjamx6USspYI7aqWPD430mH82ZeXppH/HF21IO5pdHTRYqzxNypT5+lN/XiF/XrpuYP/2HQdNurcuiNtc5X3cFbQnuLlqGZNbgqmDpdyf+rQN1WXN098y3f8j6+93hWOAdP3BYif+1ZDqod7M04RM/14tmlWsS73E+j6y0sf++ta/NXtk+sLczPi5j2fnfT2XPfRRYXZm5Oz8L5fWrl7ySLV1bKXU0pZkOSut+L74rBidF6wBnirtxbX57kp8LXRVlKHk9VPLds2r2CXMo1ydzDzdkWnsgy2lcUY5N9lBBZf/QZkKxV8tzHSQ/3RpL5H/V+JrK2vlZcTP7dOl77XCucTWM5sWOl6P/Ls6ufy/K9Phe1uC7zRyeujeCq6TDpneu7EtiEtlXFw6bE7pHcfGJ/LdLvaBTBt+CWPlx+aC2I1xbI+LLcj05c3y2LVB7KY4ttfF3pLp9u/zxz4Tx/a52DmXr9udYWzOxW4PYjvi2D1npydGq3Wry3+vTO9ce93CNi+Y/8T9f72ijDyU88W3F87/t+W7VfLfnjh2PcjrmSD/6Sr5/0qmuX+2he32+z68rNb7/8b5d3PlH26Ux4YLyg1xbM+CzXrMuPyvl+nuq7eiNgdtC3bjDCXz/2y6vIz6ddnyX6FK/tcnjrUH9cossS9Wo8Lc5fMjExP5GTbYYIONaKPZn0xoBDf+D7lRvd+zcB4TjP9tpb14xnT/83j8HwjLyvl3k8b/DYljA8GspSUtZWcnL7RslrKFucu7xydHzuXP5af69vV39x7c1913oCUTTu7irdo77wng8r9Lpqs//xatY8rnf/PP/3MVZaRJ+d+YbFPZvKbmrliVXP7bZOq/cytaby42/w/X/13PlZfR/dek/G9KHGsP6tW2xL4AAAAAAAAAAAAAAAAAgJUkZ56el+nS0EsWPkNUy+//RivKyPL//qv01F7l77/CB9ODWnYkThht0HMNS+1rAAAAAAAAAACARkjJ0zcyvaCiXXMH2qTjyRJPtP8CAAD//4rdSbo=") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 10.198891339s ago: executing program 6 (id=2599): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0xffff}, {0x0, 0x6, 0x800}, {0x4, 0x7, 0x800}, {0x1}, {0x4, 0x401, 0x1000}], 0x5) syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000001, 0x82002) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@error={0x0, 0x400, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r4, 0xc138fd06, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f0000000800)='oom_score_adj\x00') pselect6(0x40, &(0x7f0000000840)={0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000, 0x9}, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f00000001c0)=0xfffffffffffffc6b) socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="3900000013007b00000000000000feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931326d9070c94536ebcfbe75d1bab11ef37c994b2d5ec3b267462faee3238013f75c7b885960d1321bc881dee3dfd8899f6a0154b106c35786a8c89b0e0cb30d095c", 0x79}], 0x1) 9.943422625s ago: executing program 6 (id=2600): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xffffffff}}]}, 0x40}}, 0x44080) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x2aa, &(0x7f0000000180)="$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") socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) add_key(&(0x7f0000000680)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100005, 0x0, 0x1, 0x0, &(0x7f0000000800)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = fsopen(&(0x7f0000000840)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./mnt\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./mnt\x00', 0x1ff) 9.527615318s ago: executing program 0 (id=2602): unshare(0x60000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe0040, 0x0) fcntl$getflags(r0, 0x401) 8.574988355s ago: executing program 6 (id=2604): mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x60) chdir(&(0x7f0000000080)='./bus\x00') unlinkat(r0, &(0x7f00000000c0)='./bus\x00', 0x200) syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f00000004c0)='./file1\x00', 0x10800, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r4 = fsopen(&(0x7f0000000880)='cgroup2\x00', 0x1) fsmount(r4, 0x0, 0x84) sendmmsg$unix(r3, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xd, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="b400"/17], &(0x7f0000000b40)='GPL\x00', 0x5, 0xc3, &(0x7f0000000b80)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000400)="030dd2709b61d975", 0x8, 0x40000, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='.\x00', 0x0) 7.382621127s ago: executing program 6 (id=2606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, 0x0) 7.190319066s ago: executing program 6 (id=2608): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x64000600) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) 5.473326261s ago: executing program 8 (id=2616): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x801, &(0x7f0000000e00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@privport}, {@directio}, {@access_uid={'access', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '$'}}, {@cache_fscache}, {@cache_readahead}]}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10d}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000bc0)=0x2, 0x4) setuid(0xee00) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000c40)=0x8, 0x4) bind$inet(r6, &(0x7f0000000c80)={0x2, 0x5e21, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000001080)=""/152, 0x0, 0x98, 0x1}, 0x28) add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000ac0)='asymmetric\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000b40)='asymmetric\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x0, 0x0, 0x0, 0x3ad, 0xee, &(0x7f0000000600)=""/238, 0x0, 0x0, '\x00', r3, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x2, 0x2, 0x9, 0x10}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff71ba}, 0x94) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r7, &(0x7f0000000d00)=[{&(0x7f0000000d40)='0', 0x1}], 0x1, 0x8, 0xa) write$binfmt_misc(r1, &(0x7f0000000540), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) syz_usb_connect$uac1(0x2, 0x9a, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 3.167694107s ago: executing program 3 (id=2620): syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000340)='./cgroup/../file0\x00', 0x810082, &(0x7f00000001c0), 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) timer_create(0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x7) r3 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x11, 0x1, 0x0, &(0x7f0000001400)) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) epoll_create(0x45d) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) 2.874886867s ago: executing program 3 (id=2621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x5012}) r1 = socket$inet(0x2, 0x2, 0xd) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000600)='pay', 0x3, 0x0, &(0x7f0000000640)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2.405704185s ago: executing program 8 (id=2622): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000440)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 2.326520203s ago: executing program 3 (id=2623): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa3"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.325183623s ago: executing program 0 (id=2624): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x6, 0x0, 'queue0\x00', 0x105}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x258, 0xc8, 0x8, 0x0, 0x5803, 0x368, 0x2e8, 0x2e8, 0x368, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x10}, 0x0, 0x200, 0x230, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], @ipv4=@rand_addr=0x64010101, [0x0, 0xffffff, 0xffffff, 0xff], 0x4d5, 0x3504, 0x29, 0x0, 0x0, 0x1}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x0, 0xffff00, 0xff], @ipv6=@loopback, [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x4d6, 0x3504, 0x2c, 0x0, 0x1e, 0xd}, {@ipv4=@local, [0x0, 0xffffffff], @ipv4=@multicast1, [0xff, 0xff, 0xffffff00, 0xffffffff], 0x4d3, 0x3502, 0x2, 0x0, 0x1, 0x1}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xff, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x80800000, 0xff, 0xffffffff, 0xffffffff], 0x4d2, 0x3500, 0x6, 0x1, 0x4, 0x4}], 0x3, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) syz_usb_connect$hid(0x2, 0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="268292", 0xff95}], 0x1) 1.330671384s ago: executing program 8 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 982.90905ms ago: executing program 8 (id=2626): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nolazytime}, {@errors_remount}]}, 0xff, 0x4a7, &(0x7f0000000140)="$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") syz_mount_image$udf(&(0x7f0000000700), &(0x7f0000000740)='./file1\x00', 0x804000, &(0x7f0000000780)=ANY=[], 0x2, 0xc2d, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000001c80)='./file2\x00', 0x24842, 0x90) write$binfmt_elf32(r0, 0x0, 0x6200) 949.578243ms ago: executing program 3 (id=2627): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b94f19107018010000000002030109021b00010000000009040000010a00000009058f"], 0x0) 824.362856ms ago: executing program 8 (id=2628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="500000000301010300"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8890) 734.328075ms ago: executing program 0 (id=2629): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000001, 0x82002) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000004, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@error={0x0, 0x400, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r4, 0xc138fd06, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f0000000800)='oom_score_adj\x00') pselect6(0x40, &(0x7f0000000840)={0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000, 0x9}, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f00000001c0)=0xfffffffffffffc6b) socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="3900000013007b00000000000000feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931326d9070c94536ebcfbe75d1bab11ef37c994b2d5ec3b267462faee3238013f75c7b885960d1321bc881dee3dfd8899f6a0154b106c35786a8c89b0e0cb30d095c", 0x79}], 0x1) 447.634204ms ago: executing program 7 (id=2588): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140, 0x82) r1 = fanotify_init(0x40, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0xfc0) 392.61776ms ago: executing program 0 (id=2630): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) unshare(0x22020600) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x23}, 0x1c) 333.406426ms ago: executing program 7 (id=2631): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x801, &(0x7f0000000e00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@privport}, {@directio}, {@access_uid={'access', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '$'}}, {@cache_fscache}, {@cache_readahead}]}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10d}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000bc0)=0x2, 0x4) setuid(0xee00) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000c40)=0x8, 0x4) bind$inet(r6, &(0x7f0000000c80)={0x2, 0x5e21, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000001080)=""/152, 0x0, 0x98, 0x1}, 0x28) add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000ac0)='asymmetric\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000b40)='asymmetric\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x0, 0x0, 0x0, 0x3ad, 0xee, &(0x7f0000000600)=""/238, 0x0, 0x0, '\x00', r3, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x2, 0x2, 0x9, 0x10}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff71ba}, 0x94) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r7, &(0x7f0000000d00)=[{&(0x7f0000000d40)='0', 0x1}], 0x1, 0x8, 0xa) write$binfmt_misc(r1, &(0x7f0000000540), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) syz_usb_connect$uac1(0x2, 0x9a, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 330.926496ms ago: executing program 6 (id=2632): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x50f, &(0x7f0000000180)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") r0 = creat(&(0x7f00000006c0)='./file1\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', 0xa0c42, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x101842, 0x15) pwrite64(r2, &(0x7f0000000780)='2', 0xfdef, 0xc00) openat(0xffffffffffffff9c, &(0x7f0000001e40)='./file2\x00', 0x101042, 0x1ee) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000007c0)={0xc, r0, 0x2, 0x0, 0x0, 0xfffffffffe000001}) 227.311967ms ago: executing program 0 (id=2633): syz_mount_image$udf(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB='shortad\x00partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES64], 0x1, 0x489, &(0x7f0000001400)="$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") r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) setrlimit(0x1, 0x0) getrlimit(0x1, &(0x7f00000004c0)) truncate(0x0, 0x20fffbfffc) syz_clone(0x2000000, &(0x7f0000000280)="eb32b1bfeb76ac48671a6bf718c8e1b6da100598f7d38b0a89b07c8d4b053a6bd1e27231a662715c5eda73f73a5dcd2544bf54784cf7c44f3a791acb2fbb8ba2a292a4f31cbba679058caff44da23423e75f9a73a78684dfcf", 0x59, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000009c0)={[0x9, 0x9, 0xfffffffffffffffd, 0x75, 0x0, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0xf59, 0x5, 0xfffffffffffffffa, 0xffffffff, 0x5, 0x8d], 0x50000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 179.000132ms ago: executing program 3 (id=2634): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) 7.062049ms ago: executing program 3 (id=2635): syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x81, 0x90, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}]}}}}}]}}, 0x0) 0s ago: executing program 8 (id=2636): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2241, 0x0) eventfd(0x3) syz_usb_connect(0x2, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES8=r0], 0x0) kernel console output (not intermixed with test programs): ode [ 366.777008][ T9335] bridge1: port 2(veth0_to_bond) entered disabled state [ 366.872652][ T9353] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 366.948559][ T9361] syz.8.1445 uses obsolete (PF_INET,SOCK_PACKET) [ 368.872419][ T1472] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.889714][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1455'. [ 368.934232][ T1472] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.053826][ T1472] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.511809][ T9412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.438782][ T1472] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.467811][ T4445] Bluetooth: hci4: command 0x0409 tx timeout [ 375.570374][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1480'. [ 376.659052][ T1472] device hsr_slave_0 left promiscuous mode [ 376.674304][ T1472] device hsr_slave_1 left promiscuous mode [ 376.704104][ T1472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.731230][ T1472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.758401][ T1472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.774320][ T1472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.795865][ T1472] device bridge_slave_1 left promiscuous mode [ 376.926652][ T1472] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.293803][ T1472] device bridge_slave_0 left promiscuous mode [ 377.300639][ T1472] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.318939][ T1472] device veth1_macvtap left promiscuous mode [ 377.331858][ T1472] device veth0_macvtap left promiscuous mode [ 377.344843][ T1472] device veth1_vlan left promiscuous mode [ 377.382234][ T1472] device veth0_vlan left promiscuous mode [ 378.509639][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.516066][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.612979][ T1472] team0 (unregistering): Port device team_slave_1 removed [ 378.631688][ T1472] team0 (unregistering): Port device team_slave_0 removed [ 378.647556][ T1472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.671037][ T1472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.776881][ T1472] bond0 (unregistering): Released all slaves [ 378.920555][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.315244][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1508'. [ 380.498257][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.811196][ T9652] netlink: 'syz.8.1530': attribute type 4 has an invalid length. [ 384.266181][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1534'. [ 384.358107][ T9681] x_tables: duplicate underflow at hook 3 [ 384.519772][ T9688] fuse: Bad value for 'fd' [ 385.854929][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1550'. [ 385.974889][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1553'. [ 386.101997][ T9756] bridge4: port 1(veth5) entered blocking state [ 386.132189][ T9756] bridge4: port 1(veth5) entered disabled state [ 386.153721][ T9756] device veth5 entered promiscuous mode [ 386.178783][ T9749] bridge4: port 2(veth0_to_bond) entered blocking state [ 386.206656][ T9749] bridge4: port 2(veth0_to_bond) entered disabled state [ 386.226759][ T9749] device veth0_to_bond entered promiscuous mode [ 386.248517][ T9749] bridge4: port 2(veth0_to_bond) entered blocking state [ 386.255601][ T9749] bridge4: port 2(veth0_to_bond) entered forwarding state [ 386.666977][ T9775] page:ffffea0001cb0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 386.704446][ T9775] flags: 0xfff00000000002(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 386.729447][ T9779] fuse: Unknown parameter '0xffffffffffffffff00000000000000000007' [ 386.810467][ T9779] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 386.821310][ T9775] raw: 00fff00000000002 0000000000000000 dead000000000122 0000000000000000 [ 386.909836][ T9775] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 386.986182][ T9775] page dumped because: unmovable page [ 387.006465][ T9775] page_owner tracks the page as allocated [ 387.016521][ T9775] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 5534, ts 164036736515, free_ts 162017062469 [ 387.107819][ T9775] get_page_from_freelist+0x24f6/0x2670 [ 387.113898][ T9775] __alloc_pages+0x1ee/0x480 [ 387.176468][ T9775] __vmalloc_node_range+0x4b1/0x8b0 [ 387.181771][ T9775] vmalloc_user+0x70/0x80 [ 387.186176][ T9775] kcov_mmap+0x27/0x120 [ 387.243146][ T9775] mmap_file+0x5d/0xb0 [ 387.269244][ T9775] mmap_region+0x1048/0x1730 [ 387.273946][ T9775] do_mmap+0x801/0xe30 [ 387.292530][ T9775] vm_mmap_pgoff+0x1c1/0x2d0 [ 387.306485][ T9775] ksys_mmap_pgoff+0x4e2/0x790 [ 387.326666][ T9775] do_syscall_64+0x4c/0xa0 [ 387.331178][ T9775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.357624][ T9775] page last free stack trace: [ 387.362404][ T9775] free_unref_page_prepare+0x637/0x6c0 [ 387.398714][ T9775] free_unref_page+0x8f/0x2a0 [ 387.403522][ T9775] __vunmap+0x8e0/0xa80 [ 387.429128][ T9775] kcov_mmap+0x89/0x120 [ 387.433381][ T9775] mmap_file+0x5d/0xb0 [ 387.456878][ T9775] mmap_region+0x1048/0x1730 [ 387.471878][ T9775] do_mmap+0x801/0xe30 [ 387.476043][ T9775] vm_mmap_pgoff+0x1c1/0x2d0 [ 387.523684][ T9775] ksys_mmap_pgoff+0x4e2/0x790 [ 387.553730][ T9775] do_syscall_64+0x4c/0xa0 [ 387.561661][ T9775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.047654][ T9858] x_tables: duplicate underflow at hook 3 [ 390.826611][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 391.043820][ T9892] Illegal XDP return value 32768, expect packet loss! [ 392.014048][ T9911] x_tables: duplicate underflow at hook 3 [ 394.050919][ T9980] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.351156][ T9991] syz.5.1624 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 394.515868][ T9980] chnl_net:caif_netlink_parms(): no params data found [ 394.722333][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.750675][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.767397][ T9980] device bridge_slave_0 entered promiscuous mode [ 394.788633][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.796756][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.805242][ T9980] device bridge_slave_1 entered promiscuous mode [ 394.843818][ T9980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.862612][ T9980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.960613][ T9980] team0: Port device team_slave_0 added [ 394.975994][ T9980] team0: Port device team_slave_1 added [ 395.015565][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.057093][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.491506][ T9980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.899660][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.957903][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.016474][ T9980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.028761][ T2302] Bluetooth: hci1: command 0x0409 tx timeout [ 396.125961][ T9980] device hsr_slave_0 entered promiscuous mode [ 396.142347][ T9980] device hsr_slave_1 entered promiscuous mode [ 396.168472][ T9980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.176133][ T9980] Cannot create hsr debugfs directory [ 396.462746][ T9980] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 396.475222][ T9980] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 396.485398][ T9980] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 396.499226][ T9980] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 396.635518][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.699077][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.718703][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.766358][ T9980] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.785057][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.807166][ T8821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.856500][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.872604][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.911942][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.919138][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.635607][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.666143][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.675160][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.683854][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.690989][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.788869][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.826756][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.852772][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 397.888298][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.112037][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 398.651397][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.675913][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.686032][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.711923][ T9980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.723170][ T9980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.744407][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.758203][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.777444][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.799725][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.819121][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.906208][ T4304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.144374][ T4304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.676826][ T4304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.912611][ T4304] bridge0: port 3(netdevsim0) entered disabled state [ 399.944020][ T4304] device netdevsim0 left promiscuous mode [ 399.950786][ T4304] bridge0: port 3(netdevsim0) entered disabled state [ 399.964720][ T4304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.006256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.023955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.039887][ T9980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.884441][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 401.214031][T10129] rxe_eth0 speed is unknown, defaulting to 1000 [ 401.951573][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.965032][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.034011][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 402.064664][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.115317][ T9980] device veth0_vlan entered promiscuous mode [ 402.142014][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.155500][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.674405][ T9980] device veth1_vlan entered promiscuous mode [ 402.996730][ T4445] Bluetooth: hci1: command 0x0419 tx timeout [ 403.003455][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 403.019826][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 403.129031][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 403.143233][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 403.236733][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 403.279845][ T9980] device veth0_macvtap entered promiscuous mode [ 403.378357][ T9980] device veth1_macvtap entered promiscuous mode [ 403.492816][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.550317][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.584930][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.617492][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.627736][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.638308][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.648365][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.658939][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.668925][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.679645][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.698874][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.843778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 403.874143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 403.917515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 403.926517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 403.962693][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.157743][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.378241][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.714418][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.724416][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.766454][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.776353][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.842519][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.873583][ T9980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.901583][ T9980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.113501][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.134554][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.161673][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.316758][ T2302] Bluetooth: hci3: command 0x041b tx timeout [ 405.533037][ T4304] device veth0_to_bond left promiscuous mode [ 405.559202][ T4304] bridge4: port 2(veth0_to_bond) entered disabled state [ 405.572791][ T4304] device veth5 left promiscuous mode [ 405.585117][ T4304] bridge4: port 1(veth5) entered disabled state [ 405.599591][ T4304] device veth3 left promiscuous mode [ 405.605172][ T4304] bridge1: port 1(veth3) entered disabled state [ 405.994798][ T4304] device hsr_slave_0 left promiscuous mode [ 406.097289][ T4304] device hsr_slave_1 left promiscuous mode [ 406.109641][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.149743][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.177583][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.221321][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.263475][ T4304] device bridge_slave_1 left promiscuous mode [ 406.280259][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.331886][ T4304] device bridge_slave_0 left promiscuous mode [ 406.345695][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.393627][ T4304] device veth1_macvtap left promiscuous mode [ 406.404992][ T4304] device veth0_macvtap left promiscuous mode [ 406.414119][ T4304] device veth1_vlan left promiscuous mode [ 406.425717][ T4304] device veth0_vlan left promiscuous mode [ 406.747518][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 406.763314][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 406.871502][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.904100][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.186802][ T4304] bond0 (unregistering): Released all slaves [ 407.343213][T10129] chnl_net:caif_netlink_parms(): no params data found [ 407.396507][ T2302] Bluetooth: hci3: command 0x040f tx timeout [ 407.405194][ T9980] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.414485][ T9980] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.433064][ T9980] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.442017][ T9980] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.608513][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.615762][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.625879][T10129] device bridge_slave_0 entered promiscuous mode [ 407.634529][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.642224][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.650879][T10129] device bridge_slave_1 entered promiscuous mode [ 407.741600][T10129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.823928][T10129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.837954][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.903089][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.936500][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.945093][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.984697][T10129] team0: Port device team_slave_0 added [ 408.018731][T10129] team0: Port device team_slave_1 added [ 408.103613][T10255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.332595][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 408.395243][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 408.569848][T10129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.606430][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.794651][T10129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.874073][T10129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.893279][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.945358][T10129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.172597][T10280] loop9: detected capacity change from 0 to 512 [ 409.999156][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 410.064943][T10280] EXT4-fs error (device loop9): __ext4_iget:4919: inode #2: block 131072: comm syz.9.1698: invalid block [ 410.158185][T10280] EXT4-fs (loop9): get root inode failed [ 410.163916][T10280] EXT4-fs (loop9): mount failed [ 410.194336][T10129] device hsr_slave_0 entered promiscuous mode [ 410.247441][T10129] device hsr_slave_1 entered promiscuous mode [ 410.444131][T10129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.472589][T10129] Cannot create hsr debugfs directory [ 411.114619][T10305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 411.466127][T10316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 412.400126][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 412.422918][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 412.554688][T10337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.210848][T10349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.883137][T10129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 414.135765][T10129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 414.174188][T10129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 414.213813][T10352] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.224569][T10129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 414.551776][T10129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.615213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.627404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.663567][T10129] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.711714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.726137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.751151][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.758344][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.787820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 414.803055][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.837346][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.844472][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.991143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.234485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.374253][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.752452][T10129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 415.763128][T10129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.855304][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.867397][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 415.905078][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.930683][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 415.969961][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.017055][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.056089][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.065080][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.094121][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 416.133240][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.156270][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.355165][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.369903][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.406856][T10129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.472117][T10129] device veth0_vlan entered promiscuous mode [ 416.482039][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 416.508156][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.563717][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 416.589526][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.625696][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.667666][T10417] x_tables: duplicate underflow at hook 3 [ 416.725289][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.127835][T10129] device veth1_vlan entered promiscuous mode [ 417.523306][T10411] rxe_eth0 speed is unknown, defaulting to 1000 [ 417.531466][T10352] chnl_net:caif_netlink_parms(): no params data found [ 417.578551][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.590786][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.732474][T10129] device veth0_macvtap entered promiscuous mode [ 417.846343][ T4304] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.917934][T10129] device veth1_macvtap entered promiscuous mode [ 417.954450][T10430] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1740'. [ 417.958539][T10389] Bluetooth: hci1: command 0x041b tx timeout [ 417.989337][ T4304] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.054984][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.062754][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.071875][T10352] device bridge_slave_0 entered promiscuous mode [ 418.087109][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.103674][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 418.145700][ T4304] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.165133][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.176379][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.193173][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.204623][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.214987][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.226076][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.238977][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.250844][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.261100][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.272683][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.284639][T10129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.294769][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.308249][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.327410][T10352] device bridge_slave_1 entered promiscuous mode [ 418.356527][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.365745][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.382538][ T4304] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.208690][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.230303][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.245582][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.264407][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.276197][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.286948][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.296987][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.307645][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.317675][T10129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.329251][T10129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.345943][T10129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.357075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.371207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.383256][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.411581][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.429611][T10129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.439625][T10129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.448767][T10129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.457792][T10129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.563176][T10352] team0: Port device team_slave_0 added [ 419.611938][T10352] team0: Port device team_slave_1 added [ 419.663280][T10457] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1749'. [ 419.722622][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.726280][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.747837][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.775545][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.815243][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.838417][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.845426][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.906068][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.939950][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 420.045757][ T4445] Bluetooth: hci1: command 0x040f tx timeout [ 420.087852][T10352] device hsr_slave_0 entered promiscuous mode [ 420.107223][T10352] device hsr_slave_1 entered promiscuous mode [ 420.119998][T10352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.130229][T10352] Cannot create hsr debugfs directory [ 420.136042][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.159432][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.185132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 420.677119][T10488] loop1: detected capacity change from 0 to 256 [ 421.517496][T10497] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1758'. [ 421.898775][T10510] input: syz1 as /devices/virtual/input/input7 [ 422.106885][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 422.952187][T10539] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1769'. [ 423.682054][ T4304] device hsr_slave_0 left promiscuous mode [ 423.705789][ T4304] device hsr_slave_1 left promiscuous mode [ 423.712950][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.720931][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.733382][T10550] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 423.733382][T10550] The task syz.3.1770 (10550) triggered the difference, watch for misbehavior. [ 423.752715][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.768234][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.783677][ T4304] device bridge_slave_1 left promiscuous mode [ 423.793054][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.830420][ T4304] device bridge_slave_0 left promiscuous mode [ 423.843304][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.859685][ T4304] device veth1_macvtap left promiscuous mode [ 423.865775][ T4304] device veth0_macvtap left promiscuous mode [ 423.881949][ T4304] device veth1_vlan left promiscuous mode [ 423.890368][ T4304] device veth0_vlan left promiscuous mode [ 424.234148][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 424.265539][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 424.291101][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.315936][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.439696][ T4304] bond0 (unregistering): Released all slaves [ 424.474638][T10551] rxe_eth0 speed is unknown, defaulting to 1000 [ 424.931567][T10352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.953731][T10352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.988170][T10352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.000482][T10352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.276367][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.300481][T10571] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1780'. [ 425.391819][T10352] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.421474][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.444617][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.479662][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.604301][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.751139][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.758374][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.995448][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.013992][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.047216][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.071268][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.078445][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.110760][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.135938][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.200296][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 427.220967][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 427.238254][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.260737][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.278261][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 427.293105][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.303143][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.324727][T10597] netlink: 304 bytes leftover after parsing attributes in process `syz.8.1791'. [ 427.327301][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.353038][T10352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 427.389813][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.782934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.794899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.842280][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.642008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.716831][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.393569][T10352] device veth0_vlan entered promiscuous mode [ 429.413929][T10352] device veth1_vlan entered promiscuous mode [ 429.507934][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.541044][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.572756][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.593599][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.641765][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.604337][T10352] device veth0_macvtap entered promiscuous mode [ 430.659134][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.672450][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.715972][T10352] device veth1_macvtap entered promiscuous mode [ 430.923860][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.972523][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.116619][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.186451][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.229238][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.270160][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.340467][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.365391][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.396074][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.424451][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.464730][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.513275][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.556849][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.581695][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.622523][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.682153][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.737377][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.806646][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.845026][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.921035][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.986750][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.092703][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.140257][T10699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 433.459049][T10352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.633442][T10352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.708939][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.780022][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.900700][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.989274][T10352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.052465][T10352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.098727][T10352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.149909][T10352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.472191][T10716] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1825'. [ 434.646641][T10665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.654530][T10665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.697385][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.731643][ T4546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.746535][ T4546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.779401][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 435.085483][T10733] netlink: 'syz.4.1721': attribute type 4 has an invalid length. [ 435.929188][T10769] loop4: detected capacity change from 0 to 2048 [ 435.998741][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'. [ 436.019224][T10769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.029500][T10769] UDF-fs: error (device loop4): udf_read_inode: (ino 1376) failed !bh [ 436.039019][T10769] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=64, partition=0 [ 436.821125][T10798] loop4: detected capacity change from 0 to 2048 [ 436.873832][T10798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.965357][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1856'. [ 437.012711][T10813] loop1: detected capacity change from 0 to 256 [ 437.219621][T10813] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.300926][T10811] device veth0_to_bond left promiscuous mode [ 437.326737][T10811] bridge2: port 1(veth0_to_bond) entered disabled state [ 437.364639][T10826] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1860'. [ 437.616619][ T4268] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 438.866958][ T4268] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.892523][ T4268] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 438.916654][ T4268] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 438.937106][ T4268] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 438.951836][ T4268] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 438.981798][ T4268] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.012664][ T4268] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.041025][ T4268] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 439.083471][ T4262] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 439.230610][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1873'. [ 439.240790][ T4268] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 439.268706][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.288702][ T4268] usb 5-1: Product: syz [ 439.293018][ T4268] usb 5-1: Manufacturer: syz [ 439.314752][ T4268] usb 5-1: SerialNumber: syz [ 439.346925][T10823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 439.354810][T10823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 439.366612][ T4262] usb 2-1: Using ep0 maxpacket: 16 [ 439.383559][T10823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 439.395612][T10823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 439.431309][ T4268] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 439.467113][ T4268] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 439.503426][ T4268] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 439.536765][ T4262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.556466][ T4262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.593536][ T4262] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 439.645859][ T4262] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.714372][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.765078][ T4268] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 439.791066][ T4268] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 439.802375][ T4262] usb 2-1: config 0 descriptor?? [ 439.870276][T10887] ip_tables: iptables: counters copy to user failed while replacing table [ 439.949528][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.961301][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.516024][ T4268] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 440.531354][ T4262] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input8 [ 440.576703][ T4268] usb 5-1: USB disconnect, device number 4 [ 440.607283][ T4268] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 440.620308][ T4262] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 440.633143][T10889] netlink: 'syz.8.1876': attribute type 13 has an invalid length. [ 440.647793][ T4268] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 440.660293][T10889] netlink: 'syz.8.1876': attribute type 17 has an invalid length. [ 440.680266][ T4268] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 440.728710][T10889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.826497][ T4262] usb 2-1: USB disconnect, device number 3 [ 440.848086][ T4268] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 440.865445][ T4268] keyspan 5-1:1.0: device disconnected [ 441.701724][T10900] fido_id[10900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 441.913905][T10909] loop4: detected capacity change from 0 to 512 [ 441.990640][T10909] EXT4-fs error (device loop4): __ext4_iget:4919: inode #2: block 131072: comm syz.4.1880: invalid block [ 442.022304][T10923] loop1: detected capacity change from 0 to 512 [ 442.057885][T10909] EXT4-fs (loop4): get root inode failed [ 442.094891][T10909] EXT4-fs (loop4): mount failed [ 442.247584][T10923] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 442.267604][T10923] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1884: invalid indirect mapped block 256 (level 1) [ 442.365417][T10923] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1884: invalid indirect mapped block 2683928664 (level 1) [ 442.407242][T10923] EXT4-fs (loop1): 1 truncate cleaned up [ 442.415499][T10923] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 443.237238][T10947] capability: warning: `syz.8.1888' uses 32-bit capabilities (legacy support in use) [ 443.250000][T10946] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 444.379686][T10968] process 'syz.0.1894' launched './file1' with NULL argv: empty string added [ 444.555527][T10981] loop4: detected capacity change from 0 to 1024 [ 446.614307][T11033] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.621514][T11033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.679187][T11035] fuse: Unknown parameter '0x000000000000000900000000000000000007' [ 446.711937][T11035] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 447.031007][T11026] page:ffffea0001cb0000 refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 447.051087][T11026] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 447.064885][T11026] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 447.079633][T11026] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 447.106196][T11026] page dumped because: unmovable page [ 447.111819][T11052] device batadv_slave_1 entered promiscuous mode [ 447.132366][T11026] page_owner tracks the page as allocated [ 447.144648][T11026] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 10102, ts 400082423480, free_ts 398951807389 [ 447.172455][T11047] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.179207][T11050] device batadv_slave_1 left promiscuous mode [ 447.196591][T11026] get_page_from_freelist+0x24f6/0x2670 [ 447.202311][T11026] __alloc_pages+0x1ee/0x480 [ 447.241050][T11026] __vmalloc_node_range+0x4b1/0x8b0 [ 447.249290][T11026] vmalloc_user+0x70/0x80 [ 447.253736][T11026] kcov_mmap+0x27/0x120 [ 447.266468][T11026] mmap_file+0x5d/0xb0 [ 447.270746][T11026] mmap_region+0x1048/0x1730 [ 447.275390][T11026] do_mmap+0x801/0xe30 [ 447.300844][T11026] vm_mmap_pgoff+0x1c1/0x2d0 [ 447.336556][T11026] ksys_mmap_pgoff+0x4e2/0x790 [ 447.506011][T11026] do_syscall_64+0x4c/0xa0 [ 447.558910][T11026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 447.680006][T11026] page last free stack trace: [ 447.778594][T11026] free_unref_page_prepare+0x637/0x6c0 [ 447.925901][T11026] free_unref_page+0x8f/0x2a0 [ 448.027842][T11026] __vunmap+0x8e0/0xa80 [ 448.111675][T11026] kcov_close+0x27/0x50 [ 448.173198][T11026] __fput+0x212/0x8c0 [ 448.219128][T11026] task_work_run+0x125/0x1a0 [ 448.223898][T11026] do_exit+0x635/0x2100 [ 448.281211][T11026] do_group_exit+0x12c/0x2f0 [ 448.285898][T11026] __x64_sys_exit_group+0x3b/0x40 [ 448.465633][T11026] do_syscall_64+0x4c/0xa0 [ 448.470976][T11026] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 449.095320][T11093] loop1: detected capacity change from 0 to 512 [ 449.142526][T11093] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 449.170415][T11093] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 449.269168][T11093] EXT4-fs (loop1): 1 truncate cleaned up [ 449.298211][T11093] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noauto_da_alloc,bsddf,nomblk_io_submit,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 449.534584][T11093] EXT4-fs warning (device loop1): ext4_group_extend:1847: will only finish group (8193 blocks, 7937 new) [ 449.610960][T11093] EXT4-fs warning (device loop1): ext4_group_extend:1852: can't read last block, resize aborted [ 449.967280][T11112] fuse: Unknown parameter '0xffffffffffffffff00000000000000000006' [ 450.121972][T11117] loop1: detected capacity change from 0 to 256 [ 451.236527][ T4445] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 451.633330][T11154] page:ffffea0001cb0000 refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 451.656217][T11154] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 451.672904][T11154] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 451.682544][ T4445] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 451.699207][ T4445] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 451.717964][T11154] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 451.739203][ T4445] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.750044][T11155] fuse: Unknown parameter '0x000000000000000900000000000000000007' [ 451.763888][ T4445] usb 5-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00 [ 451.777757][T11154] page dumped because: unmovable page [ 451.791241][ T4445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.801395][T11155] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 451.820067][T11154] page_owner tracks the page as allocated [ 451.829381][ T4445] usb 5-1: config 0 descriptor?? [ 451.841714][T11154] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 10102, ts 400082423480, free_ts 398951807389 [ 451.877567][T11127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.888245][T11154] get_page_from_freelist+0x24f6/0x2670 [ 451.905114][T11154] __alloc_pages+0x1ee/0x480 [ 451.915241][T11154] __vmalloc_node_range+0x4b1/0x8b0 [ 451.927675][T11154] vmalloc_user+0x70/0x80 [ 451.936802][T11154] kcov_mmap+0x27/0x120 [ 451.951327][T11154] mmap_file+0x5d/0xb0 [ 451.966000][T11154] mmap_region+0x1048/0x1730 [ 451.985109][T11154] do_mmap+0x801/0xe30 [ 452.003359][T11154] vm_mmap_pgoff+0x1c1/0x2d0 [ 452.008170][T11154] ksys_mmap_pgoff+0x4e2/0x790 [ 452.012994][T11154] do_syscall_64+0x4c/0xa0 [ 452.069863][T11154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 452.075958][T11154] page last free stack trace: [ 452.100099][T11154] free_unref_page_prepare+0x637/0x6c0 [ 452.115012][T11154] free_unref_page+0x8f/0x2a0 [ 452.139966][T11154] __vunmap+0x8e0/0xa80 [ 452.144230][T11154] kcov_close+0x27/0x50 [ 452.162338][T11154] __fput+0x212/0x8c0 [ 452.179904][T11154] task_work_run+0x125/0x1a0 [ 452.184680][T11154] do_exit+0x635/0x2100 [ 452.210006][T11154] do_group_exit+0x12c/0x2f0 [ 452.214693][T11154] __x64_sys_exit_group+0x3b/0x40 [ 452.246628][T11154] do_syscall_64+0x4c/0xa0 [ 452.251155][T11154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 452.351248][ T4445] input: HID 05ac:1440 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:1440.0004/input/input9 [ 452.465380][ T4445] appleir 0003:05AC:1440.0004: input,hiddev0,hidraw0: USB HID v0.04 Joystick [HID 05ac:1440] on usb-dummy_hcd.4-1/input0 [ 452.562418][ T4266] usb 5-1: USB disconnect, device number 5 [ 452.652373][T11170] fido_id[11170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 452.773173][T11175] loop1: detected capacity change from 0 to 256 [ 453.938944][T11193] syz.4.1957 (11193) used greatest stack depth: 18544 bytes left [ 454.060835][T11202] page:ffffea0001cb0000 refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 454.088924][T11204] loop1: detected capacity change from 0 to 512 [ 454.107968][T11202] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 454.115172][T11202] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 454.135733][T11206] fuse: Unknown parameter '0x000000000000000900000000000000000007' [ 454.164970][T11202] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 454.174801][T11204] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 454.191643][T11204] EXT4-fs (loop1): can't mount with both data=journal and dax [ 454.213430][T11202] page dumped because: unmovable page [ 454.240933][T11206] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 454.285159][T11202] page_owner tracks the page as allocated [ 454.316704][T11202] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 10102, ts 400082423480, free_ts 398951807389 [ 454.396557][T11202] get_page_from_freelist+0x24f6/0x2670 [ 454.402230][T11202] __alloc_pages+0x1ee/0x480 [ 454.427541][T11213] loop1: detected capacity change from 0 to 1024 [ 454.445078][T11202] __vmalloc_node_range+0x4b1/0x8b0 [ 454.456488][T11202] vmalloc_user+0x70/0x80 [ 454.460934][T11202] kcov_mmap+0x27/0x120 [ 454.465133][T11202] mmap_file+0x5d/0xb0 [ 454.520436][T11213] hfsplus: filesystem is marked journaled, leaving read-only. [ 454.535903][T11202] mmap_region+0x1048/0x1730 [ 454.546619][T11202] do_mmap+0x801/0xe30 [ 454.550830][T11202] vm_mmap_pgoff+0x1c1/0x2d0 [ 454.555455][T11202] ksys_mmap_pgoff+0x4e2/0x790 [ 454.609158][T11202] do_syscall_64+0x4c/0xa0 [ 454.671179][T11202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 454.805197][T11202] page last free stack trace: [ 454.955027][T11202] free_unref_page_prepare+0x637/0x6c0 [ 455.218930][T11202] free_unref_page+0x8f/0x2a0 [ 455.384492][T11202] __vunmap+0x8e0/0xa80 [ 455.423308][T11202] kcov_close+0x27/0x50 [ 455.446512][T11202] __fput+0x212/0x8c0 [ 455.450582][T11202] task_work_run+0x125/0x1a0 [ 455.455222][T11202] do_exit+0x635/0x2100 [ 455.476481][T11202] do_group_exit+0x12c/0x2f0 [ 455.481152][T11202] __x64_sys_exit_group+0x3b/0x40 [ 455.486228][T11202] do_syscall_64+0x4c/0xa0 [ 455.576954][T11202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.141055][T11241] loop1: detected capacity change from 0 to 8192 [ 456.302331][T11251] loop4: detected capacity change from 0 to 512 [ 456.324137][ T26] audit: type=1804 audit(1793466654.288:9): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1969" name="/newroot/40/bus/bus" dev="loop1" ino=1048701 res=1 errno=0 [ 456.453156][T11251] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 456.472478][T11251] EXT4-fs (loop4): can't mount with both data=journal and dax [ 456.813902][T11262] loop4: detected capacity change from 0 to 512 [ 456.973457][T11262] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 457.048412][T11262] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.167085][T11282] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1979'. [ 457.277647][T11287] fuse: Unknown parameter '0x000000000000000900000000000000000007' [ 457.307127][T11287] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 457.375684][T11283] page:ffffea0001cb0000 refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 457.399225][T11283] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 457.436668][T11283] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 457.490864][T11283] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 457.596545][T11283] page dumped because: unmovable page [ 457.626511][T11283] page_owner tracks the page as allocated [ 457.633107][T11283] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 10102, ts 400082423480, free_ts 398951807389 [ 457.856751][T11283] get_page_from_freelist+0x24f6/0x2670 [ 458.109622][T11283] __alloc_pages+0x1ee/0x480 [ 458.114309][T11283] __vmalloc_node_range+0x4b1/0x8b0 [ 458.175060][T11304] loop4: detected capacity change from 0 to 2048 [ 458.189132][T11283] vmalloc_user+0x70/0x80 [ 458.193562][T11283] kcov_mmap+0x27/0x120 [ 458.261400][T11283] mmap_file+0x5d/0xb0 [ 458.265585][T11283] mmap_region+0x1048/0x1730 [ 458.319140][T11304] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 458.350452][T11283] do_mmap+0x801/0xe30 [ 458.354620][T11283] vm_mmap_pgoff+0x1c1/0x2d0 [ 458.361724][T11304] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 458.404426][T11283] ksys_mmap_pgoff+0x4e2/0x790 [ 458.430006][T11304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.866758][T11283] do_syscall_64+0x4c/0xa0 [ 458.872285][T11283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.902677][T11283] page last free stack trace: [ 458.933026][T11283] free_unref_page_prepare+0x637/0x6c0 [ 459.006691][T11283] free_unref_page+0x8f/0x2a0 [ 459.053335][T11283] __vunmap+0x8e0/0xa80 [ 459.098005][T11283] kcov_close+0x27/0x50 [ 459.389420][T11283] __fput+0x212/0x8c0 [ 459.393504][T11283] task_work_run+0x125/0x1a0 [ 459.447170][T11283] do_exit+0x635/0x2100 [ 459.451412][T11283] do_group_exit+0x12c/0x2f0 [ 459.456050][T11283] __x64_sys_exit_group+0x3b/0x40 [ 459.463559][T11283] do_syscall_64+0x4c/0xa0 [ 459.468391][T11283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.345565][T11329] loop1: detected capacity change from 0 to 512 [ 460.426693][T11329] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 460.595041][T11329] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 460.637461][T11329] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1990: bg 0: block 248: padding at end of block bitmap is not set [ 460.715270][T11329] Quota error (device loop1): write_blk: dquota write failed [ 460.725064][T11329] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 460.736328][T11329] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1990: Failed to acquire dquot type 1 [ 460.756053][T11329] EXT4-fs (loop1): 1 truncate cleaned up [ 460.769382][T11329] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 460.874746][T11348] loop4: detected capacity change from 0 to 256 [ 461.762299][T11361] loop4: detected capacity change from 0 to 512 [ 461.804432][T11360] fuse: Unknown parameter '0xffffffffffffffff00000000000000000006' [ 461.845094][T11361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 461.868437][T11361] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.096248][T11382] loop1: detected capacity change from 0 to 512 [ 462.327533][T11382] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 462.380053][T11382] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.614065][T11400] loop4: detected capacity change from 0 to 128 [ 464.319155][T11413] netlink: 'syz.1.2010': attribute type 4 has an invalid length. [ 464.611694][T11400] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 464.696800][T11400] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.228583][T11439] loop1: detected capacity change from 0 to 2048 [ 465.331675][T11445] ip_tables: iptables: counters copy to user failed while replacing table [ 465.787593][T11439] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,errors=remount-ro,nodiscard,. Quota mode: none. [ 466.589911][T11457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.872031][T11466] loop4: detected capacity change from 0 to 512 [ 466.903255][T11466] EXT4-fs (loop4): inline encryption not supported [ 466.966250][T11466] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: none. [ 467.029663][T11466] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2019: bg 0: block 354: padding at end of block bitmap is not set [ 467.550099][T11509] loop4: detected capacity change from 0 to 2048 [ 467.707506][T11509] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,jqfmt=vfsv1,errors=remount-ro,nodiscard,. Quota mode: none. [ 468.958576][T11529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.151927][T11549] loop4: detected capacity change from 0 to 512 [ 470.284508][T11549] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 470.345983][T11549] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 470.403194][T11549] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2046: bg 0: block 248: padding at end of block bitmap is not set [ 470.423866][T11549] Quota error (device loop4): write_blk: dquota write failed [ 470.434440][T11571] netlink: 'syz.3.2051': attribute type 4 has an invalid length. [ 470.443105][T11549] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 470.470116][T11549] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.2046: Failed to acquire dquot type 1 [ 470.492741][T11549] EXT4-fs (loop4): 1 truncate cleaned up [ 470.503170][T11549] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 470.655897][T11580] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2054'. [ 471.019648][T11587] ip_tables: iptables: counters copy to user failed while replacing table [ 471.388667][T11594] loop4: detected capacity change from 0 to 8 [ 471.528319][T11594] SQUASHFS error: Unable to read directory block [631:32] [ 472.101477][T11611] loop4: detected capacity change from 0 to 512 [ 472.400225][T11611] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 472.471533][T11611] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.2063: corrupted in-inode xattr [ 472.493404][T11611] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.2063: couldn't read orphan inode 15 (err -117) [ 472.508000][T11611] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 472.563395][T11611] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 473.053395][T11620] fuse: Unknown parameter '0xffffffffffffffff00000000000000000006' [ 473.590842][T11632] loop4: detected capacity change from 0 to 1024 [ 473.685846][T11632] hfsplus: Filesystem is marked locked, mounting read-only. [ 473.715591][T11639] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptf%_key_bytes=16] [ 473.756750][T11639] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 473.764569][T11639] Error parsing options; rc = [-22] [ 473.792800][T11642] netlink: 'syz.8.2072': attribute type 4 has an invalid length. [ 473.982137][T11648] loop4: detected capacity change from 0 to 512 [ 474.113205][T11648] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 474.189274][T11648] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.567404][T11667] loop1: detected capacity change from 0 to 512 [ 474.617444][T11669] fuse: Unknown parameter '0xffffffffffffffff00000000000000000006' [ 474.628970][T11667] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 474.644154][T11667] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2078: invalid indirect mapped block 256 (level 1) [ 474.666743][T11667] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2078: invalid indirect mapped block 2683928664 (level 1) [ 474.736890][T11674] loop4: detected capacity change from 0 to 512 [ 474.748480][T11667] EXT4-fs (loop1): 1 truncate cleaned up [ 474.788315][T11667] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 474.853496][T11674] EXT4-fs (loop4): Ignoring removed oldalloc option [ 474.871124][T11674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 475.015683][T11674] EXT4-fs (loop4): 1 truncate cleaned up [ 475.028261][T11674] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 475.112469][T11674] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 475.217226][T11690] snd_dummy snd_dummy.0: control 5:245:0:syz0:0 is already present [ 475.848760][T11699] rxe_eth0 speed is unknown, defaulting to 1000 [ 476.050376][T11715] netlink: 'syz.0.2089': attribute type 4 has an invalid length. [ 476.220919][T11721] page:ffffea0001cb0000 refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 476.241668][T11721] flags: 0xfff00000000002(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 476.261998][T11721] raw: 00fff00000000002 0000000000000000 dead000000000122 0000000000000000 [ 476.276240][T11721] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 476.325167][T11724] fuse: Unknown parameter '0x000000000000000900000000000000000007' [ 476.352195][T11721] page dumped because: unmovable page [ 476.373417][T11724] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 476.374626][T11721] page_owner tracks the page as allocated [ 476.418566][T11721] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 10102, ts 400082423480, free_ts 398951807389 [ 476.446770][T11721] get_page_from_freelist+0x24f6/0x2670 [ 476.453177][T11721] __alloc_pages+0x1ee/0x480 [ 476.481861][T11721] __vmalloc_node_range+0x4b1/0x8b0 [ 476.647076][T11721] vmalloc_user+0x70/0x80 [ 476.701855][T11721] kcov_mmap+0x27/0x120 [ 476.832434][T11721] mmap_file+0x5d/0xb0 [ 476.934589][T11721] mmap_region+0x1048/0x1730 [ 477.015553][T11721] do_mmap+0x801/0xe30 [ 477.243106][T11721] vm_mmap_pgoff+0x1c1/0x2d0 [ 477.276308][T11721] ksys_mmap_pgoff+0x4e2/0x790 [ 477.295479][T11721] do_syscall_64+0x4c/0xa0 [ 477.308467][T11721] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.314459][T11721] page last free stack trace: [ 477.320056][T11721] free_unref_page_prepare+0x637/0x6c0 [ 477.325595][T11721] free_unref_page+0x8f/0x2a0 [ 477.330925][T11721] __vunmap+0x8e0/0xa80 [ 477.352498][T11721] kcov_close+0x27/0x50 [ 477.359984][T11721] __fput+0x212/0x8c0 [ 477.385871][T11721] task_work_run+0x125/0x1a0 [ 477.410282][T11721] do_exit+0x635/0x2100 [ 477.414526][T11721] do_group_exit+0x12c/0x2f0 [ 477.430451][T11721] __x64_sys_exit_group+0x3b/0x40 [ 477.435569][T11721] do_syscall_64+0x4c/0xa0 [ 477.476577][T11721] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 477.537442][T11742] loop4: detected capacity change from 0 to 128 [ 477.666242][T11742] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,init_itable,resgid=0x0000000000000000,init_itable,,errors=continue. Quota mode: none. [ 477.711252][T11742] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 477.799562][T11754] bridge0: port 3(syz_tun) entered blocking state [ 477.847768][T11754] bridge0: port 3(syz_tun) entered disabled state [ 477.896847][T11754] device syz_tun entered promiscuous mode [ 477.910825][T11754] bridge0: port 3(syz_tun) entered blocking state [ 477.917447][T11754] bridge0: port 3(syz_tun) entered forwarding state [ 478.545073][T11780] device xfrm0 entered promiscuous mode [ 479.553049][T11788] loop4: detected capacity change from 0 to 128 [ 479.808795][T11800] fuse: Unknown parameter '0x000000000000000900000000000000000007' [ 479.820499][T11795] page:ffffea0001cb0000 refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 479.876722][T11800] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 479.948127][T11795] flags: 0xfff00000000002(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 480.036552][T11795] raw: 00fff00000000002 0000000000000000 dead000000000122 0000000000000000 [ 480.080501][T11795] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 480.129910][T11795] page dumped because: unmovable page [ 480.135426][T11795] page_owner tracks the page as allocated [ 480.211277][T11795] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 10102, ts 400082423480, free_ts 398951807389 [ 480.335100][T11815] loop4: detected capacity change from 0 to 256 [ 480.426686][T11795] get_page_from_freelist+0x24f6/0x2670 [ 480.438998][T11795] __alloc_pages+0x1ee/0x480 [ 480.661148][T11795] __vmalloc_node_range+0x4b1/0x8b0 [ 480.775274][T11795] vmalloc_user+0x70/0x80 [ 480.874962][T11795] kcov_mmap+0x27/0x120 [ 480.970018][T11795] mmap_file+0x5d/0xb0 [ 481.085351][T11795] mmap_region+0x1048/0x1730 [ 481.140997][T11795] do_mmap+0x801/0xe30 [ 481.145160][T11795] vm_mmap_pgoff+0x1c1/0x2d0 [ 481.150385][T11795] ksys_mmap_pgoff+0x4e2/0x790 [ 481.155218][T11795] do_syscall_64+0x4c/0xa0 [ 481.159864][T11795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 481.165819][T11795] page last free stack trace: [ 481.170632][T11795] free_unref_page_prepare+0x637/0x6c0 [ 481.176137][T11795] free_unref_page+0x8f/0x2a0 [ 481.181135][T11795] __vunmap+0x8e0/0xa80 [ 481.185404][T11795] kcov_close+0x27/0x50 [ 481.189771][T11795] __fput+0x212/0x8c0 [ 481.193805][T11795] task_work_run+0x125/0x1a0 [ 481.198504][T11795] do_exit+0x635/0x2100 [ 481.202709][T11795] do_group_exit+0x12c/0x2f0 [ 481.207401][T11795] __x64_sys_exit_group+0x3b/0x40 [ 481.212526][T11795] do_syscall_64+0x4c/0xa0 [ 481.217122][T11795] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 481.378288][T11823] loop1: detected capacity change from 0 to 512 [ 481.559118][T11823] EXT4-fs (loop1): orphan cleanup on readonly fs [ 481.649065][T11823] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 481.746000][T11840] FAULT_INJECTION: forcing a failure. [ 481.746000][T11840] name failslab, interval 1, probability 0, space 0, times 1 [ 481.748186][T11823] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 481.759374][T11840] CPU: 0 PID: 11840 Comm: syz.4.2122 Not tainted syzkaller #0 [ 481.759450][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 481.759466][T11840] Call Trace: [ 481.759474][T11840] [ 481.759484][T11840] dump_stack_lvl+0x188/0x250 [ 481.759522][T11840] ? show_regs_print_info+0x20/0x20 [ 481.759549][T11840] ? load_image+0x410/0x410 [ 481.804662][T11840] ? mark_lock+0x94/0x320 [ 481.809041][T11840] ? __lock_acquire+0x12df/0x7d40 [ 481.814143][T11840] should_fail+0x383/0x4b0 [ 481.818617][T11840] should_failslab+0x5/0x20 [ 481.823209][T11840] slab_pre_alloc_hook+0x51/0xc0 [ 481.828288][T11840] kmem_cache_alloc_node+0x47/0x2c0 [ 481.833541][T11840] ? __alloc_skb+0xf4/0x750 [ 481.838129][T11840] __alloc_skb+0xf4/0x750 [ 481.842513][T11840] alloc_skb_with_frags+0xa7/0x720 [ 481.847294][T11823] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.2116: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 481.847792][T11840] ? __lock_acquire+0x12df/0x7d40 [ 481.870652][T11840] sock_alloc_send_pskb+0x87f/0x9a0 [ 481.876039][T11840] ? sock_kzfree_s+0x50/0x50 [ 481.880672][T11840] ? __lock_acquire+0x12df/0x7d40 [ 481.885752][T11840] ? __local_bh_enable_ip+0x136/0x1c0 [ 481.891181][T11840] __ip6_append_data+0x25df/0x38f0 [ 481.896453][T11840] ? ip6_setup_cork+0x11e0/0x11e0 [ 481.901523][T11840] ? ip6_setup_cork+0xc68/0x11e0 [ 481.906512][T11840] ip6_append_data+0x1d4/0x310 [ 481.911314][T11840] ? __in6_dev_get+0xd0/0xd0 [ 481.916094][T11840] ? __in6_dev_get+0xd0/0xd0 [ 481.920740][T11840] icmp6_send+0x127c/0x19a0 [ 481.925312][T11840] ? icmpv6_push_pending_frames+0x440/0x440 [ 481.931263][T11840] ? raw6_local_deliver+0x875/0x920 [ 481.936521][T11840] ? rawv6_mh_filter_unregister+0x20/0x20 [ 481.938185][T11823] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2116: couldn't read orphan inode 13 (err -117) [ 481.942274][T11840] ? xfrm6_policy_check+0xf1/0x340 [ 481.942310][T11840] ip6_protocol_deliver_rcu+0x114e/0x1360 [ 481.965026][T11840] ? read_lock_is_recursive+0x10/0x10 [ 481.970494][T11840] ? ip6_input+0xa0/0xa0 [ 481.974786][T11840] ip6_input_finish+0xa2/0x130 [ 481.979614][T11840] NF_HOOK+0x303/0x390 [ 481.983723][T11840] ? ip6_input+0xa0/0xa0 [ 481.988009][T11840] ? ip6_rcv_core+0x1600/0x1600 [ 481.993013][T11840] ? ip6_input+0xa0/0xa0 [ 481.997342][T11840] ? ip6_rcv_finish+0x18d/0x240 [ 482.002237][T11840] ? refcount_add+0x80/0x80 [ 482.006788][T11840] NF_HOOK+0x303/0x390 [ 482.008538][T11823] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 482.010890][T11840] ? refcount_add+0x80/0x80 [ 482.026363][T11840] ? ip6_rcv_core+0x1600/0x1600 [ 482.031317][T11840] ? refcount_add+0x80/0x80 [ 482.035879][T11840] ? ip6_rcv_finish_core+0x420/0x420 [ 482.041226][T11840] __netif_receive_skb+0xcc/0x290 [ 482.046394][T11840] ? ktime_get_with_offset+0x2d7/0x320 [ 482.051975][T11840] netif_receive_skb+0x19e/0x700 [ 482.056954][T11840] ? __bpf_trace_softirq+0x10/0x10 [ 482.062112][T11840] ? netif_receive_skb_core+0x210/0x210 [ 482.067720][T11840] tun_rx_batched+0x606/0x760 [ 482.072525][T11840] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 482.078568][T11840] ? local_bh_enable+0x20/0x20 [ 482.083380][T11840] ? __local_bh_enable_ip+0x136/0x1c0 [ 482.088795][T11840] ? read_lock_is_recursive+0x10/0x10 [ 482.094217][T11840] ? __local_bh_enable_ip+0x136/0x1c0 [ 482.099634][T11840] ? _local_bh_enable+0xa0/0xa0 [ 482.104532][T11840] ? skb_set_owner_w+0x213/0x340 [ 482.109536][T11840] tun_get_user+0x2bf4/0x3b10 [ 482.114269][T11840] ? rcu_read_unlock_special+0xf0/0x4a0 [ 482.119958][T11840] ? tun_ring_recv+0xc90/0xc90 [ 482.124796][T11840] ? rcu_lock_release+0x5/0x20 [ 482.129625][T11840] ? lockdep_hardirqs_on+0x94/0x140 [ 482.134869][T11840] ? __lock_acquire+0x7d40/0x7d40 [ 482.139954][T11840] tun_chr_write_iter+0x112/0x1e0 [ 482.145023][T11840] vfs_write+0x748/0xd70 [ 482.149311][T11840] ? file_end_write+0x250/0x250 [ 482.154213][T11840] ? __fget_files+0x402/0x470 [ 482.158966][T11840] ? __fdget_pos+0x1e2/0x370 [ 482.163613][T11840] ? ksys_write+0x70/0x260 [ 482.168083][T11840] ksys_write+0x153/0x260 [ 482.172482][T11840] ? __ia32_sys_read+0x80/0x80 [ 482.177292][T11840] ? lockdep_hardirqs_on+0x94/0x140 [ 482.182536][T11840] do_syscall_64+0x4c/0xa0 [ 482.186992][T11840] ? clear_bhb_loop+0x30/0x80 [ 482.191708][T11840] ? clear_bhb_loop+0x30/0x80 [ 482.196421][T11840] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.202344][T11840] RIP: 0033:0x7f7316018d8e [ 482.206794][T11840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.226438][T11840] RSP: 002b:00007f73142aefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 482.234908][T11840] RAX: ffffffffffffffda RBX: 00007f73142af6c0 RCX: 00007f7316018d8e [ 482.242925][T11840] RDX: 0000000000000072 RSI: 0000200000000780 RDI: 00000000000000c8 [ 482.250937][T11840] RBP: 00007f73160efb50 R08: 0000000000000000 R09: 0000000000000000 [ 482.258947][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.266955][T11840] R13: 00007f73162df038 R14: 00007f73162defa0 R15: 00007ffd89740148 [ 482.274989][T11840] [ 482.334031][T11823] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 482.422387][T11823] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 482.676010][T11846] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 482.783722][T11846] EXT4-fs error (device loop1): ext4_lookup:1860: comm syz.1.2116: inode #15: comm syz.1.2116: iget: illegal inode # [ 482.923530][T11862] ip_tables: iptables: counters copy to user failed while replacing table [ 483.015931][T11865] fuse: Unknown parameter '0x000000000000000700000000000000000006' [ 483.840341][T11911] fuse: Unknown parameter '0x000000000000000900000000000000000007' [ 483.921287][T11911] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 483.937218][T11909] page:ffffea0001cb0000 refcount:4 mapcount:3 mapping:0000000000000000 index:0x0 pfn:0x72c00 [ 484.090182][T11909] flags: 0xfff00000000002(referenced|node=0|zone=1|lastcpupid=0x7ff) [ 484.310258][T11909] raw: 00fff00000000002 0000000000000000 dead000000000122 0000000000000000 [ 484.535518][T11909] raw: 0000000000000000 0000000000000000 0000000400000002 0000000000000000 [ 484.634362][T11909] page dumped because: unmovable page [ 484.676653][T11909] page_owner tracks the page as allocated [ 484.726934][T11909] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 10102, ts 400082423480, free_ts 398951807389 [ 484.749633][T11909] get_page_from_freelist+0x24f6/0x2670 [ 484.755268][T11909] __alloc_pages+0x1ee/0x480 [ 484.771098][T11909] __vmalloc_node_range+0x4b1/0x8b0 [ 484.816705][T11909] vmalloc_user+0x70/0x80 [ 484.821120][T11909] kcov_mmap+0x27/0x120 [ 484.832366][T11909] mmap_file+0x5d/0xb0 [ 484.839270][T11909] mmap_region+0x1048/0x1730 [ 484.847433][T11909] do_mmap+0x801/0xe30 [ 484.851706][T11909] vm_mmap_pgoff+0x1c1/0x2d0 [ 484.856350][T11909] ksys_mmap_pgoff+0x4e2/0x790 [ 484.893686][T11909] do_syscall_64+0x4c/0xa0 [ 484.905211][T11909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.924164][T11909] page last free stack trace: [ 484.936018][T11909] free_unref_page_prepare+0x637/0x6c0 [ 484.993209][T11909] free_unref_page+0x8f/0x2a0 [ 485.105226][T11909] __vunmap+0x8e0/0xa80 [ 485.836558][T11909] kcov_close+0x27/0x50 [ 485.840888][T11909] __fput+0x212/0x8c0 [ 485.844914][T11909] task_work_run+0x125/0x1a0 [ 485.906583][T11909] do_exit+0x635/0x2100 [ 485.910845][T11909] do_group_exit+0x12c/0x2f0 [ 485.970986][T11909] __x64_sys_exit_group+0x3b/0x40 [ 485.976113][T11909] do_syscall_64+0x4c/0xa0 [ 486.028796][T11909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 486.249150][T11942] loop4: detected capacity change from 0 to 128 [ 486.333713][T11942] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 487.283298][T11964] loop1: detected capacity change from 0 to 1024 [ 487.423285][T11964] EXT4-fs (loop1): orphan cleanup on readonly fs [ 487.469432][T11974] fuse: Unknown parameter '0x000000000000000700000000000000000006' [ 487.514102][T11964] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 487.557759][T11964] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 487.599147][T11964] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2153: Failed to acquire dquot type 0 [ 487.613955][T11967] netlink: 'syz.4.2152': attribute type 4 has an invalid length. [ 487.779024][T11964] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 488.060034][T11964] EXT4-fs (loop1): 1 truncate cleaned up [ 488.195287][T11964] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 488.802657][T11993] loop1: detected capacity change from 0 to 4096 [ 488.877559][T11993] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 490.089812][T12031] netlink: 'syz.8.2170': attribute type 4 has an invalid length. [ 490.690925][T12063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 490.757719][T12054] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 490.781031][T12054] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 491.060827][T12081] netlink: 'syz.8.2186': attribute type 4 has an invalid length. [ 491.090541][T12079] loop4: detected capacity change from 0 to 128 [ 491.119878][T12079] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 493.007867][ T4304] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 493.330153][T12131] loop4: detected capacity change from 0 to 512 [ 493.385065][T12131] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 493.419704][T12131] EXT4-fs (loop4): can't mount with both data=journal and dax [ 495.005768][T12173] loop1: detected capacity change from 0 to 512 [ 495.054331][T12173] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 495.137295][T12173] EXT4-fs (loop1): can't mount with both data=journal and dax [ 496.208309][T12187] loop1: detected capacity change from 0 to 512 [ 496.244444][T12187] EXT4-fs (loop1): Ignoring removed nobh option [ 496.302801][T12187] EXT4-fs (loop1): orphan cleanup on readonly fs [ 496.323496][T12187] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.2215: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 496.373583][T12187] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.2215: ea_inode dec ref err=-117 [ 496.438308][T12187] EXT4-fs (loop1): 1 orphan inode deleted [ 496.456272][T12187] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,min_batch_time=0x000000000000000f,init_itable,nobh,lazytime,acl,init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 496.490584][T12196] ip_tables: iptables: counters copy to user failed while replacing table [ 496.569140][T12199] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 499.585949][T12247] loop1: detected capacity change from 0 to 512 [ 499.836638][T12247] EXT4-fs error (device loop1): __ext4_iget:4919: inode #2: block 131072: comm syz.1.2229: invalid block [ 499.895847][T12268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2233'. [ 499.901174][T12247] EXT4-fs (loop1): get root inode failed [ 499.940587][T12247] EXT4-fs (loop1): mount failed [ 500.031162][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'. [ 500.103238][T12278] loop4: detected capacity change from 0 to 2048 [ 500.168480][T12278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.210890][T12282] fuse: Bad value for 'fd' [ 500.493793][T12296] loop4: detected capacity change from 0 to 8 [ 501.479110][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.486045][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.804942][T12319] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.991493][T12328] loop4: detected capacity change from 0 to 1024 [ 502.239358][T12328] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 504.277647][T12407] rxe_eth0 speed is unknown, defaulting to 1000 [ 506.764814][T12462] loop1: detected capacity change from 0 to 512 [ 506.906761][T12462] EXT4-fs error (device loop1): __ext4_iget:4919: inode #2: block 131072: comm syz.1.2285: invalid block [ 506.992097][T12462] EXT4-fs (loop1): get root inode failed [ 507.048350][T12462] EXT4-fs (loop1): mount failed [ 509.681533][T12535] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2302'. [ 510.006619][T12229] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 510.746887][T12229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.790189][T12229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.820360][T12229] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 510.862816][T12229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.915727][T12229] usb 5-1: config 0 descriptor?? [ 511.005905][T12552] rxe_eth0 speed is unknown, defaulting to 1000 [ 511.406302][T12537] loop4: detected capacity change from 0 to 512 [ 511.459572][T12537] EXT4-fs (loop4): bad s_min_extra_isize: 1824 [ 511.499358][T12229] microsoft 0003:045E:009D.0005: unknown main item tag 0x2 [ 511.520585][T12229] microsoft 0003:045E:009D.0005: item fetching failed at offset 22/24 [ 511.557170][T12229] microsoft 0003:045E:009D.0005: parse failed [ 511.585702][T12229] microsoft: probe of 0003:045E:009D.0005 failed with error -22 [ 511.715439][T12229] usb 5-1: USB disconnect, device number 6 [ 511.838979][T12574] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2314'. [ 511.955531][T12576] loop1: detected capacity change from 0 to 1024 [ 512.413129][T12576] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,noblock_validity,nojournal_checksum,bsdgroups,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 513.669704][T12608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.807470][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'. [ 516.643444][T12659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 517.293820][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2339'. [ 517.514046][T12674] loop1: detected capacity change from 0 to 512 [ 517.546832][T12676] capability: warning: `syz.8.2343' uses deprecated v2 capabilities in a way that may be insecure [ 517.657550][T12674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 517.805304][T12674] EXT4-fs (loop1): 1 truncate cleaned up [ 517.828781][T12674] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 518.256744][T12705] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 519.019617][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 519.211706][T12719] loop1: detected capacity change from 0 to 1024 [ 519.397316][T12719] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 519.446555][T12719] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.576265][T12719] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.2354: lblock 3 mapped to illegal pblock 3 (length 3) [ 519.717574][T12719] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 519.762261][T12719] EXT4-fs (loop1): This should not happen!! Data will be lost [ 519.762261][T12719] [ 520.186524][T12731] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 520.970555][ T4304] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 521.040515][ T4304] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 521.093662][ T4304] EXT4-fs (loop1): This should not happen!! Data will be lost [ 521.093662][ T4304] [ 521.179935][T12762] fuse: Unknown parameter '0xffffffffffffffff00000000000000000006' [ 521.306648][T12766] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2365'. [ 522.506204][T12779] loop1: detected capacity change from 0 to 2048 [ 522.653250][T12779] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 523.098737][T12803] ip_tables: iptables: counters copy to user failed while replacing table [ 523.858090][T12808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.907728][T12812] fuse: Unknown parameter '0x000000000000000618446744073709551615' [ 523.966494][ T4298] Bluetooth: hci3: command 0x0406 tx timeout [ 524.016588][T12817] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2378'. [ 525.004730][T12834] loop1: detected capacity change from 0 to 512 [ 525.107681][T12834] EXT4-fs (loop1): Ignoring removed bh option [ 525.243107][T12834] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 525.370280][T12834] EXT4-fs (loop1): 1 truncate cleaned up [ 525.436732][T12834] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 525.796648][T12843] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 525.846650][T12232] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 526.277372][T12232] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 526.364685][T12232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.643314][T12232] usb 2-1: config 0 descriptor?? [ 526.693846][T12860] fuse: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 526.717791][T12232] cp210x 2-1:0.0: cp210x converter detected [ 526.886397][T12870] netlink: 304 bytes leftover after parsing attributes in process `syz.3.2395'. [ 527.776907][T12232] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: 2 [ 528.076510][T12232] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 528.084341][T12232] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 528.164414][T12232] usb 2-1: cp210x converter now attached to ttyUSB0 [ 528.233229][T12232] usb 2-1: USB disconnect, device number 4 [ 528.286975][T12232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 528.320565][T12232] cp210x 2-1:0.0: device disconnected [ 529.382419][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'. [ 529.836759][ T1110] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 530.403971][ T1110] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 530.424546][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.442483][ T1110] usb 2-1: Product: syz [ 530.447450][ T1110] usb 2-1: Manufacturer: syz [ 530.454922][ T1110] usb 2-1: SerialNumber: syz [ 530.490993][ T1110] usb 2-1: config 0 descriptor?? [ 530.547923][ T1110] ch341 2-1:0.0: ch341-uart converter detected [ 530.796991][ T1110] usb 2-1: short control message received (0 < 2) [ 530.825734][ T1110] usb 2-1: failed to receive control message: -5 [ 530.885736][ T1110] ch341-uart: probe of ttyUSB0 failed with error -5 [ 531.059080][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 531.131069][T12939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.631274][ T4269] usb 2-1: USB disconnect, device number 5 [ 533.655926][ T4269] ch341 2-1:0.0: device disconnected [ 534.339491][T13010] rxe_eth0 speed is unknown, defaulting to 1000 [ 534.418004][T13019] netlink: 'syz.0.2435': attribute type 4 has an invalid length. [ 534.555053][T13024] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2437'. [ 535.155782][T13049] loop1: detected capacity change from 0 to 512 [ 535.661255][T13049] EXT4-fs (loop1): orphan cleanup on readonly fs [ 535.833416][T13049] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 535.878304][T13061] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2449'. [ 536.100774][T13049] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 536.163190][T13049] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.2445: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 536.231932][T13049] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2445: couldn't read orphan inode 13 (err -117) [ 536.449109][T13049] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 536.468118][T13049] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 536.509876][T13049] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 536.943856][T13079] device-mapper: ioctl: Target type does not support messages [ 537.038124][T13049] EXT4-fs error (device loop1): ext4_lookup:1860: comm syz.1.2445: inode #15: comm syz.1.2445: iget: illegal inode # [ 537.279584][T13087] overlayfs: missing 'lowerdir' [ 537.515787][T13089] rxe_eth0 speed is unknown, defaulting to 1000 [ 538.601730][T13109] loop1: detected capacity change from 0 to 8192 [ 538.813101][T13127] netlink: 'syz.0.2466': attribute type 4 has an invalid length. [ 539.621886][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 539.743507][T13089] chnl_net:caif_netlink_parms(): no params data found [ 539.964561][T13089] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.002629][T13089] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.030275][T13089] device bridge_slave_0 entered promiscuous mode [ 540.155383][T13089] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.163282][T13089] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.171942][T13089] device bridge_slave_1 entered promiscuous mode [ 540.295693][T13089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.397466][T13089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.678590][T13089] team0: Port device team_slave_0 added [ 540.709737][T13089] team0: Port device team_slave_1 added [ 540.749604][T13178] netlink: 'syz.3.2479': attribute type 4 has an invalid length. [ 540.808165][T13089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.829694][T13089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.919751][T13089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.960122][T13189] rxe_eth0 speed is unknown, defaulting to 1000 [ 540.965633][T13089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.994016][T13089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.120373][T13197] loop1: detected capacity change from 0 to 512 [ 541.126967][T13089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.211343][T13197] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 541.314550][T13197] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 541.330106][T13089] device hsr_slave_0 entered promiscuous mode [ 541.365456][T13197] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2486: bg 0: block 248: padding at end of block bitmap is not set [ 541.385939][T13089] device hsr_slave_1 entered promiscuous mode [ 541.395876][T13197] Quota error (device loop1): write_blk: dquota write failed [ 541.412015][T13197] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 541.422264][T13197] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2486: Failed to acquire dquot type 1 [ 541.422407][T13089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.445471][T13197] EXT4-fs (loop1): 1 truncate cleaned up [ 541.452767][T13197] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 541.465059][T13089] Cannot create hsr debugfs directory [ 541.717196][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 542.621688][T13242] netlink: 'syz.3.2494': attribute type 4 has an invalid length. [ 543.859457][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 544.811737][T13089] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 545.039910][T13089] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 545.117389][T13089] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 545.186971][T13089] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 545.492286][ T9108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.611451][ T9108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.653183][T13089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.675186][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 545.683605][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 545.707305][T13089] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.714584][T13306] netlink: 'syz.1.2511': attribute type 4 has an invalid length. [ 545.733158][ T9108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.765516][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 545.774916][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 545.784662][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.791926][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.802078][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 545.813879][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 545.823072][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.830263][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.849677][ T9108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.872347][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 545.888012][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 545.901495][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 545.929799][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 545.944451][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 545.956525][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 546.002712][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.020763][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 546.042988][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.060774][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.074666][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.091918][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.105028][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.137709][T13089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 547.243066][T13333] fuse: Bad value for 'fd' [ 547.383098][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.391573][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.562584][T13089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.983652][T13359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 548.358109][ T4269] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 548.827102][ T4269] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.933588][ T4269] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 549.082200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.110268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.196874][ T4269] usb 2-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 549.211641][T13089] device veth0_vlan entered promiscuous mode [ 549.217897][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.225936][ T4269] usb 2-1: Product: syz [ 549.258578][T13381] netlink: 'syz.8.2527': attribute type 4 has an invalid length. [ 549.263003][ T4269] usb 2-1: Manufacturer: syz [ 549.276730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.284549][ T4269] usb 2-1: SerialNumber: syz [ 549.290794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.318414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.335692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.365491][T13089] device veth1_vlan entered promiscuous mode [ 550.125578][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 550.192039][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 550.241380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 550.263194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.286738][T13089] device veth0_macvtap entered promiscuous mode [ 550.335795][T13089] device veth1_macvtap entered promiscuous mode [ 550.382044][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.397720][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.432724][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.452279][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.464077][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.485003][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.510734][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.595025][ T4269] usb 2-1: USB disconnect, device number 6 [ 550.628085][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.638166][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.648889][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.660456][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.679660][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.693713][T13089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.705134][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.716242][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.761926][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.810457][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.852973][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.901335][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.941023][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.998717][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.057703][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.114912][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.124877][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.135473][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.168067][T13089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.189579][T13089] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.249796][T13089] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.286077][T13089] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.314721][T13089] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.343222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 551.380361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.401636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.421123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.431801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.440860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.455822][ T9108] device hsr_slave_0 left promiscuous mode [ 551.463232][ T9108] device hsr_slave_1 left promiscuous mode [ 551.471777][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.488169][ T9108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.505313][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.515668][ T9108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.530327][ T9108] device bridge_slave_1 left promiscuous mode [ 551.541415][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.556140][ T9108] device bridge_slave_0 left promiscuous mode [ 551.567679][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.589493][ T9108] device veth1_macvtap left promiscuous mode [ 551.595837][ T9108] device veth0_macvtap left promiscuous mode [ 551.609275][ T9108] device veth1_vlan left promiscuous mode [ 551.623022][ T9108] device veth0_vlan left promiscuous mode [ 551.821256][ T9108] team0 (unregistering): Port device team_slave_1 removed [ 551.841214][ T9108] team0 (unregistering): Port device team_slave_0 removed [ 551.856991][ T9108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.876924][ T9108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.956183][ T9108] bond0 (unregistering): Released all slaves [ 552.180911][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.204551][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.214719][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 552.265254][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.288907][T13439] netlink: 'syz.8.2541': attribute type 4 has an invalid length. [ 552.303939][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.332122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 552.357584][ T4298] Bluetooth: hci5: command 0x1001 tx timeout [ 553.681648][ T26] audit: type=1326 audit(1793466751.648:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.3.2551" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa46dc88559 code=0x0 [ 555.980078][T13506] loop6: detected capacity change from 0 to 1764 [ 556.469117][T12734] udevd[12734]: symlink '../../loop6' '/dev/disk/by-diskseq/413.tmp-b7:6' failed: Read-only file system [ 556.891672][T13502] loop1: detected capacity change from 0 to 8192 [ 556.936125][T12734] udevd[12734]: symlink '../../loop6' '/dev/disk/by-diskseq/413.tmp-b7:6' failed: Read-only file system [ 557.000546][T13519] loop6: detected capacity change from 0 to 128 [ 557.020286][T12734] udevd[12734]: symlink '../../loop6' '/dev/disk/by-diskseq/413.tmp-b7:6' failed: Read-only file system [ 557.060712][T13519] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 557.164768][T12734] udevd[12734]: symlink '../../loop6' '/dev/disk/by-diskseq/413.tmp-b7:6' failed: Read-only file system [ 557.263468][T12734] udevd[12734]: symlink '../../loop6' '/dev/disk/by-diskseq/416.tmp-b7:6' failed: Read-only file system [ 558.096754][ T4412] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 559.548051][T13550] loop1: detected capacity change from 0 to 1024 [ 559.691848][T13564] netlink: 'syz.6.2575': attribute type 4 has an invalid length. [ 559.843387][T10129] hfsplus: bad catalog entry type [ 559.867047][T10129] hfsplus: bad catalog entry type [ 559.922603][ T4412] hfsplus: b-tree write err: -5, ino 25 [ 559.935365][ T4412] hfsplus: b-tree write err: -5, ino 4 [ 559.955534][ T4412] hfsplus: b-tree write err: -5, ino 2 [ 559.970345][ T4412] hfsplus: b-tree write err: -5, ino 26 [ 560.187648][T10129] bridge0: port 3(syz_tun) entered disabled state [ 560.226717][T10129] device syz_tun left promiscuous mode [ 560.232391][T10129] bridge0: port 3(syz_tun) entered disabled state [ 560.918157][ T4196] Bluetooth: hci5: CSR: Local version failed (-110) [ 561.903321][T13602] rxe_eth0 speed is unknown, defaulting to 1000 [ 562.511576][T13622] netlink: 'syz.6.2599': attribute type 4 has an invalid length. [ 562.596560][T13602] chnl_net:caif_netlink_parms(): no params data found [ 562.673549][T13630] loop6: detected capacity change from 0 to 128 [ 562.732940][T13602] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.744873][T13602] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.758717][T13602] device bridge_slave_0 entered promiscuous mode [ 562.768200][T13602] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.775390][T13602] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.784250][T13602] device bridge_slave_1 entered promiscuous mode [ 562.813215][T13602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.825691][T13602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.846906][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.853260][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.872509][T13630] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 562.988518][T13602] team0: Port device team_slave_0 added [ 562.997063][T13602] team0: Port device team_slave_1 added [ 563.006727][T13640] rxe_eth0 speed is unknown, defaulting to 1000 [ 563.542718][T13602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.772408][T13602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.831696][T13602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.921494][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 563.932738][ T9] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 563.946564][T13602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.953972][T13602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.051505][T13602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.086837][T13651] loop6: detected capacity change from 0 to 8 [ 564.233315][T13602] device hsr_slave_0 entered promiscuous mode [ 564.262952][T13602] device hsr_slave_1 entered promiscuous mode [ 564.308461][T13602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.359531][T13602] Cannot create hsr debugfs directory [ 564.505500][T13658] ip_tables: iptables: counters copy to user failed while replacing table [ 565.259083][ T9108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.407083][ T9108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.575762][ T9108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.598558][T13672] rxe_eth0 speed is unknown, defaulting to 1000 [ 565.695189][ T9108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.087300][ T4298] Bluetooth: hci3: command 0x041b tx timeout [ 566.310752][T13602] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 566.360586][T13602] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 566.411781][T13602] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 566.452871][T13602] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 566.840675][T13602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.889041][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 566.917287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.931181][T13602] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.980647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 566.990737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 567.009754][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.016962][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.075993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 567.090753][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 567.110535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 567.131003][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.138197][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.161472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 567.172060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 567.276752][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 567.301009][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 567.329327][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 567.340747][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 567.350025][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 567.377300][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 567.396266][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 567.421686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.436937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.458204][T13602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.822133][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 567.838065][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 567.871658][T13602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.958899][ T9108] device hsr_slave_0 left promiscuous mode [ 567.972477][ T9108] device hsr_slave_1 left promiscuous mode [ 568.015199][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.034226][ T9108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.067446][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.088426][ T9108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.107053][ T4298] Bluetooth: hci3: command 0x040f tx timeout [ 568.119545][ T9108] device bridge_slave_1 left promiscuous mode [ 568.145728][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.198288][ T9108] device bridge_slave_0 left promiscuous mode [ 568.216596][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.255632][ T9108] device veth1_macvtap left promiscuous mode [ 568.275802][ T9108] device veth0_macvtap left promiscuous mode [ 568.284843][ T9108] device veth1_vlan left promiscuous mode [ 568.306586][ T9108] device veth0_vlan left promiscuous mode [ 568.767448][ T9108] team0 (unregistering): Port device team_slave_1 removed [ 568.794758][ T9108] team0 (unregistering): Port device team_slave_0 removed [ 568.824800][ T9108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.866947][ T9108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.032739][ T9108] bond0 (unregistering): Released all slaves [ 569.332485][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 569.347976][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 569.419575][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 569.428765][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 569.498304][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 569.525422][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 569.546072][T13602] device veth0_vlan entered promiscuous mode [ 569.591404][T13602] device veth1_vlan entered promiscuous mode [ 569.689815][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 569.702102][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 569.723088][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 569.757598][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 569.787552][T13602] device veth0_macvtap entered promiscuous mode [ 569.811241][T13602] device veth1_macvtap entered promiscuous mode [ 569.860103][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.882206][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.904992][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.932138][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.943114][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.954268][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.973276][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.996223][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.018159][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.042667][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.082042][T13602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.117259][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 570.125463][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 570.186436][T10489] Bluetooth: hci3: command 0x0419 tx timeout [ 570.193391][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 570.772858][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 571.118891][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.192940][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.216436][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.236368][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.257506][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.280793][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.291174][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.303152][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.313556][T13602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.324457][T13602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.349594][T13602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.373579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 571.397371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 571.429608][T13602] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.457033][T13602] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.496642][T13602] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.505422][T13602] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.739263][T13797] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2628'. [ 571.758738][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.777955][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.785870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 571.855014][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.870213][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.910266][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 572.053524][T13799] netlink: 'syz.0.2629': attribute type 4 has an invalid length. [ 572.250218][T13810] loop6: detected capacity change from 0 to 512 [ 572.352637][T13810] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 572.446697][T13810] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.578383][T13810] [ 572.580779][T13810] ====================================================== [ 572.587823][T13810] WARNING: possible circular locking dependency detected [ 572.594949][T13810] syzkaller #0 Not tainted [ 572.599397][T13810] ------------------------------------------------------ [ 572.606449][T13810] syz.6.2632/13810 is trying to acquire lock: [ 572.612545][T13810] ffff88805fd9ace8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 572.621565][T13810] [ 572.621565][T13810] but task is already holding lock: [ 572.628985][T13810] ffff88805fc62060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 572.638468][T13810] [ 572.638468][T13810] which lock already depends on the new lock. [ 572.638468][T13810] [ 572.648918][T13810] [ 572.648918][T13810] the existing dependency chain (in reverse order) is: [ 572.657985][T13810] [ 572.657985][T13810] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 572.665874][T13810] down_read+0x44/0x2e0 [ 572.670600][T13810] ext4_map_blocks+0x350/0x1a50 [ 572.676021][T13810] ext4_getblk+0x176/0x670 [ 572.681013][T13810] ext4_bread+0x26/0x180 [ 572.685946][T13810] ext4_quota_read+0x1ac/0x390 [ 572.691381][T13810] find_tree_dqentry+0x187/0xb30 [ 572.696989][T13810] find_tree_dqentry+0x3e8/0xb30 [ 572.702493][T13810] find_tree_dqentry+0x3e8/0xb30 [ 572.707988][T13810] find_tree_dqentry+0x3e8/0xb30 [ 572.713482][T13810] qtree_read_dquot+0x122/0x690 [ 572.718894][T13810] v2_read_dquot+0xc0/0x110 [ 572.723957][T13810] dquot_acquire+0x152/0x520 [ 572.729148][T13810] ext4_acquire_dquot+0x2e3/0x4a0 [ 572.734742][T13810] dqget+0x713/0xbb0 [ 572.739196][T13810] __dquot_initialize+0x324/0xd00 [ 572.744787][T13810] ext4_process_orphan+0x4c/0x2e0 [ 572.750476][T13810] ext4_orphan_cleanup+0xc96/0x14f0 [ 572.756238][T13810] ext4_fill_super+0x8c65/0x93f0 [ 572.761747][T13810] mount_bdev+0x28a/0x3c0 [ 572.766634][T13810] legacy_get_tree+0xe6/0x180 [ 572.771950][T13810] vfs_get_tree+0x88/0x270 [ 572.776941][T13810] do_new_mount+0x247/0xa50 [ 572.782004][T13810] __se_sys_mount+0x2e3/0x3d0 [ 572.787247][T13810] do_syscall_64+0x4c/0xa0 [ 572.792239][T13810] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 572.798689][T13810] [ 572.798689][T13810] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 572.806813][T13810] down_read+0x44/0x2e0 [ 572.811578][T13810] v2_read_dquot+0x4a/0x110 [ 572.816646][T13810] dquot_acquire+0x152/0x520 [ 572.821802][T13810] ext4_acquire_dquot+0x2e3/0x4a0 [ 572.827398][T13810] dqget+0x713/0xbb0 [ 572.831855][T13810] __dquot_initialize+0x3a9/0xd00 [ 572.837453][T13810] ext4_mkdir+0x198/0xc90 [ 572.842440][T13810] vfs_mkdir+0x386/0x570 [ 572.847321][T13810] do_mkdirat+0x1dd/0x5c0 [ 572.852220][T13810] __x64_sys_mkdirat+0x85/0x90 [ 572.857552][T13810] do_syscall_64+0x4c/0xa0 [ 572.862523][T13810] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 572.869010][T13810] [ 572.869010][T13810] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 572.876707][T13810] __lock_acquire+0x38f7/0x7d40 [ 572.882146][T13810] lock_acquire+0x19f/0x400 [ 572.887219][T13810] __mutex_lock_common+0x1e5/0x2400 [ 572.893018][T13810] mutex_lock_nested+0x17/0x20 [ 572.898346][T13810] dquot_commit+0x5a/0x410 [ 572.903324][T13810] ext4_write_dquot+0x1f0/0x360 [ 572.908738][T13810] mark_all_dquot_dirty+0xf9/0x400 [ 572.914459][T13810] __dquot_free_space+0x7c3/0xb80 [ 572.920050][T13810] ext4_free_blocks+0x1b1b/0x24c0 [ 572.925639][T13810] ext4_ext_remove_space+0x2106/0x41a0 [ 572.931675][T13810] ext4_ext_truncate+0x182/0x230 [ 572.937199][T13810] ext4_truncate+0xa41/0x1190 [ 572.942437][T13810] ext4_setattr+0x117c/0x1b70 [ 572.947711][T13810] notify_change+0xbc6/0xee0 [ 572.952865][T13810] do_truncate+0x1ac/0x240 [ 572.957927][T13810] path_openat+0x293b/0x2fb0 [ 572.963105][T13810] do_filp_open+0x1df/0x400 [ 572.968181][T13810] do_sys_openat2+0x14b/0x500 [ 572.973424][T13810] __x64_sys_creat+0x8c/0xb0 [ 572.978588][T13810] do_syscall_64+0x4c/0xa0 [ 572.983565][T13810] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 572.990114][T13810] [ 572.990114][T13810] other info that might help us debug this: [ 572.990114][T13810] [ 573.000385][T13810] Chain exists of: [ 573.000385][T13810] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 573.000385][T13810] [ 573.014088][T13810] Possible unsafe locking scenario: [ 573.014088][T13810] [ 573.021581][T13810] CPU0 CPU1 [ 573.027001][T13810] ---- ---- [ 573.032414][T13810] lock(&ei->i_data_sem/2); [ 573.037081][T13810] lock(&s->s_dquot.dqio_sem); [ 573.044495][T13810] lock(&ei->i_data_sem/2); [ 573.051658][T13810] lock(&dquot->dq_lock); [ 573.056119][T13810] [ 573.056119][T13810] *** DEADLOCK *** [ 573.056119][T13810] [ 573.064293][T13810] 5 locks held by syz.6.2632/13810: [ 573.069527][T13810] #0: ffff8880250a6460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 573.078756][T13810] #1: ffff88805fc621d8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x198/0x240 [ 573.089100][T13810] #2: ffff88805fc62378 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xf40/0x1b70 [ 573.099360][T13810] #3: ffff88805fc62060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 573.109190][T13810] #4: ffffffff8d241738 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 573.118301][T13810] [ 573.118301][T13810] stack backtrace: [ 573.124219][T13810] CPU: 1 PID: 13810 Comm: syz.6.2632 Not tainted syzkaller #0 [ 573.131719][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 573.141816][T13810] Call Trace: [ 573.145143][T13810] [ 573.148110][T13810] dump_stack_lvl+0x188/0x250 [ 573.152842][T13810] ? load_image+0x410/0x410 [ 573.157399][T13810] ? show_regs_print_info+0x20/0x20 [ 573.162647][T13810] ? print_circular_bug+0x12b/0x1a0 [ 573.167900][T13810] check_noncircular+0x2f8/0x400 [ 573.172889][T13810] ? print_deadlock_bug+0x5d0/0x5d0 [ 573.178135][T13810] ? lockdep_lock+0xf1/0x1f0 [ 573.182797][T13810] ? mark_lock+0x94/0x320 [ 573.187180][T13810] ? _find_first_zero_bit+0xd1/0xf0 [ 573.192478][T13810] __lock_acquire+0x38f7/0x7d40 [ 573.197402][T13810] ? hlock_conflict+0x59/0x1f0 [ 573.202343][T13810] ? check_path+0x40/0x40 [ 573.206720][T13810] ? verify_lock_unused+0x140/0x140 [ 573.211971][T13810] ? check_noncircular+0x186/0x400 [ 573.217141][T13810] ? print_deadlock_bug+0x5d0/0x5d0 [ 573.222431][T13810] ? lockdep_lock+0xf1/0x1f0 [ 573.227074][T13810] ? lockdep_unlock+0x143/0x2e0 [ 573.231982][T13810] lock_acquire+0x19f/0x400 [ 573.236531][T13810] ? dquot_commit+0x5a/0x410 [ 573.241176][T13810] ? __might_sleep+0xf0/0xf0 [ 573.245937][T13810] ? read_lock_is_recursive+0x10/0x10 [ 573.251379][T13810] __mutex_lock_common+0x1e5/0x2400 [ 573.256663][T13810] ? dquot_commit+0x5a/0x410 [ 573.261316][T13810] ? dquot_commit+0x5a/0x410 [ 573.265966][T13810] ? __might_sleep+0xf0/0xf0 [ 573.270609][T13810] ? mutex_lock_io_nested+0x60/0x60 [ 573.275871][T13810] mutex_lock_nested+0x17/0x20 [ 573.280685][T13810] dquot_commit+0x5a/0x410 [ 573.285189][T13810] ext4_write_dquot+0x1f0/0x360 [ 573.290098][T13810] mark_all_dquot_dirty+0xf9/0x400 [ 573.295283][T13810] __dquot_free_space+0x7c3/0xb80 [ 573.300377][T13810] ext4_free_blocks+0x1b1b/0x24c0 [ 573.305489][T13810] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 573.312965][T13810] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 573.319095][T13810] ? ext4_inode_journal_mode+0x189/0x460 [ 573.324779][T13810] ? ext4_ext_remove_space+0x2001/0x41a0 [ 573.330480][T13810] ext4_ext_remove_space+0x2106/0x41a0 [ 573.336014][T13810] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 573.341912][T13810] ? ext4_es_remove_extent+0x29f/0x430 [ 573.347425][T13810] ext4_ext_truncate+0x182/0x230 [ 573.352424][T13810] ext4_truncate+0xa41/0x1190 [ 573.357157][T13810] ? up_write+0x1b6/0x410 [ 573.361538][T13810] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 573.367235][T13810] ext4_setattr+0x117c/0x1b70 [ 573.371979][T13810] ? ext4_write_inode+0x5e0/0x5e0 [ 573.377063][T13810] notify_change+0xbc6/0xee0 [ 573.381718][T13810] do_truncate+0x1ac/0x240 [ 573.386192][T13810] ? rcu_lock_release+0x20/0x20 [ 573.391139][T13810] ? ima_bprm_check+0x200/0x200 [ 573.396149][T13810] ? vfs_open+0x2b/0x80 [ 573.400368][T13810] ? bpf_lsm_path_truncate+0x5/0x10 [ 573.405621][T13810] path_openat+0x293b/0x2fb0 [ 573.410285][T13810] ? do_filp_open+0x400/0x400 [ 573.415032][T13810] do_filp_open+0x1df/0x400 [ 573.419599][T13810] ? vfs_tmpfile+0x300/0x300 [ 573.424248][T13810] ? _raw_spin_unlock+0x24/0x40 [ 573.429150][T13810] ? alloc_fd+0x59e/0x650 [ 573.433564][T13810] do_sys_openat2+0x14b/0x500 [ 573.438297][T13810] ? do_sys_open+0xe0/0xe0 [ 573.442761][T13810] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 573.448807][T13810] ? lock_chain_count+0x20/0x20 [ 573.453713][T13810] __x64_sys_creat+0x8c/0xb0 [ 573.458349][T13810] do_syscall_64+0x4c/0xa0 [ 573.462820][T13810] ? clear_bhb_loop+0x30/0x80 [ 573.467539][T13810] ? clear_bhb_loop+0x30/0x80 [ 573.472280][T13810] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 573.478234][T13810] RIP: 0033:0x7fa306538559 [ 573.482703][T13810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.502354][T13810] RSP: 002b:00007fa30478f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 573.510823][T13810] RAX: ffffffffffffffda RBX: 00007fa3067befa0 RCX: 00007fa306538559 [ 573.518845][T13810] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000006c0 [ 573.526900][T13810] RBP: 00007fa3065cfb50 R08: 0000000000000000 R09: 0000000000000000 [ 573.534912][T13810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.542927][T13810] R13: 00007fa3067bf038 R14: 00007fa3067befa0 R15: 00007fff25ca2788 [ 573.550951][T13810]