last executing test programs: 9m18.826760092s ago: executing program 2 (id=206): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85) 9m18.348268698s ago: executing program 4 (id=210): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x23}}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x15, 0x6b5, 0x7, 0x80, 0x2000, r5, 0x64bd4385, '\x00', r6, r5, 0x3, 0x4, 0x4}, 0x50) renameat2(r5, &(0x7f00000001c0)='./file1\x00', r5, &(0x7f0000000280)='./file1\x00', 0x6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) 9m16.539739987s ago: executing program 2 (id=213): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_pidfd_open(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000004600), 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) dup(r0) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f0000000700)='mnt/encrypted_dir\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) lstat(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0) 9m16.32371154s ago: executing program 4 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000002cc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf0a0f"], 0x24}, 0x1, 0x0, 0x0, 0x40003}, 0x4004) 9m14.594695019s ago: executing program 4 (id=217): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x101) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 9m14.320441952s ago: executing program 2 (id=220): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x8010}) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37af}, 0x50) 9m14.088415214s ago: executing program 4 (id=221): r0 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) unshare(0x40000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002180)={'raw\x00', 0x2, [{}, {}]}, 0x48) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) 9m12.883865027s ago: executing program 2 (id=223): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syslog(0x3, &(0x7f0000000440)=""/246, 0xf6) 9m11.153063446s ago: executing program 2 (id=226): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x1801, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x2141) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000003b80)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x40}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRES64=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYRES64=r4, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 9m11.112382486s ago: executing program 4 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 9m9.149916088s ago: executing program 2 (id=228): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000240)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@dax_never}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000025c0)={[0xd]}, 0x8) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) syz_clone3(0x0, 0x0) r7 = syz_open_pts(r6, 0x900) dup3(r7, r6, 0x80000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x1c84, 0x100) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) 9m6.567769187s ago: executing program 4 (id=233): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) sync() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) syz_clone3(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000026c0)) fstat(0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) sync() mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000b43000000300000000000100", @ANYRES32, @ANYBLOB="24d600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000000000000000000000000000000000000d0b295191642e59191cfa052eac6f775cf371bd1cb14fdb31b7f1888712601e8d83d5ec41536dd66644a6b22c299a0019390ac327e8ad169d34f52217de97aa4402e5c8895173dd566e7086c81b9a0fa21a18b243b19e722ca9db4cfdd57f981634b29642497647aecb69220f8b7", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001340)={r1, 0x0, &(0x7f0000000340), 0x4}, 0x20) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)="08001efbb07d496e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4) 8m50.874516418s ago: executing program 32 (id=228): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000240)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@dax_never}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000025c0)={[0xd]}, 0x8) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) syz_clone3(0x0, 0x0) r7 = syz_open_pts(r6, 0x900) dup3(r7, r6, 0x80000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x1c84, 0x100) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) 8m50.717281349s ago: executing program 33 (id=233): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) sync() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) syz_clone3(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000026c0)) fstat(0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) sync() mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000b43000000300000000000100", @ANYRES32, @ANYBLOB="24d600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000000000000000000000000000000000000d0b295191642e59191cfa052eac6f775cf371bd1cb14fdb31b7f1888712601e8d83d5ec41536dd66644a6b22c299a0019390ac327e8ad169d34f52217de97aa4402e5c8895173dd566e7086c81b9a0fa21a18b243b19e722ca9db4cfdd57f981634b29642497647aecb69220f8b7", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001340)={r1, 0x0, &(0x7f0000000340), 0x4}, 0x20) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)="08001efbb07d496e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4) 6m18.529626089s ago: executing program 5 (id=542): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000040000000400000026bf000000000000", @ANYRES32, @ANYBLOB="000017e9e956eb00000000000000008000000000", @ANYRES32, @ANYBLOB="0000000304"], 0x50) 6m18.136389273s ago: executing program 5 (id=546): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x681c2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x9, 0x0) brk(0x600000000000) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r0, 0x0, 0x578410e9) 6m16.091937543s ago: executing program 5 (id=551): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(0x0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") getxattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) 6m12.592873699s ago: executing program 5 (id=556): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000040000000400000026bf000000000000", @ANYRES32, @ANYBLOB="000017e9e956eb00000000000000008000000000", @ANYRES32, @ANYBLOB="0000000304"], 0x50) 6m11.44496116s ago: executing program 5 (id=559): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_remount}, {@nomblk_io_submit}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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") chdir(&(0x7f0000000180)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x40000000) 6m10.036527204s ago: executing program 5 (id=563): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) 5m54.226948445s ago: executing program 34 (id=563): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) 4m37.864392668s ago: executing program 7 (id=777): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m36.59106465s ago: executing program 7 (id=781): syz_usb_connect$midi(0x5, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000404436218040000102030109023d00010118980409040000020103000609058eec1f000fd702052501012709058c02"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) 4m32.324512044s ago: executing program 7 (id=789): socket$packet(0x11, 0x3, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 4m31.829533359s ago: executing program 7 (id=791): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x401) io_setup(0x2e, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m30.558721922s ago: executing program 7 (id=795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000", @ANYRES32=r2], 0x4c}}, 0x0) 4m25.472399743s ago: executing program 7 (id=804): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x197, &(0x7f0000000440)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x8402, 0x37) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000140)="c90b32", 0x3, 0x36184d3a}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) 4m24.526841392s ago: executing program 35 (id=804): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r3}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x197, &(0x7f0000000440)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x8402, 0x37) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000140)="c90b32", 0x3, 0x36184d3a}]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=@ipv6_newaddrlabel={0x38, 0x48, 0x321, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) 3m11.339291843s ago: executing program 3 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 3m10.311925634s ago: executing program 3 (id=1015): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000180)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x9080) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x90004) syz_emit_vhci(0x0, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000140)=""/4101, 0xffffffffffffffd6) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x0) 3m7.204375525s ago: executing program 3 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000180)='S]\xfc\x00', &(0x7f0000000580)="60812c901824a654fbe406e9617cf1c2b7684838c478f833af6e29b459bd512c22794ef197c6f67b72dfefec4bc39662751ce195fc45de58beaef45d7fb5c854de95df2192e2b8c7e2e2bd1e9e45c4c337b01d30b2f6b0bf3e6646cd8ce33700bc", 0x61) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0xffffffffffffffff, 0x0) recvfrom$inet_nvme(r4, &(0x7f00000004c0)=""/171, 0xab, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m6.108965376s ago: executing program 3 (id=1023): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d616373656300001400028005000f0000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 3m5.78174006s ago: executing program 3 (id=1025): bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000040000000400000026bf00", @ANYRES32, @ANYBLOB="000017e9e956eb00000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000304"], 0x50) 3m5.516575772s ago: executing program 3 (id=1026): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x455e, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m50.364974475s ago: executing program 36 (id=1026): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x455e, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 11.681122741s ago: executing program 6 (id=1444): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, 0x0, 0x0) 10.523868473s ago: executing program 1 (id=1447): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x32, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_CODEL_TARGET={0xfffffffffffffff1, 0x1, 0xb3}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x68}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv2(r1, &(0x7f0000002500)=[{0x0}], 0x1, 0x0, 0x0, 0x1c) syz_genetlink_get_family_id$nfc(0x0, r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 10.128071907s ago: executing program 1 (id=1451): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000001c0), 0x4) 9.989242949s ago: executing program 6 (id=1452): syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='syscall\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0x0, &(0x7f00000006c0)) socket(0x10, 0x3, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711819000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000000)) bind$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.86040358s ago: executing program 9 (id=1453): ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f046}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086dd", 0x18}, {&(0x7f00000022c0)="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", 0x4db}], 0x2}, 0x0) 8.623674013s ago: executing program 0 (id=1454): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x17}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000240)={0x0, 0x10}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0xf, 0x5, 0xfffffff5, 0x3, 0x7, 0x200, 0x6, 0x1, 0x5c, 0x8, 0x2, 0x6}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x400}, &(0x7f0000000440)={0x20, 0x83, 0x2}, 0x0, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) 8.590178653s ago: executing program 1 (id=1455): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x200000, 0x9, "00000000020000000900", "00004702", "03000800", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff"]}) 8.478796234s ago: executing program 6 (id=1456): socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x80242, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 8.308807385s ago: executing program 9 (id=1457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$eJzs20tu00Acx/GfU8epy/u1YQMSSLAhKWmk0B09ABdgV6VuVeFSRNm0QqorJO7BHRASO24CSxYUwQmM/EriEjuOTR7A9yOl+Wfk38wo6riTKiMA/63L4U9Dhuph5fv+8W1JT59IMnOj1kwmCGBqfCNa9Fms6On7h3Tzcn4KwN9h6cfo9kbmAv+YFLX+XcCawsQATNnpxlK4D/hkSJ9/vu59ix/1gvuH042atKQvphe9TvKWtFwof2KEzzfNQTZ4NJTuwPAy9i/vovw9pfN20fnH46+cya+MCwYfmSRbJ7Xw5f076fw5SeclXZB0UdKl+LPWFUlXkx7k9cffOjP+jYLzB6oIfvuaqZZCyzadb+Zc0MjPB6tne9d1VicadaAe5x9OkLk7VFtxvl1y/CS/VjLfiPPN3r67lXnV45K9A/lqUseokC+d3e/2yyrr3yyx/gFEDg6Pnm26brLdd52Xccv4opZ/jV20n2qFPdGcM4pkz2NoJnMeVRzPY9DRhe9Lf6Cf5E0NWkzf0/jU24mGCG79QXErHmcR3rrihb0Y08guBveI92+S1QHgX9J6tfeidXB49GB3b3PH2XGetzvrjzpr7U53vbXddZ3VVpXdOYBFNvijLxX5n3n+V4IAAAAAAAAAAAAAAMA8XJN0fd6TAAAAADAT5U4IGfFRoKTla0+/nZzzhr5ZPIRDRAAAAAAAAAAAAAAAAAAAAEBpvwIAAP//cZUsSg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv2(r1, &(0x7f0000002500)=[{0x0}], 0x1, 0x0, 0x0, 0x1c) syz_genetlink_get_family_id$nfc(0x0, r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 7.365327145s ago: executing program 1 (id=1458): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) listen(r3, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x34, &(0x7f00000001c0)=0x200, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/221) 7.110605257s ago: executing program 6 (id=1459): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 6.681660952s ago: executing program 8 (id=1460): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$eJzs20tu00Acx/GfU8epy/u1YQMSSLAhKWmk0B09ABdgV6VuVeFSRNm0QqorJO7BHRASO24CSxYUwQmM/EriEjuOTR7A9yOl+Wfk38wo6riTKiMA/63L4U9Dhuph5fv+8W1JT59IMnOj1kwmCGBqfCNa9Fms6On7h3Tzcn4KwN9h6cfo9kbmAv+YFLX+XcCawsQATNnpxlK4D/hkSJ9/vu59ix/1gvuH042atKQvphe9TvKWtFwof2KEzzfNQTZ4NJTuwPAy9i/vovw9pfN20fnH46+cya+MCwYfmSRbJ7Xw5f076fw5SeclXZB0UdKl+LPWFUlXkx7k9cffOjP+jYLzB6oIfvuaqZZCyzadb+Zc0MjPB6tne9d1VicadaAe5x9OkLk7VFtxvl1y/CS/VjLfiPPN3r67lXnV45K9A/lqUseokC+d3e/2yyrr3yyx/gFEDg6Pnm26brLdd52Xccv4opZ/jV20n2qFPdGcM4pkz2NoJnMeVRzPY9DRhe9Lf6Cf5E0NWkzf0/jU24mGCG79QXErHmcR3rrihb0Y08guBveI92+S1QHgX9J6tfeidXB49GB3b3PH2XGetzvrjzpr7U53vbXddZ3VVpXdOYBFNvijLxX5n3n+V4IAAAAAAAAAAAAAAMA8XJN0fd6TAAAAADAT5U4IGfFRoKTla0+/nZzzhr5ZPIRDRAAAAAAAAAAAAAAAAAAAAEBpvwIAAP//cZUsSg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r0, 0x1000, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') 6.678682012s ago: executing program 9 (id=1461): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000080)=0x2b) 5.85524062s ago: executing program 9 (id=1462): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0xffff, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x1, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x0, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x3ff, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 5.590221113s ago: executing program 8 (id=1463): r0 = socket$inet6_udp(0xa, 0x2, 0x0) open(0x0, 0x803c1, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000040000000400000026bf000000000000", @ANYRES32, @ANYBLOB="000017e9e956eb00000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000030400"], 0x50) setsockopt(r0, 0x0, 0x7, &(0x7f0000000100)="e409709543a30f1c32b06062ddad1738aae88104a3645e8d93e21c08f2f565dcc1312768259978a4e853e4e608d4ffa967a5b6b85dc1b49bf5ffa7022c10531dfa8d1013b38282c8d40396b78d30d02b5deb55cb94b391aef0ec0cd48b3f71e855c47088097edb3a83e16326d5ecf148ad5e967d517140a2785b6f474a31752480428266df4f99b9b400f370c841771a", 0x90) 5.363163125s ago: executing program 9 (id=1464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$eJzs20tu00Acx/GfU8epy/u1YQMSSLAhKWmk0B09ABdgV6VuVeFSRNm0QqorJO7BHRASO24CSxYUwQmM/EriEjuOTR7A9yOl+Wfk38wo6riTKiMA/63L4U9Dhuph5fv+8W1JT59IMnOj1kwmCGBqfCNa9Fms6On7h3Tzcn4KwN9h6cfo9kbmAv+YFLX+XcCawsQATNnpxlK4D/hkSJ9/vu59ix/1gvuH042atKQvphe9TvKWtFwof2KEzzfNQTZ4NJTuwPAy9i/vovw9pfN20fnH46+cya+MCwYfmSRbJ7Xw5f076fw5SeclXZB0UdKl+LPWFUlXkx7k9cffOjP+jYLzB6oIfvuaqZZCyzadb+Zc0MjPB6tne9d1VicadaAe5x9OkLk7VFtxvl1y/CS/VjLfiPPN3r67lXnV45K9A/lqUseokC+d3e/2yyrr3yyx/gFEDg6Pnm26brLdd52Xccv4opZ/jV20n2qFPdGcM4pkz2NoJnMeVRzPY9DRhe9Lf6Cf5E0NWkzf0/jU24mGCG79QXErHmcR3rrihb0Y08guBveI92+S1QHgX9J6tfeidXB49GB3b3PH2XGetzvrjzpr7U53vbXddZ3VVpXdOYBFNvijLxX5n3n+V4IAAAAAAAAAAAAAAMA8XJN0fd6TAAAAADAT5U4IGfFRoKTla0+/nZzzhr5ZPIRDRAAAAAAAAAAAAAAAAAAAAEBpvwIAAP//cZUsSg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv2(r1, &(0x7f0000002500)=[{0x0}], 0x1, 0x0, 0x0, 0x1c) syz_genetlink_get_family_id$nfc(0x0, r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 4.320407046s ago: executing program 8 (id=1465): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000001c0), 0x4) 3.641280802s ago: executing program 8 (id=1466): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'ovf\x00', 0x1, 0x9d3f, 0x6a}, 0x2c) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) sendmmsg$inet(r5, 0x0, 0x0, 0x6ef8eb021116b2d8) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, 0x0, 0x5) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) write(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@tipc=@name, &(0x7f0000000000)=0x80, 0x40000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) 3.635408223s ago: executing program 9 (id=1467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 3.298228926s ago: executing program 0 (id=1468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000031c00048018000180080001006c6f67000c000280070002402efa00000900010073797a30000000000900020073797a320000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) epoll_create1(0x80000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.751984862s ago: executing program 1 (id=1469): socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x80242, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 2.483546275s ago: executing program 0 (id=1470): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x80, @remote, 0xb}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000000)) 2.293660666s ago: executing program 8 (id=1471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$eJzs20tu00Acx/GfU8epy/u1YQMSSLAhKWmk0B09ABdgV6VuVeFSRNm0QqorJO7BHRASO24CSxYUwQmM/EriEjuOTR7A9yOl+Wfk38wo6riTKiMA/63L4U9Dhuph5fv+8W1JT59IMnOj1kwmCGBqfCNa9Fms6On7h3Tzcn4KwN9h6cfo9kbmAv+YFLX+XcCawsQATNnpxlK4D/hkSJ9/vu59ix/1gvuH042atKQvphe9TvKWtFwof2KEzzfNQTZ4NJTuwPAy9i/vovw9pfN20fnH46+cya+MCwYfmSRbJ7Xw5f076fw5SeclXZB0UdKl+LPWFUlXkx7k9cffOjP+jYLzB6oIfvuaqZZCyzadb+Zc0MjPB6tne9d1VicadaAe5x9OkLk7VFtxvl1y/CS/VjLfiPPN3r67lXnV45K9A/lqUseokC+d3e/2yyrr3yyx/gFEDg6Pnm26brLdd52Xccv4opZ/jV20n2qFPdGcM4pkz2NoJnMeVRzPY9DRhe9Lf6Cf5E0NWkzf0/jU24mGCG79QXErHmcR3rrihb0Y08guBveI92+S1QHgX9J6tfeidXB49GB3b3PH2XGetzvrjzpr7U53vbXddZ3VVpXdOYBFNvijLxX5n3n+V4IAAAAAAAAAAAAAAMA8XJN0fd6TAAAAADAT5U4IGfFRoKTla0+/nZzzhr5ZPIRDRAAAAAAAAAAAAAAAAAAAAEBpvwIAAP//cZUsSg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r3, 0x1000, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) preadv2(r1, &(0x7f0000002500)=[{0x0}], 0x1, 0x0, 0x0, 0x1c) syz_genetlink_get_family_id$nfc(0x0, r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 1.593376263s ago: executing program 1 (id=1472): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.341843456s ago: executing program 6 (id=1473): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100), 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, 0x0, 0x0) 477.337024ms ago: executing program 8 (id=1474): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, 0x0, 0x40890) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2042, 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x0, 0x4, 0x1000000000000}) 452.706955ms ago: executing program 0 (id=1475): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x800810, &(0x7f00000000c0), 0xff, 0x23f, &(0x7f0000000540)="$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") syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x500, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x7, 0x8}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000a50000/0x4000)=nil, 0x4000, &(0x7f00000007c0)='}\xcf-^:%\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r3, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 0s ago: executing program 6 (id=1476): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002a40)={[{@dmask={'dmask', 0x3d, 0x716}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_remount}, {@gid}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0xd}}, {@namecase}, {@uid={'uid', 0x3d, 0xee01}}], [{@obj_type={'obj_type', 0x3d, 'iocharset'}}, {@smackfsroot}, {@smackfsfloor={'smackfsfloor', 0x3d, 'm\x85\xbdHXI\xa6'}}]}, 0x1, 0x153b, &(0x7f0000000340)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x16cc89b4, 0x200, 0x80, 0x10, 0x80000000, 0x4, 0x2, 0xffff6576, 0xd6a6, 0x9, 0x6, 0x9, 0x5, 0x1d, 0x3, 0x81, 0x7, 0x8, 0x8, 0x3f, 0x7, 0xfffffff7, 0x7fffffff, 0x1, 0x10001, 0xfffffff6, 0x5, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0xb, 0x7, 0x0, 0x9bc100, 0x7, 0x999, 0x6, 0x4, 0xfe, 0x3, 0x8c1, 0xffff, 0x1, 0x9, 0x7fffffff, 0x2, 0x8, 0x4, 0x10000, 0x200, 0xe, 0x1, 0x0, 0x40, 0x7, 0xa5d8, 0x4, 0x6, 0x7000000, 0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x9, 0x4, 0x80, 0x8, 0x10001, 0x6, 0x8, 0x200, 0x0, 0x7, 0x9, 0xffffffff, 0x100, 0x5, 0xff6, 0x35, 0x53, 0x7fffffff, 0x80000000, 0x200, 0x480000, 0x4, 0xfff, 0x6fd, 0x4, 0x3d4a3d97, 0xd4, 0x56, 0x7, 0x392a, 0x2, 0x2, 0x7, 0xe6, 0x7, 0x6, 0x8, 0xffff1362, 0x7, 0xe47a, 0x6, 0x6, 0x5, 0x9000000, 0x3, 0xc7, 0x708, 0x3, 0x0, 0x10, 0x9, 0x2, 0xd0, 0xffd, 0xf4, 0x432, 0x1ff, 0x401, 0x5, 0x97b2, 0x0, 0x1, 0x7, 0x6fa0, 0x1, 0xdc, 0x10001, 0x9, 0x6, 0x1cd7, 0x6, 0xfffffffd, 0x1, 0x1, 0x9, 0xc, 0x1, 0x10, 0x747, 0x2, 0xffffff25, 0x7, 0x2, 0x97, 0x3, 0x7de8, 0x2, 0x6, 0x5, 0x3, 0x10000, 0x0, 0xf, 0x101, 0x2, 0x200, 0x4, 0x1, 0x3, 0x3, 0x4, 0x1c000000, 0x9, 0x200, 0x3, 0xc, 0xb, 0x9, 0x8000, 0x101, 0x8, 0x0, 0x2, 0x7, 0x6ac, 0x5, 0x1, 0x8, 0x101, 0x1, 0x65, 0xfffffff6, 0x0, 0x9, 0x401, 0x0, 0x3, 0x3744, 0x28, 0x2, 0x7, 0xfff, 0x0, 0x563d, 0x7, 0x8, 0x6, 0xb6, 0x8, 0x6, 0x4d, 0x7fff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x4, 0x0, 0x8, 0xd, 0xe, 0x2, 0x4, 0x6, 0x4, 0x0, 0x401, 0x2, 0x5, 0xfff, 0x96b4, 0x2, 0x92ed36b9, 0x8000, 0x40, 0x4, 0x9, 0x9, 0x0, 0x0, 0xf4, 0x5, 0x0, 0x7, 0x7, 0x2, 0x9f14, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x2c, 0x0, [{0xeeee8000, 0x76, &(0x7f0000000180)=""/127}]}) kernel console output (not intermixed with test programs): 73][ T6452] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 318.253843][ T6452] EXT4-fs (loop1): Remounting filesystem read-only [ 318.410176][ T6468] tipc: Enabled bearer , priority 0 [ 318.448570][ T6468] device syzkaller0 entered promiscuous mode [ 319.350970][ T6474] tipc: Resetting bearer [ 319.380251][ T6475] IPv6: Can't replace route, no match found [ 319.422424][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 319.442779][ T6467] tipc: Resetting bearer [ 319.516034][ T6467] tipc: Disabling bearer [ 319.613823][ T4261] tipc: Node number set to 543679013 [ 320.811369][ T6502] overlayfs: './file0' not a directory [ 320.828434][ T6502] overlayfs: './file0' not a directory [ 321.805954][ T6506] loop6: detected capacity change from 0 to 256 [ 321.873664][ T6506] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 321.891778][ T6506] FAT-fs (loop6): Filesystem has been set read-only [ 321.959650][ T6508] loop0: detected capacity change from 0 to 512 [ 322.043047][ T6508] /dev/loop0: Can't open blockdev [ 323.141871][ T6520] loop5: detected capacity change from 0 to 2048 [ 323.160858][ T6508] loop0: detected capacity change from 0 to 1024 [ 323.259909][ T6508] EXT4-fs: Ignoring removed oldalloc option [ 323.368137][ T6520] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 323.430742][ T6520] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.521171][ T6508] EXT4-fs: Ignoring removed bh option [ 323.589707][ T6508] /dev/loop0: Can't open blockdev [ 324.379968][ T6536] loop6: detected capacity change from 0 to 1024 [ 324.501329][ T6536] EXT4-fs: Ignoring removed bh option [ 324.778684][ T6536] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 325.686277][ T5195] EXT4-fs (loop5): unmounting filesystem. [ 325.800476][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 325.952342][ T6559] overlayfs: failed to clone lowerpath [ 326.074590][ T14] usb 7-1: Using ep0 maxpacket: 32 [ 326.088697][ T6566] overlayfs: './file0' not a directory [ 326.149863][ T6567] overlayfs: './file0' not a directory [ 326.877851][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.889809][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 326.901491][ T14] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 326.910686][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.937125][ T14] usb 7-1: config 0 descriptor?? [ 326.967285][ T6536] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 326.997462][ T14] hub 7-1:0.0: USB hub found [ 327.891384][ T4261] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 327.955284][ T14] hub 7-1:0.0: 1 port detected [ 327.980618][ T14] hub 7-1:0.0: config failed, can't get hub status (err -5) [ 328.071402][ T14] usbhid 7-1:0.0: can't add hid device: -71 [ 328.078007][ T14] usbhid: probe of 7-1:0.0 failed with error -71 [ 328.171732][ T6582] loop5: detected capacity change from 0 to 512 [ 328.172968][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 328.210659][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 328.224773][ T4261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 329.013015][ T6582] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 329.174268][ T4261] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 329.190443][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.200691][ T4261] usb 2-1: Product: syz [ 329.204894][ T4261] usb 2-1: Manufacturer: syz [ 329.218702][ T4261] usb 2-1: SerialNumber: syz [ 329.536647][ T4261] usb 2-1: unit 4 not found! [ 329.547739][ T6582] EXT4-fs (loop5): 1 truncate cleaned up [ 329.562161][ T6582] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 329.734808][ T14] usb 7-1: USB disconnect, device number 3 [ 330.380000][ T4261] usb 2-1: unit 0 not found! [ 330.418690][ T4261] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 330.603019][ T4261] usb 2-1: unit 4 not found! [ 330.671593][ T4261] usb 2-1: unit 0 not found! [ 330.922281][ T4261] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 331.212842][ T4261] usb 2-1: unit 4 not found! [ 331.217523][ T4261] usb 2-1: unit 0 not found! [ 331.259558][ T6595] loop0: detected capacity change from 0 to 2048 [ 331.329049][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.552'. [ 331.432595][ T6601] loop1: detected capacity change from 0 to 1024 [ 331.482779][ T6595] /dev/loop0: Can't open blockdev [ 331.604694][ T6601] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 332.060001][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.157813][ T5195] EXT4-fs (loop5): unmounting filesystem. [ 332.201156][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.261939][ T6590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.425070][ T4261] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 332.449165][ T4261] usb 2-1: USB disconnect, device number 6 [ 332.701446][ T4392] udevd[4392]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.795024][ T6615] loop5: detected capacity change from 0 to 512 [ 332.846097][ T6615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.069701][ T6615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 333.112512][ T6615] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.892125][ T6625] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.559: invalid size [ 333.973677][ T6625] EXT4-fs (loop5): Remounting filesystem read-only [ 334.132093][ T5195] EXT4-fs (loop5): unmounting filesystem. [ 334.138929][ T5195] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Out of memory [ 334.205794][ T5195] EXT4-fs (loop5): Remounting filesystem read-only [ 334.236426][ T5195] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 334.311508][ T5195] EXT4-fs (loop5): Remounting filesystem read-only [ 334.715310][ T6642] IPv6: Can't replace route, no match found [ 335.405623][ T6643] hub 8-0:1.0: USB hub found [ 335.412012][ T6643] hub 8-0:1.0: 1 port detected [ 336.172340][ T6650] loop0: detected capacity change from 0 to 1024 [ 336.224485][ T6650] /dev/loop0: Can't open blockdev [ 337.500936][ T6661] mmap: syz.3.570 (6661) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 338.285613][ T6668] loop0: detected capacity change from 0 to 2048 [ 338.342173][ T6668] /dev/loop0: Can't open blockdev [ 338.394485][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.574'. [ 338.425206][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.574'. [ 338.490789][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.574'. [ 338.529275][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.574'. [ 339.850763][ T6692] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 339.858575][ T6692] netlink: 'syz.3.578': attribute type 2 has an invalid length. [ 340.116840][ T6690] loop1: detected capacity change from 0 to 512 [ 340.396361][ T6690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 340.583286][ T6690] EXT4-fs (loop1): 1 truncate cleaned up [ 340.589012][ T6690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 340.835743][ T6705] lo: Caught tx_queue_len zero misconfig [ 340.880929][ T6705] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 341.290020][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 343.377210][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.587'. [ 343.402118][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.587'. [ 343.442409][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.587'. [ 343.460561][ T6726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.587'. [ 343.712005][ T6732] loop6: detected capacity change from 0 to 512 [ 343.767860][ T6732] EXT4-fs: Ignoring removed bh option [ 345.787960][ T6748] loop1: detected capacity change from 0 to 512 [ 345.831633][ T6748] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 345.971791][ T6748] EXT4-fs (loop1): 1 truncate cleaned up [ 345.985823][ T6748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 345.998168][ T6732] EXT4-fs (loop6): Test dummy encryption mode enabled [ 346.012318][ T6732] EXT4-fs (loop6): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 346.039093][ T6732] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.056415][ T6732] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 347.712359][ T6769] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 347.954775][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 348.772782][ T6778] loop0: detected capacity change from 0 to 512 [ 348.779886][ T6778] /dev/loop0: Can't open blockdev [ 348.934576][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.602'. [ 349.051853][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.602'. [ 349.092869][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.602'. [ 349.201084][ T6785] loop0: detected capacity change from 0 to 256 [ 349.258178][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.602'. [ 350.031691][ T6788] binder: 6787:6788 ioctl c0306201 0 returned -14 [ 351.377998][ T6802] loop1: detected capacity change from 0 to 1024 [ 351.459474][ T6805] hub 8-0:1.0: USB hub found [ 351.465031][ T6805] hub 8-0:1.0: 1 port detected [ 351.654416][ T6802] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 354.052094][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.128279][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.136770][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.148452][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.157289][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 354.164650][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.585703][ T6825] loop0: detected capacity change from 0 to 128 [ 355.430206][ T6837] 9pnet_fd: Insufficient options for proto=fd [ 356.195870][ T4367] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.251693][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 356.664337][ T6823] chnl_net:caif_netlink_parms(): no params data found [ 357.130733][ T4717] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.922490][ T6848] loop1: detected capacity change from 0 to 512 [ 357.930825][ T6848] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 357.958840][ T6856] hub 8-0:1.0: USB hub found [ 357.964329][ T6856] hub 8-0:1.0: 1 port detected [ 358.480565][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 358.692290][ T4717] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.788901][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.842327][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.282056][ T6823] device bridge_slave_0 entered promiscuous mode [ 359.456542][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.663517][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.694256][ T6823] device bridge_slave_1 entered promiscuous mode [ 359.850177][ T4717] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.918936][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.995758][ T4717] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.082702][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.339760][ T6823] team0: Port device team_slave_0 added [ 360.370065][ T6823] team0: Port device team_slave_1 added [ 360.490735][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 360.585720][ T6883] loop1: detected capacity change from 0 to 256 [ 361.301760][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.384481][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.739349][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.640506][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 362.713856][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.753679][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.741023][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.510769][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'. [ 367.519714][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.6.633'. [ 367.607448][ T6823] device hsr_slave_0 entered promiscuous mode [ 367.616558][ T6913] loop1: detected capacity change from 0 to 512 [ 367.651040][ T6823] device hsr_slave_1 entered promiscuous mode [ 367.735494][ T6913] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 367.747570][ T6823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.781115][ T6823] Cannot create hsr debugfs directory [ 367.826472][ T6913] EXT4-fs (loop1): 1 truncate cleaned up [ 367.850434][ T6913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 367.892089][ T6920] loop0: detected capacity change from 0 to 512 [ 367.934255][ T6920] /dev/loop0: Can't open blockdev [ 368.180034][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 368.410985][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.985803][ T3597] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 369.180579][ T3597] usb 1-1: Using ep0 maxpacket: 16 [ 369.189667][ T3597] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 369.231209][ T3597] usb 1-1: config 0 has no interface number 0 [ 369.237379][ T3597] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 369.336667][ T3597] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 369.396240][ T3597] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 369.598143][ T6944] loop1: detected capacity change from 0 to 256 [ 370.528893][ T6823] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 370.701117][ T6823] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 370.720520][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.729084][ T3597] usb 1-1: Product: syz [ 370.733711][ T3597] usb 1-1: Manufacturer: syz [ 370.738365][ T3597] usb 1-1: SerialNumber: syz [ 370.746249][ T6823] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 370.754709][ T3597] usb 1-1: config 0 descriptor?? [ 370.760354][ T6920] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 371.057368][ T6823] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 371.432960][ T3597] usb 1-1: can't set config #0, error -71 [ 371.441480][ T3597] usb 1-1: USB disconnect, device number 4 [ 372.228829][ T6955] random: crng reseeded on system resumption [ 372.342587][ T6956] loop1: detected capacity change from 0 to 16 [ 372.559334][ T6956] erofs: (device loop1): mounted with root inode @ nid 36. [ 373.067053][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.173187][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.193356][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.583819][ T6823] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.682556][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.761215][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.252496][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.259713][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.545225][ T4717] device hsr_slave_0 left promiscuous mode [ 375.577382][ T4717] device hsr_slave_1 left promiscuous mode [ 375.621480][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.628969][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.667552][ T4717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.680693][ T4717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.711570][ T4717] device bridge_slave_1 left promiscuous mode [ 375.717872][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.771646][ T4717] device bridge_slave_0 left promiscuous mode [ 375.788107][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.872636][ T4717] device veth1_to_batadv left promiscuous mode [ 375.879476][ T4717] device veth1_macvtap left promiscuous mode [ 375.946802][ T4717] device veth0_macvtap left promiscuous mode [ 375.980639][ T4717] device veth1_vlan left promiscuous mode [ 375.986481][ T4717] device veth0_vlan left promiscuous mode [ 377.168705][ T7005] loop6: detected capacity change from 0 to 2048 [ 377.197293][ T7005] EXT4-fs: Ignoring removed nobh option [ 377.278817][ T7005] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 377.298103][ T7005] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.726107][ T4717] team0 (unregistering): Port device team_slave_1 removed [ 377.819645][ T4717] team0 (unregistering): Port device team_slave_0 removed [ 377.920338][ T4717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.977239][ T4717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.285347][ T4717] bond0 (unregistering): Released all slaves [ 378.391421][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 378.400352][ T6984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 378.414683][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 378.424740][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 378.440777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.456503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.467594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.501077][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.508251][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.650035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.669425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.681468][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.687803][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.718264][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 378.725370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.757779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.773736][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 378.794157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.060198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.529722][ T6823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.540810][ T6823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.585600][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.594534][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.603505][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.612862][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.871189][ T7031] overlayfs: './file0' not a directory [ 379.933785][ T7032] overlayfs: './file0' not a directory [ 379.995749][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 382.735531][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.809285][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.892860][ T7066] loop6: detected capacity change from 0 to 16 [ 382.914358][ T7066] erofs: (device loop6): mounted with root inode @ nid 36. [ 382.941698][ T7064] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 383.173103][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.921615][ T7069] loop0: detected capacity change from 0 to 2048 [ 383.971852][ T7069] EXT4-fs: Ignoring removed nobh option [ 383.977551][ T7069] /dev/loop0: Can't open blockdev [ 385.269652][ T7089] loop6: detected capacity change from 0 to 2048 [ 385.421366][ T7089] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 385.462035][ T7100] binder: 7099:7100 ioctl c0306201 200000000480 returned -14 [ 385.470982][ T7098] netlink: 44 bytes leftover after parsing attributes in process `syz.3.669'. [ 385.549849][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 385.986784][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'. [ 386.004206][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'. [ 386.174842][ T7117] loop6: detected capacity change from 0 to 256 [ 386.664347][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'. [ 386.750829][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'. [ 387.105400][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 387.125253][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 387.182053][ T7122] loop1: detected capacity change from 0 to 2048 [ 387.261638][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 387.275832][ T7122] EXT4-fs: Ignoring removed nobh option [ 387.310898][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 387.372527][ T6823] device veth0_vlan entered promiscuous mode [ 387.398484][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.504742][ T7128] hub 8-0:1.0: USB hub found [ 387.513361][ T7128] hub 8-0:1.0: 1 port detected [ 388.348812][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.521536][ T7122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 388.530147][ T7122] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.548209][ T6823] device veth1_vlan entered promiscuous mode [ 388.761445][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 388.810738][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 388.849627][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.864674][ T7136] loop6: detected capacity change from 0 to 512 [ 388.893063][ T6823] device veth0_macvtap entered promiscuous mode [ 388.951222][ T6823] device veth1_macvtap entered promiscuous mode [ 388.964093][ T7136] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 388.996387][ T7136] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.330692][ T4261] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 389.383271][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.630832][ T4261] usb 7-1: Using ep0 maxpacket: 16 [ 389.695346][ T4261] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 389.709738][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.870476][ T4261] usb 7-1: config 0 has no interface number 0 [ 389.887417][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.932723][ T4261] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 389.973481][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.000468][ T4261] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 390.021273][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.043463][ T4261] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 390.060145][ T7148] loop1: detected capacity change from 0 to 16 [ 390.066704][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.080461][ T4261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.110184][ T7148] erofs: (device loop1): mounted with root inode @ nid 36. [ 390.118906][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.126444][ T4261] usb 7-1: Product: syz [ 390.139897][ T4261] usb 7-1: Manufacturer: syz [ 390.311480][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.342143][ T4261] usb 7-1: SerialNumber: syz [ 390.348570][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.358539][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.370667][ T4261] usb 7-1: config 0 descriptor?? [ 390.377141][ T7136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 390.384476][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.401527][ T7136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 390.427746][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.438763][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.465382][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.719635][ T7136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 390.872332][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.957405][ T7136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 390.971196][ T4323] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 391.227481][ T4323] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.238791][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 391.327563][ T4323] usb 2-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 391.522167][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 391.531167][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 391.544810][ T6823] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.645955][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.710589][ T6823] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.184434][ T6823] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.249318][ T4323] usb 2-1: config 0 descriptor?? [ 392.565337][ T6823] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.970731][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.214263][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.259614][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.306280][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.316255][ T4261] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 393.349718][ T4261] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 393.366582][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.385740][ T4261] asix: probe of 7-1:0.251 failed with error -5 [ 393.397499][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.429236][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.443484][ T4261] usb 7-1: USB disconnect, device number 4 [ 393.468635][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.496403][ T4425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.518194][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.541560][ T4425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.550077][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.569916][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.587931][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.605903][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.611302][ T5660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 393.629476][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.644920][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.652753][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.676415][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 393.684959][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.711442][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.738781][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 393.772976][ T4323] logitech-hidpp-device 0003:046D:C090.0003: unexpected long global item [ 393.795109][ T4323] logitech-hidpp-device 0003:046D:C090.0003: hidpp_probe:parse failed [ 393.822571][ T4323] logitech-hidpp-device: probe of 0003:046D:C090.0003 failed with error -22 [ 393.905330][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 394.573826][ T4359] usb 2-1: USB disconnect, device number 7 [ 395.254916][ T7175] netlink: 44 bytes leftover after parsing attributes in process `syz.6.683'. [ 396.313650][ T7198] hub 8-0:1.0: USB hub found [ 396.319490][ T7198] hub 8-0:1.0: 1 port detected [ 396.478727][ T7196] loop1: detected capacity change from 0 to 2048 [ 396.498104][ T7196] EXT4-fs: Ignoring removed nobh option [ 396.564803][ T7206] loop0: detected capacity change from 0 to 512 [ 396.617005][ T7196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 396.630087][ T7196] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.676139][ T7206] /dev/loop0: Can't open blockdev [ 396.803062][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 397.040527][ T4261] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 397.090588][ T7216] loop7: detected capacity change from 0 to 128 [ 397.151665][ T7216] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 397.221332][ T7216] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.250610][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 397.257805][ T4261] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 397.271949][ T4261] usb 1-1: config 0 has no interface number 0 [ 397.286462][ T4261] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 397.304407][ T4261] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 397.510779][ T4261] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 397.519895][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.528049][ T4261] usb 1-1: Product: syz [ 397.532418][ T4261] usb 1-1: Manufacturer: syz [ 397.537054][ T4261] usb 1-1: SerialNumber: syz [ 397.545535][ T4261] usb 1-1: config 0 descriptor?? [ 397.551496][ T7206] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.220664][ T7206] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.264141][ T6823] EXT4-fs (loop7): unmounting filesystem. [ 398.825436][ T7206] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 398.870593][ T7206] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.095743][ T7241] syz.3.698 uses obsolete (PF_INET,SOCK_PACKET) [ 399.799026][ T7245] tap0: tun_chr_ioctl cmd 2147767520 [ 399.910499][ T3597] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 400.019006][ T4261] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 400.050879][ T4261] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 400.064000][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.700'. [ 400.080557][ T4261] asix: probe of 1-1:0.251 failed with error -5 [ 400.117630][ T4261] usb 1-1: USB disconnect, device number 5 [ 400.140634][ T3597] usb 2-1: Using ep0 maxpacket: 16 [ 400.149416][ T3597] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.181424][ T3597] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.224658][ T3597] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 400.287214][ T3597] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.306760][ T3597] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 400.332225][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.401533][ T3597] usb 2-1: config 0 descriptor?? [ 400.774530][ T7259] loop0: detected capacity change from 0 to 512 [ 400.793820][ T7259] /dev/loop0: Can't open blockdev [ 400.837408][ T4681] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 400.851742][ T3597] hid (null): report_id 651 is invalid [ 401.110766][ T7] usb 2-1: USB disconnect, device number 8 [ 401.839426][ T7269] binder: 7267:7269 ioctl 4018620d 0 returned -22 [ 401.860925][ T7268] loop0: detected capacity change from 0 to 256 [ 401.953876][ T7264] loop6: detected capacity change from 0 to 2048 [ 401.975482][ T7264] EXT4-fs: Ignoring removed nobh option [ 402.059059][ T7264] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 402.080591][ T7264] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.269166][ T7278] loop1: detected capacity change from 0 to 128 [ 402.347802][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 402.442883][ T7278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 402.481253][ T7278] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.328755][ T7296] device macsec1 entered promiscuous mode [ 403.348603][ T7296] device bridge0 entered promiscuous mode [ 403.441808][ T7300] binder: 7290:7300 ioctl 89e0 200000000000 returned -22 [ 403.485424][ T7296] bridge0: port 3(macsec1) entered blocking state [ 403.643952][ T7296] bridge0: port 3(macsec1) entered disabled state [ 403.998887][ T7296] device bridge0 left promiscuous mode [ 404.349013][ T7306] random: crng reseeded on system resumption [ 404.594874][ T7312] loop0: detected capacity change from 0 to 1024 [ 404.741641][ T7312] EXT4-fs: Ignoring removed bh option [ 404.917277][ T7312] /dev/loop0: Can't open blockdev [ 404.941050][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 405.736337][ T7324] loop1: detected capacity change from 0 to 2048 [ 405.781308][ T7324] EXT4-fs: Ignoring removed nobh option [ 405.884533][ T7324] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 405.904746][ T7324] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.970540][ T4282] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 406.200547][ T4282] usb 1-1: Using ep0 maxpacket: 32 [ 406.225452][ T4282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.653108][ T4282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1280, setting to 1024 [ 406.940499][ T4282] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 406.950227][ T4282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.961991][ T4282] usb 1-1: config 0 descriptor?? [ 406.967657][ T7312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.998271][ T4282] hub 1-1:0.0: USB hub found [ 407.012583][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 407.052704][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.6.724'. [ 407.140455][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.6.724'. [ 407.149435][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.724'. [ 407.192111][ T7350] random: crng reseeded on system resumption [ 407.212645][ T4282] hub 1-1:0.0: 1 port detected [ 407.230562][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.724'. [ 407.246129][ T7353] loop1: detected capacity change from 0 to 16 [ 407.263143][ T7352] loop7: detected capacity change from 0 to 128 [ 407.500287][ T7353] erofs: (device loop1): mounted with root inode @ nid 36. [ 407.510778][ T4282] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 407.517632][ T4282] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 407.540786][ T4282] usbhid 1-1:0.0: can't add hid device: -71 [ 407.546841][ T4282] usbhid: probe of 1-1:0.0 failed with error -71 [ 407.572702][ T7352] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 407.611168][ T4282] usb 1-1: USB disconnect, device number 6 [ 407.736435][ T7352] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.093884][ T6823] EXT4-fs (loop7): unmounting filesystem. [ 410.300564][ T7375] Can't find ip_set type has [ 416.492293][ T7436] input: syz1 as /devices/virtual/input/input8 [ 418.683388][ T7477] loop1: detected capacity change from 0 to 512 [ 419.263864][ T7477] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.758: bad orphan inode 11862016 [ 419.527737][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 419.560122][ T7477] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 419.630321][ T7477] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.749267][ T7487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.841742][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 419.962739][ T7449] loop7: detected capacity change from 0 to 40427 [ 420.026613][ T7449] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 420.045706][ T7449] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 420.120675][ T7449] F2FS-fs (loop7): invalid crc value [ 420.151419][ T7449] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-12) [ 420.601204][ T7514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.611552][ T7523] loop6: detected capacity change from 0 to 1024 [ 423.663577][ T7532] loop0: detected capacity change from 0 to 512 [ 423.686972][ T7523] ext4: Unknown parameter 'nouser_xattr' [ 426.638177][ T7558] loop6: detected capacity change from 0 to 4096 [ 426.708145][ T7558] EXT4-fs: inline encryption not supported [ 426.764703][ T7558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.830622][ T7558] EXT4-fs (loop6): Test dummy encryption mode enabled [ 426.856613][ T7558] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 426.961117][ T7558] System zones: 0-5 [ 427.008428][ T7558] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 427.597860][ T7558] fscrypt (loop6): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 428.297562][ T26] audit: type=1800 audit(1778551715.635:22): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.776" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 428.341776][ T7572] overlayfs: './file0' not a directory [ 428.615082][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 428.680560][ T4359] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 429.892142][ T4359] usb 8-1: unable to get BOS descriptor or descriptor too short [ 429.903425][ T4359] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.964685][ T4359] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 430.008802][ T4359] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 430.076114][ T4359] usb 8-1: New USB device found, idVendor=3644, idProduct=8021, bcdDevice= 0.40 [ 430.130568][ T26] audit: type=1326 audit(1778551717.375:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 430.173989][ T4359] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.230425][ T4359] usb 8-1: Product: syz [ 430.255146][ T4359] usb 8-1: Manufacturer: syz [ 430.259808][ T4359] usb 8-1: SerialNumber: syz [ 430.290064][ T26] audit: type=1326 audit(1778551717.375:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 430.314722][ T26] audit: type=1326 audit(1778551717.375:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 430.442558][ T26] audit: type=1326 audit(1778551717.405:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 430.534388][ T26] audit: type=1326 audit(1778551717.405:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 430.596877][ T4359] usb 8-1: MIDIStreaming interface descriptor not found [ 430.619129][ T26] audit: type=1326 audit(1778551717.405:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 430.698359][ T7611] ipt_CLUSTERIP: Please specify destination IP [ 430.729101][ T4359] usb 8-1: USB disconnect, device number 2 [ 430.744406][ T26] audit: type=1326 audit(1778551717.405:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 431.040282][ T26] audit: type=1326 audit(1778551717.405:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 431.070538][ T26] audit: type=1326 audit(1778551717.405:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.784" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9c4f59cdd9 code=0x7ffc0000 [ 432.539247][ T7639] loop7: detected capacity change from 0 to 512 [ 432.645692][ T7639] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 432.696043][ T7639] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.217530][ T5735] udevd[5735]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.674714][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 433.710169][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.314076][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 434.381636][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.429567][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 434.495122][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.502455][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 434.514199][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.521410][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 434.538413][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.546157][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 434.583999][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.601991][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 434.625401][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.640912][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 434.658547][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.666022][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 434.686061][ T6823] EXT4-fs (loop7): Remounting filesystem read-only [ 434.695463][ T6823] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 437.755918][ T6823] EXT4-fs: 92 callbacks suppressed [ 437.755958][ T6823] EXT4-fs (loop7): unmounting filesystem. [ 438.238394][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.481948][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.845206][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.045547][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.104943][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.111765][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.711306][ T7715] hub 8-0:1.0: USB hub found [ 440.717325][ T7715] hub 8-0:1.0: 1 port detected [ 442.220090][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 442.243864][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.257540][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 442.575947][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 442.587529][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 442.595168][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.028197][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 444.028214][ T26] audit: type=1326 audit(1778551731.375:85): auid=4294967295 uid=1869573375 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.6.817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6e839cdd9 code=0x0 [ 444.226057][ T7769] hub 8-0:1.0: USB hub found [ 444.232144][ T7769] hub 8-0:1.0: 1 port detected [ 444.507298][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.819'. [ 444.569025][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.819'. [ 444.732197][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 444.777052][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.819'. [ 444.983845][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.819'. [ 445.324651][ T7780] loop1: detected capacity change from 0 to 16 [ 445.464265][ T7780] erofs: (device loop1): mounted with root inode @ nid 36. [ 445.742906][ T7781] loop6: detected capacity change from 0 to 512 [ 446.120669][ T7781] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 446.602100][ T7781] EXT4-fs (loop6): 1 truncate cleaned up [ 446.609006][ T7781] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 446.900441][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 447.489442][ T4284] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 447.676383][ T7799] loop0: detected capacity change from 0 to 128 [ 447.694799][ T7799] /dev/loop0: Can't open blockdev [ 449.158055][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 449.361702][ T7814] loop0: detected capacity change from 0 to 512 [ 449.384730][ T7814] /dev/loop0: Can't open blockdev [ 449.605571][ T7728] chnl_net:caif_netlink_parms(): no params data found [ 449.642799][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 450.597825][ T9] device hsr_slave_0 left promiscuous mode [ 450.621085][ T9] device hsr_slave_1 left promiscuous mode [ 450.629139][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.645665][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.665130][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.681885][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.707137][ T9] device bridge_slave_1 left promiscuous mode [ 450.725969][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.742309][ T9] device bridge_slave_0 left promiscuous mode [ 450.770159][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.876320][ T9] device veth1_macvtap left promiscuous mode [ 450.889322][ T9] device veth0_macvtap left promiscuous mode [ 450.901231][ T9] device veth1_vlan left promiscuous mode [ 450.925518][ T9] device veth0_vlan left promiscuous mode [ 451.240455][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 454.837324][ T7853] loop1: detected capacity change from 0 to 128 [ 454.859261][ T7853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 454.872395][ T7853] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.096925][ T9] team0 (unregistering): Port device team_slave_1 removed [ 455.917904][ T9] team0 (unregistering): Port device team_slave_0 removed [ 455.926873][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 456.029779][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.057527][ T7859] input: syz0 as /devices/virtual/input/input9 [ 456.198773][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.632934][ T4414] Bluetooth: hci5: Frame reassembly failed (-84) [ 457.343408][ T9] bond0 (unregistering): Released all slaves [ 457.427200][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.830'. [ 457.436078][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.830'. [ 457.445481][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'. [ 457.461486][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'. [ 457.478410][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'. [ 457.487854][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.831'. [ 457.669214][ T49] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 457.825134][ T7883] loop0: detected capacity change from 0 to 512 [ 457.848135][ T7883] EXT4-fs: Ignoring removed orlov option [ 457.855213][ T7883] /dev/loop0: Can't open blockdev [ 457.895314][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.947536][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.975148][ T7728] device bridge_slave_0 entered promiscuous mode [ 458.007240][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.028464][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.037568][ T7728] device bridge_slave_1 entered promiscuous mode [ 458.070011][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.085165][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.122676][ T7728] team0: Port device team_slave_0 added [ 458.132637][ T7728] team0: Port device team_slave_1 added [ 458.210960][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.245100][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.272765][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.289281][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.298571][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.355019][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.448766][ T7728] device hsr_slave_0 entered promiscuous mode [ 458.457616][ T7728] device hsr_slave_1 entered promiscuous mode [ 458.470605][ T7728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.478508][ T7728] Cannot create hsr debugfs directory [ 458.650615][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 458.657110][ T7877] Bluetooth: hci5: command 0x1003 tx timeout [ 458.765520][ T7897] tipc: Failed to remove unknown binding: 66,0,0/0:2714137159/2714137160 [ 459.419534][ T7911] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 459.527061][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 459.541759][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 459.666131][ T7728] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.713333][ T7728] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.746436][ T7728] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 459.792616][ T7728] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 459.931717][ T5373] tipc: Left network mode [ 459.993557][ T7728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.202919][ T7934] overlayfs: failed to clone lowerpath [ 460.255901][ T7932] overlayfs: failed to clone lowerpath [ 461.024567][ T7728] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.066111][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.085380][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.207476][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.217269][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.230115][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.237321][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.797254][ T7877] Bluetooth: hci5: command 0x1003 tx timeout [ 461.921442][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 462.251749][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 462.260589][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.269075][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.276220][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.301380][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.708998][ T7975] loop0: detected capacity change from 0 to 512 [ 464.773070][ T7975] EXT4-fs: Ignoring removed orlov option [ 464.814736][ T7975] /dev/loop0: Can't open blockdev [ 466.570514][ T7993] overlayfs: failed to clone lowerpath [ 466.638879][ T7994] overlayfs: failed to clone lowerpath [ 467.610446][ T4284] Bluetooth: hci3: command 0x0405 tx timeout [ 467.640539][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.653508][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.815850][ T8008] binder: BINDER_SET_CONTEXT_MGR already set [ 467.839206][ T8008] binder: 8007:8008 ioctl 4018620d 200000001000 returned -16 [ 467.864351][ T8008] binder: 8007:8008 ioctl c0306201 2000000003c0 returned -22 [ 467.907438][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.972406][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.989573][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.063939][ T8014] loop0: detected capacity change from 0 to 2048 [ 468.085098][ T8014] /dev/loop0: Can't open blockdev [ 468.120249][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.156284][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.201902][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.221386][ T4367] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 468.261409][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.303102][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.324839][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.337579][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.474294][ T8024] loop1: detected capacity change from 0 to 512 [ 468.480919][ T8000] IPv6: Can't replace route, no match found [ 468.580973][ T8024] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 468.685146][ T8024] EXT4-fs (loop1): 1 truncate cleaned up [ 468.710741][ T8024] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 468.870228][ T8035] overlayfs: failed to clone upperpath [ 470.756605][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.771269][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.868446][ T5373] device hsr_slave_0 left promiscuous mode [ 470.878623][ T5373] device hsr_slave_1 left promiscuous mode [ 470.914404][ T5373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.978987][ T5373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.993880][ T5373] device bridge_slave_1 left promiscuous mode [ 471.000110][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.002351][ T8075] loop6: detected capacity change from 0 to 2048 [ 471.101907][ T5373] device bridge_slave_0 left promiscuous mode [ 471.125566][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.211885][ T8075] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 471.247131][ T8075] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.322064][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 474.512276][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 474.703193][ T8113] binder: BINDER_SET_CONTEXT_MGR already set [ 474.719435][ T8113] binder: 8112:8113 ioctl 4018620d 200000001000 returned -16 [ 474.739747][ T8113] binder: 8112:8113 ioctl c0306201 2000000003c0 returned -22 [ 474.924803][ T8119] loop1: detected capacity change from 0 to 512 [ 474.944398][ T5373] team0 (unregistering): Port device team_slave_1 removed [ 475.063651][ T8119] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 475.087328][ T5373] team0 (unregistering): Port device team_slave_0 removed [ 475.136194][ T8119] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.263096][ T8119] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 475.316602][ T5373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.329679][ T8119] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 475.350771][ T8119] EXT4-fs (loop1): This should not happen!! Data will be lost [ 475.350771][ T8119] [ 475.386373][ T8119] EXT4-fs (loop1): Total free blocks count 0 [ 475.397919][ T8119] EXT4-fs (loop1): Free/Dirty block details [ 475.405406][ T8119] EXT4-fs (loop1): free_blocks=65280 [ 475.416086][ T8119] EXT4-fs (loop1): dirty_blocks=33 [ 475.458577][ T8119] EXT4-fs (loop1): Block reservation details [ 475.469989][ T8119] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 475.476857][ T5373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.563902][ T8124] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 475.730282][ T4284] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 475.818966][ T5373] bond0 (unregistering): Released all slaves [ 475.910754][ T7728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.107875][ T8126] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.137571][ T8126] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 476.163923][ T8126] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 476.189833][ T8126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 476.218940][ T8126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 476.245120][ T8126] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 476.279363][ T8126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 476.299392][ T8126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 476.328153][ T8126] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 476.355076][ T8126] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 476.387135][ T8126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 476.429127][ T8126] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 476.452863][ T8126] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 476.473901][ T8126] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 476.486929][ T8126] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 477.630894][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.901'. [ 477.655629][ T8156] loop0: detected capacity change from 0 to 512 [ 477.694730][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.901'. [ 477.727960][ T8156] /dev/loop0: Can't open blockdev [ 477.835759][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.858545][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.938360][ T7728] device veth0_vlan entered promiscuous mode [ 477.967463][ T7728] device veth1_vlan entered promiscuous mode [ 478.058931][ T7728] device veth0_macvtap entered promiscuous mode [ 478.069439][ T7728] device veth1_macvtap entered promiscuous mode [ 478.094122][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 478.117342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 478.292496][ T7877] Bluetooth: hci0: command 0x0c1a tx timeout [ 478.330400][ T7877] Bluetooth: hci2: command 0x0c1a tx timeout [ 478.686637][ T4290] Bluetooth: hci4: command 0x0c1a tx timeout [ 478.692763][ T4290] Bluetooth: hci3: command 0x0c1a tx timeout [ 478.699685][ T4284] Bluetooth: hci1: command 0x0c1a tx timeout [ 478.845218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.877358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.014524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 479.030931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.039849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.213248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.279841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.317537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.325692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 479.410272][ T8180] IPv6: Can't replace route, no match found [ 479.428078][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.500746][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.824576][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.035429][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.242200][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.302750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.330473][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 480.410879][ T7877] Bluetooth: hci2: command 0x0406 tx timeout [ 480.422136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.438613][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.449690][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.461787][ T7728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.490569][ T7728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.530509][ T7728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.573778][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.591260][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.647263][ T8208] loop1: detected capacity change from 0 to 512 [ 480.691429][ T7728] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.730673][ T7877] Bluetooth: hci1: command 0x0406 tx timeout [ 480.736785][ T7877] Bluetooth: hci3: command 0x0406 tx timeout [ 480.743099][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 480.749695][ T8208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 480.798766][ T7728] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.850389][ T7728] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.851104][ T8208] EXT4-fs (loop1): 1 truncate cleaned up [ 480.859137][ T7728] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.929118][ T8208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 481.307957][ T8215] team_slave_1: Caught tx_queue_len zero misconfig [ 482.309131][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 482.342241][ T7877] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 482.352170][ T7877] CPU: 0 PID: 7877 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 482.359718][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.369784][ T7877] Workqueue: hci2 hci_rx_work [ 482.374482][ T7877] Call Trace: [ 482.377759][ T7877] [ 482.380698][ T7877] dump_stack_lvl+0x188/0x24e [ 482.385444][ T7877] ? show_regs_print_info+0x12/0x12 [ 482.390681][ T7877] ? load_image+0x400/0x400 [ 482.395214][ T7877] sysfs_create_dir_ns+0x26a/0x290 [ 482.400349][ T7877] ? sysfs_warn_dup+0xa0/0xa0 [ 482.405054][ T7877] ? do_raw_spin_unlock+0x11d/0x230 [ 482.410255][ T7877] kobject_add_internal+0x61c/0xcc0 [ 482.415460][ T7877] kobject_add+0x160/0x230 [ 482.419878][ T7877] ? kobject_init+0x1d0/0x1d0 [ 482.424642][ T7877] ? klist_children_get+0x50/0x50 [ 482.429660][ T7877] ? get_device_parent+0x121/0x3f0 [ 482.434770][ T7877] device_add+0x483/0xfb0 [ 482.439116][ T7877] ? kmem_cache_free+0xf7/0x290 [ 482.443969][ T7877] hci_conn_add_sysfs+0xd1/0x1e0 [ 482.448913][ T7877] le_conn_complete_evt+0x1062/0x1670 [ 482.454297][ T7877] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 482.460552][ T7877] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 482.466213][ T7877] ? skb_pull_data+0xf7/0x200 [ 482.470947][ T7877] hci_le_conn_complete_evt+0x183/0x440 [ 482.476537][ T7877] ? hci_remote_host_features_evt+0x270/0x270 [ 482.482648][ T7877] hci_event_packet+0x7b9/0x1280 [ 482.487648][ T7877] ? bis_list+0x280/0x280 [ 482.492006][ T7877] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 482.497926][ T7877] ? kcov_remote_start+0x4c7/0x7e0 [ 482.503063][ T7877] ? netdev_warn+0x3e/0x16c [ 482.507569][ T7877] ? hci_send_to_monitor+0x9c/0x4a0 [ 482.512771][ T7877] hci_rx_work+0x3eb/0xd40 [ 482.517187][ T7877] ? _raw_spin_unlock+0x40/0x40 [ 482.522044][ T7877] ? process_one_work+0x7b0/0x1160 [ 482.527170][ T7877] process_one_work+0x8a2/0x1160 [ 482.532119][ T7877] ? worker_detach_from_pool+0x240/0x240 [ 482.537781][ T7877] ? _raw_spin_lock_irq+0xb7/0xf0 [ 482.542806][ T7877] ? _raw_spin_lock_irqsave+0x100/0x100 [ 482.548351][ T7877] ? kthread_data+0x4b/0xc0 [ 482.552861][ T7877] worker_thread+0xaa2/0x1270 [ 482.557553][ T7877] ? __kthread_parkme+0x162/0x1c0 [ 482.562592][ T7877] kthread+0x29d/0x330 [ 482.566655][ T7877] ? worker_clr_flags+0x1a0/0x1a0 [ 482.571699][ T7877] ? kthread_blkcg+0xd0/0xd0 [ 482.576289][ T7877] ret_from_fork+0x1f/0x30 [ 482.580717][ T7877] [ 482.592566][ T7877] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 482.605950][ T7877] Bluetooth: hci2: failed to register connection device [ 482.717637][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.732892][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.760196][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.846267][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.857868][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.874608][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 482.921803][ T8231] input: syz1 as /devices/virtual/input/input10 [ 483.122938][ T8238] loop8: detected capacity change from 0 to 512 [ 483.146198][ T8238] EXT4-fs: Ignoring removed orlov option [ 484.163408][ T8238] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 484.185231][ T8238] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.431390][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 485.891233][ T8278] input: syz1 as /devices/virtual/input/input11 [ 486.210053][ T7877] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 487.324578][ T8303] loop6: detected capacity change from 0 to 2048 [ 487.360013][ T8303] EXT4-fs: Ignoring removed nobh option [ 487.418550][ T8303] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 487.438117][ T8303] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.591169][ T8318] hub 8-0:1.0: USB hub found [ 487.596906][ T8318] hub 8-0:1.0: 1 port detected [ 487.652822][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 487.977393][ T8324] IPv6: Can't replace route, no match found [ 488.191556][ T8326] loop6: detected capacity change from 0 to 256 [ 488.207890][ T8326] exfat: Deprecated parameter 'namecase' [ 488.277146][ T8326] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 488.338384][ T8330] loop1: detected capacity change from 0 to 512 [ 488.400191][ T8330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 488.735818][ T8330] EXT4-fs (loop1): 1 truncate cleaned up [ 488.745759][ T8330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 489.929190][ T8345] input: syz1 as /devices/virtual/input/input12 [ 490.175025][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 490.869678][ T8360] hub 8-0:1.0: USB hub found [ 490.875433][ T8360] hub 8-0:1.0: 1 port detected [ 491.555490][ T8368] IPv6: Can't replace route, no match found [ 491.679083][ T7877] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 491.689015][ T7877] CPU: 0 PID: 7877 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 491.696623][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.706710][ T7877] Workqueue: hci4 hci_rx_work [ 491.711438][ T7877] Call Trace: [ 491.714758][ T7877] [ 491.717739][ T7877] dump_stack_lvl+0x188/0x24e [ 491.722481][ T7877] ? show_regs_print_info+0x12/0x12 [ 491.727736][ T7877] ? load_image+0x400/0x400 [ 491.732311][ T7877] sysfs_create_dir_ns+0x26a/0x290 [ 491.737497][ T7877] ? sysfs_warn_dup+0xa0/0xa0 [ 491.742211][ T7877] ? do_raw_spin_unlock+0x11d/0x230 [ 491.747426][ T7877] kobject_add_internal+0x61c/0xcc0 [ 491.752641][ T7877] kobject_add+0x160/0x230 [ 491.757065][ T7877] ? kobject_init+0x1d0/0x1d0 [ 491.761749][ T7877] ? klist_children_get+0x50/0x50 [ 491.766785][ T7877] ? get_device_parent+0x121/0x3f0 [ 491.771908][ T7877] device_add+0x483/0xfb0 [ 491.776243][ T7877] ? kmem_cache_free+0xf7/0x290 [ 491.781104][ T7877] hci_conn_add_sysfs+0xd1/0x1e0 [ 491.786056][ T7877] le_conn_complete_evt+0x1062/0x1670 [ 491.791449][ T7877] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 491.797714][ T7877] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 491.803418][ T7877] ? skb_pull_data+0xf7/0x200 [ 491.808108][ T7877] hci_le_conn_complete_evt+0x183/0x440 [ 491.813665][ T7877] ? hci_remote_host_features_evt+0x270/0x270 [ 491.819767][ T7877] hci_event_packet+0x7b9/0x1280 [ 491.824732][ T7877] ? bis_list+0x280/0x280 [ 491.829070][ T7877] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 491.834970][ T7877] ? kcov_remote_start+0x4c7/0x7e0 [ 491.840088][ T7877] ? netdev_warn+0x3e/0x16c [ 491.844626][ T7877] ? hci_send_to_monitor+0x9c/0x4a0 [ 491.849847][ T7877] hci_rx_work+0x3eb/0xd40 [ 491.854317][ T7877] ? _raw_spin_unlock+0x40/0x40 [ 491.859239][ T7877] ? process_one_work+0x7b0/0x1160 [ 491.864403][ T7877] process_one_work+0x8a2/0x1160 [ 491.869405][ T7877] ? worker_detach_from_pool+0x240/0x240 [ 491.875085][ T7877] ? _raw_spin_lock_irq+0xb7/0xf0 [ 491.880138][ T7877] ? _raw_spin_lock_irqsave+0x100/0x100 [ 491.885711][ T7877] ? kthread_data+0x4b/0xc0 [ 491.890244][ T7877] worker_thread+0xaa2/0x1270 [ 491.894964][ T7877] ? __kthread_parkme+0x162/0x1c0 [ 491.900027][ T7877] kthread+0x29d/0x330 [ 491.904120][ T7877] ? worker_clr_flags+0x1a0/0x1a0 [ 491.909205][ T7877] ? kthread_blkcg+0xd0/0xd0 [ 491.913827][ T7877] ret_from_fork+0x1f/0x30 [ 491.918289][ T7877] [ 491.926923][ T7877] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 491.944985][ T7877] Bluetooth: hci4: failed to register connection device [ 492.118338][ T8392] loop1: detected capacity change from 0 to 512 [ 492.155420][ T8392] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 492.219963][ T8392] EXT4-fs (loop1): 1 truncate cleaned up [ 492.237302][ T8392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 493.199504][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 493.563895][ T8421] overlayfs: failed to resolve './file0': -2 [ 495.790056][ T8440] loop8: detected capacity change from 0 to 512 [ 495.821085][ T8440] EXT4-fs: Ignoring removed orlov option [ 495.859046][ T8440] EXT4-fs (loop8): Test dummy encryption mode enabled [ 495.877197][ T8440] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 495.960728][ T8440] EXT4-fs (loop8): 1 truncate cleaned up [ 495.968066][ T8440] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 496.859871][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 497.046953][ T8450] loop6: detected capacity change from 0 to 2048 [ 497.125984][ T8450] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 497.126121][ T8450] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.309251][ T8461] loop1: detected capacity change from 0 to 512 [ 497.385142][ T8461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 497.450082][ T8461] EXT4-fs (loop1): 1 truncate cleaned up [ 497.468726][ T8461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 497.485971][ T8468] overlayfs: './file0' not a directory [ 497.492509][ T8468] overlayfs: './file0' not a directory [ 499.066010][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 500.751413][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 501.238529][ T8494] process 'syz.0.984' launched './file0' with NULL argv: empty string added [ 501.534440][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.541076][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.275019][ T8499] loop1: detected capacity change from 0 to 512 [ 502.396090][ T8499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 502.429997][ T8499] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 503.602382][ T8519] loop0: detected capacity change from 0 to 512 [ 503.611994][ T8519] /dev/loop0: Can't open blockdev [ 504.076897][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 504.345901][ T8519] loop0: detected capacity change from 0 to 128 [ 504.364867][ T8519] /dev/loop0: Can't open blockdev [ 504.411880][ T4367] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 504.616779][ T8536] overlayfs: './file0' not a directory [ 504.646847][ T8536] overlayfs: './file0' not a directory [ 506.117452][ T8541] loop1: detected capacity change from 0 to 2048 [ 506.212473][ T8548] loop0: detected capacity change from 0 to 512 [ 506.439436][ T8550] netlink: 'syz.3.997': attribute type 4 has an invalid length. [ 506.461037][ T8548] /dev/loop0: Can't open blockdev [ 506.646814][ T8541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 506.796114][ T8541] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.317614][ T8561] loop0: detected capacity change from 0 to 512 [ 507.397640][ T8561] EXT4-fs: Ignoring removed orlov option [ 507.493417][ T8561] /dev/loop0: Can't open blockdev [ 508.646866][ T8554] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 509.705038][ T8554] EXT4-fs (loop1): Remounting filesystem read-only [ 510.394949][ T8580] loop8: detected capacity change from 0 to 512 [ 510.540474][ T8580] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 510.565507][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 510.917094][ T8580] EXT4-fs (loop8): 1 truncate cleaned up [ 511.012108][ T8580] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 511.391303][ T8589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1009'. [ 511.931662][ T8589] loop7: detected capacity change from 0 to 16384 [ 512.673385][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 512.931227][ T8598] loop7: detected capacity change from 16384 to 0 [ 513.649492][ T8623] loop0: detected capacity change from 0 to 512 [ 513.695230][ T8623] /dev/loop0: Can't open blockdev [ 514.085733][ T8632] loop0: detected capacity change from 0 to 256 [ 514.847699][ T8634] loop8: detected capacity change from 0 to 2048 [ 514.934766][ T8634] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 515.040630][ T8634] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.479105][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 515.819478][ T8655] loop8: detected capacity change from 0 to 512 [ 515.883257][ T8655] EXT4-fs: Ignoring removed orlov option [ 515.951785][ T8655] EXT4-fs (loop8): Test dummy encryption mode enabled [ 515.970493][ T8655] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 515.995194][ T8655] EXT4-fs (loop8): 1 truncate cleaned up [ 516.005159][ T8655] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 516.946285][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 517.923756][ T8669] loop8: detected capacity change from 0 to 512 [ 518.056352][ T8669] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 518.099048][ T7877] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 518.261739][ T8669] EXT4-fs (loop8): 1 truncate cleaned up [ 518.294595][ T8669] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 519.441411][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 519.458971][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 519.470725][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 519.557999][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 519.577443][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 519.699754][ T8700] loop6: detected capacity change from 0 to 2048 [ 519.740042][ T8703] loop8: detected capacity change from 0 to 128 [ 519.816469][ T8703] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 519.834858][ T8703] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.006211][ T8700] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 520.026614][ T8700] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.975307][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 521.489562][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 523.052326][ T8754] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1037'. [ 523.405469][ T8764] loop0: detected capacity change from 0 to 64 [ 524.955124][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1041'. [ 525.100755][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1041'. [ 525.267802][ T8774] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1040'. [ 525.563309][ T8786] loop8: detected capacity change from 0 to 2048 [ 525.660660][ T8786] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 525.700157][ T8786] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.067848][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 530.326066][ T8826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1052'. [ 530.420452][ T7925] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 530.538033][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1054'. [ 530.652068][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1054'. [ 530.709054][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1054'. [ 530.770045][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1054'. [ 530.773465][ T8841] loop1: detected capacity change from 0 to 512 [ 530.781447][ T7925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.800737][ T7925] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 530.834130][ T8841] EXT4-fs: Ignoring removed orlov option [ 530.839990][ T7925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.854361][ T8841] EXT4-fs (loop1): Test dummy encryption mode enabled [ 530.864224][ T7925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.905907][ T8841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 530.910866][ T7925] usb 1-1: Product: syz [ 530.934164][ T7925] usb 1-1: Manufacturer: syz [ 530.947221][ T7925] usb 1-1: SerialNumber: syz [ 530.981411][ T8841] EXT4-fs (loop1): 1 truncate cleaned up [ 531.002018][ T8841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 531.058532][ T7925] cdc_mbim 1-1:1.0: skipping garbage [ 531.245541][ T8821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 532.284003][ T8860] loop6: detected capacity change from 0 to 64 [ 532.352447][ T8821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 532.360017][ T7925] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 532.391261][ T7925] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 532.396810][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 532.505122][ T7925] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, c2:8e:be:87:29:4b [ 532.553535][ T26] audit: type=1800 audit(1778551819.905:86): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1058" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 532.675786][ T26] audit: type=1800 audit(1778551819.975:87): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1058" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 532.699371][ T4368] usb 1-1: USB disconnect, device number 7 [ 532.714044][ T4368] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 533.690986][ T8873] loop6: detected capacity change from 0 to 2048 [ 533.698274][ T8873] EXT4-fs: Ignoring removed i_version option [ 533.737760][ T8873] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 533.746407][ T8873] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.830006][ T8878] input: syz1 as /devices/virtual/input/input13 [ 533.850827][ T8873] fs-verity: sha512 using implementation "sha512-avx2" [ 535.007355][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 539.129366][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 539.139659][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 539.148744][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 539.226846][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 539.234840][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 539.243320][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 539.587945][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'. [ 539.613590][ T8922] loop8: detected capacity change from 0 to 128 [ 539.660164][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'. [ 539.662916][ T8922] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 539.678322][ T8922] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.694171][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'. [ 539.703217][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'. [ 544.199079][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 544.235540][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 544.435904][ T8908] chnl_net:caif_netlink_parms(): no params data found [ 545.446432][ T4363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.260819][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 548.223381][ T8978] loop6: detected capacity change from 0 to 128 [ 548.248965][ T4363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.279796][ T8978] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 548.312621][ T8978] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.868704][ T4363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.891437][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 548.899040][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.376804][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 549.431621][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.458780][ T8908] device bridge_slave_0 entered promiscuous mode [ 549.633336][ T8994] loop6: detected capacity change from 0 to 512 [ 549.645703][ T4363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.682149][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.706258][ T8994] EXT4-fs: Ignoring removed orlov option [ 549.714085][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.756296][ T8994] EXT4-fs (loop6): Test dummy encryption mode enabled [ 549.761290][ T8908] device bridge_slave_1 entered promiscuous mode [ 549.776432][ T8994] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 550.657637][ T8994] EXT4-fs (loop6): 1 truncate cleaned up [ 550.690558][ T8994] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 550.793851][ T8908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.828180][ T8908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.831480][ T8908] team0: Port device team_slave_0 added [ 551.932582][ T8908] team0: Port device team_slave_1 added [ 551.942540][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 551.964108][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 552.166891][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.254882][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.430845][ T8908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.457790][ T8908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.466051][ T9020] loop6: detected capacity change from 0 to 1024 [ 552.489851][ T8908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.517227][ T9020] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 552.581868][ T8908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.606948][ T4363] tipc: Left network mode [ 553.850981][ T8908] device hsr_slave_0 entered promiscuous mode [ 553.868189][ T8908] device hsr_slave_1 entered promiscuous mode [ 553.888143][ T8908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.899761][ T8908] Cannot create hsr debugfs directory [ 554.254186][ T9037] loop0: detected capacity change from 0 to 128 [ 554.300033][ T9037] /dev/loop0: Can't open blockdev [ 555.379025][ T9050] loop1: detected capacity change from 0 to 512 [ 555.471450][ T9050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 555.480633][ T9050] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.408107][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 556.457499][ T8908] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 556.596331][ T8908] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 556.623619][ T8908] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 556.727502][ T8908] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 556.805803][ T9069] binder: 9067:9069 ioctl 4018620d 0 returned -22 [ 557.315654][ T4363] device hsr_slave_0 left promiscuous mode [ 557.354657][ T4363] device hsr_slave_1 left promiscuous mode [ 557.370221][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.393370][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.429931][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.455245][ T4363] device bridge_slave_1 left promiscuous mode [ 557.485155][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.812673][ T4363] device bridge_slave_0 left promiscuous mode [ 557.854915][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.570621][ T4363] device veth1_macvtap left promiscuous mode [ 558.585040][ T4363] device veth0_macvtap left promiscuous mode [ 558.915404][ T4363] device veth1_vlan left promiscuous mode [ 558.945752][ T4363] device veth0_vlan left promiscuous mode [ 559.229873][ T4363] bond1 (unregistering): Released all slaves [ 559.675852][ T9097] loop1: detected capacity change from 0 to 512 [ 559.690959][ T9097] EXT4-fs: Ignoring removed orlov option [ 559.727583][ T9097] EXT4-fs (loop1): Test dummy encryption mode enabled [ 559.766517][ T9097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 559.779360][ T9099] loop0: detected capacity change from 0 to 128 [ 559.810039][ T9099] /dev/loop0: Can't open blockdev [ 559.831677][ T9097] EXT4-fs (loop1): 1 truncate cleaned up [ 559.837377][ T9097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 560.874229][ T9106] loop0: detected capacity change from 0 to 512 [ 560.889477][ T9106] /dev/loop0: Can't open blockdev [ 561.253280][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.319230][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.674735][ T4363] bond0 (unregistering): Released all slaves [ 561.757196][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 562.046898][ T8908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.122998][ T9118] binder: 9116:9118 ioctl 4018620d 0 returned -22 [ 563.201854][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.202557][ T8908] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.208224][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.262302][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 563.271750][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 563.316420][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 563.372377][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 563.395421][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.402673][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.418019][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 563.428271][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 563.653911][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.661222][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.701038][ T9134] loop0: detected capacity change from 0 to 1024 [ 563.722994][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 563.819384][ T9134] /dev/loop0: Can't open blockdev [ 563.828935][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 563.904165][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 563.922050][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 563.970276][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 564.020483][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 564.040241][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 564.053530][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 564.066965][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 564.085479][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 564.097289][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 564.113585][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 564.131207][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.210706][ T7877] Bluetooth: hci3: command 0x0406 tx timeout [ 565.490241][ T9150] loop1: detected capacity change from 0 to 512 [ 565.517540][ T9150] EXT4-fs: Ignoring removed orlov option [ 565.596834][ T9150] EXT4-fs (loop1): Test dummy encryption mode enabled [ 565.610374][ T9150] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 565.677721][ T9150] EXT4-fs (loop1): 1 truncate cleaned up [ 565.703760][ T9150] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 565.920733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.928580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 566.006287][ T8908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.663340][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 569.888436][ T9202] binder: 9201:9202 ioctl 4018620d 0 returned -22 [ 569.975901][ T9204] loop6: detected capacity change from 0 to 512 [ 569.995228][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 570.015728][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.164458][ T9204] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 570.203533][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 570.208687][ T9204] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.225832][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.259308][ T8908] device veth0_vlan entered promiscuous mode [ 570.303691][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.338174][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.402024][ T8908] device veth1_vlan entered promiscuous mode [ 570.598754][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 570.628724][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 570.655466][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 570.686887][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 570.725725][ T8908] device veth0_macvtap entered promiscuous mode [ 570.761015][ T8908] device veth1_macvtap entered promiscuous mode [ 570.824837][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.854608][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.912230][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.939157][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.954141][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.965103][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.991870][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 570.999283][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.031865][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.054818][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.082258][ T8908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.129197][ T8908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.166086][ T8908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.291209][ T8908] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.454472][ T8908] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.516898][ T8908] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.567249][ T8908] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.626583][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 571.667411][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 571.743712][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 571.792172][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 571.811251][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 571.968378][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 574.513600][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.535906][ T9252] binder: BINDER_SET_CONTEXT_MGR already set [ 574.540856][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.552557][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 574.580389][ T9252] binder: 9251:9252 ioctl 4018620d 200000001000 returned -16 [ 574.641009][ T9252] binder: 9251:9252 ioctl c0306201 2000000003c0 returned -22 [ 574.778655][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.972739][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.257413][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 575.691819][ T9259] loop0: detected capacity change from 0 to 1024 [ 575.699079][ T9259] /dev/loop0: Can't open blockdev [ 575.754487][ T9264] loop9: detected capacity change from 0 to 512 [ 575.942566][ T9264] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 575.970427][ T9264] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 576.552329][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 577.868712][ T9296] binder: BINDER_SET_CONTEXT_MGR already set [ 577.914872][ T9296] binder: 9293:9296 ioctl 4018620d 200000001000 returned -16 [ 578.050601][ T9299] binder: 9293:9299 ioctl c0306201 2000000003c0 returned -22 [ 581.146565][ T9340] loop0: detected capacity change from 0 to 128 [ 581.161292][ T9340] /dev/loop0: Can't open blockdev [ 581.241018][ T4367] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.698650][ T9358] loop8: detected capacity change from 0 to 512 [ 582.954789][ T9358] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 582.978975][ T9358] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.476786][ T9386] loop1: detected capacity change from 0 to 1024 [ 585.516995][ T9392] loop6: detected capacity change from 0 to 128 [ 585.548794][ T9386] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 585.611695][ T9392] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 585.636545][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 585.655728][ T9392] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.730599][ T9395] hub 8-0:1.0: USB hub found [ 585.735542][ T9395] hub 8-0:1.0: 1 port detected [ 586.444926][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 591.117134][ T9472] loop9: detected capacity change from 0 to 128 [ 591.208284][ T9472] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 591.304969][ T9472] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.425867][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 592.485987][ T9500] hub 8-0:1.0: USB hub found [ 592.487233][ T9500] hub 8-0:1.0: 1 port detected [ 594.289467][ T9520] loop0: detected capacity change from 0 to 1024 [ 594.337612][ T9520] /dev/loop0: Can't open blockdev [ 594.699202][ T9526] loop8: detected capacity change from 0 to 512 [ 594.798780][ T9526] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 594.870500][ T9526] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.051924][ T9530] input: syz1 as /devices/virtual/input/input20 [ 595.828806][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 597.054988][ T9552] loop1: detected capacity change from 0 to 128 [ 597.132871][ T9552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 597.204365][ T9552] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.373594][ T9556] loop8: detected capacity change from 0 to 512 [ 597.498081][ T9556] EXT4-fs: Ignoring removed orlov option [ 597.536604][ T9556] EXT4-fs (loop8): Test dummy encryption mode enabled [ 597.587998][ T9556] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 598.005505][ T9556] EXT4-fs (loop8): 1 truncate cleaned up [ 598.057183][ T9556] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 598.295235][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 599.778114][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 601.141987][ T9592] loop9: detected capacity change from 0 to 512 [ 601.244325][ T9592] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 601.290357][ T7877] Bluetooth: hci5: command 0x0405 tx timeout [ 601.326987][ T9592] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 603.376510][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 603.585147][ T9616] loop9: detected capacity change from 0 to 128 [ 603.648905][ T9616] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 604.089036][ T9621] hub 8-0:1.0: USB hub found [ 604.095582][ T9621] hub 8-0:1.0: 1 port detected [ 604.462013][ T9616] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.630899][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 606.327839][ T9643] loop6: detected capacity change from 0 to 512 [ 606.365149][ T9643] EXT4-fs: Ignoring removed orlov option [ 606.405590][ T9643] EXT4-fs (loop6): Test dummy encryption mode enabled [ 606.427214][ T9643] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 608.292211][ T9643] EXT4-fs (loop6): 1 truncate cleaned up [ 608.314844][ T9643] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 608.815371][ T9662] loop1: detected capacity change from 0 to 512 [ 608.937158][ T9662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 608.993787][ T9662] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 611.328154][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 612.098414][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 612.332911][ T9694] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1220'. [ 612.478263][ T9702] loop1: detected capacity change from 0 to 128 [ 612.611015][ T9702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 612.649575][ T9702] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.440530][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 614.047622][ T9719] loop9: detected capacity change from 0 to 512 [ 614.202040][ T9719] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 614.371773][ T9719] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 615.640150][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 617.151235][ T9747] loop6: detected capacity change from 0 to 512 [ 617.591164][ T9747] EXT4-fs: Ignoring removed orlov option [ 618.061602][ T9747] EXT4-fs (loop6): Test dummy encryption mode enabled [ 618.091883][ T9747] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 618.132961][ T9756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1234'. [ 618.161605][ T9747] EXT4-fs (loop6): 1 truncate cleaned up [ 618.167392][ T9747] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 618.400438][ T9761] loop9: detected capacity change from 0 to 128 [ 618.817500][ T9761] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 618.877139][ T9761] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.516720][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 620.527461][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 620.720594][ T9782] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1241'. [ 620.753565][ T9786] loop9: detected capacity change from 0 to 512 [ 621.269619][ T9786] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 621.429328][ T9786] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 622.536438][ T9804] loop0: detected capacity change from 0 to 128 [ 622.671293][ T9804] /dev/loop0: Can't open blockdev [ 623.398127][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 624.173900][ T9821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1248'. [ 624.425972][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.450353][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.764306][ T9830] loop0: detected capacity change from 0 to 128 [ 624.793470][ T9830] /dev/loop0: Can't open blockdev [ 624.976035][ T9832] input: syz1 as /devices/virtual/input/input21 [ 626.631003][ T9851] loop0: detected capacity change from 0 to 512 [ 626.638251][ T9851] EXT4-fs: Ignoring removed orlov option [ 626.711430][ T9851] /dev/loop0: Can't open blockdev [ 627.480691][ T9857] loop9: detected capacity change from 0 to 512 [ 627.671007][ T9857] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 627.702508][ T9857] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 629.829428][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 629.869089][ T9877] loop0: detected capacity change from 0 to 128 [ 629.881279][ T9877] /dev/loop0: Can't open blockdev [ 632.421569][ T9901] loop0: detected capacity change from 0 to 128 [ 632.491303][ T9901] /dev/loop0: Can't open blockdev [ 632.561396][ T4367] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 632.661048][ T9909] input: syz1 as /devices/virtual/input/input22 [ 633.345607][ T9917] loop0: detected capacity change from 0 to 512 [ 633.366177][ T9917] EXT4-fs: Ignoring removed orlov option [ 633.393486][ T9917] /dev/loop0: Can't open blockdev [ 635.721308][ T9933] loop0: detected capacity change from 0 to 512 [ 635.782388][ T9933] /dev/loop0: Can't open blockdev [ 635.866415][ T4367] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 635.951512][ T9942] loop9: detected capacity change from 0 to 128 [ 636.179249][ T9949] loop0: detected capacity change from 0 to 256 [ 636.853107][ T9942] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 636.881046][ T9942] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.075168][ T9957] loop1: detected capacity change from 0 to 128 [ 637.099438][ T9957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 637.862104][ T9957] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.987064][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 639.544226][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 639.859009][ T9982] loop1: detected capacity change from 0 to 512 [ 639.909821][ T9982] EXT4-fs: Ignoring removed orlov option [ 639.930925][ T9982] EXT4-fs (loop1): Test dummy encryption mode enabled [ 642.320837][ T9982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 642.450233][ T9982] EXT4-fs (loop1): 1 truncate cleaned up [ 642.538383][ T9982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 642.941228][T10004] loop9: detected capacity change from 0 to 512 [ 642.996564][T10009] loop8: detected capacity change from 0 to 128 [ 643.035750][T10009] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 643.081421][T10009] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.099953][T10004] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 643.184849][T10004] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 643.254909][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 644.491147][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 644.974336][T10036] loop6: detected capacity change from 0 to 128 [ 644.996864][T10033] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1296'. [ 645.073629][T10036] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 645.083157][T10036] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.911992][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 647.608955][T10069] loop8: detected capacity change from 0 to 512 [ 647.652333][T10069] EXT4-fs: Ignoring removed orlov option [ 647.717889][T10069] EXT4-fs (loop8): Test dummy encryption mode enabled [ 647.738989][T10069] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 647.809481][T10069] EXT4-fs (loop8): 1 truncate cleaned up [ 647.821157][T10069] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 648.511980][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 648.693588][T10082] loop8: detected capacity change from 0 to 128 [ 648.772513][T10082] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 648.802022][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 648.930422][T10082] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.300682][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 652.601961][T10127] loop9: detected capacity change from 0 to 512 [ 652.839464][T10127] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 652.965813][T10127] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 654.279766][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 657.820421][T10146] overlayfs: './file0' not a directory [ 657.935936][T10149] overlayfs: './file0' not a directory [ 658.584080][T10155] hub 8-0:1.0: USB hub found [ 658.589959][T10155] hub 8-0:1.0: 1 port detected [ 659.155399][T10161] loop1: detected capacity change from 0 to 128 [ 659.281756][T10161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 660.162240][T10161] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.316247][T10173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1323'. [ 660.888642][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 662.570492][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 662.887588][T10220] hub 8-0:1.0: USB hub found [ 662.893052][T10220] hub 8-0:1.0: 1 port detected [ 666.071731][T10243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1338'. [ 666.313185][T10246] binder: 10245:10246 ioctl 4018620d 0 returned -22 [ 668.064613][T10280] loop1: detected capacity change from 0 to 2048 [ 668.485234][T10280] EXT4-fs: Ignoring removed i_version option [ 668.998955][T10280] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 669.042048][T10280] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.292390][T10296] binder: 10293:10296 ioctl 4018620d 0 returned -22 [ 669.385169][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 669.543362][T10301] loop0: detected capacity change from 0 to 128 [ 669.571569][T10301] /dev/loop0: Can't open blockdev [ 669.628697][T10306] syz.8.1355 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 669.681153][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1354'. [ 671.449187][T10349] loop9: detected capacity change from 0 to 2048 [ 671.465422][T10349] UDF-fs: bad mount option "18446744073709551615" or missing value [ 671.872869][T10354] binder: 10353:10354 ioctl 4018620d 0 returned -22 [ 672.021285][T10357] loop1: detected capacity change from 0 to 2048 [ 672.091631][T10357] EXT4-fs: Ignoring removed i_version option [ 672.184751][T10357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 672.264539][T10357] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.321267][T10362] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1367'. [ 672.525121][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 672.862236][T10375] hub 8-0:1.0: USB hub found [ 672.867844][T10375] hub 8-0:1.0: 1 port detected [ 672.930056][T10373] loop9: detected capacity change from 0 to 64 [ 674.289775][T10382] loop1: detected capacity change from 0 to 8 [ 674.669202][T10395] binder: 10393:10395 ioctl c0306201 0 returned -14 [ 675.001533][T10405] loop6: detected capacity change from 0 to 2048 [ 675.020956][T10405] EXT4-fs: Ignoring removed i_version option [ 675.079032][T10405] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 675.110146][T10405] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.353801][ T5200] EXT4-fs (loop6): unmounting filesystem. [ 675.466595][T10419] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1381'. [ 675.604987][T10424] binder: 10420:10424 ioctl 89e0 200000000000 returned -22 [ 675.830393][T10431] loop1: detected capacity change from 0 to 128 [ 675.882665][T10431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 675.924811][T10431] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.273296][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 676.527074][T10447] loop1: detected capacity change from 0 to 64 [ 676.626684][T10452] overlayfs: './file0' not a directory [ 676.815059][T10455] overlayfs: './file0' not a directory [ 678.597260][T10469] loop1: detected capacity change from 0 to 512 [ 678.646599][T10469] EXT4-fs: Ignoring removed orlov option [ 678.694854][T10469] EXT4-fs (loop1): Test dummy encryption mode enabled [ 678.719603][T10469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 678.781542][T10469] EXT4-fs (loop1): 1 truncate cleaned up [ 678.788302][T10469] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 679.489816][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 680.207466][T10491] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1395'. [ 680.632884][T10500] loop1: detected capacity change from 0 to 128 [ 680.706858][T10500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 680.813775][T10500] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.829168][T10505] binder: 10502:10505 ioctl 89e0 200000000000 returned -22 [ 680.866259][T10508] loop8: detected capacity change from 0 to 64 [ 681.219506][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 682.315724][T10519] overlayfs: './file0' not a directory [ 682.567821][T10524] overlayfs: './file0' not a directory [ 683.134217][T10538] loop8: detected capacity change from 0 to 512 [ 683.356273][T10538] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.1404: iget: bad i_size value: 38620345925642 [ 683.394578][T10538] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1404: couldn't read orphan inode 15 (err -117) [ 683.407952][T10538] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 683.436825][T10544] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1407'. [ 683.604758][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 685.349439][T10576] loop0: detected capacity change from 0 to 64 [ 685.406370][T10577] loop9: detected capacity change from 0 to 2048 [ 685.433837][T10577] EXT4-fs: Ignoring removed i_version option [ 685.451160][T10158] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 685.682715][T10577] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 685.866082][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.873087][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.883085][T10577] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.365340][ T8908] EXT4-fs (loop9): unmounting filesystem. [ 686.471708][T10587] loop0: detected capacity change from 0 to 512 [ 686.473113][T10158] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 686.492908][T10587] EXT4-fs: Ignoring removed orlov option [ 686.498853][T10587] /dev/loop0: Can't open blockdev [ 686.763875][T10596] loop0: detected capacity change from 0 to 512 [ 686.771654][T10596] /dev/loop0: Can't open blockdev [ 687.801265][T10606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1419'. [ 688.411419][T10633] overlayfs: './file0' not a directory [ 688.504572][T10637] overlayfs: './file0' not a directory [ 688.581054][T10642] loop8: detected capacity change from 0 to 128 [ 688.617159][T10642] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 688.633859][T10642] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.739605][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 689.089185][T10648] loop8: detected capacity change from 0 to 2048 [ 689.126710][T10648] EXT4-fs: Ignoring removed i_version option [ 689.198253][T10648] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 689.265819][T10648] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.433495][T10658] loop9: detected capacity change from 0 to 256 [ 689.475548][ T7728] EXT4-fs (loop8): unmounting filesystem. [ 689.563964][T10658] FAT-fs (loop9): Directory bread(block 64) failed [ 689.590368][T10658] FAT-fs (loop9): Directory bread(block 65) failed [ 689.600747][T10658] FAT-fs (loop9): Directory bread(block 66) failed [ 689.640411][T10658] FAT-fs (loop9): Directory bread(block 67) failed [ 689.667419][T10658] FAT-fs (loop9): Directory bread(block 68) failed [ 689.700536][T10658] FAT-fs (loop9): Directory bread(block 69) failed [ 689.730692][T10658] FAT-fs (loop9): Directory bread(block 70) failed [ 689.737344][T10658] FAT-fs (loop9): Directory bread(block 71) failed [ 689.755192][T10658] FAT-fs (loop9): Directory bread(block 72) failed [ 689.781891][T10658] FAT-fs (loop9): Directory bread(block 73) failed [ 690.787565][T10675] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1433'. [ 690.956041][T10682] loop1: detected capacity change from 0 to 64 [ 691.245925][T10689] binder: 10685:10689 ioctl 89e0 200000000000 returned -22 [ 693.738062][T10722] loop0: detected capacity change from 0 to 128 [ 693.748638][T10723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1447'. [ 693.774766][T10722] /dev/loop0: Can't open blockdev [ 693.813741][T10714] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1444'. [ 693.825049][T10727] loop9: detected capacity change from 0 to 128 [ 693.853092][T10727] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 693.925946][T10727] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 694.157172][T10736] loop0: detected capacity change from 0 to 64 [ 694.245766][T10158] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 695.488582][T10751] binder: 10741:10751 ioctl 89e0 200000000000 returned -22 [ 695.951297][ T4994] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 696.170438][ T4994] usb 1-1: Using ep0 maxpacket: 8 [ 696.193869][ T4994] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 696.345549][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.479762][ T4994] usb 1-1: Product: syz [ 696.548910][ T4994] usb 1-1: Manufacturer: syz [ 696.788544][ T4994] usb 1-1: SerialNumber: syz [ 697.457437][ T4994] usb 1-1: config 0 descriptor?? [ 697.466471][ T4994] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 697.515053][T10776] overlayfs: './file0' not a directory [ 697.532115][T10778] loop8: detected capacity change from 0 to 64 [ 697.542604][T10776] overlayfs: './file0' not a directory [ 697.889684][T10783] syz.8.1460: attempt to access beyond end of device [ 697.889684][T10783] loop8: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 697.904500][T10783] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 697.924807][T10783] syz.8.1460: attempt to access beyond end of device [ 697.924807][T10783] loop8: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 697.938857][T10783] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 700.594047][T10807] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 700.830334][ T4994] gspca_sonixj: i2c_w8 err -71 [ 700.890408][ T4994] sonixj: probe of 1-1:0.0 failed with error -71 [ 700.910483][ T4994] usb 1-1: USB disconnect, device number 8 [ 702.626539][T10839] loop8: detected capacity change from 0 to 64 [ 702.958609][T10846] syz.8.1471: attempt to access beyond end of device [ 702.958609][T10846] loop8: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 702.972565][T10846] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 702.987756][T10846] syz.8.1471: attempt to access beyond end of device [ 702.987756][T10846] loop8: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 703.001540][T10846] Buffer I/O error on dev loop8, logical block 134217734, async page read [ 703.790035][T10849] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1473'. [ 703.889349][T10856] loop0: detected capacity change from 0 to 128 [ 703.926317][T10856] /dev/loop0: Can't open blockdev [ 703.929648][T10854] loop8: detected capacity change from 0 to 2048 [ 704.170090][T10854] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 704.297418][T10854] [ 704.299830][T10854] ====================================================== [ 704.306923][T10854] WARNING: possible circular locking dependency detected [ 704.313982][T10854] syzkaller #0 Not tainted [ 704.318422][T10854] ------------------------------------------------------ [ 704.325475][T10854] syz.8.1474/10854 is trying to acquire lock: [ 704.331594][T10854] ffff88806fe9db10 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 704.338130][T10864] loop6: detected capacity change from 0 to 256 [ 704.341418][T10854] [ 704.341418][T10854] but task is already holding lock: [ 704.341426][T10854] ffff88802834ac18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 704.341485][T10854] [ 704.341485][T10854] which lock already depends on the new lock. [ 704.341485][T10854] [ 704.341492][T10854] [ 704.341492][T10854] the existing dependency chain (in reverse order) is: [ 704.341499][T10854] [ 704.341499][T10854] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 704.393176][T10854] percpu_down_read+0x44/0x1a0 [ 704.398499][T10854] ext4_writepages+0x20f/0x2f40 [ 704.403906][T10854] do_writepages+0x3ba/0x640 [ 704.409058][T10854] __writeback_single_inode+0x156/0x1160 [ 704.415255][T10854] writeback_single_inode+0x3cb/0x8e0 [ 704.421195][T10854] write_inode_now+0x17f/0x210 [ 704.426528][T10854] iput+0x613/0x980 [ 704.430899][T10854] ext4_xattr_block_set+0x273b/0x32b0 [ 704.436853][T10854] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 704.443318][T10854] __ext4_expand_extra_isize+0x301/0x3e0 [ 704.449513][T10854] __ext4_mark_inode_dirty+0x47f/0x770 [ 704.455557][T10854] ext4_evict_inode+0xa7f/0x1110 [ 704.458099][T10864] exfat: Deprecated parameter 'namecase' [ 704.461056][T10854] evict+0x4c9/0x8d0 [ 704.461086][T10854] ext4_orphan_cleanup+0xbeb/0x1420 [ 704.461118][T10854] ext4_fill_super+0x6ee3/0x78c0 [ 704.482420][T10854] get_tree_bdev+0x3f1/0x610 [ 704.487663][T10854] vfs_get_tree+0x88/0x270 [ 704.489434][T10864] exfat: Deprecated parameter 'namecase' [ 704.492630][T10854] do_new_mount+0x24a/0xa40 [ 704.492655][T10854] __se_sys_mount+0x2e3/0x3d0 [ 704.492677][T10854] do_syscall_64+0x4c/0xa0 [ 704.492705][T10854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.492731][T10854] [ 704.492731][T10854] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 704.492763][T10854] __lock_acquire+0x2d07/0x7d10 [ 704.492791][T10854] lock_acquire+0x1bb/0x4a0 [ 704.492816][T10854] down_write+0x36/0x60 [ 704.492843][T10854] ext4_destroy_inline_data+0x24/0xe0 [ 704.548664][T10854] ext4_writepages+0x670/0x2f40 [ 704.554090][T10854] do_writepages+0x3ba/0x640 [ 704.558917][T10864] exfat: Unknown parameter 'obj_' [ 704.559232][T10854] filemap_fdatawrite_wbc+0x11e/0x180 [ 704.570197][T10854] file_write_and_wait_range+0x159/0x230 [ 704.576397][T10854] ext4_sync_file+0x23b/0xca0 [ 704.581656][T10854] ext4_buffered_write_iter+0x2f6/0x390 [ 704.587770][T10854] ext4_file_write_iter+0x1cf/0x1710 [ 704.593627][T10854] vfs_write+0x4b1/0xa30 [ 704.598448][T10854] __x64_sys_pwrite64+0x197/0x220 [ 704.604037][T10854] do_syscall_64+0x4c/0xa0 [ 704.609020][T10854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.615481][T10854] [ 704.615481][T10854] other info that might help us debug this: [ 704.615481][T10854] [ 704.625745][T10854] Possible unsafe locking scenario: [ 704.625745][T10854] [ 704.633237][T10854] CPU0 CPU1 [ 704.638631][T10854] ---- ---- [ 704.644020][T10854] lock(&sbi->s_writepages_rwsem); [ 704.649265][T10854] lock(&ei->xattr_sem); [ 704.656152][T10854] lock(&sbi->s_writepages_rwsem); [ 704.663926][T10854] lock(&ei->xattr_sem); [ 704.668316][T10854] [ 704.668316][T10854] *** DEADLOCK *** [ 704.668316][T10854] [ 704.676486][T10854] 2 locks held by syz.8.1474/10854: [ 704.681715][T10854] #0: ffff8880277fa460 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 704.690676][T10854] #1: ffff88802834ac18 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 704.701275][T10854] [ 704.701275][T10854] stack backtrace: [ 704.707199][T10854] CPU: 0 PID: 10854 Comm: syz.8.1474 Not tainted syzkaller #0 [ 704.714696][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.724807][T10854] Call Trace: [ 704.728120][T10854] [ 704.731091][T10854] dump_stack_lvl+0x188/0x24e [ 704.735831][T10854] ? load_image+0x400/0x400 [ 704.740391][T10854] ? show_regs_print_info+0x12/0x12 [ 704.745654][T10854] ? print_circular_bug+0x12b/0x1a0 [ 704.750910][T10854] check_noncircular+0x296/0x330 [ 704.755915][T10854] ? add_chain_block+0x940/0x940 [ 704.760901][T10854] ? lockdep_lock+0xf1/0x1f0 [ 704.765563][T10854] ? _find_first_zero_bit+0xcf/0x100 [ 704.770910][T10854] __lock_acquire+0x2d07/0x7d10 [ 704.775833][T10854] ? verify_lock_unused+0x140/0x140 [ 704.781092][T10854] ? mark_lock+0x94/0x320 [ 704.785481][T10854] ? verify_lock_unused+0x140/0x140 [ 704.790743][T10854] ? __lock_acquire+0x12f4/0x7d10 [ 704.795830][T10854] lock_acquire+0x1bb/0x4a0 [ 704.800383][T10854] ? ext4_destroy_inline_data+0x24/0xe0 [ 704.805985][T10854] ? read_lock_is_recursive+0x10/0x10 [ 704.811418][T10854] ? ext4_journal_check_start+0x17e/0x240 [ 704.817189][T10854] down_write+0x36/0x60 [ 704.821399][T10854] ? ext4_destroy_inline_data+0x24/0xe0 [ 704.826994][T10854] ext4_destroy_inline_data+0x24/0xe0 [ 704.832418][T10854] ext4_writepages+0x670/0x2f40 [ 704.837310][T10854] ? __might_sleep+0xd0/0xd0 [ 704.841950][T10854] ? ext4_get_group_desc+0x10a/0x4d0 [ 704.847289][T10854] ? __lock_acquire+0x7d10/0x7d10 [ 704.852399][T10854] ? mark_lock+0x94/0x320 [ 704.856785][T10854] ? __might_sleep+0xd0/0xd0 [ 704.861424][T10854] ? ext4_read_folio+0x370/0x370 [ 704.866434][T10854] ? ext4_reserve_inode_write+0x244/0x290 [ 704.872202][T10854] ? ext4_read_folio+0x370/0x370 [ 704.877162][T10854] do_writepages+0x3ba/0x640 [ 704.881784][T10854] ? filemap_fdatawrite_wbc+0x113/0x180 [ 704.887356][T10854] ? __writepage+0x130/0x130 [ 704.891975][T10854] ? __lock_acquire+0x7d10/0x7d10 [ 704.897072][T10854] ? __rwlock_init+0x140/0x140 [ 704.901856][T10854] ? do_raw_spin_unlock+0x11d/0x230 [ 704.907073][T10854] filemap_fdatawrite_wbc+0x11e/0x180 [ 704.912475][T10854] file_write_and_wait_range+0x159/0x230 [ 704.918128][T10854] ? __filemap_set_wb_err+0x230/0x230 [ 704.923525][T10854] ? __lock_acquire+0x7d10/0x7d10 [ 704.928581][T10854] ? generic_file_direct_write+0x330/0x330 [ 704.934412][T10854] ext4_sync_file+0x23b/0xca0 [ 704.939112][T10854] ext4_buffered_write_iter+0x2f6/0x390 [ 704.944682][T10854] ext4_file_write_iter+0x1cf/0x1710 [ 704.950005][T10854] ? rcu_read_lock_any_held+0xb0/0x130 [ 704.955483][T10854] ? ext4_file_read_iter+0x650/0x650 [ 704.960784][T10854] ? end_current_label_crit_section+0x14b/0x170 [ 704.967046][T10854] ? common_file_perm+0x171/0x1c0 [ 704.972090][T10854] vfs_write+0x4b1/0xa30 [ 704.976369][T10854] ? file_end_write+0x250/0x250 [ 704.981248][T10854] ? __fget_files+0x43d/0x4b0 [ 704.985972][T10854] ? __fdget+0x17c/0x200 [ 704.990243][T10854] ? __x64_sys_pwrite64+0xf2/0x220 [ 704.995383][T10854] __x64_sys_pwrite64+0x197/0x220 [ 705.000438][T10854] ? ksys_pwrite64+0x1b0/0x1b0 [ 705.005235][T10854] ? lockdep_hardirqs_on+0x94/0x140 [ 705.010463][T10854] do_syscall_64+0x4c/0xa0 [ 705.014905][T10854] ? clear_bhb_loop+0x60/0xb0 [ 705.019601][T10854] ? clear_bhb_loop+0x60/0xb0 [ 705.024301][T10854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.030215][T10854] RIP: 0033:0x7f5e9559cdd9 [ 705.034662][T10854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.054306][T10854] RSP: 002b:00007f5e963f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 705.062752][T10854] RAX: ffffffffffffffda RBX: 00007f5e95815fa0 RCX: 00007f5e9559cdd9 [ 705.070765][T10854] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 705.078762][T10854] RBP: 00007f5e95632d69 R08: 0000000000000000 R09: 0000000000000000 [ 705.086760][T10854] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 705.094754][T10854] R13: 00007f5e95816038 R14: 00007f5e95815fa0 R15: 00007ffc9d9cb3a8 [ 705.102760][T10854] [ 705.183667][T10869] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 705.495162][T10854] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 705.511954][T10854] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 705.524624][T10854] EXT4-fs (loop8): This should not happen!! Data will be lost [ 705.524624][T10854] [ 705.526058][T10869] EXT4-fs (loop8): Online defrag not supported with bigalloc [ 705.534486][T10854] EXT4-fs (loop8): Total free blocks count 0 [ 705.548014][T10854] EXT4-fs (loop8): Free/Dirty block details [ 705.554071][T10854] EXT4-fs (loop8): free_blocks=2415919504 [ 705.559918][T10854] EXT4-fs (loop8): dirty_blocks=48 [ 705.565144][T10854] EXT4-fs (loop8): Block reservation details