last executing test programs: 3m46.159749209s ago: executing program 1 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, 0x0, 0x30}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000000)=@framed={{}, [@printk={@llu}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m45.039089868s ago: executing program 1 (id=410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@empty, 0xfe, 0x3c}, @in6=@empty, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x0, 0x2000000}, 0x70bd2d, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3m44.687957093s ago: executing program 1 (id=411): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$eJzs3AuYTlX7MPD7XmttxjTxNMlhWGvdmycNlkOSHJLkkCTJK0lOCaFJkoTEOEsakiTHSXIYQnKYxqRxPh9yTpKkSZKQkLC+S3993rf30Pf+/32f63vn/l3Xvqz72c+99r2fez/2s/dzPfNdj1F1mtWt2YSI4H8E/+ufZACIAYBhAJAPAAIAqBhfMf7y+jwSk/9nG2F/rofTrnUF7Fri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxs2+zCN/CScxe+/5+T8fn/P0h2mUlfbShzU89/I4X7n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/uds3H/GcrL//r1j/u7gP2G51scfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Zy/SgHAb+NrXRdjjDHGGGOMMcb+PD73ta6AMcYYY4wxxhhj//chCJCACJALckMM5IFYuA7i4HrIC/kgAjdAPNwI+eEmKAAFoRAUhgQoAkVBgwELBCEUg+IQhZuhBNwCiVASSkFpcFAGykI5KA+3QgW4DSrC7VAJ7oDKUAWqQjW4E6rDXVAD7oaacA/UgtpQB+rCvVAP7oP6cD80gAegITwIjeAhaAx/gSbwMDSFR6AZPArN4TFoAS2hFbSGNv+t/BehD7wEfaEfJEN/GAADYRAMhiEwFIbByzAcXoER8CqkwEgYBa/BaHgdxsAbMBbehHHwFoyHCTARJsFkmAKp8DZMhXdgGrwL02EGzIRZkAazYQ68B3NhHsyH92EBfAALYREshiWQDh9CBiyFTPgIlsHHkAXLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBp/AdtgBO2EX7IY9sBc+hX3wGeyHz+EAfPFv5p/9XX5PBAQUKFChwlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBQNGiQkVFeOpBJYAhMxEUthKXTosCyWxfJ4K1bAClgRK2IlrISVsQpWwWpYDatjdayBNbAm1sRaWAvrYB28F+/F+7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xM3bGJEzCLtgFu2JX7IbdsDt2xx7YA3tiL+yFL+KL+BK+hP2wluiPA3AADsJBOASH4lB8GYfjK/gKvoopOBJH4Wv4Gr6OY/AMjsU3cRyOw+piAk7ESUhiCqZiKk7FqTgNp+F0nIEzcBam4Wycg3NwLs7Defg+LsAP8ANchItwCaZjOmbgUszETFyGZzELl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBU/wU9wB+7AXbgL91x+rfFT/Aw/wxQ8gAfwIB7EQ3gID+NhzMZsPIJH8CgexWN4DI/jcTyBJ/EUnsTTeBrP4Fk8h+fwPJ7HC/h8wjdN95RcnwLiMiWUyCVyiRgRI2JFrIgTcSKvyCsiIiLiRbzIL/KLAqKAKCQKiQSRIIqKosIII0iEopgoJqIiKkqIEiJRJIpSopRwwomyoqwoL8qLCqKCqChuF5XEHaKyqCLau2qimqguOrga4m5RU9QUtURtUUfUFXVFPVFP1Bf1RQPRQDQUDUUj8ZBoLPrjEHxYXO5MMzESm4tR2EK0FK1Ea/E6Pi7aijHYTrQXHcST4k0ci51FW5cknhZdxETsKp4Vk/A50V1MwR7iBdFT9BK9xYuij2jn+op+Yjr2FwPELBwkBoshYqiYi7XF5Y7VEa+KFDFSjBKviSX4uvjtGB8n3hLjxQQxUUwSk8UUkSreFlPFO2KaeFdMFzPETDFLpInZYo54T8wV88R88b5YID4QC8UisVgsEeniQ5EhlopM8ZFYJj4WWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iE7Fd7BA7xS6xW+wRe8WnYp/4TOwXn4sD4gtxUHwpDomvxGHxtcgW34gj4ltxVHwnjonvxXHxgzghTopT4kdxWvwkzoiz4pz4WZwXv4gL4qK4JLwAiVJIKZUMZC6ZW8bIPDJWXifj5PUyr8wnI/IGGS9vlPnlTbKALCgLycIyQRaRRaWWRlpJMpTFZHEZlTfLEvIWmShLylKytHSyjCwry8ny8lZZQd4mK8rbZSV5h6wsq8iqspq8U1aXd8ka8m5ZU94ja8naso6sK++V9eR9sr68XzaQD8iG8kHZSD4kG8u/yCbyYdlUPiKbyUdlc/mYbCFbylaytWwjH5dt5ROynWwvO8gnZUfZSXaWT8kk+bTsIp+RXeWzspt8TnaXz8se8gXZU/aSveVFeUl62Vf2k8myvxwgB8pBcrAcIofKYfJlOVy+IkfIV2VKDADI1+Ro+bocI9+QY+Wbcpx8S46XE+REOUlOllNkqnxbTpXvyGnyXTldzpAz5SyZJmfLIVdmmv9/kP/OP8gfIVPkSLlVbpOfyO1yh9wpd8ndco/cK/fKfXKf3C/3ywPygDwoD8pD8pA8LA/LbJktj8gj8qg8Ko/JY/K4PC5PyJPyZ/mjPC1/kmfkWXlW/izPy/PywpXXABQqoaRSKlC5VG4Vo/KoWHWdilPXq7wqn4qoG1S8ulHlVzepAqqgKqQKqwRVRBVVWhllFalQFVPFVVTdjFfeIqqUKq2cKqPKqnL/Tr4qoW5Riark3+T/UX1tVBvVVrVV7VQ71UF1UB1VR9VZdVZJKkl1UV1UV9VVdVPdVHfVXfVQPVRP1VP1Vr1VH9VH9VV9VbJKVgPUQDVIDVZD1FA1rD+o4Wq4GqFGqBSVokapUWq0Gq3GqDFqrBqrxqlxarwaryaqiWqymqxSVaqaqqaqaWqamq6mq5lqpkpTaWqOmqPmqrlqvpqvFqgFaqFaqBarxSpdpasMlaEyVaZappapLLVcLVcr1Uq1Wq1Wa9VatV6tVxvVRrVZbVZZapvaprar7Wqn2ql2q91qr9qr9ql9ar/arw6oA+qgOqgOqUPqsDqsslW2OqKOqKPqqDqmjqnj6rg6oU6oU+qUOq1OqzPqjDqnzqnz6ry6oC6oS+qSggACEYhABSrIFeQKYoKYIDaIDeKCuCBvkDeIBJEgPogP8gc3BQWCgkGhoHCQEBQJigY6MIENKAiDYkHxIBrcHJQIbgkSg5JBqaB04IIyQdmgXFA+uDWoENwWVAxuDyoFdwSVgypB1aBacGdQPbgrqBHcHdQM7glqBbWDOkHd4N6gXnBfUD+4P2gQPBA0DB4MGgUPBY2DvwRNgoeDpsEjQbPg0aB58FjQImgZtApaB23+rPkVBE0D788UfML11f10su6vB+iBepAerIfooXqYflkP16/oEfpVnaJH6lH6NT1av67H6Df0WP2mHqff0uP1BD1RT9KT9RSdqt/WU/U7epp+V0/XM/RMPUun6dl6jn5Pz9Xz9Hz9vl6gP9AL9SK9WC/R6fpDnaGX6kz9kV6mP9ZZerleoVfqVXq1XqPX6nV6vd6gN+pNerPeorfqbfoTvV3v0Dv1Lr1b79F79ad6n/5M79ef6wP6C31Qf6kP6a/0Yf21ztbf6CP6W31Uf6eP6e/1cf2DPqFP6lP6R31a/6TP6LP6nP5Zn9e/6Av6or6k/eUP95dP70YZZXKZXCbGxJhYE2viTJzJa/KaiImYeBNv8pv8poApYAqZQibBJJiipqi5jAyZYqaYiZqoKWFKmESTaEqZUsYZZ8qasqa8KW8qmAqmoqloKplKprKpbKqaquZOc6e5y9xl7jZ3m3vMPaa2qW3qmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimpqmpplpZpqb5qaFaWFamVamjWlj2pq2pp1pZzqYDqaj6Wg6m84mySSZLqaL6Wq6mm6mm+luupsepofpaXqa3qa36WP6mL6mr0k2yWaAGWAGmUFmiBlihplhZrgZbkaYESbFpJhRZpQZbUabMWaMGWveNOPMW2a8mWAmmklmspliUk2qmWqmmmlmmpluppuZZqZJM2lmjplj5pq5Zr6ZbxaYBWahWWgWm8Um3aSbDJNhMk2mWWaWmSyTZVaYFWaVWWXWmDVmnVlnNpgNZpPZZLaYLWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W8OmAPmoDnoEcAcNodNtsk2R8wRc9QcNcfMMXPcHDcnzAlzypwyp81pc8acMefMOXPe/GIumIvmkvEmxuaxsfY6G2evt3ltPvv7uJAtbBNsEVvUalvAFvyb2FhrE21JW+q3S0xbziZePpfa0tbZMrasLWcr2yq2qq1m77TV7V22xu/jfGDvs/Xt/baBfcDWtffaen8VN7QP2kb2UdvYPmab2Ja2qW1tm9lHbXP7mG1hW9pWtrXtaDvZzvYpm2Sftl3sM38XZ9ildp1dbzfYjXaf/cyesz/bo/Y7e97+YvvafnaYfdkOt6/YEfZVm2JH/l08zr5lx9sJdqKdZCfbKX8Xz7SzbJqdbefY9+xcO+/v4nT7oV1gM+1Cu8gutkt+jS/XlGk/ssvsxzbLLrcr7Eq7yq62a+za/13rSrvZbrFb7V77qd1ud9iddpfdbff8Gl/ej/32c3vAfmGP2G/tIfuVPWyP2Wz7za/x5f07Zr+3x+0P9oQ9aU/ZH+1p+5M9Y89e3n9/ed9/tBftJestEJIgSYoCykW5KYbyUCxdR3F0PeWlfBShGyiebqT8dBMVoIJUiApTAhWhoqTJkCWikIpRcYrSzVSCbqFEKkmlqDQ5KkNlqRyVp1upAt1GFel2qkR3UGWqQlWpGt1J1ekuqkF3U026h2pRbapDdeleqkf3UX26nxrQA9SQHqRG9BA1pr9QE3qYmtIj1Iwepeb0GLWgltSKWlMbepza0hPUjtpTB3qSOlIn6kxPURI9TV3oGepKz1I3eo660/PUg16gntSLetOL1Ideor7Uj5KpPw2ggTSIBtMQGkrD6GUaTq/QCHqVUmgkjaLXaDS9TmPoDRpLb9I4eovG0wSaSJNoMk2hVHqbptI7NI3epek0g2bSLEqj2TSH3qO5NI/m0/u0gD6ghbSIFtMSSqcPKYOWUiZ9RMvoY8qi5bSCVtIqWk1raC2to/W0gTbSJtpMW2grbaNPaDvtoJ20i3bTHtpLn9I+ynPlDfcFHaQv6RB9RYfpa8qmb+gIfUtH6Ts6Rt/TcfqBTtBJOkU/0mn6ic7QWTpHP9N5+oUu0EW6RJ4gxFCEMlRhEOYKc4cxYZ4wNrwujAuvD/OG+cJIeEMYH94Y5g9vCguEBcNCYeEwISwSFg11aEIbUhiGxcLiYTS8OSwR3hImhiXDUmHp0IVlwrJhubB8eGtYIbwtrBjeHlYK7wgrh1XCRx+oFt4ZVg/vCmuEd4c1w3vCWmHtsE5YN7w3rBfeF9YP7w8bhA+EFcIHw0bhQyFc+b1K0/CRsFn4aNg8fCxsEbYMW4Wtwzbh42Hb8ImwXdg+7BA+GXYMO4Wdw6fCpPDpsEv4zB+uTw77hwPCgeHA0Pv75eLokmh69MNoRnRpNDP6UXRZ9ONoVnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a9T7urnBoRNOOuUCl8vldjEuj4t117k4d73L6/K5iLvBxbsbXX53kyvgCrpCrrBLcEVcUaedcdaRC10xV9xF3c2uhLvFJbqSrpQr7Zwr48q61q6Na+PauidcO9fedXBPuiddJ9fJPeWeck+7Lu4Z19U967q551x397x73r3gerperrd70fVxL7m+rp9LdslugBvgBrlBbogb4oa5YW64G+5GuBEuxaW4UW6UG+1GuzFujBvrxrpxbpwb78a7iW6im+wmu1SX6qa6qW6am+YCAJjpZro0l+bmuDlurpvr5rv5bkHiArfQLXSL3WKX7tJdhstwmS7TLXPLXJbLcivcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXPb3Xa30+10u91ut9ftdfvcPrff7XcH3AF30B10h9whd9h97bLdN+6I+9Yddd+5Y+57d9z94E64k+6U+9Gddj+5M+6sO+d+dufdL+6Cu+guOe9SI29HpkbeiUyLvBuZHpkRmRmZFUmLzI7MibwXmRuZF5kfeT+yIPJBZGFkUWRxZEkkPfJhJCOyNJIZ+SiyLPJxJCuyPLIisjKyKrJagS+yPfTFfHEf9Tf7Ev4Wn+hL+lK+tHe+jM/ty/ny/lZfwd/mK/rbfSV/h6/sq/iq/jHfwrf0rXxr38Y/7tv6J3w739538E/6jr6T7+yf8kn+ad/FP+O7+md9N/+c7+6f9z38C76n7+V7+xd9H/+S7+v7+WTf3w/wA/0gP9gP8UP9MP+yH+5f8SP8qz7Fj/Sj/Gt+tH/dj/Fv+LH+TT/Ov+XH+wl+op/kJ/spPtW/7af6d/w0/66f7mf4mX6WT/Oz/Rz/np/r5/n5/n2/wH/gF/pFfrFf4tP9hz7DL/WZ/iO/zH/ss/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8J3673+F3+l1+t9/j9/pP/T7/md/vP/cH/Bf+oP/SH/Jf+cP+a5/tv/FHsr71R/13/pj/3h/3P/gT/qQ/5X/0p/1P/ow/68/5n/15/4u/4C/6S//mb9Zq/xm3zhljjDHG/j808A/W9/8HjykAEFfGv3jvr99ROPuv10sA2FTgv8aDRULHCAA83a/Hw78ttWolJydfeW6WhKD4IgCI/G4DV+Ll0AE6QRK0h/L/sL7Botd5+hfzZ4yhydHbAWL/KicGrsZX5//yn8z/+JPjMiqF5+L/ef3RRQCJxa/mXL4K/y1eDh1+/eqwPVT4J/MXbPuv6s+SkOerVIB2f5UTBwDt8vy+/rLwBDwDSX/zzAb/cJuMMcYYY4wxxnKewaJqtz+4/vz1+jxBXc3JDVfjP7o+Z4wxxhhjjDHG2LX3XK/eTz2elNS+Gw94wIMcNuj0L55zrf9nYowxxhhjjP3Zrn7ov/pYnmtZEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9v/hLY9d6HxljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLFr7X8FAAD//8HaM+M=") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 3m43.619749099s ago: executing program 1 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f00000013c0)={@val={0x0, 0x8864}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x1, 0xa86}}, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "8f3889", 0x46, 0x21, 0x0, @private1, @private0, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x0, "581ed9", 0x1, "b52f55"}, "2227a92d93fb2a036e7d186d99716089629387b2984dae9532e54cfe17d14fff44f30e3e00cb5c64bc549febefd7034f1de0d09aa066"}}}}}}}, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/132, 0x84}], 0x1, 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x18, r7, 0x65283e1aaa2ddbb1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) recvmsg(0xffffffffffffffff, 0x0, 0xc0000001) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d168d6e03248e5b0a"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) 3m41.407238865s ago: executing program 1 (id=420): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = memfd_create(0x0, 0xcfcfa5ad89019b5a) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r1, 0x1, 0x1000, 0x3a6cc3d29fdfbe44}) 3m40.788760202s ago: executing program 1 (id=423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4800) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m38.06731508s ago: executing program 4 (id=435): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}}}}}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) shmat(r1, &(0x7f0000f02000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r1, 0xc) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m30.888592181s ago: executing program 4 (id=456): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) readahead(r0, 0x80000001, 0x8) 3m30.727811327s ago: executing program 4 (id=459): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x10000, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8], 0x21, 0x1c3, &(0x7f0000000780)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 3m29.04708323s ago: executing program 4 (id=466): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rmdir(0x0) socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) 3m26.249727311s ago: executing program 4 (id=472): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0xf, 0x2c, 0x6, 0x10, 0x10, 0x6, 0xfffa, 0x5f2, 0x1000, 0x3, 0x10, 0x11}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3m24.770514285s ago: executing program 32 (id=423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4800) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m23.183940284s ago: executing program 4 (id=481): r0 = socket$inet6(0xa, 0x803, 0xa7) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) 3m21.652519541s ago: executing program 33 (id=481): r0 = socket$inet6(0xa, 0x803, 0xa7) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) 2m37.591741248s ago: executing program 5 (id=631): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) membarrier(0x10, 0x0) 2m35.523836897s ago: executing program 5 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x50) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, 0x0) 2m34.319939139s ago: executing program 5 (id=639): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0x1d, 0x2, 'BK'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2m30.14587504s ago: executing program 5 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x50) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, 0x0) 2m27.82784946s ago: executing program 5 (id=652): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) geteuid() setresuid(0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x22c, &(0x7f0000000d00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28) 2m26.431849761s ago: executing program 5 (id=656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m18.081784222s ago: executing program 3 (id=673): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x10000014}) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r6, &(0x7f0000000100)={r5, r4, 0xffffffff}) 2m15.731842514s ago: executing program 3 (id=675): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x421, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240, 0xff53b12e2d95ed37}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_COLLECT_METADATA={0xffffffffffffff9b}]}}}]}, 0x40}}, 0x44895) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) fchown(r0, 0xffffffffffffffff, 0xee00) 2m13.505478381s ago: executing program 3 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x9, 0x0, &(0x7f0000000400)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f00000002c0)) 2m12.991953193s ago: executing program 3 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000440)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "c683faa6825f1a25af3b6191facc8751ba3d8a447a0f359cf181bb0d58924dd9d9b34837a9ef3a3f72c925bbd42a07f3b2f9b25d4e7c08909985c4a4734ae2bd"}, 0x48, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x4b2) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r6, 0x1) 2m11.343075554s ago: executing program 34 (id=656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m8.081991775s ago: executing program 3 (id=687): mkdirat(0xffffffffffffff9c, 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f00000002c0)) write$sndseq(0xffffffffffffffff, &(0x7f00000004c0)=[{0x7f, 0xa4, 0x0, 0x1, @tick=0x7, {0x70, 0x7}, {0xb, 0xd}, @ext={0x0, 0x0}}, {0x56, 0x33, 0xfa, 0xff, @time={0x2629, 0x8}, {0x81, 0x2}, {0x1f}, @queue={0x8, {0x0, 0x40c4}}}, {0x0, 0xb, 0x3, 0x6, @tick=0xa, {0x77, 0x6}, {0x9}, @connect={{0x4}, {0x1, 0x2}}}], 0x54) 2m7.354855377s ago: executing program 3 (id=688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m52.185709994s ago: executing program 35 (id=688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 12.207964862s ago: executing program 2 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000000)=@framed={{}, [@printk={@llu}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.106080119s ago: executing program 8 (id=979): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) 7.746263415s ago: executing program 8 (id=983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) 7.213380728s ago: executing program 8 (id=987): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000006c0), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) syz_open_procfs$pagemap(r4, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) setreuid(0xee00, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r5, &(0x7f0000000040)=[@l={0x92, 0x0, 0xd0}], 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, 0x0, 0x0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) 6.569629056s ago: executing program 2 (id=990): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0xa30d, 0x200, 0x0, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x31}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 6.202387392s ago: executing program 2 (id=991): r0 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x803c1, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000200)=ANY=[], 0x50) sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000290000003700000073000000000000001800000000000000290000003b00000000000000000000006801000000000000290000003700000001290000000000000502000707280000000008e402000400000000000000050000000000000000000000000000000100008000000000c910fe8000000000000000000000000000aa060240afd0ed68d394f83311fc71223cdb254127ca6fd8ddd852350af674f3d52fbc7fcab87ce371751593983a257da8e61b6d72539af93d2241ef97dd902e691bc17ec68192e55ef11f5508d43acc02e81656a2bb81c93d14f57732b0d70788bc3703"], 0x288}, 0x20000004) 5.940052263s ago: executing program 0 (id=992): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup2(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0x3ff}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x40003, 0x40, 0x5, 0x100, 0x10, 0x40008}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f0000000040)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@nombcache}, {@nolazytime}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") 4.745963375s ago: executing program 0 (id=996): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x3}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r3, 0xfffffe4d}}, 0x48) 4.480291487s ago: executing program 0 (id=997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) 4.046156755s ago: executing program 7 (id=999): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 3.914295941s ago: executing program 0 (id=1000): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000640)) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 3.879913682s ago: executing program 8 (id=1001): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000400)={{0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 'wrr\x00', 0x0, 0x20, 0x7d}, {@local, 0x0, 0x10000, 0x0, 0x80000001, 0x6}}, 0x44) 3.659850012s ago: executing program 7 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0xa30d, 0x200, 0x0, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x31}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3.659631982s ago: executing program 0 (id=1003): syz_mount_image$ext4(&(0x7f00000017c0)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x14, &(0x7f0000000540)={[{@barrier_val={'barrier', 0x3d, 0xffff}}, {@noacl}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@delalloc}, {@usrjquota}, {@bh}]}, 0x1, 0x407, &(0x7f0000001800)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x3, 0x1) getdents64(r4, 0x0, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = dup(r3) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 3.644863813s ago: executing program 6 (id=1004): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0xb, 0x7ffc0001}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x4b47, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) 3.395971793s ago: executing program 8 (id=1005): syz_open_procfs(0x0, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) shmat(r2, &(0x7f0000f02000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) 3.395838084s ago: executing program 6 (id=1006): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x40080c1, &(0x7f0000000240)=@isdn={0x22, 0x3, 0x5, 0x6, 0x1}, 0x80) 3.027922249s ago: executing program 7 (id=1007): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x3}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r3, 0xfffffe4d}}, 0x48) 2.806633449s ago: executing program 6 (id=1008): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x1, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x2, 0x0, 0x102, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x4, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x7, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x20000006, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0xb, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0xd, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x9, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x7, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x60, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x8002, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0x7, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x6, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x4, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x8001, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x17fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x10001, 0xff, 0x103, 0x10000003, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x100, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x400009, 0xcc, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x9, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x2, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3fd, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) 1.776633624s ago: executing program 8 (id=1009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x91f8a0d13a97bc3e, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 1.762385824s ago: executing program 0 (id=1010): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) 1.499982806s ago: executing program 7 (id=1011): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f07746d6f64653d30303030308db7027e677acc41fca305604e3030303030303030303030303034", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x3, "ab9ca5fa01000000ede6dc06270000000000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800007) 1.275222535s ago: executing program 6 (id=1012): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) 616.474414ms ago: executing program 2 (id=1013): setreuid(0x0, 0xee01) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2007) 523.964348ms ago: executing program 6 (id=1014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 500.640099ms ago: executing program 7 (id=1015): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x3808004, &(0x7f0000000600)=ANY=[], 0x5, 0x14fe, &(0x7f00000020c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000400)={{0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 'wrr\x00', 0x0, 0x20, 0x7d}, {@local, 0x0, 0x10000, 0x0, 0x80000001, 0x6}}, 0x44) 296.359507ms ago: executing program 2 (id=1016): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x5}, 0x20) 166.398223ms ago: executing program 6 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0xa30d, 0x200, 0x0, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x31}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 43.530998ms ago: executing program 2 (id=1018): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000002c0)={0x101, {{0xa, 0x4e23, 0x24, @empty, 0x9}}, {{0xa, 0x4e20, 0xd7d, @ipv4={'\x00', '\xff\xff', @local}, 0x7e67}}}, 0x108) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 0s ago: executing program 7 (id=1019): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000f"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) kernel console output (not intermixed with test programs): mo2=0002] [ 129.874920][ T5014] System zones: 0-1, 15-15, 18-18, 34-34 [ 129.908748][ T5014] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.947331][ T4321] usb 1-1: device descriptor read/64, error -71 [ 129.981619][ T5014] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 130.043078][ T5014] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 130.137001][ T5014] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 130.188814][ T5014] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.159: bg 0: block 40: padding at end of block bitmap is not set [ 130.217296][ T4321] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 130.335952][ T5014] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 130.406352][ T5014] EXT4-fs (loop3): 1 truncate cleaned up [ 130.416296][ T4321] usb 1-1: device descriptor read/64, error -71 [ 130.459086][ T5014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.538133][ T4321] usb usb1-port1: attempt power cycle [ 130.634231][ T5014] EXT4-fs warning (device loop3): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 130.775914][ T4958] BTRFS info (device loop4): balance: ended with status: 0 [ 130.835727][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 130.945059][ T4287] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.957713][ T4321] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 131.008104][ T4321] usb 1-1: device descriptor read/8, error -71 [ 131.277785][ T4321] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 131.339904][ T4321] usb 1-1: device descriptor read/8, error -71 [ 131.458470][ T4321] usb usb1-port1: unable to enumerate USB device [ 132.160961][ T5039] loop3: detected capacity change from 0 to 1024 [ 132.287118][ T5041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.169'. [ 132.490033][ T5043] netlink: 'syz.4.166': attribute type 10 has an invalid length. [ 132.594554][ T5043] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 132.662505][ T5046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.891712][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907495][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.141222][ T5056] loop1: detected capacity change from 0 to 512 [ 133.179279][ T5056] EXT4-fs: Ignoring removed oldalloc option [ 133.221587][ T5058] loop4: detected capacity change from 0 to 764 [ 133.277125][ T5056] EXT4-fs (loop1): 1 truncate cleaned up [ 133.283185][ T5056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.348736][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 133.598241][ T4287] Symlink component flag not implemented [ 133.709174][ T5047] loop0: detected capacity change from 0 to 32768 [ 133.756922][ T5047] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.170 (5047) [ 133.874022][ T5064] loop1: detected capacity change from 0 to 16 [ 133.944451][ T5047] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 133.963516][ T5064] erofs: (device loop1): mounted with root inode @ nid 36. [ 134.445373][ T5047] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 134.536684][ T5047] BTRFS info (device loop0): using free space tree [ 134.792632][ T5066] loop4: detected capacity change from 0 to 4096 [ 134.799418][ T5047] BTRFS info (device loop0): enabling ssd optimizations [ 134.865280][ T5045] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 135.049222][ T4361] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop0 scanned by udevd (4361) [ 135.121203][ T5088] loop1: detected capacity change from 0 to 512 [ 135.148169][ T5088] EXT4-fs: Ignoring removed nobh option [ 135.197468][ T5088] EXT4-fs: Ignoring removed oldalloc option [ 135.256442][ T5088] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 135.285596][ T5088] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.177: invalid indirect mapped block 256 (level 1) [ 135.346380][ T5088] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.177: invalid indirect mapped block 2683928664 (level 1) [ 135.393838][ T5066] EXT4-fs (loop4): Test dummy encryption mode enabled [ 135.429152][ T5088] EXT4-fs (loop1): 1 truncate cleaned up [ 135.434985][ T5088] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.444586][ T5066] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8002c118, mo2=0002] [ 135.523494][ T5066] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.587440][ T5092] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 137.079528][ T5110] netlink: 'syz.3.181': attribute type 10 has an invalid length. [ 137.090706][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 137.270420][ T5110] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 138.196381][ T5113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.518637][ T5133] loop4: detected capacity change from 0 to 1024 [ 140.288944][ T5135] loop3: detected capacity change from 0 to 32768 [ 140.308410][ T5135] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 140.532720][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 140.596810][ T4365] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 141.117448][ T5161] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 141.996755][ T5161] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.126943][ T5172] loop1: detected capacity change from 0 to 256 [ 142.159032][ T5164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.233057][ T5172] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 143.218374][ T5172] exFAT-fs (loop1): hint_cluster is invalid (17) [ 143.732793][ T5186] loop1: detected capacity change from 0 to 512 [ 143.788097][ T5186] ext4: Unknown parameter 'noacl' [ 148.124352][ T5214] loop4: detected capacity change from 0 to 512 [ 148.164067][ T5214] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.342922][ T5214] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 148.451742][ T5218] loop1: detected capacity change from 0 to 128 [ 148.765653][ T5223] loop1: detected capacity change from 0 to 1024 [ 149.223762][ T5229] loop4: detected capacity change from 0 to 512 [ 149.384169][ T5229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 149.397560][ T5229] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.776471][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 152.126893][ T5267] loop1: detected capacity change from 0 to 128 [ 152.289755][ T5267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 152.295231][ T5268] loop4: detected capacity change from 0 to 2048 [ 152.345877][ T5268] Alternate GPT is invalid, using primary GPT. [ 152.367643][ T5267] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.381673][ T5268] loop4: p1 p2 p3 [ 152.455449][ T5267] xt_hashlimit: size too large, truncated to 1048576 [ 153.072576][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 153.083209][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 153.341617][ T4365] udevd[4365]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 154.280202][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 154.293942][ T4488] udevd[4488]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 154.354886][ T4365] udevd[4365]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 154.371141][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 155.727329][ T128] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.927359][ T128] usb 5-1: Using ep0 maxpacket: 8 [ 155.936029][ T128] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 155.956689][ T128] usb 5-1: config 179 has no interface number 0 [ 155.974530][ T128] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 156.007279][ T128] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 156.040968][ T128] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.076628][ T128] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 156.094453][ T128] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 156.115261][ T128] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 156.124986][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.158808][ T5305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.398715][ T5305] loop4: detected capacity change from 0 to 128 [ 156.547097][ T5305] FAT-fs (loop4): Directory bread(block 32) failed [ 156.567797][ T5305] FAT-fs (loop4): Directory bread(block 33) failed [ 156.574498][ T5305] FAT-fs (loop4): Directory bread(block 34) failed [ 156.621789][ T5305] FAT-fs (loop4): Directory bread(block 35) failed [ 156.672689][ T5305] FAT-fs (loop4): Directory bread(block 36) failed [ 156.732097][ T5305] FAT-fs (loop4): Directory bread(block 37) failed [ 156.779446][ T5305] FAT-fs (loop4): Directory bread(block 38) failed [ 156.786060][ T5305] FAT-fs (loop4): Directory bread(block 39) failed [ 156.834026][ T5305] FAT-fs (loop4): Directory bread(block 40) failed [ 156.856594][ T5305] FAT-fs (loop4): Directory bread(block 41) failed [ 157.300704][ T4342] usb 5-1: USB disconnect, device number 3 [ 157.306614][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 157.306663][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.544878][ T5353] loop4: detected capacity change from 0 to 128 [ 161.027860][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.267'. [ 161.092641][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 162.346889][ T5365] loop4: detected capacity change from 0 to 512 [ 162.380364][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 162.412236][ T5365] ext4: Unknown parameter 'noacl' [ 163.970350][ T5392] loop1: detected capacity change from 0 to 512 [ 164.608178][ T5392] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.789929][ T5392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002] [ 165.812296][ T5392] System zones: 2-12, 8-8 [ 165.843259][ T5392] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.278: bg 0: block 5: invalid block bitmap [ 165.937245][ T5392] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 165.955910][ T5392] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.278: invalid indirect mapped block 3 (level 2) [ 165.989677][ T5392] EXT4-fs (loop1): 2 truncates cleaned up [ 166.005803][ T5392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 166.038823][ T26] audit: type=1326 audit(1778603335.874:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.0.282" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88f399cdd9 code=0x0 [ 166.119188][ T5409] loop4: detected capacity change from 0 to 256 [ 166.155404][ T5409] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.182037][ T5409] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 166.198874][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 166.232623][ T5409] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 166.846255][ T5430] fuse: Bad value for 'fd' [ 167.357382][ T4916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.557299][ T4916] usb 2-1: Using ep0 maxpacket: 16 [ 167.564619][ T4916] usb 2-1: config 28 has an invalid interface number: 237 but max is 0 [ 167.618710][ T4916] usb 2-1: config 28 has no interface number 0 [ 167.658639][ T4916] usb 2-1: config 28 interface 237 has no altsetting 0 [ 167.707392][ T4916] usb 2-1: string descriptor 0 read error: -71 [ 167.713702][ T4916] usb 2-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= 8.7a [ 167.783353][ T4916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.928900][ T4916] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 167.980903][ T4916] usb 2-1: no configuration chosen from 1 choice [ 168.442567][ T4916] usb 2-1: USB disconnect, device number 3 [ 170.252703][ T5462] loop4: detected capacity change from 0 to 512 [ 170.264117][ T5462] ext4: Unknown parameter 'noacl' [ 170.339232][ T4365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.352349][ T5462] loop4: detected capacity change from 0 to 128 [ 170.374670][ T4365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.456029][ T4365] Buffer I/O error on dev loop4, logical block 0, async page read [ 170.476583][ T5462] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 171.149400][ T26] audit: type=1800 audit(1778603340.984:12): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.302" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 171.366505][ T26] audit: type=1326 audit(1778603341.164:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5463 comm="syz.0.303" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88f399cdd9 code=0x0 [ 171.499583][ T5475] capability: warning: `syz.1.306' uses deprecated v2 capabilities in a way that may be insecure [ 171.557903][ T5474] loop4: detected capacity change from 0 to 512 [ 171.626028][ T5474] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 171.682667][ T5474] EXT4-fs (loop4): 1 truncate cleaned up [ 171.694146][ T5474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.837038][ T5474] program syz.4.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.966722][ T5484] loop1: detected capacity change from 0 to 256 [ 172.043611][ T5484] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.502704][ T5484] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 173.698432][ T5484] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 173.706164][ T4287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 173.765447][ T4287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 173.827763][ T4287] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 174.789210][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 175.113483][ T5504] loop1: detected capacity change from 0 to 512 [ 175.413691][ T5504] ext4: Unknown parameter 'noacl' [ 176.335319][ T26] audit: type=1326 audit(1778603346.154:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5511 comm="syz.2.318" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e7539cdd9 code=0x0 [ 176.721405][ T5525] loop4: detected capacity change from 0 to 1024 [ 178.360438][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 179.184383][ T5557] loop4: detected capacity change from 0 to 128 [ 179.238638][ T5557] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 179.275639][ T5557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.729873][ T5562] kvm: pic: non byte write [ 179.734983][ T5562] kvm: pic: non byte write [ 179.776467][ T5562] kvm: pic: non byte write [ 179.783977][ T5562] kvm: pic: non byte write [ 179.797905][ T5562] kvm: pic: non byte write [ 179.802799][ T5562] kvm: pic: non byte write [ 179.807931][ T5562] kvm: pic: non byte write [ 179.812655][ T5562] kvm: pic: non byte write [ 179.837633][ T5562] kvm: pic: non byte write [ 179.842474][ T5562] kvm: pic: non byte write [ 182.140847][ T5592] loop4: detected capacity change from 0 to 16 [ 182.348361][ T5592] erofs: (device loop4): mounted with root inode @ nid 36. [ 182.793285][ T5602] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 182.817697][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 182.827108][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 182.860709][ T4285] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 182.911155][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 182.920427][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 182.929624][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 182.938792][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 182.947852][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 182.956897][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 182.966045][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 182.975311][ T5602] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 182.984421][ T5602] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 182.997195][ T5602] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 183.379736][ T5602] syz.4.345 (5602) used greatest stack depth: 20336 bytes left [ 183.387212][ T26] audit: type=1800 audit(1778603352.854:15): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.345" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 186.306256][ T5625] loop4: detected capacity change from 0 to 256 [ 186.369850][ T5625] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 186.433825][ T5625] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 186.659478][ T5625] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000006) [ 187.701235][ T5625] exFAT-fs (loop4): Filesystem has been set read-only [ 189.000333][ T5648] loop4: detected capacity change from 0 to 512 [ 189.019126][ T5648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.286525][ T5648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002] [ 189.295002][ T5648] System zones: 1-12 [ 189.363874][ T5648] EXT4-fs warning (device loop4): ext4_xattr_inode_get:492: inode #11: comm syz.4.361: ea_inode file size=0 entry size=6 [ 189.381108][ T5648] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.361: iget: bad extra_isize 90 (inode size 256) [ 189.403835][ T5648] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.361: error while reading EA inode 11 err=-117 [ 189.421689][ T5648] EXT4-fs (loop4): 1 orphan inode deleted [ 189.427654][ T5648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 189.455393][ T5648] EXT4-fs (loop4): unmounting filesystem. [ 189.869349][ T4365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.256421][ T5660] loop4: detected capacity change from 0 to 512 [ 190.318437][ T5660] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.375262][ T5660] EXT4-fs (loop4): 1 truncate cleaned up [ 190.381395][ T5660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.393450][ T26] audit: type=1326 audit(1778603360.224:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.1.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe16f79cdd9 code=0x0 [ 190.484659][ T5542] Set syz1 is full, maxelem 65536 reached [ 191.402899][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 192.582460][ T5683] loop4: detected capacity change from 0 to 512 [ 192.649269][ T5683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.677323][ T5683] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.744899][ T5683] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.370: corrupted inode contents [ 192.858756][ T5683] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.370: mark_inode_dirty error [ 192.892929][ T5683] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.370: corrupted inode contents [ 192.950957][ T5689] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.370: corrupted inode contents [ 193.030202][ T5689] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.370: mark_inode_dirty error [ 193.048335][ T5689] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.370: corrupted inode contents [ 193.110284][ T5689] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.370: mark_inode_dirty error [ 193.207051][ T5689] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.370: corrupted inode contents [ 193.263421][ T5689] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.370: mark_inode_dirty error [ 193.348547][ T5695] loop1: detected capacity change from 0 to 512 [ 193.412182][ T5695] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 193.485512][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 193.721616][ T5701] loop4: detected capacity change from 0 to 16 [ 193.729148][ T5700] loop1: detected capacity change from 0 to 512 [ 193.752137][ T5701] erofs: (device loop4): mounted with root inode @ nid 36. [ 193.839257][ T5700] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 193.894044][ T5700] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 193.902922][ T5700] System zones: 0-1, 15-15, 18-18, 34-34 [ 193.909987][ T5700] EXT4-fs (loop1): orphan cleanup on readonly fs [ 193.916458][ T5700] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 193.926871][ T5700] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 193.942055][ T5700] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 193.949468][ T5700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.375: bg 0: block 40: padding at end of block bitmap is not set [ 193.965436][ T5700] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 193.975312][ T5700] EXT4-fs (loop1): 1 truncate cleaned up [ 193.981816][ T5700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.998288][ T5700] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.375: bad symlink. [ 194.028039][ T5700] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.375: bad symlink. [ 194.046192][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 194.156129][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 194.348022][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354430][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.184552][ T5719] loop4: detected capacity change from 0 to 512 [ 195.221835][ T5719] ext4: Unknown parameter 'noacl' [ 196.199314][ T26] audit: type=1326 audit(1778603366.034:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.3.384" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdee759cdd9 code=0x0 [ 196.736417][ T5738] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 196.761115][ T5738] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 199.101592][ T125] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.244504][ T5736] Cannot find add_set index 4 as target [ 199.307537][ T26] audit: type=1326 audit(1778603369.134:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5764 comm="syz.2.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e7539cdd9 code=0x0 [ 199.357300][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 199.433958][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.452290][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 199.555618][ T125] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 199.732054][ T125] usb 5-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.00 [ 199.785658][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.892316][ T125] usb 5-1: config 0 descriptor?? [ 199.909451][ T125] usb 5-1: can't set config #0, error -71 [ 199.980346][ T125] usb 5-1: USB disconnect, device number 4 [ 200.011586][ T5770] loop1: detected capacity change from 0 to 256 [ 200.076432][ T5770] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.029542][ T5785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 203.044421][ T5803] loop4: detected capacity change from 0 to 128 [ 203.128147][ T5803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 203.178565][ T5803] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.390527][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 203.460121][ T5703] Set syz1 is full, maxelem 65536 reached [ 203.535994][ T5809] loop1: detected capacity change from 0 to 256 [ 205.663224][ T5822] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 205.663224][ T5822] [ 208.184516][ T5854] fuse: Bad value for 'fd' [ 208.256329][ T5854] fuse: Bad value for 'fd' [ 208.455179][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 209.037263][ T5868] Bluetooth: MGMT ver 1.22 [ 218.409649][ T5955] loop4: detected capacity change from 0 to 128 [ 218.573039][ T5962] fuse: Bad value for 'fd' [ 220.049262][ T5972] loop4: detected capacity change from 0 to 2048 [ 220.152418][ T5972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.719888][ T4287] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 223.157069][ T4287] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 224.554563][ T6004] wireguard: wg1: Could not create IPv4 socket [ 226.010377][ T5852] Set syz1 is full, maxelem 65536 reached [ 226.147179][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.156471][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.165579][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.174765][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.186938][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 226.194386][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.223466][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.230944][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.238500][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.247782][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.255440][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 226.263103][ T4285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.639719][ T6014] chnl_net:caif_netlink_parms(): no params data found [ 226.996863][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.007425][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.041897][ T6014] device bridge_slave_0 entered promiscuous mode [ 227.078032][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.085317][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.115005][ T6014] device bridge_slave_1 entered promiscuous mode [ 227.120392][ T6035] netlink: 72 bytes leftover after parsing attributes in process `syz.2.487'. [ 227.214401][ T6014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.224989][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.242503][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.251799][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.253477][ T6014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.300769][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.309698][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.317218][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.453799][ T6014] team0: Port device team_slave_0 added [ 227.498426][ T6014] team0: Port device team_slave_1 added [ 227.597249][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.604450][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.643870][ T6014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.673867][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.681441][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.758888][ T6014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.274224][ T6014] device hsr_slave_0 entered promiscuous mode [ 228.328420][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 228.371288][ T6014] device hsr_slave_1 entered promiscuous mode [ 228.440460][ T6014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.475711][ T6014] Cannot create hsr debugfs directory [ 229.019877][ T6036] chnl_net:caif_netlink_parms(): no params data found [ 229.258998][ T6068] netlink: 76 bytes leftover after parsing attributes in process `syz.0.499'. [ 229.295863][ T6068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.499'. [ 229.378796][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 229.488291][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.495551][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.517556][ T6036] device bridge_slave_0 entered promiscuous mode [ 229.548321][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.557718][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.566078][ T6036] device bridge_slave_1 entered promiscuous mode [ 229.655810][ T6014] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.695708][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.727774][ T6014] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.753719][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.794104][ T6014] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.820727][ T6014] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.882314][ T6036] team0: Port device team_slave_0 added [ 229.909031][ T6036] team0: Port device team_slave_1 added [ 230.018572][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.034672][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.112961][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.136727][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.145105][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.183235][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.467402][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 231.077282][ T6036] device hsr_slave_0 entered promiscuous mode [ 231.137728][ T6036] device hsr_slave_1 entered promiscuous mode [ 231.168534][ T6036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.176126][ T6036] Cannot create hsr debugfs directory [ 232.023259][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 232.083797][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.352341][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.385186][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.428756][ T6014] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.471115][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.487403][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 232.517771][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.597811][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.604968][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.687997][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.736750][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.758754][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.773162][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.780369][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.837625][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.986830][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.056546][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.094830][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.138190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.203466][ T6014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.250543][ T6014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.367470][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.570326][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.615744][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.625637][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.648821][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.678317][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.728826][ T6104] device bridge1 entered promiscuous mode [ 233.803402][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.853056][ T6036] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 233.888183][ T6036] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 233.910314][ T6036] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 233.941057][ T6036] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 234.387237][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 234.567562][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 235.298612][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.412948][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.980856][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.020534][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.840134][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 236.953395][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.969001][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.007956][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.015111][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.045441][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.075097][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.098298][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.105469][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.127805][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.173414][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.188194][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.213877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.250838][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.272300][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.327632][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.355405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.382322][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.407815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.416758][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.446476][ T6036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.486244][ T6036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.519812][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.529225][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.550400][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.598103][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.628841][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.522966][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.560922][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.586718][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.798161][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.837749][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.887959][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.915293][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.957402][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.987979][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.019065][ T6014] device veth0_vlan entered promiscuous mode [ 239.051213][ T6014] device veth1_vlan entered promiscuous mode [ 239.161480][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.194342][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.211028][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.228146][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.260739][ T6014] device veth0_macvtap entered promiscuous mode [ 239.298705][ T6014] device veth1_macvtap entered promiscuous mode [ 239.370388][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.420246][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.457254][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.496933][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.523058][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.546836][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.568540][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.586739][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.607184][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.628042][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.650255][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.681444][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 239.690426][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 239.725723][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.749330][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.771086][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.827266][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.864007][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.887164][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.897044][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.930050][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.967522][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.993338][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.007502][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.037213][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.056336][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.334340][ T6014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.453250][ T6014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.562820][ T6014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.669439][ T6014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.980004][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.016727][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.099778][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.112603][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.146897][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.172836][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.188606][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.217064][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.236996][ T6036] device veth0_vlan entered promiscuous mode [ 241.278040][ T6036] device veth1_vlan entered promiscuous mode [ 241.311009][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.325120][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.358423][ T6036] device veth0_macvtap entered promiscuous mode [ 241.386391][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.409503][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.444420][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.473479][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.491874][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.516503][ T6036] device veth1_macvtap entered promiscuous mode [ 242.477497][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.499374][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.545990][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.563399][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.587847][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.589609][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.605072][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.605093][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.605107][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.267929][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.397762][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.438938][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.484011][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.495007][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.505451][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.516105][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.532688][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.543668][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.553666][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.563731][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.769552][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.802629][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.867670][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.907274][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.508055][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.544984][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.565397][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.586535][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.619060][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.660399][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.690940][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.740926][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.802760][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.870798][ T6036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.910367][ T6036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.932319][ T6036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.956727][ T6036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.986998][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.001543][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.553030][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.577385][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.681604][ T6260] loop5: detected capacity change from 0 to 128 [ 247.718810][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.726747][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.748928][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.810309][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.872880][ T6277] loop5: detected capacity change from 0 to 256 [ 248.941344][ T6277] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.976107][ T6277] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 249.043445][ T6277] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 252.971159][ T6302] loop5: detected capacity change from 0 to 128 [ 254.751873][ T6330] loop5: detected capacity change from 0 to 512 [ 254.793550][ T6330] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 254.808531][ T6330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 254.868030][ T6330] System zones: 0-1, 15-15, 18-18, 34-34 [ 254.878359][ T6330] EXT4-fs (loop5): orphan cleanup on readonly fs [ 254.912823][ T6330] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 254.963770][ T6330] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 255.007253][ T6330] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 255.019001][ T6330] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.578: bg 0: block 40: padding at end of block bitmap is not set [ 255.059275][ T6330] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 255.183747][ T6330] EXT4-fs (loop5): 1 truncate cleaned up [ 255.279047][ T6330] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 255.682601][ T6330] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.578: bad symlink. [ 255.732182][ T6330] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.578: bad symlink. [ 255.770182][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.776604][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.817515][ T6330] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.578: bad symlink. [ 255.830271][ T6330] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.578: bad symlink. [ 255.843666][ T6330] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.578: bad symlink. [ 255.855985][ T6330] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.578: bad symlink. [ 255.985277][ T6014] EXT4-fs (loop5): unmounting filesystem. [ 256.057576][ T4285] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 256.077222][ T4285] CPU: 0 PID: 4285 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 256.084848][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.094972][ T4285] Workqueue: hci3 hci_rx_work [ 256.099703][ T4285] Call Trace: [ 256.103016][ T4285] [ 256.105979][ T4285] dump_stack_lvl+0x188/0x24e [ 256.110714][ T4285] ? show_regs_print_info+0x12/0x12 [ 256.115985][ T4285] ? load_image+0x400/0x400 [ 256.120547][ T4285] sysfs_create_dir_ns+0x26a/0x290 [ 256.125709][ T4285] ? sysfs_warn_dup+0xa0/0xa0 [ 256.130612][ T4285] ? do_raw_spin_unlock+0x11d/0x230 [ 256.135857][ T4285] kobject_add_internal+0x61c/0xcc0 [ 256.141110][ T4285] kobject_add+0x160/0x230 [ 256.145574][ T4285] ? kobject_init+0x1d0/0x1d0 [ 256.150293][ T4285] ? klist_children_get+0x50/0x50 [ 256.155368][ T4285] ? get_device_parent+0x121/0x3f0 [ 256.160522][ T4285] device_add+0x483/0xfb0 [ 256.164884][ T4285] ? kmem_cache_free+0xf7/0x290 [ 256.169786][ T4285] hci_conn_add_sysfs+0xd1/0x1e0 [ 256.174784][ T4285] le_conn_complete_evt+0x1062/0x1670 [ 256.180220][ T4285] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 256.186514][ T4285] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 256.192192][ T4285] ? skb_pull_data+0xf7/0x200 [ 256.196894][ T4285] hci_le_conn_complete_evt+0x183/0x440 [ 256.202462][ T4285] ? hci_remote_host_features_evt+0x270/0x270 [ 256.208546][ T4285] hci_event_packet+0x7b9/0x1280 [ 256.213518][ T4285] ? bis_list+0x280/0x280 [ 256.217869][ T4285] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 256.223777][ T4285] ? kcov_remote_start+0x4c7/0x7e0 [ 256.228903][ T4285] ? netdev_warn+0x3e/0x16c [ 256.233443][ T4285] ? hci_send_to_monitor+0x9c/0x4a0 [ 256.238665][ T4285] hci_rx_work+0x3eb/0xd40 [ 256.243095][ T4285] ? _raw_spin_unlock+0x40/0x40 [ 256.247965][ T4285] ? process_one_work+0x7b0/0x1160 [ 256.253181][ T4285] process_one_work+0x8a2/0x1160 [ 256.258147][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 256.263801][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 256.268932][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 256.274514][ T4285] ? kthread_data+0x4b/0xc0 [ 256.279043][ T4285] worker_thread+0xaa2/0x1270 [ 256.283763][ T4285] kthread+0x29d/0x330 [ 256.287843][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 256.292880][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 256.297486][ T4285] ret_from_fork+0x1f/0x30 [ 256.301929][ T4285] [ 256.307515][ T4285] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 256.365087][ T4285] Bluetooth: hci3: failed to register connection device [ 259.559583][ T6374] loop6: detected capacity change from 0 to 512 [ 259.618063][ T6374] EXT4-fs: Ignoring removed nobh option [ 259.623695][ T6374] EXT4-fs: Ignoring removed oldalloc option [ 259.698764][ T6374] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 259.709022][ T6374] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.594: invalid indirect mapped block 256 (level 1) [ 259.763184][ T6374] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.594: invalid indirect mapped block 2683928664 (level 1) [ 259.814658][ T6374] EXT4-fs (loop6): 1 truncate cleaned up [ 259.837299][ T6374] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 259.874059][ T6381] 9pnet: p9_errstr2errno: server reported unknown error @c0xffffffffffffffff0000000000000000000000500000000000000000004 [ 260.610167][ T6036] EXT4-fs (loop6): unmounting filesystem. [ 260.636286][ T6390] fuse: Bad value for 'fd' [ 260.911620][ T6395] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 260.983429][ T6395] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 261.099627][ T6395] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 261.152317][ T6395] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 261.222010][ T6395] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 261.307529][ T6395] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 261.395836][ T6395] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 261.482480][ T6395] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 266.147977][ T6447] loop6: detected capacity change from 0 to 512 [ 266.160355][ T6447] ext4: Unknown parameter 'noacl' [ 268.587192][ T3599] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 268.777249][ T3599] usb 7-1: Using ep0 maxpacket: 16 [ 268.785114][ T3599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.918187][ T3599] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.007369][ T3599] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.094782][ T3599] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 269.123709][ T3599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.164074][ T3599] usb 7-1: config 0 descriptor?? [ 269.250893][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.465836][ T3599] microsoft 0003:045E:07DA.0002: unbalanced delimiter at end of report description [ 270.497779][ T3599] microsoft 0003:045E:07DA.0002: parse failed [ 270.512395][ T3599] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 271.359310][ T6474] device bridge_slave_0 left promiscuous mode [ 271.385194][ T3599] usb 7-1: USB disconnect, device number 2 [ 271.391611][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.069725][ T6527] loop6: detected capacity change from 0 to 128 [ 275.117368][ T3599] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 275.321301][ T3599] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 275.347288][ T3599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.355362][ T3599] usb 6-1: Product: syz [ 275.442776][ T3599] usb 6-1: Manufacturer: syz [ 275.484942][ T3599] usb 6-1: SerialNumber: syz [ 275.523427][ T3599] usb 6-1: config 0 descriptor?? [ 275.547938][ T6531] loop6: detected capacity change from 0 to 16 [ 275.618297][ T3599] ch341 6-1:0.0: ch341-uart converter detected [ 275.645695][ T6531] erofs: (device loop6): mounted with root inode @ nid 36. [ 275.930752][ T6533] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 275.939960][ T6533] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 276.397246][ T26] audit: type=1800 audit(1778604726.224:19): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.642" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 276.596626][ T4285] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 276.696840][ T3599] usb 6-1: failed to send control message: -71 [ 276.709628][ T3599] ch341-uart: probe of ttyUSB0 failed with error -71 [ 276.755089][ T3599] usb 6-1: USB disconnect, device number 2 [ 276.772255][ T3599] ch341 6-1:0.0: device disconnected [ 276.939674][ T4373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.216388][ T4373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.486212][ T6568] loop5: detected capacity change from 0 to 128 [ 281.389212][ T4373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.653229][ T4373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.727369][ T6593] netlink: 'syz.2.659': attribute type 5 has an invalid length. [ 284.894698][ T6593] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.904178][ T6593] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.913089][ T6593] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.921904][ T6593] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.250123][ T6593] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.259188][ T6593] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.268304][ T6593] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.277276][ T6593] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.467911][ T6594] netlink: 'syz.2.659': attribute type 5 has an invalid length. [ 286.566173][ T6594] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.575185][ T6594] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.584075][ T6594] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.592827][ T6594] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.080071][ T6594] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.089234][ T6594] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.098177][ T6594] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.107032][ T6594] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.362290][ T6638] loop6: detected capacity change from 0 to 128 [ 291.048443][ T6664] loop6: detected capacity change from 0 to 1024 [ 291.369422][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'. [ 292.441933][ T56] hfsplus: b-tree write err: -5, ino 25 [ 292.481728][ T56] hfsplus: b-tree write err: -5, ino 4 [ 292.511147][ T56] hfsplus: b-tree write err: -5, ino 2 [ 292.950793][ T6679] tipc: Started in network mode [ 292.967637][ T6679] tipc: Node identity 46d281161f71, cluster identity 4711 [ 292.975007][ T6679] tipc: Enabled bearer , priority 0 [ 293.037216][ T4373] device hsr_slave_0 left promiscuous mode [ 293.073624][ T4373] device hsr_slave_1 left promiscuous mode [ 293.202507][ T4373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.233741][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.291970][ T4373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.343084][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.412711][ T4373] device bridge_slave_1 left promiscuous mode [ 293.451278][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.564249][ T4373] device bridge_slave_0 left promiscuous mode [ 293.597570][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.815673][ T4373] device veth1_macvtap left promiscuous mode [ 293.826261][ T4373] device veth0_macvtap left promiscuous mode [ 293.867981][ T4373] device veth1_vlan left promiscuous mode [ 293.889903][ T4373] device veth0_vlan left promiscuous mode [ 297.528523][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.542673][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.555225][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.564887][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.573776][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 297.581270][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.615131][ T4373] team0 (unregistering): Port device team_slave_1 removed [ 298.680942][ T4373] team0 (unregistering): Port device team_slave_0 removed [ 298.767640][ T4373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.845785][ T4373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.371341][ T4373] bond0 (unregistering): Released all slaves [ 299.589242][ T6683] device syzkaller0 entered promiscuous mode [ 299.657831][ T6692] tipc: Resetting bearer [ 299.666788][ T6678] tipc: Resetting bearer [ 299.687277][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 299.736095][ T6678] tipc: Disabling bearer [ 299.860123][ T3599] tipc: Node number set to 1503887638 [ 300.728778][ T6719] netlink: 'syz.2.685': attribute type 12 has an invalid length. [ 301.563719][ T6712] chnl_net:caif_netlink_parms(): no params data found [ 302.825044][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 302.856855][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.864146][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.872470][ T6712] device bridge_slave_0 entered promiscuous mode [ 302.881371][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.888722][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.897505][ T6712] device bridge_slave_1 entered promiscuous mode [ 302.935118][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.958613][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.111660][ T6712] team0: Port device team_slave_0 added [ 303.156495][ T6712] team0: Port device team_slave_1 added [ 303.303112][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.336187][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.457623][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.497232][ T4320] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 303.504697][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.537125][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.657276][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.697299][ T4320] usb 7-1: Using ep0 maxpacket: 32 [ 303.705339][ T4320] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 303.741196][ T4320] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 303.779660][ T4320] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 303.820320][ T4320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 303.863270][ T4320] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 303.869991][ T6712] device hsr_slave_0 entered promiscuous mode [ 303.909773][ T4320] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 303.925699][ T6712] device hsr_slave_1 entered promiscuous mode [ 303.938511][ T6712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.963995][ T4320] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 303.989917][ T6712] Cannot create hsr debugfs directory [ 303.993721][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.059982][ T4320] usb 7-1: config 0 descriptor?? [ 304.340270][ T4320] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 304.530887][ T4320] usb 7-1: USB disconnect, device number 3 [ 304.572823][ T4320] usblp0: removed [ 304.746584][ T4373] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.887383][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 304.915015][ T4373] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.977409][ T6712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 305.085174][ T4373] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.116448][ T6712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 305.145756][ T6712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 305.275292][ T6791] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 305.285247][ T4373] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.487435][ T6712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 307.302882][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 308.085462][ T6794] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.146534][ T6794] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.359125][ T6794] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.494312][ T6794] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.631049][ T6794] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.648386][ T6794] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.665177][ T6794] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.658191][ T6794] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.766870][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.852621][ T6808] loop6: detected capacity change from 0 to 512 [ 309.894371][ T6808] ext4: Unknown parameter 'noacl' [ 309.926963][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.968438][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.110930][ T6712] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.222742][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.459438][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.779029][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.786331][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.902201][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 311.189933][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 311.226108][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.246161][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.253363][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.572704][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 311.617611][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 311.642348][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 311.688733][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.793678][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.806847][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 311.862992][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.908268][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 311.947702][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.986790][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 312.027602][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.048185][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 312.098071][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.389371][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.396926][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.453801][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.990058][ T4373] device hsr_slave_0 left promiscuous mode [ 315.059103][ T4373] device hsr_slave_1 left promiscuous mode [ 315.192575][ T4373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.278328][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.357987][ T4373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.365474][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.568005][ T4373] device bridge_slave_1 left promiscuous mode [ 315.574305][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.606655][ T4373] device bridge_slave_0 left promiscuous mode [ 315.633730][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.902665][ T4373] device veth1_macvtap left promiscuous mode [ 315.977287][ T4373] device veth0_macvtap left promiscuous mode [ 316.092671][ T4373] device veth1_vlan left promiscuous mode [ 316.107735][ T4373] device veth0_vlan left promiscuous mode [ 316.530441][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.550007][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.563943][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.578847][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.586247][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 316.593751][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.215898][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.222337][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.413181][ T4373] team0 (unregistering): Port device team_slave_1 removed [ 318.519245][ T4373] team0 (unregistering): Port device team_slave_0 removed [ 318.635341][ T4373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.647185][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 318.867417][ T4373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.662063][ T4373] bond0 (unregistering): Released all slaves [ 321.356157][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 321.799001][ T6903] loop6: detected capacity change from 0 to 512 [ 321.877400][ T6903] ext4: Unknown parameter 'noacl' [ 323.035499][ T6908] netlink: 'syz.0.718': attribute type 10 has an invalid length. [ 323.119895][ T6908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 323.230417][ T6914] loop6: detected capacity change from 0 to 16 [ 323.297653][ T6914] erofs: (device loop6): mounted with root inode @ nid 36. [ 323.367426][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 323.379540][ T6908] device dummy0 entered promiscuous mode [ 323.423084][ T6908] bridge0: port 1(dummy0) entered blocking state [ 323.476329][ T6908] bridge0: port 1(dummy0) entered disabled state [ 323.552922][ T6908] bridge0: port 1(dummy0) entered blocking state [ 323.559464][ T6908] bridge0: port 1(dummy0) entered forwarding state [ 323.618978][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 323.628357][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 323.647485][ T4290] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 323.659039][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 323.668477][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 323.678029][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 323.687025][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 323.696118][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 323.705161][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 323.714237][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 323.723270][ T6922] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 323.732255][ T6922] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 323.742092][ T6922] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 323.753345][ T26] audit: type=1800 audit(1778605797.584:20): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.719" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 323.891091][ T6874] chnl_net:caif_netlink_parms(): no params data found [ 324.175717][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.211570][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.231764][ T6874] device bridge_slave_0 entered promiscuous mode [ 324.270644][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.287177][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.298598][ T6874] device bridge_slave_1 entered promiscuous mode [ 324.343242][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.406000][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.533074][ T6942] netlink: 32 bytes leftover after parsing attributes in process `syz.6.722'. [ 324.588028][ T6942] binder: 6941:6942 ioctl c0285840 200000000000 returned -22 [ 325.525229][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 326.543020][ T6874] team0: Port device team_slave_0 added [ 326.586664][ T6874] team0: Port device team_slave_1 added [ 326.710941][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.768732][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.797811][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.804799][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.056070][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.353922][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.455957][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.516102][ T26] audit: type=1326 audit(1778605801.344:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 327.545611][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.575104][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 327.589863][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.618200][ T26] audit: type=1326 audit(1778605801.344:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 327.660448][ T6712] device veth0_vlan entered promiscuous mode [ 327.757851][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.787426][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.811439][ T26] audit: type=1326 audit(1778605801.384:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 327.816324][ T6712] device veth1_vlan entered promiscuous mode [ 327.843861][ T26] audit: type=1326 audit(1778605801.384:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 327.878985][ T26] audit: type=1326 audit(1778605801.384:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 327.953907][ T26] audit: type=1326 audit(1778605801.384:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 327.986843][ T26] audit: type=1326 audit(1778605801.384:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 328.042171][ T26] audit: type=1326 audit(1778605801.384:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 328.139795][ T26] audit: type=1326 audit(1778605801.384:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.6.727" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 329.366347][ T4373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.412215][ T6874] device hsr_slave_0 entered promiscuous mode [ 329.423444][ T6976] loop6: detected capacity change from 0 to 16 [ 329.438150][ T6976] erofs: (device loop6): mounted with root inode @ nid 36. [ 329.579095][ T6874] device hsr_slave_1 entered promiscuous mode [ 329.586268][ T6874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.594734][ T6874] Cannot create hsr debugfs directory [ 329.653345][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 329.663312][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 329.673365][ T4290] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 329.685010][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 329.694460][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 329.703670][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 329.712729][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 329.721754][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 329.730809][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 329.739839][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 329.748843][ T6977] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 329.757847][ T6977] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 329.769867][ T6977] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 329.786883][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 329.786899][ T26] audit: type=1800 audit(1778605803.624:47): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.730" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 329.906549][ T4373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.014862][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.030207][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.069682][ T6980] netlink: 'syz.2.729': attribute type 4 has an invalid length. [ 330.328984][ T6983] netlink: 'syz.2.729': attribute type 4 has an invalid length. [ 330.744464][ T4373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.804829][ T6712] device veth0_macvtap entered promiscuous mode [ 330.874646][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.889020][ T4290] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 330.897849][ T4290] Bluetooth: hci3: Injecting HCI hardware error event [ 330.908383][ T4291] Bluetooth: hci3: hardware error 0x00 [ 331.057746][ T4373] bond0: (slave netdevsim0): Releasing backup interface [ 331.428362][ T4373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.461748][ T6712] device veth1_macvtap entered promiscuous mode [ 331.609049][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.697247][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.735388][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.792171][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.833704][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.914314][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.960647][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.972937][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.985448][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.996493][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.004809][ T7006] overlayfs: failed to clone upperpath [ 332.008665][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.051418][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.086508][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.133564][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.152315][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.163776][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.175361][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.187142][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.198001][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.209060][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.221069][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.234668][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.247555][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.260817][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.298529][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.308451][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.028037][ T4291] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 333.160516][ T6712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.182607][ T6712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.280592][ T6712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.359875][ T6712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.097626][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.105514][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.181797][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.269537][ T6874] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 334.309423][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.318053][ T6874] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 334.353802][ T6874] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 334.363177][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.468259][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.488215][ T6874] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 334.760107][ T7033] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7034] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7033] [ 335.101753][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.208492][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.222520][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.274021][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.371713][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.389457][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.438738][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.445940][ T4409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.587665][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.607666][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.647787][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.677564][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.684744][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.723806][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.884677][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.900309][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.939061][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.169409][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.259294][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.417576][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.764139][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.895944][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.912457][ T6874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.924497][ T6874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.981120][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.001420][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.353576][ T26] audit: type=1804 audit(1778605813.184:48): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.756" name="bus" dev="ramfs" ino=42971 res=1 errno=0 [ 339.396369][ T26] audit: type=1804 audit(1778605813.214:49): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.756" name="bus" dev="ramfs" ino=42971 res=1 errno=0 [ 343.171363][ T4373] device hsr_slave_0 left promiscuous mode [ 343.250416][ T4373] device hsr_slave_1 left promiscuous mode [ 343.575770][ T4373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.652145][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.851263][ T4373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.083828][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.132920][ T4373] device bridge_slave_1 left promiscuous mode [ 344.178360][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.251618][ T4373] device bridge_slave_0 left promiscuous mode [ 344.275311][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.356916][ T4373] device veth1_macvtap left promiscuous mode [ 344.365342][ T4373] device veth0_macvtap left promiscuous mode [ 344.377486][ T4373] device veth1_vlan left promiscuous mode [ 344.389765][ T4373] device veth0_vlan left promiscuous mode [ 344.892282][ T4373] bond1 (unregistering): Released all slaves [ 346.928007][ T4373] team0 (unregistering): Port device team_slave_1 removed [ 347.181692][ T4373] team0 (unregistering): Port device team_slave_0 removed [ 347.583079][ T4373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.900952][ T4373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.608693][ T7168] loop7: detected capacity change from 0 to 512 [ 348.790916][ T7168] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.893031][ T7168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002] [ 348.901569][ T7168] System zones: 1-12 [ 348.952993][ T7168] EXT4-fs warning (device loop7): ext4_xattr_inode_get:492: inode #11: comm syz.7.775: ea_inode file size=0 entry size=6 [ 348.967096][ T7168] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.775: iget: bad extra_isize 90 (inode size 256) [ 348.983312][ T7168] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.775: error while reading EA inode 11 err=-117 [ 348.997757][ T7168] EXT4-fs (loop7): 1 orphan inode deleted [ 349.003646][ T7168] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 349.026470][ T7168] EXT4-fs (loop7): unmounting filesystem. [ 349.579085][ T4373] bond0 (unregistering): Released all slaves [ 349.723249][ T7122] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.737292][ T7122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.745017][ T7122] IPv6: NLM_F_CREATE should be set when creating new route [ 349.752447][ T7122] IPv6: NLM_F_CREATE should be set when creating new route [ 349.759741][ T7122] IPv6: NLM_F_CREATE should be set when creating new route [ 349.780113][ T7125] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.763'. [ 349.815440][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.831225][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.879448][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.601745][ T7227] netlink: 68 bytes leftover after parsing attributes in process `syz.0.788'. [ 352.705786][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.731806][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.822690][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.844321][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.910402][ T6874] device veth0_vlan entered promiscuous mode [ 352.947438][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.995786][ T7206] netlink: 116 bytes leftover after parsing attributes in process `syz.6.783'. [ 353.016554][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.033264][ T6874] device veth1_vlan entered promiscuous mode [ 353.485247][ T6874] device veth0_macvtap entered promiscuous mode [ 353.503622][ T6874] device veth1_macvtap entered promiscuous mode [ 353.517885][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.559697][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.585969][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.603178][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.615312][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.624602][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.747306][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.794962][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.805172][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.818635][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.829872][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.842532][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.864068][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.875173][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.893874][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.904980][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.918302][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.941766][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.960205][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.971155][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.997096][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.018015][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.043333][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.054619][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.065543][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.075695][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.092235][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.103947][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.118895][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.130315][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.139502][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.149827][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.303358][ T6874] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.339360][ T6874] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.379030][ T6874] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.406388][ T6874] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.658274][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.680631][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.738194][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 354.781207][ T7171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.791902][ T7171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.811082][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.686613][ T7284] Scaler: ================= START STATUS ================= [ 356.719243][ T7284] Scaler: ================== END STATUS ================== [ 357.658528][ T7301] Scaler: ================= START STATUS ================= [ 357.767788][ T7301] Scaler: ================== END STATUS ================== [ 358.390729][ T7308] 9pnet_virtio: no channels available for device syz [ 358.462042][ T7309] netlink: 'syz.8.799': attribute type 1 has an invalid length. [ 361.050198][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 363.402947][ T26] audit: type=1326 audit(1778605837.234:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544219][ T26] audit: type=1326 audit(1778605837.234:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544265][ T26] audit: type=1326 audit(1778605837.234:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544302][ T26] audit: type=1326 audit(1778605837.234:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544336][ T26] audit: type=1326 audit(1778605837.234:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544372][ T26] audit: type=1326 audit(1778605837.234:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544409][ T26] audit: type=1326 audit(1778605837.234:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544451][ T26] audit: type=1326 audit(1778605837.234:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544521][ T26] audit: type=1326 audit(1778605837.234:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 363.544557][ T26] audit: type=1326 audit(1778605837.234:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.7.812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1e39cdd9 code=0x7ffc0000 [ 365.013799][ T7406] loop6: detected capacity change from 0 to 16 [ 365.064180][ T7406] erofs: (device loop6): mounted with root inode @ nid 36. [ 365.205236][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 365.205301][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 365.206591][ T4291] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 365.207099][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 365.207129][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 365.207151][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 365.207173][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 365.207195][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 365.207216][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 365.207237][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 365.207291][ T7404] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 365.207317][ T7404] erofs: (device loop6): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 365.207553][ T7404] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 365.209245][ T7404] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 365.209683][ T7404] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 371.017210][ T125] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 371.227335][ T125] usb 7-1: Using ep0 maxpacket: 8 [ 371.263848][ T125] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 371.281075][ T125] usb 7-1: config 179 has no interface number 0 [ 371.319015][ T125] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 371.377092][ T125] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 371.482761][ T125] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.577173][ T125] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 371.617517][ T125] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 371.685767][ T125] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 371.727388][ T125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.808119][ T7450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 372.097757][ T125] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input7 [ 372.341655][ T7450] device syzkaller1 entered promiscuous mode [ 374.410587][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 374.418902][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 374.454399][ T4319] usb 7-1: USB disconnect, device number 4 [ 374.518417][ T4319] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 378.653847][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.559841][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.575591][ T7539] loop7: detected capacity change from 0 to 512 [ 379.685072][ T7539] ext4: Unknown parameter 'noacl' [ 380.140674][ T7429] Set syz1 is full, maxelem 65536 reached [ 380.582477][ T4291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 380.594703][ T4291] CPU: 0 PID: 4291 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 380.602307][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.612388][ T4291] Workqueue: hci4 hci_rx_work [ 380.617082][ T4291] Call Trace: [ 380.620363][ T4291] [ 380.623295][ T4291] dump_stack_lvl+0x188/0x24e [ 380.627979][ T4291] ? show_regs_print_info+0x12/0x12 [ 380.633193][ T4291] ? load_image+0x400/0x400 [ 380.637726][ T4291] sysfs_create_dir_ns+0x26a/0x290 [ 380.642874][ T4291] ? sysfs_warn_dup+0xa0/0xa0 [ 380.647586][ T4291] ? do_raw_spin_unlock+0x11d/0x230 [ 380.652796][ T4291] kobject_add_internal+0x61c/0xcc0 [ 380.657999][ T4291] kobject_add+0x160/0x230 [ 380.662510][ T4291] ? kobject_init+0x1d0/0x1d0 [ 380.667190][ T4291] ? klist_children_get+0x50/0x50 [ 380.672218][ T4291] ? get_device_parent+0x121/0x3f0 [ 380.677341][ T4291] device_add+0x483/0xfb0 [ 380.681812][ T4291] ? kmem_cache_free+0xf7/0x290 [ 380.686691][ T4291] hci_conn_add_sysfs+0xd1/0x1e0 [ 380.691647][ T4291] le_conn_complete_evt+0x1062/0x1670 [ 380.697056][ T4291] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 380.703323][ T4291] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 380.708995][ T4291] ? skb_pull_data+0xf7/0x200 [ 380.713734][ T4291] hci_le_conn_complete_evt+0x183/0x440 [ 380.719350][ T4291] ? hci_remote_host_features_evt+0x270/0x270 [ 380.725476][ T4291] hci_event_packet+0x7b9/0x1280 [ 380.730457][ T4291] ? bis_list+0x280/0x280 [ 380.734794][ T4291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 380.740717][ T4291] ? kcov_remote_start+0x4c7/0x7e0 [ 380.745840][ T4291] ? netdev_warn+0x3e/0x16c [ 380.750356][ T4291] ? hci_send_to_monitor+0x9c/0x4a0 [ 380.755559][ T4291] hci_rx_work+0x3eb/0xd40 [ 380.759976][ T4291] ? _raw_spin_unlock+0x40/0x40 [ 380.764836][ T4291] ? process_one_work+0x7b0/0x1160 [ 380.770037][ T4291] process_one_work+0x8a2/0x1160 [ 380.774986][ T4291] ? worker_detach_from_pool+0x240/0x240 [ 380.780625][ T4291] ? _raw_spin_lock_irq+0xb7/0xf0 [ 380.785649][ T4291] ? _raw_spin_lock_irqsave+0x100/0x100 [ 380.791194][ T4291] ? kthread_data+0x4b/0xc0 [ 380.795708][ T4291] worker_thread+0xaa2/0x1270 [ 380.800487][ T4291] ? __kthread_parkme+0x162/0x1c0 [ 380.805527][ T4291] kthread+0x29d/0x330 [ 380.809596][ T4291] ? worker_clr_flags+0x1a0/0x1a0 [ 380.814620][ T4291] ? kthread_blkcg+0xd0/0xd0 [ 380.819257][ T4291] ret_from_fork+0x1f/0x30 [ 380.823682][ T4291] [ 380.840903][ T4291] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 380.854225][ T4291] Bluetooth: hci4: failed to register connection device [ 383.768810][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 383.768832][ T26] audit: type=1326 audit(1778605857.374:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 384.328321][ T7588] netlink: 348 bytes leftover after parsing attributes in process `syz.6.864'. [ 384.337847][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.864'. [ 384.442849][ T26] audit: type=1326 audit(1778605857.374:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 384.485516][ T26] audit: type=1326 audit(1778605857.514:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99a8d5d60e code=0x7ffc0000 [ 384.717345][ T26] audit: type=1326 audit(1778605857.514:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 384.857295][ T26] audit: type=1326 audit(1778605857.514:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 385.325846][ T26] audit: type=1326 audit(1778605857.664:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 385.523789][ T26] audit: type=1326 audit(1778605857.664:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 385.727322][ T26] audit: type=1326 audit(1778605857.664:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 385.854816][ T26] audit: type=1326 audit(1778605858.164:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 386.085468][ T26] audit: type=1326 audit(1778605858.354:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.6.864" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 386.133533][ T7613] loop6: detected capacity change from 0 to 512 [ 386.185826][ T7613] ext4: Unknown parameter 'noacl' [ 386.213081][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.870'. [ 386.257587][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.8.870'. [ 386.473716][ T7615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.664729][ T7615] bond1: (slave bond0): making interface the new active one [ 387.258160][ T7615] bond1: (slave bond0): Enslaving as an active interface with an up link [ 387.295178][ T7615] syz.8.870 (7615) used greatest stack depth: 18576 bytes left [ 387.296806][ T7611] netlink: 'syz.8.870': attribute type 4 has an invalid length. [ 387.341391][ T7611] netlink: 152 bytes leftover after parsing attributes in process `syz.8.870'. [ 387.391507][ T7611] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 387.798803][ T7629] netlink: 'syz.0.873': attribute type 4 has an invalid length. [ 387.806492][ T7629] netlink: 17 bytes leftover after parsing attributes in process `syz.0.873'. [ 388.167460][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 388.295584][ T7646] fuse: Unknown parameter 'rotmode' [ 390.517321][ T7673] 9pnet_virtio: no channels available for device syz [ 392.415566][ T7688] netlink: 'syz.6.889': attribute type 1 has an invalid length. [ 392.435821][ T7688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.440304][ T7695] tmpfs: Unknown parameter 'grpquota' [ 392.443138][ T7688] IPv6: NLM_F_CREATE should be set when creating new route [ 392.992671][ T7710] loop7: detected capacity change from 0 to 512 [ 393.007250][ T7710] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 394.028565][ T7710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002] [ 394.036690][ T7710] System zones: 1-12 [ 394.117954][ T7710] EXT4-fs warning (device loop7): ext4_xattr_inode_get:492: inode #11: comm syz.7.893: ea_inode file size=0 entry size=6 [ 394.130919][ T7710] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.893: iget: bad extra_isize 90 (inode size 256) [ 394.145566][ T7710] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.893: error while reading EA inode 11 err=-117 [ 394.160485][ T7710] EXT4-fs (loop7): 1 orphan inode deleted [ 394.166285][ T7710] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 394.229656][ T7710] EXT4-fs (loop7): unmounting filesystem. [ 394.312249][ T6710] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 396.175366][ T7731] netlink: 68 bytes leftover after parsing attributes in process `syz.7.896'. [ 397.009697][ T7727] hugetlbfs: Bad value 'ßø' for mount option 'size' [ 397.009697][ T7727] [ 398.139772][ T7742] input: syz0 as /devices/virtual/input/input8 [ 398.677549][ T7745] overlayfs: missing 'lowerdir' [ 400.007403][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.897'. [ 400.016406][ T7730] netlink: 'syz.6.897': attribute type 5 has an invalid length. [ 400.028098][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.6.897'. [ 400.714012][ T7730] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 400.812249][ T7730] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 400.908088][ T7730] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 401.018862][ T7730] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 401.109385][ T7730] device geneve2 entered promiscuous mode [ 401.276621][ T7762] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 401.283502][ T7762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 401.297482][ T7762] vhci_hcd vhci_hcd.0: Device attached [ 401.567197][ T125] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 401.577423][ T4320] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 402.037073][ T4320] usb 7-1: Using ep0 maxpacket: 8 [ 402.089179][ T7763] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 402.215734][ T4320] usb 7-1: unable to get BOS descriptor or descriptor too short [ 402.301192][ T4339] vhci_hcd: stop threads [ 402.305690][ T4339] vhci_hcd: release socket [ 402.466521][ T4339] vhci_hcd: disconnect device [ 402.526116][ T4320] usb 7-1: no configurations [ 402.567194][ T4320] usb 7-1: can't read configurations, error -22 [ 404.767105][ T4375] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 404.986311][ T4375] usb 8-1: Using ep0 maxpacket: 16 [ 405.000676][ T4375] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.037037][ T4375] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.071710][ T4375] usb 8-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 405.099084][ T4375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.128876][ T4375] usb 8-1: config 0 descriptor?? [ 405.179968][ T7820] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 405.593234][ T7836] raw_sendmsg: syz.0.920 forgot to set AF_INET. Fix it! [ 405.778023][ T128] libceph: connect (1)[c::]:6789 error -101 [ 405.786568][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 405.816134][ T128] libceph: connect (1)[c::]:6789 error -101 [ 405.837740][ T7836] ceph: No mds server is up or the cluster is laggy [ 405.846039][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 406.505611][ T128] libceph: connect (1)[c::]:6789 error -101 [ 406.737184][ T125] vhci_hcd: vhci_device speed not set [ 406.767413][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 407.337423][ T7862] loop6: detected capacity change from 0 to 736 [ 408.730312][ T4342] usb 8-1: USB disconnect, device number 2 [ 410.316600][ T7879] loop7: detected capacity change from 0 to 32768 [ 410.361327][ T7879] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.930 (7879) [ 410.433684][ T7879] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 410.468404][ T7879] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 410.531131][ T7879] BTRFS info (device loop7): setting nodatacow, compression disabled [ 410.570236][ T7879] BTRFS info (device loop7): setting datasum, datacow enabled [ 410.617423][ T7879] BTRFS info (device loop7): force clearing of disk cache [ 410.647590][ T7879] BTRFS info (device loop7): enabling ssd optimizations [ 410.654627][ T7879] BTRFS info (device loop7): using spread ssd allocation scheme [ 410.729952][ T7879] BTRFS info (device loop7): turning on sync discard [ 410.737687][ T7879] BTRFS info (device loop7): turning off barriers [ 410.745368][ T7879] BTRFS info (device loop7): enabling auto defrag [ 410.772171][ T7879] BTRFS info (device loop7): not using ssd optimizations [ 410.847663][ T7879] BTRFS info (device loop7): not using spread ssd allocation scheme [ 410.877700][ T7879] BTRFS info (device loop7): using free space tree [ 411.157598][ T7927] fuse: Unknown parameter 'rotmode' [ 411.208591][ T7879] BTRFS info (device loop7): rebuilding free space tree [ 411.570527][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 411.570545][ T26] audit: type=1800 audit(1778605885.404:123): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.930" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 411.675029][ T7879] BTRFS info (device loop7): balance: start -sconvert=raid0,soft [ 412.035869][ T26] audit: type=1800 audit(1778605885.864:124): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.930" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 412.108617][ T7879] BTRFS info (device loop7): relocating block group 1048576 flags system [ 413.156686][ T7937] BTRFS info (device loop7): scrub: started on devid 1 [ 413.197547][ T7937] BTRFS info (device loop7): scrub: finished on devid 1 with status: 0 [ 413.221661][ T7879] BTRFS info (device loop7): balance: ended with status: 0 [ 413.412959][ T7963] device syzkaller0 entered promiscuous mode [ 413.514494][ T7965] hugetlbfs: Bad value 'ßø' for mount option 'size' [ 413.514494][ T7965] [ 414.193216][ T6712] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.277593][ T8018] loop7: detected capacity change from 0 to 512 [ 415.377923][ T8018] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 415.420861][ T8018] EXT4-fs (loop7): orphan cleanup on readonly fs [ 415.517542][ T8018] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 415.637598][ T8018] EXT4-fs warning (device loop7): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 415.696348][ T8018] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 415.747365][ T8018] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #16: comm syz.7.950: inode has both inline data and extents flags [ 415.793008][ T8018] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.950: couldn't read orphan inode 16 (err -117) [ 415.877726][ T8018] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 416.088102][ T6712] EXT4-fs (loop7): unmounting filesystem. [ 419.005264][ T8084] loop8: detected capacity change from 0 to 512 [ 419.055495][ T8084] ext4: Unknown parameter 'noacl' [ 420.071806][ T26] audit: type=1326 audit(1778605893.904:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 420.177859][ T26] audit: type=1326 audit(1778605893.954:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 420.338645][ T26] audit: type=1326 audit(1778605893.954:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 420.437113][ T26] audit: type=1326 audit(1778605893.954:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 420.597917][ T26] audit: type=1326 audit(1778605893.954:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 420.716152][ T26] audit: type=1326 audit(1778605893.974:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 420.839619][ T8110] loop7: detected capacity change from 0 to 2048 [ 420.857386][ T26] audit: type=1326 audit(1778605893.974:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 420.959481][ T8110] loop7: p2 < > p3 p4 [ 420.968409][ T8110] loop7: p3 start 65535 is beyond EOD, truncated [ 421.003487][ T26] audit: type=1326 audit(1778605893.974:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 421.031951][ T8110] loop7: p4 size 8192 extends beyond EOD, truncated [ 421.195915][ T26] audit: type=1326 audit(1778605893.974:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.8.979" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa053f9cdd9 code=0x7ffc0000 [ 421.274418][ T8121] 9pnet_virtio: no channels available for device syz [ 421.668403][ T6710] udevd[6710]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 421.684594][ T6729] udevd[6729]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 421.697406][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 421.703599][ T8126] loop7: detected capacity change from 0 to 512 [ 421.748552][ T8126] ext4: Unknown parameter 'noacl' [ 421.851811][ T8119] sctp: failed to load transform for md5: -2 [ 422.418479][ T6729] udevd[6729]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 422.446507][ T6710] udevd[6710]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 424.266323][ T8180] loop8: detected capacity change from 0 to 256 [ 424.375762][ T8180] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.417371][ T8180] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 424.443216][ T8180] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 424.502340][ T26] audit: type=1326 audit(1778605898.334:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8184 comm="syz.6.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a8d9cdd9 code=0x7ffc0000 [ 426.573673][ T8206] fuse: Unknown parameter 'rotmode' [ 427.660862][ T8218] loop7: detected capacity change from 0 to 256 [ 427.707425][ T8218] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.747590][ T8218] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 427.782859][ T8218] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 428.139079][ T8233] mmap: syz.2.1018 (8233) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 428.171970][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1019'. [ 428.199809][ T8233] ------------[ cut here ]------------ [ 428.205986][ T8233] WARNING: CPU: 1 PID: 8233 at include/linux/fs.h:503 hugetlb_split+0x234/0x2a0 [ 428.215149][ T8233] Modules linked in: [ 428.219137][ T8233] CPU: 1 PID: 8233 Comm: syz.2.1018 Not tainted syzkaller #0 [ 428.226598][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.237026][ T8233] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 428.242465][ T8233] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 98 98 b4 ff 0f 0b e9 65 fe ff ff e8 8c 98 b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 a4 28 20 8e 80 e1 07 80 c1 03 38 c1 [ 428.262482][ T8233] RSP: 0018:ffffc9000c75f568 EFLAGS: 00010283 [ 428.268658][ T8233] RAX: ffffffff81cddcc4 RBX: 0000200000000000 RCX: 0000000000080000 [ 428.276759][ T8233] RDX: ffffc9000cb59000 RSI: 0000000000003b89 RDI: 0000000000003b8a [ 428.284841][ T8233] RBP: 0000000000000000 R08: ffff88807e0378ef R09: 1ffff1100fc06f1d [ 428.292886][ T8233] R10: dffffc0000000000 R11: ffffed100fc06f1e R12: ffff888060e43070 [ 428.300939][ T8233] R13: dffffc0000000000 R14: ffff888060e43000 R15: ffff88807c1efab8 [ 428.308985][ T8233] FS: 00007f8e7624d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 428.317996][ T8233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.324712][ T8233] CR2: 00007f8e7622cd58 CR3: 0000000020f67000 CR4: 00000000003506e0 [ 428.332786][ T8233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 428.340841][ T8233] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 428.348899][ T8233] Call Trace: [ 428.352223][ T8233] [ 428.355193][ T8233] __vma_adjust+0x4a3/0x1cd0 [ 428.359870][ T8233] ? lockdep_init_map_type+0x98/0x8d0 [ 428.365310][ T8233] ? lockdep_softirqs_off+0x430/0x430 [ 428.370777][ T8233] ? free_zapped_rcu+0x1f0/0x1f0 [ 428.375784][ T8233] ? validate_mm+0x2e0/0x2e0 [ 428.380499][ T8233] ? hugetlb_vm_op_open+0x334/0x540 [ 428.385741][ T8233] __split_vma+0x3a7/0x500 [ 428.390269][ T8233] do_mas_align_munmap+0x397/0x12b0 [ 428.395549][ T8233] ? do_mas_munmap+0x2b0/0x2b0 [ 428.400419][ T8233] ? mtree_range_walk+0x672/0x7b0 [ 428.405512][ T8233] ? mas_walk+0x15f/0x180 [ 428.409959][ T8233] ? mas_find+0x1e8/0x230 [ 428.414369][ T8233] do_mas_munmap+0x240/0x2b0 [ 428.419062][ T8233] mmap_region+0x6e0/0x1ca0 [ 428.423645][ T8233] ? pud_huge+0x40/0x40 [ 428.427883][ T8233] ? file_mmap_ok+0x170/0x170 [ 428.432606][ T8233] ? validate_mm+0x23f/0x2e0 [ 428.437278][ T8233] ? cap_mmap_addr+0x165/0x2e0 [ 428.442108][ T8233] ? file_mmap_ok+0x11c/0x170 [ 428.446830][ T8233] do_mmap+0x964/0xfd0 [ 428.450985][ T8233] ? aa_path_link+0x880/0x880 [ 428.455744][ T8233] ? mlock_future_check+0x100/0x100 [ 428.461052][ T8233] ? ima_file_free+0x3e0/0x3e0 [ 428.465861][ T8233] ? common_file_perm+0x171/0x1c0 [ 428.470975][ T8233] ? bpf_lsm_mmap_file+0x5/0x10 [ 428.475889][ T8233] __se_sys_remap_file_pages+0x5b9/0x7b0 [ 428.481634][ T8233] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 428.487457][ T8233] ? lock_chain_count+0x20/0x20 [ 428.492368][ T8233] ? lockdep_hardirqs_on+0x94/0x140 [ 428.497639][ T8233] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 428.503414][ T8233] do_syscall_64+0x4c/0xa0 [ 428.507925][ T8233] ? clear_bhb_loop+0x60/0xb0 [ 428.512664][ T8233] ? clear_bhb_loop+0x60/0xb0 [ 428.517449][ T8233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.523488][ T8233] RIP: 0033:0x7f8e7539cdd9 [ 428.527981][ T8233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.547677][ T8233] RSP: 002b:00007f8e7624d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 428.556143][ T8233] RAX: ffffffffffffffda RBX: 00007f8e75615fa0 RCX: 00007f8e7539cdd9 [ 428.564179][ T8233] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 428.572243][ T8233] RBP: 00007f8e75432d69 R08: 0000000000000020 R09: 0000000000000000 [ 428.580314][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.588366][ T8233] R13: 00007f8e75616038 R14: 00007f8e75615fa0 R15: 00007ffe01da67e8 [ 428.596408][ T8233] [ 428.599510][ T8233] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 428.606824][ T8233] CPU: 1 PID: 8233 Comm: syz.2.1018 Not tainted syzkaller #0 [ 428.614209][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.624278][ T8233] Call Trace: [ 428.627652][ T8233] [ 428.630592][ T8233] dump_stack_lvl+0x188/0x24e [ 428.635296][ T8233] ? memcpy+0x3c/0x60 [ 428.639293][ T8233] ? show_regs_print_info+0x12/0x12 [ 428.644513][ T8233] ? load_image+0x400/0x400 [ 428.649075][ T8233] panic+0x2e5/0x730 [ 428.652997][ T8233] ? bpf_jit_dump+0xd0/0xd0 [ 428.657528][ T8233] __warn+0x2f8/0x4f0 [ 428.661519][ T8233] ? hugetlb_split+0x234/0x2a0 [ 428.666315][ T8233] ? hugetlb_split+0x234/0x2a0 [ 428.671122][ T8233] report_bug+0x2ba/0x4f0 [ 428.675522][ T8233] ? hugetlb_split+0x234/0x2a0 [ 428.680314][ T8233] handle_bug+0x3a/0x70 [ 428.684488][ T8233] exc_invalid_op+0x16/0x40 [ 428.689014][ T8233] asm_exc_invalid_op+0x16/0x20 [ 428.693889][ T8233] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 428.699282][ T8233] Code: b4 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 98 98 b4 ff 0f 0b e9 65 fe ff ff e8 8c 98 b4 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 a4 28 20 8e 80 e1 07 80 c1 03 38 c1 [ 428.718922][ T8233] RSP: 0018:ffffc9000c75f568 EFLAGS: 00010283 [ 428.725060][ T8233] RAX: ffffffff81cddcc4 RBX: 0000200000000000 RCX: 0000000000080000 [ 428.733046][ T8233] RDX: ffffc9000cb59000 RSI: 0000000000003b89 RDI: 0000000000003b8a [ 428.741041][ T8233] RBP: 0000000000000000 R08: ffff88807e0378ef R09: 1ffff1100fc06f1d [ 428.749022][ T8233] R10: dffffc0000000000 R11: ffffed100fc06f1e R12: ffff888060e43070 [ 428.757010][ T8233] R13: dffffc0000000000 R14: ffff888060e43000 R15: ffff88807c1efab8 [ 428.765011][ T8233] ? hugetlb_split+0x234/0x2a0 [ 428.769818][ T8233] ? hugetlb_split+0x234/0x2a0 [ 428.774610][ T8233] __vma_adjust+0x4a3/0x1cd0 [ 428.779232][ T8233] ? lockdep_init_map_type+0x98/0x8d0 [ 428.784637][ T8233] ? lockdep_softirqs_off+0x430/0x430 [ 428.790030][ T8233] ? free_zapped_rcu+0x1f0/0x1f0 [ 428.794991][ T8233] ? validate_mm+0x2e0/0x2e0 [ 428.799606][ T8233] ? hugetlb_vm_op_open+0x334/0x540 [ 428.804822][ T8233] __split_vma+0x3a7/0x500 [ 428.809257][ T8233] do_mas_align_munmap+0x397/0x12b0 [ 428.814478][ T8233] ? do_mas_munmap+0x2b0/0x2b0 [ 428.819263][ T8233] ? mtree_range_walk+0x672/0x7b0 [ 428.824326][ T8233] ? mas_walk+0x15f/0x180 [ 428.828670][ T8233] ? mas_find+0x1e8/0x230 [ 428.833032][ T8233] do_mas_munmap+0x240/0x2b0 [ 428.837641][ T8233] mmap_region+0x6e0/0x1ca0 [ 428.842164][ T8233] ? pud_huge+0x40/0x40 [ 428.846330][ T8233] ? file_mmap_ok+0x170/0x170 [ 428.851020][ T8233] ? validate_mm+0x23f/0x2e0 [ 428.855627][ T8233] ? cap_mmap_addr+0x165/0x2e0 [ 428.860418][ T8233] ? file_mmap_ok+0x11c/0x170 [ 428.865111][ T8233] do_mmap+0x964/0xfd0 [ 428.869191][ T8233] ? aa_path_link+0x880/0x880 [ 428.873883][ T8233] ? mlock_future_check+0x100/0x100 [ 428.879095][ T8233] ? ima_file_free+0x3e0/0x3e0 [ 428.883868][ T8233] ? common_file_perm+0x171/0x1c0 [ 428.888906][ T8233] ? bpf_lsm_mmap_file+0x5/0x10 [ 428.893775][ T8233] __se_sys_remap_file_pages+0x5b9/0x7b0 [ 428.899477][ T8233] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 428.905247][ T8233] ? lock_chain_count+0x20/0x20 [ 428.910132][ T8233] ? lockdep_hardirqs_on+0x94/0x140 [ 428.915354][ T8233] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 428.921110][ T8233] do_syscall_64+0x4c/0xa0 [ 428.925549][ T8233] ? clear_bhb_loop+0x60/0xb0 [ 428.930244][ T8233] ? clear_bhb_loop+0x60/0xb0 [ 428.934935][ T8233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.940839][ T8233] RIP: 0033:0x7f8e7539cdd9 [ 428.945262][ T8233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.965011][ T8233] RSP: 002b:00007f8e7624d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 428.973453][ T8233] RAX: ffffffffffffffda RBX: 00007f8e75615fa0 RCX: 00007f8e7539cdd9 [ 428.981440][ T8233] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 428.989420][ T8233] RBP: 00007f8e75432d69 R08: 0000000000000020 R09: 0000000000000000 [ 428.997406][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.005385][ T8233] R13: 00007f8e75616038 R14: 00007f8e75615fa0 R15: 00007ffe01da67e8 [ 429.013381][ T8233] [ 429.016844][ T8233] Kernel Offset: disabled [ 429.021349][ T8233] Rebooting in 86400 seconds..