last executing test programs: 6m41.256160845s ago: executing program 0 (id=562): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000007c0)={0x2, 'macsec0\x00', 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m40.893189243s ago: executing program 0 (id=565): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3200000010070001000300002b"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014) r1 = io_uring_setup(0x5d2c, &(0x7f0000000340)={0x0, 0x4255, 0x1000, 0x0, 0xb0}) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x3c, 0x2, 0x0, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @mcast1, [0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xd4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000440)={r1, 0x86d}) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x40, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}]}, 0x38}}, 0x10) r3 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x420000, 0x66, 0x39}, 0x18) io_uring_enter(r1, 0x5459, 0xfcba, 0x90, &(0x7f00000003c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x34}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r4, 0x8) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x20008814) statx(r3, &(0x7f0000000400)='./file0\x00', 0x100, 0x20, &(0x7f0000000700)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000004c0)=[@ioring_restriction_sqe_op={0x1, 0xd4af48e9738743eb}], 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) sendto$inet(r7, &(0x7f00000002c0)="6ff60c90fe48c8f4241fe24b928ea2607d7d92a7415a126b9e4b8249aeb6f7cd9fd4a3ea86196b8246837afc8b981873a4fdc6365b30a44b293257163dbd09be52fb317014ceec9d4ce8d492e89077396692714788208d5be920658044194bb7e5ab1ed516b0b1ceea55f030b66972d3742571ee316fc6992ad10649e6ab534c0e66d06c992d605ac995a4cf264e05d0febbcc4d2ea17e51bd21086fd4f0d31a708e0a0cb7c36d694fb9601ccad6ae3c02f69309cc5aa0acda0bc34baa085033cdae0e790025fa370a3f59978de9774759f96151404998cb4f363596aac9e77b140f5dea4fb4f5dd08cd6db751d561", 0xef, 0x20004000, &(0x7f00000004c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$P9_RLERROR(r6, &(0x7f00000001c0)={0x17, 0x7, 0x1, {0xe, 'journal_ioprio'}}, 0x17) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 6m39.892256062s ago: executing program 0 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 6m39.618776404s ago: executing program 0 (id=585): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) write$ppp(r0, &(0x7f00000000c0)="43f1", 0x2) 6m39.160592173s ago: executing program 0 (id=591): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) poll(&(0x7f0000000140)=[{r0, 0x4000}], 0x1, 0x5) 6m38.146051562s ago: executing program 0 (id=597): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000003c0)="a38ba845ec4efadcef0748bc81c2b1e5871864cbd669dbeae919b80ed2cbe548fec9b69473db427a2f2e8e6e7c4c766444a00864121f6ee2ba4a23229ec0168a47176bb0a5bcb0f2755306372832f73ef0cd68b6f1579a637633db2d4efb1c66b1f17c0e06e6a5d58c7420a3e59452d125e53b7bc53aa594a451c4ff81840c1b3c7cc73f3bd32194441d8dc67f33f6b0dcc808c2ae12db6ee560d8aa8aa335f779b48d8be8821abb2d294aae2f69ed194ef5bcd2eca82b6b1f9cb1f0db166bd913c098a0aeac00ce81c0a0e7bb3281cec84a8560b0ac4c6e75913bcc9ff5a0b2ad32aac77d35137c79f0675a34e94bbe1540b700bfa1010eedb294", 0xfb}], 0x1}}], 0x1, 0x2000c044) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000c40)="b420", 0xfdef}], 0x1) 6m37.58973263s ago: executing program 32 (id=597): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f00000003c0)="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", 0xfb}], 0x1}}], 0x1, 0x2000c044) writev(r0, &(0x7f0000002640)=[{&(0x7f0000000c40)="b420", 0xfdef}], 0x1) 2m31.826338646s ago: executing program 2 (id=2291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250300000008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 2m31.634825364s ago: executing program 2 (id=2294): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m31.295643096s ago: executing program 2 (id=2299): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r1, &(0x7f0000000940)='naa.6', 0x5) 2m30.970612065s ago: executing program 2 (id=2301): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) shutdown(r1, 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'dummy0\x00', @random="8ed3e46724fa"}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) write(r4, &(0x7f0000000040)='add syz0 ::', 0xb) 2m29.274498714s ago: executing program 2 (id=2308): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, 0x0, 0x0) 2m25.500936134s ago: executing program 2 (id=2321): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2', 0x2) 2m21.824738506s ago: executing program 5 (id=2336): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) poll(&(0x7f00000003c0)=[{r0, 0x41a8}, {r1, 0x4080}], 0x2, 0x101) 2m21.284615619s ago: executing program 5 (id=2343): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 2m20.972883564s ago: executing program 5 (id=2344): r0 = socket(0x200000000000011, 0x1, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f00000000c0)=0x400, 0x4) recvmmsg(r3, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a3100000000180003"], 0x44}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0xfffe, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) bind$inet(r0, &(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000004c0)={{r4, &(0x7f0000000100)='\'{\'{\x00', 0x2000, &(0x7f0000000140)={@_ha_fsid={[0x84a, 0xffff]}, {0x5, 0x5, 0x8, 0x7}}, 0xc91, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f00000003c0)=0xb19}, {[0xe, 0x6, 0x9, 0x2]}, 0x2, 0x6e, &(0x7f0000000400)=""/110}) getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000540), &(0x7f0000000580)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000180)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000980)={0x0, 0x6b, "ad4edb34ad2751c6874cbad6d91ceb92deafb1402cb7dedda799587bb04cc1c9a905e7f55ceff9c24f6ad5c2dfbd3c49eb7954905e6ebf078271b0b4bb5a8862e5e970242886eecc2fa8de1ae61e36119c9e91b0a54ad47d4ede24d136abe92d072ea6b968f5219517c196"}, &(0x7f00000001c0)=0x73) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000940)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)='>', 0x1}], 0x1}}], 0x1, 0x4c800) sendmmsg$alg(r5, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000005c0)="9c", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000000000001701000002a95e00007e7c9900000022b600acc45410c2d5f1f7b3576047a60077825c40b13274e2a40bf30c24dff5d15dc2f4ee0f45d0a5499c47e368dceea577af0b31"], 0x28}], 0x1, 0x20008090) 2m20.794427496s ago: executing program 5 (id=2347): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) 2m20.176700615s ago: executing program 5 (id=2353): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) 2m19.110717668s ago: executing program 5 (id=2359): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x5, 0xa000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca07, 0x800, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) inotify_init() openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2m18.053963167s ago: executing program 33 (id=2359): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cfda37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ea7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x5, 0xa000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca07, 0x800, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) inotify_init() openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2m10.132502897s ago: executing program 34 (id=2321): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='-2', 0x2) 1m45.794063004s ago: executing program 3 (id=2469): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0x2, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83d, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x401, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d3, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9a1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1m45.502141841s ago: executing program 3 (id=2471): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x90) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 1m40.529581341s ago: executing program 3 (id=2482): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000040)=0x7, 0x8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m40.14445771s ago: executing program 3 (id=2484): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x3) statfs(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x143841, 0x114) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1m39.607146129s ago: executing program 3 (id=2487): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000001100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m39.188743579s ago: executing program 3 (id=2488): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="c1480801e646d407cb2169ebaf31eb01a4c2f348896bcf1cbf49ad68000952b42e8e843eb89d9156fcfcbf6192439c93290e9e8245d2fce226138a760cea41b98c7da61fc923597246f17dd2579477b8eb191c21610bfbf498fc28b4ad669db18c03e433048723e44d1a363e6eb072fd0f9c94867c6151174c0d68ad778a1d32fa49fdfededafd0e2fb80fc3f76aebb57dfd3e67fe0d8ee0a7ab128673eef38b3597d43711cb4b8c0e8472fc20369a1adf9b849139f6b730b9fa6761374cb7dd34122a4436cab20d1080ce4ae2b07b66d8a600b92f0206fb1ea878ecd95bf0fa475965"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m23.636295123s ago: executing program 35 (id=2488): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="c1480801e646d407cb2169ebaf31eb01a4c2f348896bcf1cbf49ad68000952b42e8e843eb89d9156fcfcbf6192439c93290e9e8245d2fce226138a760cea41b98c7da61fc923597246f17dd2579477b8eb191c21610bfbf498fc28b4ad669db18c03e433048723e44d1a363e6eb072fd0f9c94867c6151174c0d68ad778a1d32fa49fdfededafd0e2fb80fc3f76aebb57dfd3e67fe0d8ee0a7ab128673eef38b3597d43711cb4b8c0e8472fc20369a1adf9b849139f6b730b9fa6761374cb7dd34122a4436cab20d1080ce4ae2b07b66d8a600b92f0206fb1ea878ecd95bf0fa475965"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 7.022241994s ago: executing program 7 (id=2875): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r7, r8, &(0x7f0000000140)={0x0, 0xba1d, 0x4000, 0x2, 0x3, 0x0, r2}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc50, 0x800, 0x1, 0xe8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x267e, 0x200, 0x1, 0x15c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f69, 0x4, 0x1, 0x3d4, 0x0, r6}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8e3, 0x8000, 0x0, 0x148, 0x0, r4}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r10}}], 0x1, 0x0, 0x0) 6.443732026s ago: executing program 6 (id=2877): syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 6.408191585s ago: executing program 9 (id=2878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.360965206s ago: executing program 7 (id=2880): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 6.318168175s ago: executing program 4 (id=2881): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setns(0xc9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x21, 0x6, 0x3, 0x0, 0x2]}, &(0x7f0000000200)=0x54) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) lseek(r0, 0x101, 0x1) 6.275630058s ago: executing program 6 (id=2882): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.152313013s ago: executing program 8 (id=2883): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xfffffffffffffffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x2000c8c0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x2023c00, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESDEC], 0xfb, 0x1503, &(0x7f0000002d40)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x48) write$binfmt_format(r5, &(0x7f0000000000)='1\x00', 0x2400) 6.150312125s ago: executing program 9 (id=2884): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x11, 0x800000003, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) write(r5, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.884837147s ago: executing program 1 (id=2885): socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.6', 0x5) 4.846205716s ago: executing program 9 (id=2886): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(0x0, 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4.192570042s ago: executing program 6 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 4.192022479s ago: executing program 1 (id=2888): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.191287126s ago: executing program 4 (id=2889): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x200c17a) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000001100), 0x0) 4.190784182s ago: executing program 7 (id=2890): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/151, 0x97}, {0x0}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) 3.732903919s ago: executing program 4 (id=2891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) 3.731248223s ago: executing program 7 (id=2892): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) poll(&(0x7f00000003c0)=[{r0, 0x41a8}, {r1, 0x4080}], 0x2, 0x101) 3.618239931s ago: executing program 9 (id=2893): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x5, 0x4) 3.463111965s ago: executing program 8 (id=2894): syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 3.325440391s ago: executing program 1 (id=2895): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 2.930820314s ago: executing program 6 (id=2896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.703911272s ago: executing program 7 (id=2897): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r4}}], 0x1, 0x0, 0x0) 2.130076849s ago: executing program 8 (id=2898): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c04", 0x1d) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x11, 0x800000003, 0x1000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x3, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) write(r5, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010000", 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.99057401s ago: executing program 4 (id=2899): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.869409867s ago: executing program 8 (id=2900): socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.6', 0x5) 1.833011074s ago: executing program 6 (id=2901): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setns(0xc9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x21, 0x6, 0x3, 0x0, 0x2]}, &(0x7f0000000200)=0x54) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) lseek(r0, 0x101, 0x1) 1.590533301s ago: executing program 1 (id=2902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0x1, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0xc00000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x20004010) 1.575676353s ago: executing program 8 (id=2903): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 836.443898ms ago: executing program 6 (id=2904): r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x1a3b, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000640)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 746.876235ms ago: executing program 1 (id=2905): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='tunl0\x00'}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0dac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, 0x0, 0x80) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}}, 0x40000) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x3, 0x7fff, 0x2, @remote, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7, 0x80, 0x1, 0xcc}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4010000190000022cbd7000fddbdf456ebf25ff0200006fd589bb8a925f37110c7cd0b7a2000000000000000000000001000000000000000000000000000000000001eeb6594a2f6c5e4d5aec6d3d8200040000e3e5be5a35385dea3029e1a5cfd5702391dd40aea58fe1c41144e413f787bf5a00f8b76739282704a5669e7fa7644499f91fb2c68aa2e51eda6a6b3cefa71700"/162, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0500000000000000050000000000000008000000000000000c000000000000000300000000000000f8ffffffffffffff00080000000000000000000000000000070000000000000001000000000000000f00000000000000050000000000000000100000b16b6e00010100020000000010000a0025bd700028bd70000300000008000c0006000000e4000600fe8000000000000000000000000000aa000000000000000000000000000000004e2080014e22e6b90a00802094000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="fe800000000000000000000000000040000004d232000000ff0100000000000000000000000000010000000000000000ff00000000000000399e000000000000f9ffffffffffffff0700000000000000070000000000000001000000000000009a590000000000000b000000000000000900000000000000d500000000000000030000000000000002000000f5ffffff0300000027bd7000003500000a0001079c00000000000000"], 0x1b4}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) 668.844211ms ago: executing program 4 (id=2906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f0000000300)=""/71, 0x47}], 0x4, 0x7, 0x20000000) 556.470234ms ago: executing program 9 (id=2907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) 437.468707ms ago: executing program 4 (id=2908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 112.600716ms ago: executing program 9 (id=2909): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) poll(&(0x7f00000003c0)=[{r0, 0x41a8}, {r1, 0x4080}], 0x2, 0x101) 110.691777ms ago: executing program 8 (id=2910): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv4=@empty, [0x0, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0x101000000], 0x80, 0x54, 0x0, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x3ff, 0x18}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x9000000000000, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3, 0x18}, {0x8000000000000}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 4.0062ms ago: executing program 1 (id=2911): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000007300)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703835352c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f646973636172642c646973636172643d3078303030303030303030303030303030382c6572726f72733d636f6e74696e7565006969736f383835392d342c756d61736b3d3078303030303030303030303030303038312c696f6368617257fd743d6d6163677265656b2c71756f74612c6572726f1729def7e35bcb756e742d726f2c726573697a653d3078303030303030303030181829303030303030312c756d61736b3d3078303030303030303030303032303034352c66736d616769633d307830dcb1c47cb87a74ac1a3030303030303030303030303030392c646566636f6e746578743d726f6f742c66736e616d653d757d407d587d5b2d292b2c000d1c13f7c892c8615d265c6376539175380511bac765713e83a65e4fdf011c705fc6838005120385ac61b970f45d1492a0612eb8000000000000808fc76f91b7b9a5ce77887858ea333961d1ef1e4eabd4c84e81dbf575c47e9b8eea9d6806fa159e0525146f6312b4931cffed0000", @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0xfe, 0x6178, &(0x7f000000ca40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 0s ago: executing program 7 (id=2912): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000000280)=""/101, 0x65}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 210.688136][ T8983] EXT4-fs: error: could not find journal device path [ 210.931599][ T5635] Bluetooth: hci0: command 0x0406 tx timeout [ 210.931800][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 210.937662][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 210.943962][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 211.041183][ T9006] program syz.2.1142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.406394][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 211.408511][ T5625] Bluetooth: hci2: link tx timeout [ 211.423567][ T5625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.461624][ T5625] Bluetooth: hci2: link tx timeout [ 211.467295][ T5625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.476813][ T5625] Bluetooth: hci2: link tx timeout [ 211.482044][ T5625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.489863][ T5625] Bluetooth: hci2: link tx timeout [ 211.495094][ T5625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.533571][ T5625] Bluetooth: hci2: link tx timeout [ 211.538739][ T5625] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.678746][ T9016] loop2: detected capacity change from 0 to 8192 [ 211.858552][ T9023] syzkaller0: entered promiscuous mode [ 211.897851][ T9023] syzkaller0: entered allmulticast mode [ 212.131779][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 212.414021][ T9048] program syz.3.1158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.942604][ T9068] loop2: detected capacity change from 0 to 8192 [ 212.970425][ T9068] syz.2.1166: attempt to access beyond end of device [ 212.970425][ T9068] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 214.032260][ T9085] program syz.6.1174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.585367][ T9104] program syz.4.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.639288][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 214.639305][ T30] audit: type=1326 audit(1786567498.798:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.3.1183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2139e0d9 code=0x7ffc0000 [ 214.687326][ T30] audit: type=1326 audit(1786567498.838:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.3.1183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2139e0d9 code=0x7ffc0000 [ 214.714438][ T30] audit: type=1326 audit(1786567498.838:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.3.1183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2139e0d9 code=0x7ffc0000 [ 214.785310][ T9110] syzkaller0: entered promiscuous mode [ 214.800086][ T9110] syzkaller0: entered allmulticast mode [ 214.807276][ T30] audit: type=1326 audit(1786567498.838:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.3.1183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7faa2139e0d9 code=0x7ffc0000 [ 214.879169][ T30] audit: type=1326 audit(1786567498.838:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.3.1183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2139e0d9 code=0x7ffc0000 [ 214.923430][ T9115] loop3: detected capacity change from 0 to 128 [ 214.955714][ T30] audit: type=1326 audit(1786567498.838:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.3.1183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa2139e0d9 code=0x7ffc0000 [ 215.002328][ T9115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.025872][ T9115] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.097386][ T30] audit: type=1326 audit(1786567498.838:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.3.1183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa2139e0d9 code=0x7ffc0000 [ 215.122206][ T30] audit: type=1326 audit(1786567498.838:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.3.1183" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa2139e0d9 code=0x7ffc0000 [ 215.265385][ T5621] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.774860][ T9145] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1200'. [ 216.081809][ T9159] loop5: detected capacity change from 0 to 128 [ 216.155594][ T9159] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.204206][ T9159] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.552334][ T9169] loop2: detected capacity change from 0 to 512 [ 216.566569][ T9169] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 216.616820][ T9144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.630796][ T9169] EXT4-fs: error: could not find journal device path [ 216.631748][ T9144] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 216.712832][ T9144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.723611][ T5624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.736033][ T9144] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 216.804113][ T9144] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.821053][ T9144] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 216.887693][ T9144] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 216.903461][ T9144] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 216.943441][ T9144] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 216.956172][ T9144] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 217.106334][ T9144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 217.114939][ T9144] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 217.374514][ T9193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1219'. [ 217.455758][ T9196] loop4: detected capacity change from 0 to 128 [ 217.526381][ T9196] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.561414][ T9202] loop3: detected capacity change from 0 to 512 [ 217.568979][ T9202] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 217.581617][ T9196] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.605744][ T9202] EXT4-fs: error: could not find journal device path [ 217.784635][ T5612] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.810737][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 218.247505][ T9220] program syz.6.1228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.475998][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 218.770462][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 218.850445][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 218.930439][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 219.010016][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 219.170135][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 219.427169][ T9270] loop6: detected capacity change from 0 to 512 [ 219.532176][ T9272] syzkaller0: entered promiscuous mode [ 219.562334][ T9270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.601768][ T9272] syzkaller0: entered allmulticast mode [ 219.626052][ T9282] loop3: detected capacity change from 0 to 128 [ 219.653092][ T9282] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.657759][ T9270] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.678945][ T9282] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.787291][ T5621] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.890123][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 220.095631][ T9298] sg_write: data in/out 437212/170 bytes for SCSI command 0x0-- guessing data in; [ 220.095631][ T9298] program syz.5.1257 not setting count and/or reply_len properly [ 220.323987][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 220.388496][ T7449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.446002][ T9305] program syz.3.1260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.503993][ T5269] veth0_vlan: left promiscuous mode [ 220.572014][ T5340] veth0_vlan: entered promiscuous mode [ 220.850059][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 220.927357][ T9326] netlink: 304 bytes leftover after parsing attributes in process `syz.6.1268'. [ 220.930774][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 221.010366][ T5620] Bluetooth: hci5: command 0x0406 tx timeout [ 221.026003][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1270'. [ 221.090120][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 221.250311][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 221.272476][ T9336] syzkaller0: entered promiscuous mode [ 221.291797][ T9336] syzkaller0: entered allmulticast mode [ 221.357081][ T9344] loop4: detected capacity change from 0 to 512 [ 221.380503][ T9344] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1274: inode has both inline data and extents flags [ 221.381858][ T9342] program syz.5.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.395153][ T9344] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.405552][ T9344] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1274: couldn't read orphan inode 15 (err -117) [ 221.414751][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 221.414774][ C1] EXT4-fs (loop4): initial error at time 1786567505: ext4_orphan_get:1399: inode 15 [ 221.414813][ C1] EXT4-fs (loop4): last error at time 1786567505: ext4_orphan_get:1399: inode 15 [ 221.451768][ T9344] loop4: lost filesystem error report for type 5 error -117 [ 221.458065][ T9344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.632427][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.835229][ T9353] syzkaller0: entered promiscuous mode [ 221.860918][ T9353] syzkaller0: entered allmulticast mode [ 222.490418][ T3739] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 222.650060][ T3739] usb 4-1: device descriptor read/64, error -71 [ 222.900411][ T3739] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 223.099161][ T9390] loop4: detected capacity change from 0 to 128 [ 223.125500][ T3739] usb 4-1: device descriptor read/64, error -71 [ 223.172016][ T9390] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.274154][ T9390] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.275578][ T9398] syzkaller0: entered promiscuous mode [ 223.285010][ T3739] usb usb4-port1: attempt power cycle [ 223.290385][ T9398] syzkaller0: entered allmulticast mode [ 223.335880][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 223.342179][ T9398] tipc: Started in network mode [ 223.349489][ T9398] tipc: Node identity fef76ad87e85, cluster identity 4711 [ 223.409389][ T9398] tipc: Enabled bearer , priority 0 [ 223.460581][ T9397] tipc: Resetting bearer [ 223.505477][ T9397] tipc: Disabling bearer [ 223.639256][ T5612] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.690036][ T3739] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 223.720855][ T3739] usb 4-1: device descriptor read/8, error -71 [ 224.125612][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1299'. [ 225.074419][ T3739] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 225.101949][ T3739] usb 4-1: device descriptor read/8, error -71 [ 225.628053][ T3739] usb usb4-port1: unable to enumerate USB device [ 226.007624][ T9436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1303'. [ 227.356425][ T5620] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 227.620896][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1317'. [ 228.188541][ T9481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1320'. [ 228.625901][ T9499] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1327'. [ 229.011713][ T9507] tipc: Enabling of bearer rejected, failed to enable media [ 229.118059][ T9509] loop3: detected capacity change from 0 to 256 [ 229.269517][ T9509] exfat: Deprecated parameter 'utf8' [ 229.365392][ T9509] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x265d2142, utbl_chksum : 0xe619d30d) [ 230.067203][ T9516] loop3: detected capacity change from 0 to 4096 [ 230.106911][ T9516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.259212][ T9515] syzkaller0: entered promiscuous mode [ 230.276419][ T9515] syzkaller0: entered allmulticast mode [ 230.866913][ T9521] syzkaller0: entered promiscuous mode [ 230.909788][ T9521] syzkaller0: entered allmulticast mode [ 231.113786][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.229406][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 231.411063][ T5620] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 231.421082][ T5620] Bluetooth: hci3: Injecting HCI hardware error event [ 231.433169][ T5620] Bluetooth: hci3: hardware error 0x00 [ 231.956745][ T9549] loop3: detected capacity change from 0 to 32768 [ 231.971673][ T9549] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1343 (9549) [ 232.136672][ T9549] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.154376][ T9549] BTRFS info (device loop3): using crc32c checksum algorithm [ 232.306139][ T9549] BTRFS info (device loop3): enabling ssd optimizations [ 232.321058][ T9549] BTRFS info (device loop3): turning on flush-on-commit [ 232.328449][ T9549] BTRFS info (device loop3): enabling free space tree [ 232.343479][ T9549] BTRFS info (device loop3): enabling auto defrag [ 232.356761][ T9549] BTRFS info (device loop3): use lzo compression, level 1 [ 232.375545][ T9549] BTRFS info (device loop3): max_inline set to 4096 [ 232.598497][ T5621] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.028014][ T187] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 233.056445][ T9535] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1337'. [ 233.192585][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 233.216173][ T187] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 233.230080][ T9573] 9p: Bad value for 'source' [ 233.272026][ T187] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 233.306810][ T187] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 233.354840][ T187] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 233.389679][ T187] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 233.426767][ T187] usb 4-1: config 0 interface 0 has no altsetting 0 [ 233.451848][ T187] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 233.472672][ T187] usb 4-1: Product: syz [ 233.483411][ T187] usb 4-1: Manufacturer: syz [ 233.490825][ T5620] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 233.504788][ T187] usb 4-1: SerialNumber: syz [ 233.524624][ T187] usb 4-1: config 0 descriptor?? [ 233.537841][ T187] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 233.566684][ T187] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 233.694773][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1352'. [ 233.987578][ T5830] usb 4-1: USB disconnect, device number 6 [ 233.988174][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 234.013988][ T9567] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 234.086767][ T5830] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 234.086918][ T9597] ldusb: No device or device unplugged -19 [ 234.402942][ T9610] program syz.6.1358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.605224][ T9608] syzkaller0: entered promiscuous mode [ 234.630971][ T9608] syzkaller0: entered allmulticast mode [ 237.566387][ T9648] loop2: detected capacity change from 0 to 131072 [ 237.602718][ T9648] F2FS-fs (loop2): invalid crc value [ 237.710460][ T9648] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 237.722703][ T9648] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 238.382797][ T9659] loop4: detected capacity change from 0 to 8192 [ 241.255289][ T9627] syzkaller0: entered promiscuous mode [ 241.266016][ T9627] syzkaller0: entered allmulticast mode [ 241.926691][ T9673] loop4: detected capacity change from 0 to 8192 [ 242.349857][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 242.831887][ T9693] program syz.4.1383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.851180][ T9697] loop2: detected capacity change from 0 to 8192 [ 244.232109][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 244.257122][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1389'. [ 244.274156][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 244.741998][ T9717] loop1: detected capacity change from 0 to 8192 [ 244.835370][ T9732] sg_write: data in/out 441308/186 bytes for SCSI command 0x0-- guessing data in; [ 244.835370][ T9732] program syz.4.1397 not setting count and/or reply_len properly [ 244.881041][ T9734] program syz.5.1398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.039828][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'. [ 245.319596][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1403'. [ 245.459179][ T9759] syzkaller0: entered promiscuous mode [ 245.497935][ T9759] syzkaller0: entered allmulticast mode [ 245.588621][ T9767] program syz.1.1408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.062819][ T9796] sg_write: data in/out 441308/186 bytes for SCSI command 0x0-- guessing data in; [ 246.062819][ T9796] program syz.4.1416 not setting count and/or reply_len properly [ 246.942673][ T9803] program syz.4.1418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.175338][ T9809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1423'. [ 247.450278][ T9824] program syz.2.1428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.451950][ T9821] syzkaller0: entered promiscuous mode [ 247.465149][ T9821] syzkaller0: entered allmulticast mode [ 247.552550][ T9825] loop4: detected capacity change from 0 to 4096 [ 247.578691][ T9829] sg_write: data in/out 441308/186 bytes for SCSI command 0x0-- guessing data in; [ 247.578691][ T9829] program syz.3.1430 not setting count and/or reply_len properly [ 247.596740][ T9825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.813171][ T9836] program syz.2.1433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.563014][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.588243][ T9769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.545486][ T9852] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1437'. [ 251.178265][ T9877] loop1: detected capacity change from 0 to 512 [ 251.344060][ T9877] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 251.366988][ T9877] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 251.377359][ T9877] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1450: Failed to acquire dquot type 1 [ 251.388777][ T9877] loop1: lost filesystem error report for type 5 error -117 [ 251.389987][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 251.403761][ C0] EXT4-fs (loop1): initial error at time 1786567535: ext4_acquire_dquot:7041 [ 251.412567][ C0] EXT4-fs (loop1): last error at time 1786567535: ext4_acquire_dquot:7041 [ 251.485546][ T9877] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1450: corrupted inode contents [ 251.655135][ T9877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 251.777184][ T9877] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.1450: mark_inode_dirty error [ 252.090046][ T9877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.284811][ T9877] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1450: corrupted inode contents [ 252.371714][ T9877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.372169][ T9877] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1450: mark_inode_dirty error [ 252.468667][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 252.498174][ T9877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.498867][ T9877] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1450: corrupted inode contents [ 252.530702][ T9904] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1459'. [ 252.580103][ T9877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.612010][ T9877] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 252.634972][ T9877] loop1: lost filesystem error report for type 5 error -117 [ 252.635387][ T9877] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.1450: corrupted inode contents [ 252.667164][ T9877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.667562][ T9877] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.1450: mark_inode_dirty error [ 252.765424][ T9877] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 252.767099][ T9877] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 252.836603][ T9877] loop1: lost filesystem error report for type 5 error -117 [ 252.845782][ T9877] EXT4-fs (loop1): 1 truncate cleaned up [ 252.876755][ T9877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.919125][ T9877] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.175643][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.207923][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1469'. [ 253.473390][ T9938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'. [ 253.503461][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1478'. [ 253.529133][ T9942] bond0: (slave veth0_to_bond): Releasing backup interface [ 253.556437][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1478'. [ 253.589506][ T9947] loop3: detected capacity change from 0 to 1024 [ 253.618072][ T9947] EXT4-fs: Ignoring removed bh option [ 253.688809][ T9947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.737551][ T9968] loop2: detected capacity change from 0 to 512 [ 254.795406][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.842641][ T9968] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 254.904916][ T9968] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 254.938966][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.947325][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.004166][ T9968] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1485: Failed to acquire dquot type 1 [ 255.042837][ T9968] loop2: lost filesystem error report for type 5 error -117 [ 255.044883][ T9968] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1485: corrupted inode contents [ 255.052249][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 255.052272][ C0] EXT4-fs (loop2): initial error at time 1786567539: ext4_acquire_dquot:7041 [ 255.052301][ C0] EXT4-fs (loop2): last error at time 1786567539: ext4_acquire_dquot:7041 [ 255.138319][ T9968] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 255.138739][ T9968] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.1485: mark_inode_dirty error [ 255.214790][ T9968] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 255.215250][ T9968] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1485: corrupted inode contents [ 255.245468][ T9983] program syz.5.1490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.266160][ T9968] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 255.266559][ T9968] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1485: mark_inode_dirty error [ 255.301192][ T418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.348154][ T9968] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1485: corrupted inode contents [ 255.416754][ T9968] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 255.430216][ T9968] loop2: lost filesystem error report for type 5 error -117 [ 255.430591][ T9968] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.1485: corrupted inode contents [ 255.493187][ T9985] program syz.1.1491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.523823][ T9968] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.1485: mark_inode_dirty error [ 255.560450][ T9968] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 255.589250][ T418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.610832][ T9968] loop2: lost filesystem error report for type 5 error -117 [ 255.611941][ T9968] EXT4-fs (loop2): 1 truncate cleaned up [ 255.617369][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1494'. [ 255.676846][ T9968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.749066][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1494'. [ 255.761245][ T9968] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.784293][ T418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.952682][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.073040][ T418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.631463][T10029] loop4: detected capacity change from 0 to 4096 [ 256.652852][ T418] bridge_slave_1: left allmulticast mode [ 256.668632][T10029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.677636][ T418] bridge_slave_1: left promiscuous mode [ 256.688623][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.724922][ T418] bridge_slave_0: left allmulticast mode [ 256.736314][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1507'. [ 256.739893][ T418] bridge_slave_0: left promiscuous mode [ 256.753950][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.001103][T10041] hub 8-0:1.0: USB hub found [ 257.007567][T10041] hub 8-0:1.0: 1 port detected [ 257.771411][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.214423][T10058] loop3: detected capacity change from 0 to 512 [ 258.285953][T10058] Quota error (device loop3): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 258.327280][T10058] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 258.341091][T10073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1514'. [ 258.432559][T10058] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1513: Failed to acquire dquot type 1 [ 258.466098][T10058] loop3: lost filesystem error report for type 5 error -117 [ 258.469264][T10058] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1513: corrupted inode contents [ 258.476677][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 258.476702][ C0] EXT4-fs (loop3): initial error at time 1786567542: ext4_acquire_dquot:7041 [ 258.476732][ C0] EXT4-fs (loop3): last error at time 1786567542: ext4_acquire_dquot:7041 [ 258.599399][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1514'. [ 258.631719][T10058] fserror_report: 4 callbacks suppressed [ 258.631735][T10058] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.657550][T10058] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #16: comm syz.3.1513: mark_inode_dirty error [ 258.679578][T10058] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.682089][T10058] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1513: corrupted inode contents [ 258.714170][T10058] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.718422][T10058] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.1513: mark_inode_dirty error [ 258.778051][T10058] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.778452][T10058] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1513: corrupted inode contents [ 258.818432][T10058] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.818831][T10058] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 258.837838][ T418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.859544][T10058] loop3: lost filesystem error report for type 5 error -117 [ 258.860824][T10058] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #16: comm syz.3.1513: corrupted inode contents [ 258.880408][T10058] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.880775][T10058] EXT4-fs error (device loop3): ext4_truncate:4691: inode #16: comm syz.3.1513: mark_inode_dirty error [ 258.901654][T10058] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 258.902012][T10058] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 258.927052][T10058] loop3: lost filesystem error report for type 5 error -117 [ 258.928397][T10058] EXT4-fs (loop3): 1 truncate cleaned up [ 258.943938][T10058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.956924][T10058] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.969465][ T418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.983277][ T418] bond0 (unregistering): Released all slaves [ 259.064538][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.232294][ T418] IPVS: stopping backup sync thread 7340 ... [ 259.322724][T10103] loop3: detected capacity change from 0 to 128 [ 259.414397][T10103] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.543237][T10103] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.624243][T10115] 9pnet_virtio: no channels available for device [ 259.624243][T10115] [ 259.947699][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 259.966716][ T5621] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.018772][T10119] loop5: detected capacity change from 0 to 4096 [ 260.107932][T10119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.208425][T10133] hub 8-0:1.0: USB hub found [ 260.214794][T10133] hub 8-0:1.0: 1 port detected [ 262.409182][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.792355][T10137] tipc: Enabling of bearer rejected, failed to enable media [ 262.924016][T10155] syzkaller0: entered promiscuous mode [ 262.959429][T10155] syzkaller0: entered allmulticast mode [ 263.052913][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1529'. [ 263.100106][ T418] hsr_slave_0: left promiscuous mode [ 263.128123][ T418] hsr_slave_1: left promiscuous mode [ 263.148126][ T418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.181473][ T418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.253429][ T418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.275103][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1529'. [ 263.291359][ T418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.374961][T10173] loop4: detected capacity change from 0 to 4096 [ 263.383646][ T418] veth1_macvtap: left promiscuous mode [ 263.398232][ T418] veth0_macvtap: left promiscuous mode [ 263.418243][ T418] veth1_vlan: left promiscuous mode [ 263.435402][ T418] veth0_vlan: left promiscuous mode [ 263.447258][T10173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.588612][T10183] loop1: detected capacity change from 0 to 128 [ 264.159929][T10183] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.183312][T10183] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.516395][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.532745][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1540'. [ 264.543117][ T5613] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.263023][ T418] team0 (unregistering): Port device team_slave_1 removed [ 266.317952][ T418] team0 (unregistering): Port device team_slave_0 removed [ 266.405886][ T12] smbdirect: ib_dev[syz1] removed [ 266.864478][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 267.029373][ T5830] infiniband syz1: ib_query_port failed (-19) [ 267.272962][T10245] sg_write: data in/out 420828/106 bytes for SCSI command 0x0-- guessing data in; [ 267.272962][T10245] program syz.2.1552 not setting count and/or reply_len properly [ 268.358865][T10255] syzkaller0: entered promiscuous mode [ 268.391653][T10255] syzkaller0: entered allmulticast mode [ 268.848263][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 270.676172][T10318] loop2: detected capacity change from 0 to 8192 [ 271.008503][T10322] loop2: detected capacity change from 0 to 8192 [ 271.038596][ T30] audit: type=1800 audit(1786567555.198:138): pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1568" name="file2" dev="loop2" ino=1048622 res=0 errno=0 [ 271.664742][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 272.089707][T10343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'. [ 272.296371][T10353] program syz.4.1579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.651150][T10360] loop5: detected capacity change from 0 to 2048 [ 274.167429][T10360] Alternate GPT is invalid, using primary GPT. [ 274.174849][T10360] loop5: p2 p3 p7 [ 275.020174][T10351] loop2: detected capacity change from 0 to 8192 [ 275.125791][T10369] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 275.125791][T10369] program syz.1.1585 not setting count and/or reply_len properly [ 275.152079][T10364] syzkaller0: entered promiscuous mode [ 275.283043][T10368] loop3: detected capacity change from 0 to 4096 [ 275.395372][T10364] syzkaller0: entered allmulticast mode [ 275.434292][T10372] tipc: Enabled bearer , priority 0 [ 275.525661][T10368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.617053][T10363] tipc: Resetting bearer [ 276.425771][T10363] tipc: Disabling bearer [ 276.435098][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.066019][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 277.081480][T10415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1594'. [ 277.299753][T10421] loop5: detected capacity change from 0 to 128 [ 277.393013][T10421] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.534459][T10421] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.705020][ T5624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.052244][T10444] syzkaller0: entered promiscuous mode [ 278.060767][T10440] loop5: detected capacity change from 0 to 4096 [ 278.095346][T10444] syzkaller0: entered allmulticast mode [ 278.097763][T10440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.126973][T10444] tipc: Started in network mode [ 278.132250][T10444] tipc: Node identity 866bbbc529a4, cluster identity 4711 [ 278.139640][T10444] tipc: Enabled bearer , priority 0 [ 278.154082][T10443] tipc: Resetting bearer [ 278.228803][T10443] tipc: Disabling bearer [ 279.095402][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.694149][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1613'. [ 280.295889][T10485] loop4: detected capacity change from 0 to 128 [ 280.402642][T10485] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.493132][T10485] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.451366][ T5612] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.864244][T10517] loop5: detected capacity change from 0 to 128 [ 281.908761][T10517] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.929842][T10517] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.083077][T10527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1632'. [ 282.863163][T10534] loop1: detected capacity change from 0 to 1024 [ 282.963286][ T5624] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.073400][T10534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.254880][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.121991][T10577] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1648'. [ 285.211292][T10582] hub 8-0:1.0: USB hub found [ 285.236372][T10582] hub 8-0:1.0: 1 port detected [ 285.359196][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1650'. [ 285.520376][T10593] program syz.1.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.583001][T10597] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 285.583001][T10597] program syz.5.1654 not setting count and/or reply_len properly [ 287.089236][T10628] syzkaller0: entered promiscuous mode [ 287.114506][T10628] syzkaller0: entered allmulticast mode [ 287.177308][T10631] program syz.1.1664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.530928][T10650] program syz.6.1670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.561467][T10649] loop5: detected capacity change from 0 to 1024 [ 287.580214][T10649] EXT4-fs: Ignoring removed bh option [ 287.637927][T10649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.565567][T10671] loop6: detected capacity change from 0 to 1024 [ 288.615559][T10671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.069300][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.089753][ T7449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.378111][ T30] audit: type=1800 audit(1786567573.538:139): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1680" name="memory_backed" dev="configfs" ino=24390 res=0 errno=0 [ 289.457764][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1683'. [ 289.473865][ T30] audit: type=1800 audit(1786567573.568:140): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1680" name="power" dev="configfs" ino=24393 res=0 errno=0 [ 289.647224][T10684] null_blk: disk my_zoned_dev created [ 289.725219][T10691] program syz.3.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.313729][T10642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.747104][T10707] hub 8-0:1.0: USB hub found [ 290.790081][T10707] hub 8-0:1.0: 1 port detected [ 290.808686][T10709] loop3: detected capacity change from 0 to 1024 [ 290.819219][T10709] EXT4-fs: Ignoring removed bh option [ 290.885331][T10709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.971601][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.248394][T10742] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 292.248394][T10742] program syz.2.1703 not setting count and/or reply_len properly [ 292.512187][T10740] loop6: detected capacity change from 0 to 8192 [ 293.904132][T10779] syzkaller0: entered promiscuous mode [ 293.917484][T10779] syzkaller0: entered allmulticast mode [ 294.405379][ T30] audit: type=1800 audit(1786567578.568:141): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1715" name="nexus" dev="configfs" ino=25176 res=0 errno=0 [ 295.011378][T10821] loop3: detected capacity change from 0 to 8192 [ 295.362916][T10834] program syz.5.1727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.548383][T10839] syzkaller0: entered promiscuous mode [ 295.573302][T10839] syzkaller0: entered allmulticast mode [ 296.488396][T10774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.848907][T10903] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 297.848907][T10903] program syz.5.1753 not setting count and/or reply_len properly [ 299.085586][T10940] tipc: Enabled bearer , priority 0 [ 299.305657][T10939] tipc: Disabling bearer [ 299.535654][T10961] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 299.535654][T10961] program syz.5.1771 not setting count and/or reply_len properly [ 299.718816][T10967] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1774'. [ 299.744701][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 299.777894][T10963] syzkaller0: entered promiscuous mode [ 299.805534][T10963] syzkaller0: entered allmulticast mode [ 299.887890][T10969] loop1: detected capacity change from 0 to 8192 [ 300.580938][T10993] hub 8-0:1.0: USB hub found [ 300.585929][T10993] hub 8-0:1.0: 1 port detected [ 300.604618][T10991] loop3: detected capacity change from 0 to 4096 [ 300.774243][T10991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.002156][T11002] tipc: Started in network mode [ 301.061835][T11002] tipc: Node identity ea9f9573b4, cluster identity 4711 [ 301.226677][T11002] tipc: Enabled bearer , priority 0 [ 301.830832][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.854768][T11000] tipc: Disabling bearer [ 301.935133][ T30] audit: type=1800 audit(1786567586.098:142): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1794" name="nexus" dev="configfs" ino=25492 res=0 errno=0 [ 302.200070][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1796'. [ 302.298855][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1796'. [ 302.365932][T11039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1801'. [ 302.397782][T11025] loop3: detected capacity change from 0 to 8192 [ 302.451091][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.459720][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.482837][T11039] bridge0: entered allmulticast mode [ 302.514141][T11033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.739653][T11047] syzkaller0: entered promiscuous mode [ 302.810134][T11047] syzkaller0: entered allmulticast mode [ 303.164244][T11062] hub 8-0:1.0: USB hub found [ 303.169150][T11062] hub 8-0:1.0: 1 port detected [ 303.370817][ T30] audit: type=1800 audit(1786567587.538:143): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1810" name="nexus" dev="configfs" ino=26077 res=0 errno=0 [ 305.964465][T11087] tipc: Enabling of bearer rejected, failed to enable media [ 306.237578][ T30] audit: type=1800 audit(1786567590.398:144): pid=11111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1824" name="nexus" dev="configfs" ino=26662 res=0 errno=0 [ 306.527789][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1828'. [ 308.555370][ T30] audit: type=1800 audit(1786567592.718:145): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1840" name="nexus" dev="configfs" ino=26760 res=0 errno=0 [ 308.677666][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 310.560064][ T30] audit: type=1800 audit(1786567594.718:146): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1846" name="nexus" dev="configfs" ino=26206 res=0 errno=0 [ 310.645530][T11175] syzkaller0: entered promiscuous mode [ 310.678541][T11175] syzkaller0: entered allmulticast mode [ 311.226402][T11149] loop3: detected capacity change from 0 to 1024 [ 311.309048][T11149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.694385][ T30] audit: type=1800 audit(1786567595.858:147): pid=11210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1855" name="nexus" dev="configfs" ino=26857 res=0 errno=0 [ 311.764292][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.788896][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'. [ 311.987097][T11217] tipc: Enabled bearer , priority 0 [ 312.547735][T11215] tipc: Disabling bearer [ 312.961435][ T30] audit: type=1800 audit(1786567597.118:148): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1868" name="nexus" dev="configfs" ino=26268 res=0 errno=0 [ 313.220616][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1863'. [ 313.233250][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1863'. [ 313.496127][T11271] hub 8-0:1.0: USB hub found [ 313.502093][T11271] hub 8-0:1.0: 1 port detected [ 314.396141][ T30] audit: type=1800 audit(1786567598.558:149): pid=11279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1873" name="nexus" dev="configfs" ino=26981 res=0 errno=0 [ 314.716084][ T30] audit: type=1800 audit(1786567598.878:150): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1877" name="memory_backed" dev="configfs" ino=26311 res=0 errno=0 [ 314.721682][T11291] program syz.5.1880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.447443][T11287] loop4: detected capacity change from 0 to 4096 [ 315.564881][T11287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.768457][T11312] netlink: 'syz.1.1885': attribute type 3 has an invalid length. [ 315.776364][T11312] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1885'. [ 316.373115][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.381088][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.509572][T11320] syzkaller0: entered promiscuous mode [ 316.522618][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.571301][T11320] syzkaller0: entered allmulticast mode [ 316.718876][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 316.956704][ T30] audit: type=1800 audit(1786567601.118:151): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1893" name="memory_backed" dev="configfs" ino=26395 res=0 errno=0 [ 317.249028][T11344] program syz.1.1896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.043695][T11346] loop6: detected capacity change from 0 to 4096 [ 318.195343][T11346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.569795][T11368] netlink: 'syz.3.1904': attribute type 3 has an invalid length. [ 318.588341][T11368] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1904'. [ 319.131064][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1909'. [ 319.383831][ T7449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.460931][T11387] syzkaller0: entered promiscuous mode [ 319.483626][T11387] syzkaller0: entered allmulticast mode [ 320.573763][ T30] audit: type=1800 audit(1786567604.728:152): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1911" name="memory_backed" dev="configfs" ino=26526 res=0 errno=0 [ 321.487472][ T30] audit: type=1800 audit(1786567605.638:153): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1921" name="nexus" dev="configfs" ino=26581 res=0 errno=0 [ 322.741499][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 322.911707][T11425] loop5: detected capacity change from 0 to 4096 [ 322.985288][T11425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.828764][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.083630][ T30] audit: type=1800 audit(1786567608.238:154): pid=11455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1937" name="nexus" dev="configfs" ino=27217 res=0 errno=0 [ 324.187118][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1933'. [ 324.620931][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1944'. [ 324.684423][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1944'. [ 324.704536][T11480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.841033][T11510] loop6: detected capacity change from 0 to 1024 [ 325.851117][T11510] EXT4-fs: Ignoring removed bh option [ 325.926462][T11510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.780289][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1956'. [ 326.818535][ T7449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.718356][T11537] syzkaller0: entered promiscuous mode [ 327.724286][T11537] syzkaller0: entered allmulticast mode [ 327.804771][ T30] audit: type=1800 audit(1786567611.968:155): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1966" name="nexus" dev="configfs" ino=27794 res=0 errno=0 [ 327.960210][ T30] audit: type=1800 audit(1786567612.118:156): pid=11558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1968" name="nexus" dev="configfs" ino=27803 res=0 errno=0 [ 328.309561][T11567] loop5: detected capacity change from 0 to 1024 [ 328.318537][T11567] EXT4-fs: Ignoring removed bh option [ 328.387447][T11567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.275672][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.584048][T11545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.980792][T11589] hub 8-0:1.0: USB hub found [ 331.015545][T11589] hub 8-0:1.0: 1 port detected [ 331.202510][T11593] loop3: detected capacity change from 0 to 4096 [ 331.278488][T11593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.409636][ T30] audit: type=1800 audit(1786567615.568:157): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1981" name="nexus" dev="configfs" ino=27419 res=0 errno=0 [ 331.727588][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.304000][T11605] syzkaller0: entered promiscuous mode [ 332.348911][T11605] syzkaller0: entered allmulticast mode [ 332.441709][T11610] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 332.988086][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 333.167987][T11627] syzkaller0: entered promiscuous mode [ 333.181045][T11627] syzkaller0: entered allmulticast mode [ 333.190407][T11633] syzkaller0: entered promiscuous mode [ 333.220323][T11633] syzkaller0: entered allmulticast mode [ 335.723774][T11674] IPVS: Unknown mcast interface: macsec0 [ 335.770542][T11681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 335.794396][T11681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 335.834955][T11681] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 335.884079][T11681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 335.913574][T11687] loop4: detected capacity change from 0 to 1024 [ 335.924641][T11681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 335.953623][T11687] EXT4-fs: Ignoring removed bh option [ 336.025541][T11687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.544923][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.785615][T11705] syzkaller0: entered promiscuous mode [ 336.802775][T11705] syzkaller0: entered allmulticast mode [ 337.206342][T11727] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 337.810170][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 337.810174][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 337.890238][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 337.890235][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 337.970034][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 339.174164][T11738] syzkaller0: entered promiscuous mode [ 339.207927][T11738] syzkaller0: entered allmulticast mode [ 339.296570][T11758] netlink: 'syz.1.2019': attribute type 3 has an invalid length. [ 339.329168][T11758] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2019'. [ 339.554593][ T30] audit: type=1800 audit(1786567623.718:158): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2020" name="nexus" dev="configfs" ino=27616 res=0 errno=0 [ 339.905067][T11773] capability: warning: `syz.1.2021' uses deprecated v2 capabilities in a way that may be insecure [ 340.030807][T11776] loop1: detected capacity change from 0 to 512 [ 340.538968][T11776] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 340.556552][T11776] EXT4-fs (loop1): Remounting filesystem read-only [ 340.563140][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 340.563162][ C0] EXT4-fs (loop1): initial error at time 1786567624: ext4_mb_generate_buddy:1317 [ 340.563193][ C0] EXT4-fs (loop1): last error at time 1786567624: ext4_mb_generate_buddy:1317 [ 340.598535][T11776] EXT4-fs (loop1): 1 truncate cleaned up [ 340.606166][T11776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.794469][T11780] loop5: detected capacity change from 0 to 4096 [ 340.833320][T11780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.865137][T11776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.463644][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.491655][T11764] syzkaller0: entered promiscuous mode [ 343.501167][T11764] syzkaller0: entered allmulticast mode [ 343.857403][T11805] program syz.1.2032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.989212][T11813] jffs2: notice: (11813) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.165831][T11815] loop5: detected capacity change from 0 to 4096 [ 344.203797][T11818] loop1: detected capacity change from 0 to 4096 [ 344.250057][T11815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.305170][T11818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.435031][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.701288][T11838] loop6: detected capacity change from 0 to 64 [ 345.200870][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.796564][T11839] 9pnet_virtio: no channels available for device syz [ 349.438375][T11853] hub 8-0:1.0: USB hub found [ 349.443727][T11853] hub 8-0:1.0: 1 port detected [ 350.276029][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2050'. [ 350.387241][T11862] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2050'. [ 350.439498][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2050'. [ 350.535807][T11863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 350.983880][T11874] overlayfs: failed to resolve './bus': -2 [ 355.554194][T11911] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 355.613822][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.664076][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.704123][T11912] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 355.737095][T11912] bond0 (unregistering): Released all slaves [ 355.947312][T11916] overlayfs: failed to resolve './bus': -2 [ 355.983023][T11920] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2071'. [ 357.743396][ T30] audit: type=1800 audit(1786567641.888:159): pid=11944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2066" name="nexus" dev="configfs" ino=28870 res=0 errno=0 [ 357.777997][ T5759] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 357.983888][ T5759] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 358.051906][ T5759] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 358.122326][ T5759] usb 5-1: config 0 has no interface number 0 [ 358.344136][ T5759] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.362220][ T5759] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 358.374209][ T5759] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 358.386035][ T5759] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 358.397379][ T5759] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 358.420054][ T5759] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 358.460261][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.518899][T11924] loop5: detected capacity change from 0 to 32768 [ 358.526021][ T5759] usb 5-1: config 0 descriptor?? [ 358.542654][T11940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 358.568799][T11940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 358.631083][ T5759] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 358.668334][T11924] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 358.737168][T11924] XFS (loop5): Ending clean mount [ 358.856066][ T5624] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 358.902284][ T187] usb 5-1: USB disconnect, device number 2 [ 358.931315][ T187] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 359.813284][T11984] Bluetooth: MGMT ver 1.23 [ 360.060112][ T30] audit: type=1800 audit(1786567644.128:160): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2096" name="nexus" dev="configfs" ino=28396 res=0 errno=0 [ 361.559266][T12006] netlink: 'syz.6.2103': attribute type 3 has an invalid length. [ 361.611708][T12006] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2103'. [ 361.668573][T11992] loop2: detected capacity change from 0 to 8192 [ 364.026700][ T30] audit: type=1800 audit(1786567648.188:161): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2114" name="nexus" dev="configfs" ino=28494 res=0 errno=0 [ 364.464756][T12048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.512892][T12048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.617408][T12048] bond0 (unregistering): Released all slaves [ 364.758025][T12028] loop2: detected capacity change from 0 to 32768 [ 367.005224][T12082] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2131'. [ 367.503795][T12095] loop2: detected capacity change from 0 to 2048 [ 367.652586][T12095] EXT4-fs (loop2): unsupported inode size: 25856 [ 367.686362][T12095] EXT4-fs (loop2): blocksize: 2048 [ 368.837760][T12114] syzkaller0: entered promiscuous mode [ 368.857082][T12114] syzkaller0: entered allmulticast mode [ 369.275188][T12122] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2148'. [ 369.345038][T12124] syzkaller0: entered promiscuous mode [ 369.371397][T12124] syzkaller0: entered allmulticast mode [ 369.412448][T12124] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 369.539689][T12131] Bluetooth: MGMT ver 1.23 [ 370.165476][T12144] hub 8-0:1.0: USB hub found [ 370.170919][T12144] hub 8-0:1.0: 1 port detected [ 371.408166][T12155] syzkaller0: entered promiscuous mode [ 371.433254][T12155] syzkaller0: entered allmulticast mode [ 372.515774][ T30] audit: type=1800 audit(1786567656.678:162): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2166" name="nexus" dev="configfs" ino=29160 res=0 errno=0 [ 372.594888][T12173] syzkaller0: entered promiscuous mode [ 372.617703][T12173] syzkaller0: entered allmulticast mode [ 373.269467][T12191] hub 8-0:1.0: USB hub found [ 373.276546][T12191] hub 8-0:1.0: 1 port detected [ 373.681957][T12204] syzkaller0: entered promiscuous mode [ 373.697841][T12204] syzkaller0: entered allmulticast mode [ 373.841797][ T30] audit: type=1800 audit(1786567658.008:163): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2180" name="nexus" dev="configfs" ino=29274 res=0 errno=0 [ 373.988739][T12216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2184'. [ 374.063384][T12218] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 374.090039][T12218] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 375.117806][ T30] audit: type=1800 audit(1786567659.278:164): pid=12234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2189" name="power" dev="configfs" ino=29341 res=0 errno=0 [ 375.196390][T12219] syzkaller0: entered promiscuous mode [ 375.210937][T12219] syzkaller0: entered allmulticast mode [ 376.608706][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2197'. [ 377.274486][T12263] IPVS: Unknown mcast interface: macsec0 [ 377.813893][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.828639][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.439833][T12281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 378.982863][ T30] audit: type=1800 audit(1786567663.148:165): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2203" name="power" dev="configfs" ino=29418 res=0 errno=0 [ 380.657074][T12309] syzkaller0: entered promiscuous mode [ 380.683528][T12309] syzkaller0: entered allmulticast mode [ 380.797201][T12320] IPVS: Unknown mcast interface: macsec0 [ 380.955383][T12326] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2217'. [ 381.220346][ T30] audit: type=1800 audit(1786567665.368:166): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2219" name="power" dev="configfs" ino=29511 res=0 errno=0 [ 381.649135][ T30] audit: type=1800 audit(1786567665.418:167): pid=12338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2221" name="nexus" dev="configfs" ino=29513 res=0 errno=0 [ 382.173454][T12350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 383.469671][T12378] hub 8-0:1.0: USB hub found [ 383.477258][T12378] hub 8-0:1.0: 1 port detected [ 383.957802][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 384.998896][T12391] syzkaller0: entered promiscuous mode [ 385.004698][T12391] syzkaller0: entered allmulticast mode [ 386.306983][T12415] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 386.558773][T12401] loop5: detected capacity change from 0 to 32768 [ 386.585682][T12401] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2238 (12401) [ 386.629077][T12401] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 386.643927][T12401] BTRFS info (device loop5): using crc32c checksum algorithm [ 386.773199][T12401] BTRFS info (device loop5): enabling ssd optimizations [ 386.781327][T12401] BTRFS info (device loop5): turning on flush-on-commit [ 386.788750][T12401] BTRFS info (device loop5): enabling free space tree [ 386.800377][T12401] BTRFS info (device loop5): enabling auto defrag [ 386.810128][T12401] BTRFS info (device loop5): use lzo compression, level 1 [ 386.822528][T12401] BTRFS info (device loop5): max_inline set to 4096 [ 387.116871][ T5624] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 387.588925][ T30] audit: type=1800 audit(1786567671.748:168): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2249" name="nexus" dev="configfs" ino=29653 res=0 errno=0 [ 387.738183][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2250'. [ 387.798358][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2250'. [ 387.856633][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2250'. [ 388.156208][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2246'. [ 388.343915][T12453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.646089][T12463] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2253'. [ 390.440561][ T5764] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 390.733274][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 390.750772][ T5764] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 390.850692][ T5764] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 390.860174][ T5764] usb 3-1: config 0 has no interface number 0 [ 390.866270][ T5764] usb 3-1: config 0 interface 12 has no altsetting 0 [ 390.887424][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.909135][ T5764] usb 3-1: Product: syz [ 390.924302][ T5764] usb 3-1: Manufacturer: syz [ 390.938798][ T5764] usb 3-1: SerialNumber: syz [ 391.245165][T12490] ceph: No mds server is up or the cluster is laggy [ 391.486882][ T5340] libceph: connect (1)[c::]:6789 error -101 [ 391.589887][ T5340] libceph: mon0 (1)[c::]:6789 connect error [ 391.975626][ T30] audit: type=1800 audit(1786567675.998:169): pid=12497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2262" name="nexus" dev="configfs" ino=30239 res=0 errno=0 [ 393.000526][ T5764] usb 3-1: config 0 descriptor?? [ 393.150412][ T5764] usb 3-1: can't set config #0, error -71 [ 393.176373][T12501] syzkaller0: entered promiscuous mode [ 393.198260][T12501] syzkaller0: entered allmulticast mode [ 393.274611][T12507] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 393.430298][ T5764] usb 3-1: USB disconnect, device number 2 [ 394.155974][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2270'. [ 394.203286][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'. [ 394.812419][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2270'. [ 395.332846][T12519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.042090][T12532] loop3: detected capacity change from 0 to 1024 [ 396.444252][T12545] loop4: detected capacity change from 0 to 21 [ 396.523766][T12545] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 397.571844][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2285'. [ 397.660084][T12558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.677550][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2288'. [ 397.706282][T12558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.746508][T12558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.865109][T12558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.077267][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2286'. [ 398.078316][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'. [ 398.231045][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'. [ 398.266280][T12577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.812005][T12594] syzkaller1: entered promiscuous mode [ 398.836140][T12594] syzkaller1: entered allmulticast mode [ 399.430728][T12601] dummy0: entered promiscuous mode [ 399.437156][T12601] dummy0: entered allmulticast mode [ 400.488721][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2306'. [ 400.743370][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2309'. [ 400.788424][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.828876][T12618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.872975][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.890253][T12620] netlink: 'syz.2.2308': attribute type 1 has an invalid length. [ 400.899215][T12618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.952632][T12620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.056406][T12624] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 401.057271][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2310'. [ 401.067206][ T5897] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 401.092218][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2310'. [ 401.177021][T12630] hub 8-0:1.0: USB hub found [ 401.183386][T12630] hub 8-0:1.0: 1 port detected [ 401.231265][ T5897] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 402.107495][T12623] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.115274][T12623] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.265839][T12623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.278972][T12623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.062328][T12620] dummy0: left promiscuous mode [ 404.073651][T12620] dummy0: left allmulticast mode [ 404.116835][T12620] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 404.190370][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.240177][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.267598][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.298681][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.701862][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2322'. [ 405.765645][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2325'. [ 405.843745][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2325'. [ 407.700538][T12688] random: crng reseeded on system resumption [ 409.286886][T12733] loop5: detected capacity change from 0 to 1024 [ 409.803250][T12737] syz_tun (unregistering): left allmulticast mode [ 410.127323][T12752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2356'. [ 410.136425][T12752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2356'. [ 410.145546][T12752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2356'. [ 410.974978][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.124766][T12757] loop3: detected capacity change from 0 to 4096 [ 411.209586][T12757] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 411.231514][T12761] loop4: detected capacity change from 0 to 32768 [ 411.241380][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.241425][T12761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2361 (12761) [ 411.269534][T12761] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 411.279676][T12761] BTRFS info (device loop4): using sha256 checksum algorithm [ 411.377497][T12761] BTRFS info (device loop4): enabling ssd optimizations [ 411.384577][T12761] BTRFS info (device loop4): turning on sync discard [ 411.391303][T12761] BTRFS info (device loop4): enabling free space tree [ 411.398068][T12761] BTRFS info (device loop4): use zlib compression, level 3 [ 411.461714][T12757] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 411.484252][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.400115][ T30] audit: type=1800 audit(1786567696.028:170): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2361" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 412.694804][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.755103][ T5612] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 412.878066][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.889415][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.897378][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.906936][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.915416][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.293698][ T13] bridge_slave_1: left promiscuous mode [ 413.309188][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.343244][ T13] bridge_slave_0: left allmulticast mode [ 413.362860][ T13] bridge_slave_0: left promiscuous mode [ 413.375223][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.391120][T12793] loop6: detected capacity change from 0 to 32768 [ 414.498186][T12793] btrfs: Deprecated parameter 'usebackuproot' [ 414.591628][T12793] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 414.752110][T12793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2369 (12793) [ 415.022096][ T5620] Bluetooth: hci5: command tx timeout [ 415.277706][T12793] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 415.359172][T12793] BTRFS info (device loop6): using crc32c checksum algorithm [ 415.922091][T12810] CIFS: Attempting to mount //127.0.0.1/share [ 415.965178][T12810] CIFS: VFS: Error connecting to socket. Aborting operation. [ 415.973675][T12810] CIFS: VFS: cifs_mount failed w/return code = -111 [ 416.387865][T12793] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 416.580747][T12793] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 416.636864][T12793] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 416.723640][T12793] BTRFS error (device loop6): open_ctree failed: -12 [ 416.875169][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 416.940552][T12826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2371'. [ 417.062970][ T13] bond0 (unregistering): Released all slaves [ 417.084859][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 417.103120][ T5620] Bluetooth: hci5: command tx timeout [ 417.991807][T12830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.011602][ T13] tipc: Left network mode [ 418.062567][ T13] IPVS: stopping backup sync thread 7242 ... [ 418.245475][T12843] fuse: Bad value for 'fd' [ 418.427310][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 418.794731][ T13] hsr_slave_0: left promiscuous mode [ 418.831946][ T13] hsr_slave_1: left promiscuous mode [ 418.872985][ T13] veth1_vlan: left promiscuous mode [ 418.888943][ T13] veth0_vlan: left promiscuous mode [ 419.051750][ T5830] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 419.170356][ T5620] Bluetooth: hci5: command tx timeout [ 419.230036][ T5830] usb 7-1: Using ep0 maxpacket: 16 [ 419.244169][ T5830] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 419.265702][ T5830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 419.289374][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.349571][ T5830] usb 7-1: config 0 descriptor?? [ 419.599821][ T13] team0 (unregistering): Port device team_slave_1 removed [ 419.661551][ T13] team0 (unregistering): Port device team_slave_0 removed [ 420.382409][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 420.394206][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 420.403369][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 420.412407][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 420.420192][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 420.490980][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 420.900529][T12895] loop4: detected capacity change from 0 to 512 [ 420.908080][T12895] EXT4-fs: Ignoring removed bh option [ 420.929026][T12895] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 420.951348][T12895] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 420.963693][T12895] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2387: Corrupt directory, running e2fsck is recommended [ 420.980658][T12895] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 420.989340][T12895] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2387: corrupted in-inode xattr: e_name out of bounds [ 421.012100][T12895] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 421.012594][T12895] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2387: couldn't read orphan inode 15 (err -117) [ 421.021805][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 421.021826][ C0] EXT4-fs (loop4): initial error at time 1786567705: ext4_iget_extra_inode:5180: inode 15 [ 421.021865][ C0] EXT4-fs (loop4): last error at time 1786567705: ext4_iget_extra_inode:5180: inode 15 [ 421.090972][T12886] loop3: detected capacity change from 0 to 131072 [ 421.100212][T12895] loop4: lost filesystem error report for type 5 error -117 [ 421.121812][T12886] F2FS-fs (loop3): invalid crc value [ 421.163851][T12895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.250856][ T5625] Bluetooth: hci5: command tx timeout [ 421.262844][T12886] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 421.282826][T12886] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 421.319678][T12895] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 421.404773][T12895] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 421.470489][T12895] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2387: Corrupt directory, running e2fsck is recommended [ 422.323969][T12905] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 422.401639][ T5830] usbhid 7-1:0.0: can't add hid device: -71 [ 422.415041][T12905] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 422.418576][ T5830] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 422.438149][ T5830] usb 7-1: USB disconnect, device number 2 [ 422.519228][T12905] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2387: Corrupt directory, running e2fsck is recommended [ 422.534268][ T5625] Bluetooth: hci6: command tx timeout [ 422.575320][T12907] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 422.631585][T12907] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 422.669352][T12909] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 422.681813][T12907] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2387: Corrupt directory, running e2fsck is recommended [ 422.899612][T12930] loop6: detected capacity change from 0 to 128 [ 422.903182][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.984221][T12930] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.127514][T12930] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 423.740862][T12936] syz.6.2390 (pid 12936) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 424.805738][ T5625] Bluetooth: hci6: command tx timeout [ 425.097326][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.122699][T12787] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.140299][T12787] bridge_slave_0: entered allmulticast mode [ 425.158259][T12787] bridge_slave_0: entered promiscuous mode [ 425.246266][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.265510][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 425.275514][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.290246][T12787] bridge_slave_1: entered allmulticast mode [ 425.308380][T12787] bridge_slave_1: entered promiscuous mode [ 425.332654][T12948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.352986][T12948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.386428][T12948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.396285][T12949] hub 1-0:1.0: USB hub found [ 425.406381][T12949] hub 1-0:1.0: 1 port detected [ 425.412068][T12948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.491987][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 425.620581][T12787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.662492][T12787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.776522][T12787] team0: Port device team_slave_0 added [ 425.795784][T12787] team0: Port device team_slave_1 added [ 425.922406][T12787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.937022][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.990016][T12787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.015257][T12787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.031960][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.090176][T12787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.174555][ T7449] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.391677][T12787] hsr_slave_0: entered promiscuous mode [ 426.414774][T12787] hsr_slave_1: entered promiscuous mode [ 426.893042][ T5625] Bluetooth: hci6: command tx timeout [ 427.477723][T12984] loop3: detected capacity change from 0 to 8192 [ 427.486250][T12984] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.505819][T12984] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 427.513102][T12984] FAT-fs (loop3): Filesystem has been set read-only [ 427.795308][T12987] block device autoloading is deprecated and will be removed. [ 428.249677][T12988] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 429.010408][ T5620] Bluetooth: hci6: command tx timeout [ 429.354089][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.414785][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.448974][T12889] bridge_slave_0: entered allmulticast mode [ 429.473200][T12889] bridge_slave_0: entered promiscuous mode [ 429.534432][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.555546][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.576201][T12889] bridge_slave_1: entered allmulticast mode [ 429.593497][T12889] bridge_slave_1: entered promiscuous mode [ 429.613214][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 429.710956][ T5340] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 429.786050][T12889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.827800][T12889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.843679][T13007] loop3: detected capacity change from 0 to 4096 [ 429.860339][ T5340] usb 5-1: device descriptor read/64, error -71 [ 429.919665][T13007] ntfs3(loop3): ino=0, mi_enum_attr [ 430.006505][T13007] ntfs3(loop3): failed to replay log file. Can't mount rw! [ 430.052101][T12889] team0: Port device team_slave_0 added [ 430.110190][ T5340] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 430.134915][T12889] team0: Port device team_slave_1 added [ 430.272622][ T5340] usb 5-1: device descriptor read/64, error -71 [ 430.332079][T12889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.356773][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.400537][ T5340] usb usb5-port1: attempt power cycle [ 430.430282][T12889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.462563][T12889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.485817][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.570375][T12889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.600962][T12787] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 430.630025][T12787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.679001][T12787] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.728425][T12787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.749704][T12787] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.770725][ T5340] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 430.800367][T12787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.829007][ T5340] usb 5-1: device descriptor read/8, error -71 [ 430.857373][T12787] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 430.885348][T12787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.033023][T12889] hsr_slave_0: entered promiscuous mode [ 431.054633][T12889] hsr_slave_1: entered promiscuous mode [ 431.070408][ T5340] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 431.086331][T12889] debugfs: 'hsr0' already exists in 'hsr' [ 431.103415][T12889] Cannot create hsr debugfs directory [ 431.121272][ T5340] usb 5-1: device descriptor read/8, error -71 [ 431.243389][ T5340] usb usb5-port1: unable to enumerate USB device [ 431.364642][T13056] hub 8-0:1.0: USB hub found [ 431.370952][T13056] hub 8-0:1.0: 1 port detected [ 432.230260][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 433.372751][T12787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.563108][T12889] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 433.676596][T12889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.571487][T13079] loop3: detected capacity change from 0 to 131072 [ 434.587223][T12787] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.604056][T13079] F2FS-fs (loop3): Test dummy encryption mode enabled [ 434.612875][T12889] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 434.621607][T13079] F2FS-fs (loop3): invalid crc value [ 434.685628][T13079] F2FS-fs (loop3): access invalid blkaddr:0 [ 434.691888][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.3.2419 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.691914][T13079] Tainted: [L]=SOFTLOCKUP [ 434.691921][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 434.691932][T13079] Call Trace: [ 434.691939][T13079] [ 434.691946][T13079] dump_stack_lvl+0xe8/0x150 [ 434.691977][T13079] __f2fs_is_valid_blkaddr+0xe62/0x14f0 [ 434.692010][T13079] sanity_check_extent_cache+0x1a3/0x620 [ 434.692037][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692058][T13079] ? f2fs_sanity_check_inline_data+0x70/0x740 [ 434.692082][T13079] f2fs_iget+0x41fc/0x6230 [ 434.692152][T13079] f2fs_fill_super+0x4edb/0x77f0 [ 434.692222][T13079] get_tree_bdev_flags+0x430/0x4f0 [ 434.692252][T13079] ? __pfx_f2fs_fill_super+0x10/0x10 [ 434.692278][T13079] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 434.692309][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692337][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692368][T13079] vfs_get_tree+0x92/0x2a0 [ 434.692400][T13079] do_new_mount+0x319/0xdc0 [ 434.692423][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692449][T13079] ? __pfx_do_new_mount+0x10/0x10 [ 434.692474][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692495][T13079] ? ns_capable+0x89/0xe0 [ 434.692517][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692538][T13079] ? path_mount+0x647/0x1040 [ 434.692564][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692584][T13079] ? user_path_at+0xd4/0x160 [ 434.692613][T13079] __se_sys_mount+0x31d/0x420 [ 434.692643][T13079] ? __pfx___se_sys_mount+0x10/0x10 [ 434.692666][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692693][T13079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 434.692714][T13079] ? __x64_sys_mount+0x20/0xc0 [ 434.692737][T13079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.692758][T13079] do_syscall_64+0x174/0x580 [ 434.692783][T13079] ? trace_irq_disable+0x3b/0x140 [ 434.692811][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.692830][T13079] RIP: 0033:0x7faa2139f34a [ 434.692846][T13079] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.692861][T13079] RSP: 002b:00007faa222ade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.692880][T13079] RAX: ffffffffffffffda RBX: 00007faa222adee0 RCX: 00007faa2139f34a [ 434.692894][T13079] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 00007faa222adea0 [ 434.692907][T13079] RBP: 0000200000000100 R08: 00007faa222adee0 R09: 0000000000000410 [ 434.692919][T13079] R10: 0000000000000410 R11: 0000000000000246 R12: 00002000000000c0 [ 434.692931][T13079] R13: 00007faa222adea0 R14: 00000000000105d6 R15: 0000200000000400 [ 434.692959][T13079] [ 434.693981][T13079] loop3: lost filesystem error report for type 5 error -117 [ 434.962344][T13079] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 434.981954][T13079] loop3: lost filesystem error report for type 5 error -117 [ 434.981973][T13079] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 434.989336][T13079] F2FS-fs (loop3): Failed to read root inode [ 435.054992][T12889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.077644][T12889] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 435.106415][T12889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.129139][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.136260][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.149095][T12889] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 435.187746][T12889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.217379][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.224553][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.315850][T13098] syz_tun: entered allmulticast mode [ 436.667173][T12889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.727208][T12889] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.784523][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.791685][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.842568][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.849702][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.027146][T13129] loop3: detected capacity change from 0 to 8 [ 438.021407][T13129] SQUASHFS error: xz decompression failed, data probably corrupt [ 438.110211][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2435'. [ 438.121044][T13129] SQUASHFS error: Failed to read block 0xa8: -5 [ 438.168944][T13146] syz_tun: entered allmulticast mode [ 438.171245][T13129] SQUASHFS error: xz decompression failed, data probably corrupt [ 438.206960][T13129] SQUASHFS error: Failed to read block 0xa8: -5 [ 438.223197][ T30] audit: type=1800 audit(1786567722.388:171): pid=13129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2431" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 439.252049][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.259782][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.855413][T12787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.247284][T12889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.629061][T13171] loop4: detected capacity change from 0 to 32768 [ 440.702061][T13171] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 440.820553][T13171] XFS (loop4): Ending clean mount [ 440.829202][T12787] veth0_vlan: entered promiscuous mode [ 440.958803][T12787] veth1_vlan: entered promiscuous mode [ 440.979521][T13171] XFS (loop4): Quotacheck needed: Please wait. [ 441.029527][T12889] veth0_vlan: entered promiscuous mode [ 441.062256][T13224] syz_tun: entered allmulticast mode [ 441.120607][T12889] veth1_vlan: entered promiscuous mode [ 441.150825][T13171] XFS (loop4): Quotacheck: Done. [ 441.188193][T12787] veth0_macvtap: entered promiscuous mode [ 441.238672][T12787] veth1_macvtap: entered promiscuous mode [ 442.189509][ T5612] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 442.248313][T12889] veth0_macvtap: entered promiscuous mode [ 442.326466][T12889] veth1_macvtap: entered promiscuous mode [ 442.354464][T12787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.375244][T12787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.388717][T13246] fuse: Bad value for 'fd' [ 442.500878][T12889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.604023][ T5897] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.648189][T12889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.731647][ T418] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.771842][ T418] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.965930][ T418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.038326][ T418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.111550][ T77] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.146076][ T77] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.230370][ T1157] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.265624][ T1157] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.303693][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.332921][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.387289][T13263] loop3: detected capacity change from 0 to 16 [ 443.390270][ T77] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.410724][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.463997][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.502426][T13263] erofs (device loop3): mounted with root inode @ nid 36. [ 443.529336][T13263] syz.3.2461: attempt to access beyond end of device [ 443.529336][T13263] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 443.561829][T13263] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 443.607977][T13263] erofs (device loop3): read error -117 @ 0 of nid 89 [ 443.623420][ T30] audit: type=1800 audit(1786567727.788:172): pid=13263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2461" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 443.679417][ T5897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.720937][ T5897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.743905][T13244] loop6: detected capacity change from 0 to 32768 [ 443.794733][T13244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2457 (13244) [ 443.876220][T13244] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 443.933372][T13244] BTRFS info (device loop6): using sha256 checksum algorithm [ 443.943244][T13274] syzkaller0: entered promiscuous mode [ 443.972092][T13274] syzkaller0: entered allmulticast mode [ 444.137950][T13244] BTRFS info (device loop6): rebuilding free space tree [ 444.324162][T13244] BTRFS info (device loop6): enabling ssd optimizations [ 444.355303][T13244] BTRFS info (device loop6): using spread ssd allocation scheme [ 444.398897][T13244] BTRFS info (device loop6): turning on async discard [ 444.439730][T13244] BTRFS info (device loop6): enabling free space tree [ 444.474532][T13244] BTRFS info (device loop6): force clearing of disk cache [ 444.613307][T13310] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2473'. [ 444.668506][T13310] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2473'. [ 448.406201][T13331] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 448.698128][ T7449] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 448.910859][ T5340] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 449.102739][ T5340] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 449.176144][ T5340] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.234668][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 449.250107][ T5759] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 449.294724][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 449.349298][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 449.402177][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 449.440054][ T5759] usb 7-1: Using ep0 maxpacket: 8 [ 449.459726][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 449.490385][ T5759] usb 7-1: unable to get BOS descriptor or descriptor too short [ 449.511007][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 449.521501][ T5759] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.526073][ T5759] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 449.616100][ T5759] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 449.618625][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 449.672447][ T5759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.719480][ T5759] usb 7-1: Product: syz [ 449.720547][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 449.744634][ T5759] usb 7-1: Manufacturer: syz [ 449.790026][ T5759] usb 7-1: SerialNumber: syz [ 449.790302][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 449.875882][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 449.938581][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 449.989192][ T5340] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 450.058746][ T5340] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 450.121522][ T5759] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 450.152260][ T5340] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.203474][ T5340] usb 8-1: Product: syz [ 450.221897][ T5340] usb 8-1: Manufacturer: syz [ 450.242799][ T5340] usb 8-1: SerialNumber: syz [ 450.291935][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.304594][T13362] syzkaller0: entered promiscuous mode [ 450.328534][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.347952][T13362] syzkaller0: entered allmulticast mode [ 450.367248][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.402713][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.447958][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.492696][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.543689][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.581103][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.620341][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.633936][ T5759] usb 7-1: USB disconnect, device number 3 [ 450.660310][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.704616][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.744649][T13365] loop8: detected capacity change from 0 to 4096 [ 450.756344][T13336] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 450.814143][ T5340] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 450.832073][T13365] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.835864][ T5340] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 450.890806][ T5340] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 450.951986][ T5340] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 450.971984][ T5340] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 451.526337][ T6503] udevd[6503]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.942085][T12889] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.606525][ T3739] usb 8-1: USB disconnect, device number 2 [ 452.654655][T13394] tipc: Enabled bearer , priority 0 [ 452.680339][T13394] syzkaller0: entered promiscuous mode [ 452.711896][T13394] syzkaller0: entered allmulticast mode [ 452.786499][T13394] tipc: Resetting bearer [ 452.828553][ T3739] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 452.908357][ T3739] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 452.911086][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2496'. [ 452.951354][T13392] tipc: Resetting bearer [ 452.968257][ T3739] keyspan 8-1:1.0: device disconnected [ 453.077043][T13392] tipc: Disabling bearer [ 453.557447][T13420] loop6: detected capacity change from 0 to 4096 [ 453.885037][T13434] loop8: detected capacity change from 0 to 64 [ 453.984319][T13434] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 454.118897][T13438] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 455.471487][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'. [ 457.468346][T13493] loop6: detected capacity change from 0 to 1024 [ 458.624250][T13502] bridge1: entered promiscuous mode [ 458.910416][ T5730] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 459.002098][T13510] jffs2: notice: (13510) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 459.378018][ T5730] usb 5-1: unable to get BOS descriptor or descriptor too short [ 459.403950][ T5730] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 459.444474][ T5730] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 459.473726][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.490114][ T5730] usb 5-1: Product: syz [ 459.494356][ T5730] usb 5-1: Manufacturer: syz [ 459.504256][ T5730] usb 5-1: SerialNumber: syz [ 460.242414][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2526'. [ 461.224442][ T5730] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 461.366189][T13527] loop6: detected capacity change from 0 to 131072 [ 461.390340][T13527] F2FS-fs (loop6): invalid crc value [ 461.465972][T13527] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 461.480427][T13527] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 462.551046][ T5730] usb 5-1: failed to enable PITCH for EP 0x82 [ 462.627202][ T5730] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 462.659588][ T5730] usb 5-1: clock source 0 is not valid, cannot use [ 462.677678][ T5730] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 462.695952][ T5730] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 466.138507][ T5730] usb 5-1: USB disconnect, device number 7 [ 466.326589][ T5729] udevd[5729]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.361965][T13567] syzkaller1: entered promiscuous mode [ 466.370829][T13567] syzkaller1: entered allmulticast mode [ 466.823505][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 466.835012][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 466.843195][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 466.853532][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 466.863300][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 468.176825][T13601] warning: `syz.1.2550' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 469.884589][ T5625] Bluetooth: hci7: command tx timeout [ 471.970066][ T5625] Bluetooth: hci7: command tx timeout [ 472.322800][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2558'. [ 472.394882][T13644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.432751][T13644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.463590][T13644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.497320][T13644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.511163][T13652] fuse: Bad value for 'fd' [ 474.627561][ T5625] Bluetooth: hci7: command tx timeout [ 474.810847][T13580] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.854066][T13580] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.884964][T13580] bridge_slave_0: entered allmulticast mode [ 474.918976][T13580] bridge_slave_0: entered promiscuous mode [ 474.965914][T13580] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.003062][T13580] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.025484][T13580] bridge_slave_1: entered allmulticast mode [ 475.054629][T13580] bridge_slave_1: entered promiscuous mode [ 475.230325][T13580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.270872][T13580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.406940][T13580] team0: Port device team_slave_0 added [ 475.436743][T13580] team0: Port device team_slave_1 added [ 475.568713][T13580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.586318][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.660337][T13580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.703293][T13580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.725907][T13580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.200375][T13580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.518802][T13580] hsr_slave_0: entered promiscuous mode [ 476.548126][T13580] hsr_slave_1: entered promiscuous mode [ 476.572645][T13580] debugfs: 'hsr0' already exists in 'hsr' [ 476.592249][T13580] Cannot create hsr debugfs directory [ 476.690493][ T5625] Bluetooth: hci7: command tx timeout [ 476.958432][T13701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2578'. [ 479.770976][T13580] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 479.812998][T13580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.840366][T13580] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 479.878958][T13580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.921018][T13580] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 479.962210][T13580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.994376][T13580] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 480.049324][T13580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.437547][T13580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.537054][T13580] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.102322][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.109461][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.182752][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.189890][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.254042][T13750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2592'. [ 481.591396][T13765] bridge: RTM_NEWNEIGH with invalid ether address [ 481.634624][T13765] bridge: RTM_NEWNEIGH with invalid ether address [ 483.049344][T13804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2607'. [ 483.155675][T13580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.797145][T13822] bridge: RTM_NEWNEIGH with invalid ether address [ 483.818384][T13822] bridge: RTM_NEWNEIGH with invalid ether address [ 485.101088][T13580] veth0_vlan: entered promiscuous mode [ 485.151159][T13580] veth1_vlan: entered promiscuous mode [ 485.309776][T13580] veth0_macvtap: entered promiscuous mode [ 485.358595][T13580] veth1_macvtap: entered promiscuous mode [ 485.471163][T13580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.544746][T13580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.684855][T13851] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 485.722536][ T418] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.753384][ T418] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.814079][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.932588][ T1157] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.113891][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.145793][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.267079][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.280093][T13862] bridge: RTM_NEWNEIGH with invalid ether address [ 486.307442][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.337068][T13862] bridge: RTM_NEWNEIGH with invalid ether address [ 492.360263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 495.748756][T13945] bridge: RTM_NEWNEIGH with invalid ether address [ 495.780789][T13945] bridge: RTM_NEWNEIGH with invalid ether address [ 497.070050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 497.330237][T13936] loop9: detected capacity change from 0 to 32768 [ 497.378509][T13936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2652 (13936) [ 497.451884][T13936] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 497.501762][T13936] BTRFS info (device loop9): using crc32c checksum algorithm [ 497.644822][T13936] BTRFS info (device loop9): enabling ssd optimizations [ 497.677440][T13936] BTRFS info (device loop9): turning on flush-on-commit [ 497.707826][T13936] BTRFS info (device loop9): enabling free space tree [ 497.727481][T13936] BTRFS info (device loop9): enabling auto defrag [ 497.755966][T13936] BTRFS info (device loop9): use lzo compression, level 1 [ 497.805777][T13936] BTRFS info (device loop9): max_inline set to 4096 [ 498.149628][T13580] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 499.979936][T14010] loop9: detected capacity change from 0 to 128 [ 500.031633][T14010] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 500.080629][T14013] bridge: RTM_NEWNEIGH with invalid ether address [ 500.108773][T14010] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 500.128816][T14013] bridge: RTM_NEWNEIGH with invalid ether address [ 501.811169][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.817809][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.750160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 504.918280][T13580] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.485823][T14073] syz_tun: entered allmulticast mode [ 505.987358][T14085] fuse: fd is not a fuse device [ 507.310160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 507.551213][T14097] mmap: syz.6.2700 (14097) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 507.888951][T14105] bridge: RTM_NEWNEIGH with invalid ether address [ 507.911597][T14105] bridge: RTM_NEWNEIGH with invalid ether address [ 508.092229][T14108] syz_tun: entered allmulticast mode [ 511.965534][T14133] loop9: detected capacity change from 0 to 32768 [ 512.002634][T14133] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2714 (14133) [ 512.128862][T14133] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 512.179615][T14133] BTRFS info (device loop9): using blake2b checksum algorithm [ 512.421909][T14133] BTRFS info (device loop9): enabling ssd optimizations [ 512.499911][T14133] BTRFS info (device loop9): turning on async discard [ 512.531663][T14133] BTRFS info (device loop9): enabling free space tree [ 512.563538][T14133] BTRFS info (device loop9): use lzo compression, level 1 [ 512.572135][T14164] bridge: RTM_NEWNEIGH with invalid ether address [ 512.600893][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2720'. [ 512.632667][T14164] bridge: RTM_NEWNEIGH with invalid ether address [ 512.646266][ T30] audit: type=1800 audit(1786567796.808:173): pid=14133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2714" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 513.032132][T13580] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 514.990255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 515.378277][ T30] audit: type=1800 audit(1786567799.538:174): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2723" name="nexus" dev="configfs" ino=36992 res=0 errno=0 [ 515.867577][T14204] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2735'. [ 515.903445][T14204] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2735'. [ 515.903879][T14202] bridge: RTM_NEWNEIGH with invalid ether address [ 515.973937][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2735'. [ 515.982861][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2734'. [ 515.982881][T14207] bridge: RTM_NEWNEIGH with invalid ether address [ 517.319086][ T30] audit: type=1800 audit(1786567801.478:175): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2745" name="nexus" dev="configfs" ino=37062 res=0 errno=0 [ 517.450598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 517.887034][T14249] loop9: detected capacity change from 0 to 32768 [ 517.933140][T14249] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 518.301387][T14258] bridge: RTM_NEWNEIGH with invalid ether address [ 518.330859][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2750'. [ 518.383913][T14258] bridge: RTM_NEWNEIGH with invalid ether address [ 518.848576][T13580] ocfs2: Unmounting device (7,9) on (node local) [ 521.253606][T14316] bridge: RTM_NEWNEIGH with invalid ether address [ 521.282562][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 521.319702][T14316] bridge: RTM_NEWNEIGH with invalid ether address [ 523.907472][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2779'. [ 524.116265][T14362] bridge: RTM_NEWNEIGH with invalid ether address [ 524.124146][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2783'. [ 524.138365][T14362] bridge: RTM_NEWNEIGH with invalid ether address [ 524.161242][T14364] overlayfs: failed to clone upperpath [ 526.724206][T14416] bridge: RTM_NEWNEIGH with invalid ether address [ 526.747136][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2798'. [ 526.773640][T14416] bridge: RTM_NEWNEIGH with invalid ether address [ 531.488324][T14479] xt_hashlimit: size too large, truncated to 1048576 [ 533.633294][T14489] loop9: detected capacity change from 0 to 32768 [ 533.705765][T14489] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2821 (14489) [ 533.886223][T14489] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 533.956582][T14489] BTRFS info (device loop9): using crc32c checksum algorithm [ 534.207788][T14489] BTRFS info (device loop9): enabling ssd optimizations [ 534.330468][T14489] BTRFS info (device loop9): turning on flush-on-commit [ 534.351490][T14489] BTRFS info (device loop9): enabling free space tree [ 534.373595][T14489] BTRFS info (device loop9): enabling auto defrag [ 534.398455][T14539] 9pnet_virtio: no channels available for device syz [ 534.418916][T14489] BTRFS info (device loop9): use lzo compression, level 1 [ 534.633866][T14489] BTRFS info (device loop9): max_inline set to 4096 [ 536.035853][T13580] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 539.175611][T14570] Bluetooth: hci5: command 0x0406 tx timeout [ 539.608637][T14603] 9pnet_virtio: no channels available for device syz [ 540.142355][ T30] audit: type=1800 audit(1786567824.308:176): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2856" name="nexus" dev="configfs" ino=37501 res=0 errno=0 [ 541.127851][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 542.899000][T14676] 9pnet_virtio: no channels available for device syz [ 546.050077][ T5625] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 546.050696][T14570] Bluetooth: hci0: command 0x0406 tx timeout [ 549.894351][T14778] xt_hashlimit: size too large, truncated to 1048576 [ 549.974082][ T31] INFO: task syz.2.2321:12662 blocked for more than 144 seconds. [ 549.995852][ T31] Tainted: G L syzkaller #0 [ 550.027685][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.096963][ T31] task:syz.2.2321 state:D stack:28424 pid:12662 tgid:12654 ppid:5623 task_flags:0x400040 flags:0x00080002 [ 550.159199][ T31] Call Trace: [ 550.174409][ T31] [ 550.191152][ T31] __schedule+0x17d9/0x56c0 [ 550.210930][ T31] ? __pfx___schedule+0x10/0x10 [ 550.230368][ T31] ? schedule+0x90/0x2b0 [ 550.263819][ T31] schedule+0x164/0x2b0 [ 550.294276][ T31] schedule_preempt_disabled+0x13/0x30 [ 550.307649][ T31] __mutex_lock+0x7bf/0x1550 [ 550.328581][ T31] ? __mutex_lock+0x5d4/0x1550 [ 550.351610][ T31] ? write_versions+0x95/0xe30 [ 550.467822][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 550.490495][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.518932][ T31] write_versions+0x95/0xe30 [ 550.537714][ T31] ? __pfx_write_versions+0x10/0x10 [ 550.553220][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.579335][ T31] ? _copy_from_user+0x94/0xb0 [ 550.594433][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.600466][ T31] ? simple_transaction_get+0x12d/0x160 [ 550.607568][ T31] nfsctl_transaction_write+0x10f/0x160 [ 550.613794][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 550.619959][ T31] vfs_write+0x296/0xba0 [ 550.626161][ T31] ? __pfx_vfs_write+0x10/0x10 [ 550.632386][ T31] ? __fget_files+0x2a/0x420 [ 550.637448][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.644694][ T31] ? __fget_files+0x3a2/0x420 [ 550.649606][ T31] ? __fget_files+0x2a/0x420 [ 550.654717][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.660933][ T31] ksys_write+0x150/0x270 [ 550.665370][ T31] ? __pfx_ksys_write+0x10/0x10 [ 550.670859][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.677538][ T31] do_syscall_64+0x174/0x580 [ 550.688500][ T31] ? trace_irq_disable+0x3b/0x140 [ 550.702215][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.711929][ T31] RIP: 0033:0x7fc2ce99e0d9 [ 550.721284][ T31] RSP: 002b:00007fc2cf87c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.736397][ T31] RAX: ffffffffffffffda RBX: 00007fc2cec26090 RCX: 00007fc2ce99e0d9 [ 550.746996][ T31] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000005 [ 550.757370][ T31] RBP: 00007fc2cea35024 R08: 0000000000000000 R09: 0000000000000000 [ 550.765812][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.775190][ T31] R13: 00007fc2cec26128 R14: 00007fc2cec26090 R15: 00007ffcac70e688 [ 550.784262][ T31] [ 550.787453][ T31] [ 550.787453][ T31] Showing all locks held in the system: [ 550.799924][ T31] 1 lock held by khungtaskd/31: [ 550.808423][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 550.834626][ T31] 2 locks held by getty/5362: [ 550.839387][ T31] #0: ffff8880357360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 550.849912][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 550.861530][ T31] 3 locks held by syz.2.2321/12657: [ 550.870251][ T31] #0: ffff88807834e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 550.879514][ T31] #1: ffff88807fb94450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 550.889743][ T31] #2: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 550.904255][ T31] 3 locks held by syz.2.2321/12662: [ 550.913051][ T31] #0: ffff888022f8d5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 550.922658][ T31] #1: ffff88807fb94450 (sb_writers#27){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 550.936949][ T31] #2: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30 [ 550.950573][ T31] 2 locks held by syz.3.2488/13375: [ 550.955847][ T31] #0: ffffffff900988e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 550.968225][ T31] #1: ffffffff8ee8dd80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x400 [ 550.980374][ T31] 1 lock held by syz.6.2904/14762: [ 550.985636][ T31] [ 550.988028][ T31] ============================================= [ 550.988028][ T31] [ 551.000146][ T31] NMI backtrace for cpu 1 [ 551.000166][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 551.000199][ T31] Tainted: [L]=SOFTLOCKUP [ 551.000208][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 551.000223][ T31] Call Trace: [ 551.000231][ T31] [ 551.000241][ T31] dump_stack_lvl+0xe8/0x150 [ 551.000278][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 551.000309][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 551.000346][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 551.000370][ T31] sys_info+0x135/0x170 [ 551.000387][ T31] watchdog+0xfd7/0x1030 [ 551.000420][ T31] ? watchdog+0x1c7/0x1030 [ 551.000448][ T31] kthread+0x388/0x470 [ 551.000473][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.000493][ T31] ? __pfx_kthread+0x10/0x10 [ 551.000520][ T31] ret_from_fork+0x514/0xb70 [ 551.000548][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 551.000575][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.000597][ T31] ? __switch_to+0xc89/0x1420 [ 551.000622][ T31] ? __pfx_kthread+0x10/0x10 [ 551.000648][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.000689][ T31] [ 551.000707][ T31] Sending NMI from CPU 1 to CPUs 0: [ 551.123145][ C0] NMI backtrace for cpu 0 [ 551.123169][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.123201][ C0] Tainted: [L]=SOFTLOCKUP [ 551.123210][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 551.123223][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 551.123260][ C0] Code: cb 7e 02 e9 9e 8f 3f f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 be 18 00 fb f4 77 8f 3f f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 551.123291][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 551.123311][ C0] RAX: 00000000006a9d0f RBX: ffffffff819b4450 RCX: 0000000080000001 [ 551.123327][ C0] RDX: 0000000000000001 RSI: ffffffff8e228edb RDI: ffffffff8c4bbf80 [ 551.123344][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 551.123361][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 551.123377][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 551.123396][ C0] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 551.123415][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.123430][ C0] CR2: 00002000002a8030 CR3: 0000000075734000 CR4: 0000000000350ef0 [ 551.123448][ C0] Call Trace: [ 551.123457][ C0] [ 551.123465][ C0] default_idle+0x9/0x20 [ 551.123498][ C0] default_idle_call+0x72/0xb0 [ 551.123534][ C0] do_idle+0x2e0/0x540 [ 551.123566][ C0] ? __pfx_do_idle+0x10/0x10 [ 551.123602][ C0] cpu_startup_entry+0x43/0x60 [ 551.123631][ C0] rest_init+0x2de/0x300 [ 551.123654][ C0] start_kernel+0x392/0x3e0 [ 551.123685][ C0] x86_64_start_reservations+0x24/0x30 [ 551.123723][ C0] x86_64_start_kernel+0x137/0x1b0 [ 551.123758][ C0] common_startup_64+0x13e/0x157 [ 551.123795][ C0] [ 551.320127][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 551.326981][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 551.337652][ T31] Tainted: [L]=SOFTLOCKUP [ 551.341957][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 551.352018][ T31] Call Trace: [ 551.355276][ T31] [ 551.358184][ T31] vpanic+0x56c/0xa60 [ 551.362160][ T31] ? __pfx___schedule+0x10/0x10 [ 551.366998][ T31] ? __pfx_vpanic+0x10/0x10 [ 551.371500][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.377118][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 551.383261][ T31] panic+0xc5/0xd0 [ 551.386985][ T31] ? __pfx_panic+0x10/0x10 [ 551.391390][ T31] ? preempt_schedule_common+0x82/0xd0 [ 551.396840][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 551.402210][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 551.408350][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 551.414489][ T31] watchdog+0x1030/0x1030 [ 551.418811][ T31] ? watchdog+0x1c7/0x1030 [ 551.423219][ T31] kthread+0x388/0x470 [ 551.427278][ T31] ? __pfx_watchdog+0x10/0x10 [ 551.431953][ T31] ? __pfx_kthread+0x10/0x10 [ 551.436545][ T31] ret_from_fork+0x514/0xb70 [ 551.441130][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 551.446237][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 551.451856][ T31] ? __switch_to+0xc89/0x1420 [ 551.456521][ T31] ? __pfx_kthread+0x10/0x10 [ 551.461100][ T31] ret_from_fork_asm+0x1a/0x30 [ 551.465869][ T31] [ 551.469096][ T31] Kernel Offset: disabled [ 551.473400][ T31] Rebooting in 86400 seconds..