last executing test programs: 5m16.013400088s ago: executing program 4 (id=640): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x82, &(0x7f0000000140)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@test_dummy_encryption_v1}], [], 0x3d}, 0xfd, 0x464, &(0x7f0000001600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)={0x2, 0x4, 0x1, 0x2, 0x13, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bb1, 0xf, {0x6, 0xff, 0x9, 0x28, 0x0, 0xff, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty}}, @sadb_lifetime={0x4, 0x2, 0x1, 0x3, 0x3, 0xd8}, @sadb_ident={0x2, 0xb, 0x1b}]}, 0x98}}, 0x0) 5m13.927347403s ago: executing program 4 (id=645): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x7, 0x3}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xc, 0x8010, 0x202, 0x0}) 5m13.009515914s ago: executing program 4 (id=647): openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x432803, 0x56) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x528, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r5}, 0x38) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 5m11.69388125s ago: executing program 4 (id=649): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r0, r1) getresgid(0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) r4 = geteuid() r5 = socket$netlink(0x10, 0x3, 0x0) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000811, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r6, @ANYRES32, @ANYRES64=0x0], 0x2, 0x1da, &(0x7f00000011c0)="$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") mount$fuse(0x0, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x0, &(0x7f0000000780)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, 'Ol802\x16\x00\x00'}}, {@subj_role}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_type}, {@fsmagic={'fsmagic', 0x3d, 0xcf3}}]}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x3}, {}], {0x4, 0x1}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, r1}, {0x8, 0x1, 0xee01}, {0x8, 0x9, r2}, {0x8, 0x4, r6}, {0x8, 0x2}, {0x8, 0x4}], {0x10, 0x6}, {0x20, 0x4}}, 0x6c, 0x3) close(0xffffffffffffffff) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000600)={0x393000, 0x392000, 0x8}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 5m9.604760065s ago: executing program 4 (id=655): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x20000000001005, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x36, 0x0, 0x8000000, 0x400000, 0x0, @void, @value}, 0x28) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) 5m8.412358689s ago: executing program 4 (id=658): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r0, 0x0, 0x12000) 4m49.167443332s ago: executing program 32 (id=658): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r0, 0x0, 0x12000) 3m43.920556221s ago: executing program 2 (id=826): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 3m40.66614487s ago: executing program 2 (id=834): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b00010065727370616e00001800028004001200050016"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m37.306230891s ago: executing program 2 (id=842): socket(0x200000000000011, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 3m35.075932598s ago: executing program 2 (id=845): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 3m34.205620208s ago: executing program 2 (id=848): ioperm(0x284, 0x7f, 0xe3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = dup(r2) ioctl$LOOP_CLR_FD(r2, 0x4c01) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_INPUT(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x7}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x40) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) ioctl$TCSETS(r6, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0xffffffff, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3m32.873709575s ago: executing program 2 (id=850): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x3c7) unshare(0x42000000) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m17.54487458s ago: executing program 33 (id=850): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x3c7) unshare(0x42000000) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 14.218365574s ago: executing program 1 (id=1285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) 13.068381447s ago: executing program 1 (id=1286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000acf000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x400000, 0x100000000000000) 11.14178636s ago: executing program 5 (id=1290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xffffffffffffffda, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000180)=""/16, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.648024775s ago: executing program 5 (id=1291): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r0, r1) getresgid(0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) r4 = geteuid() r5 = socket$netlink(0x10, 0x3, 0x0) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000811, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r6, @ANYRES32, @ANYRES64=0x0], 0x2, 0x1da, &(0x7f00000011c0)="$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") mount$fuse(0x0, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x0, &(0x7f0000000780)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other}], [{@subj_role}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_type}, {@fsmagic={'fsmagic', 0x3d, 0xcf3}}]}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x3}, {}], {0x4, 0x1}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, r1}, {0x8, 0x1, 0xee01}, {0x8, 0x9, r2}, {0x8, 0x4, r6}, {0x8, 0x2}, {0x8, 0x4}], {0x10, 0x6}, {0x20, 0x4}}, 0x6c, 0x3) close(0xffffffffffffffff) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000600)={0x393000, 0x392000, 0x8}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 9.257675932s ago: executing program 6 (id=1295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000040), 0x5d) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003c000701000000bd1075717c0000000000017c00000400fc800c00018008000600ffff0000080002800400728008000940", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_open_procfs$namespace(r8, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 9.112485184s ago: executing program 1 (id=1296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) 9.111268513s ago: executing program 3 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000acf000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x400000, 0x100000000000000) 8.107931375s ago: executing program 1 (id=1299): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f006bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'ipvlan0\x00', @remote}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) 7.581848292s ago: executing program 5 (id=1300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 7.151105596s ago: executing program 6 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 6.753858741s ago: executing program 6 (id=1303): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r0, 0x141601) 6.589799743s ago: executing program 6 (id=1304): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x20000000001005, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x36, 0x0, 0x8000000, 0x400000, 0x0, @void, @value}, 0x28) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) 6.588920203s ago: executing program 0 (id=1314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setresgid(0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="3fd8", 0x2, r3) r4 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r4, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x4002410) keyctl$chown(0x4, r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00'}, 0x10) timer_create(0x0, 0x0, 0x0) 6.297740357s ago: executing program 0 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) signalfd(r1, 0x0, 0x0) 6.113748148s ago: executing program 0 (id=1306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000acf000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x400000, 0x100000000000000) 5.815950422s ago: executing program 3 (id=1307): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) r6 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) read(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x11, "0080ba00000000002300"}) syz_open_pts(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{}, "4627947df4af12d2", "a3b0cb64fc761a7009d42acecd85e951a11707002c035a1f68002200", '\x00', "4445e931df53d785"}, 0x38) 4.894754623s ago: executing program 3 (id=1308): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r1, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000040)='pim6reg\x00') 3.925745164s ago: executing program 3 (id=1309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) 3.706584417s ago: executing program 6 (id=1310): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r0, r1) getresgid(0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) r4 = geteuid() r5 = socket$netlink(0x10, 0x3, 0x0) fstat(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000811, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r6, @ANYRES32, @ANYRES64=0x0], 0x2, 0x1da, &(0x7f00000011c0)="$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") mount$fuse(0x0, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x0, &(0x7f0000000780)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xffffffffffffffff}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other}], [{@subj_type={'subj_type', 0x3d, 'Ol802\x16\x00\x00'}}, {@subj_role}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@obj_type}, {@fsmagic={'fsmagic', 0x3d, 0xcf3}}]}}) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x3}, {}], {0x4, 0x1}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, r1}, {0x8, 0x1, 0xee01}, {0x8, 0x9, r2}, {0x8, 0x4, r6}, {0x8, 0x2}, {0x8, 0x4}], {0x10, 0x6}, {0x20, 0x4}}, 0x6c, 0x3) close(0xffffffffffffffff) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000600)={0x393000, 0x392000, 0x8}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 3.692822557s ago: executing program 1 (id=1311): syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x51, 0x8, 0x75, 0x9, 0x8, 0x4}, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000400)=""/106, 0x6a}], 0x2}}], 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) write(r2, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0b", 0x72) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x6, 0x3, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.011791875s ago: executing program 0 (id=1312): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000040), 0x5d) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003c000701000000bd1075717c0000000000017c00000400fc800c00018008000600ffff0000080002800400728008000940", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_open_procfs$namespace(r8, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 2.892814726s ago: executing program 3 (id=1313): socket(0x200000000000011, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 2.817749937s ago: executing program 5 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_pts(r5, 0x141601) 1.570446331s ago: executing program 5 (id=1316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setresgid(0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="3fd8", 0x2, r3) r4 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r4, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x4002410) keyctl$chown(0x4, r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00'}, 0x10) timer_create(0x0, 0x0, 0x0) 1.288969925s ago: executing program 3 (id=1317): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)={[{@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@utf8}]}, 0xfd, 0x2a0, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x640c7100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.056325378s ago: executing program 5 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000acf000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x400000, 0x100000000000000) 1.044221668s ago: executing program 0 (id=1319): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) r6 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) read(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x11, "0080ba00000000002300"}) syz_open_pts(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{}, "4627947df4af12d2", "a3b0cb64fc761a7009d42acecd85e951a11707002c035a1f68002200", '\x00', "4445e931df53d785"}, 0x38) 1.015035298s ago: executing program 6 (id=1320): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r1, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000040)='pim6reg\x00') 365.777595ms ago: executing program 1 (id=1321): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r1, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000040)='pim6reg\x00') 0s ago: executing program 0 (id=1322): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000013008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.604740][ T4168] device veth0_vlan entered promiscuous mode [ 75.617064][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.645748][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.656089][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.668247][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.678498][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.695291][ T4168] device veth1_vlan entered promiscuous mode [ 75.707754][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.719374][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.729630][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.739544][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.753205][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.765468][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.777980][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.804524][ T4172] device veth0_macvtap entered promiscuous mode [ 75.813029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.823293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.832999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.842863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.852905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.862608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.882661][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.894016][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.910519][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.927780][ T4172] device veth1_macvtap entered promiscuous mode [ 75.943589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.952649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.961944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.970931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.993395][ T4168] device veth0_macvtap entered promiscuous mode [ 76.007098][ T4168] device veth1_macvtap entered promiscuous mode [ 76.019679][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.030694][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.039768][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.048744][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 76.057022][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.068590][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 76.069062][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.075267][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 76.094030][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.103653][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.121467][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 76.128032][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 76.139297][ T4171] device veth0_vlan entered promiscuous mode [ 76.148846][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.159294][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.168996][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.178639][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.188463][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.212634][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.224290][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.235499][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.249800][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.262929][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.275187][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.288574][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.299154][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.316367][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.329195][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.349264][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.362249][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.375694][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.387715][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.400250][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.413491][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.429953][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.449772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.460115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.471603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.482364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.492700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.503562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.518428][ T4171] device veth1_vlan entered promiscuous mode [ 76.554127][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.566194][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.576780][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.587767][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.599695][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.610469][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.623133][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.635481][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.645411][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.655839][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.665397][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.693116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.713165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.727190][ T4168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.736394][ T4168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.745892][ T4168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.755710][ T4168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.816421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.829447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.872904][ T4171] device veth0_macvtap entered promiscuous mode [ 76.901356][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.923446][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.937434][ T4171] device veth1_macvtap entered promiscuous mode [ 76.967647][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.977040][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.988096][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.021497][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.032987][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.040188][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.048185][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.053698][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.074505][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.075208][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.081684][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.091948][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.110484][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.122421][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.133484][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.145839][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.168763][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.178817][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.188590][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.212215][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.221091][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.234721][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.247368][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.258022][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.269176][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.279632][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.290498][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.301407][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.313229][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.326406][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.340061][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.348612][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.358252][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.377378][ T4171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.388140][ T4171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.398457][ T4171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408448][ T4171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.425756][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.458369][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.469880][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.482563][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.491452][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.518465][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.588808][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.617261][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.625140][ T1253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.625194][ T1253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.627563][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.679258][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.697481][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.707030][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.733798][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.761400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.812504][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.837478][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.985143][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.003276][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.056882][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.080300][ T4251] Zero length message leads to an empty skb [ 78.112902][ T4209] Bluetooth: hci3: command 0x0419 tx timeout [ 78.120007][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 78.404646][ T4209] Bluetooth: hci2: command 0x0419 tx timeout [ 78.631644][ T4209] Bluetooth: hci4: command 0x0419 tx timeout [ 78.741327][ T4209] Bluetooth: hci0: command 0x0419 tx timeout [ 79.153331][ T4262] x_tables: duplicate underflow at hook 1 [ 79.901545][ T4262] bridge0: port 3(gretap0) entered blocking state [ 79.908339][ T4262] bridge0: port 3(gretap0) entered disabled state [ 79.916941][ T4262] device gretap0 entered promiscuous mode [ 79.923923][ T4262] bridge0: port 3(gretap0) entered blocking state [ 79.930943][ T4262] bridge0: port 3(gretap0) entered forwarding state [ 79.940789][ T4263] device gretap0 left promiscuous mode [ 79.946629][ T4263] bridge0: port 3(gretap0) entered disabled state [ 80.194141][ T4266] loop0: detected capacity change from 0 to 16 [ 80.208417][ T4270] loop3: detected capacity change from 0 to 256 [ 80.253915][ T4274] loop1: detected capacity change from 0 to 512 [ 80.319054][ T4266] erofs: (device loop0): mounted with root inode @ nid 36. [ 80.341092][ T4270] ======================================================= [ 80.341092][ T4270] WARNING: The mand mount option has been deprecated and [ 80.341092][ T4270] and is ignored by this kernel. Remove the mand [ 80.341092][ T4270] option from the mount to silence this warning. [ 80.341092][ T4270] ======================================================= [ 80.485593][ T4270] exfat: Deprecated parameter 'namecase' [ 80.602065][ T4274] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.610243][ T4274] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 80.620245][ T4270] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 82.092015][ T4287] loop0: detected capacity change from 0 to 2048 [ 82.326215][ T4287] EXT4-fs (loop0): inline encryption not supported [ 82.348714][ T4287] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 83.358563][ T4292] loop3: detected capacity change from 0 to 8192 [ 85.940736][ T4315] x_tables: duplicate underflow at hook 1 [ 86.141181][ T4315] bridge0: port 3(gretap0) entered blocking state [ 86.148426][ T4315] bridge0: port 3(gretap0) entered disabled state [ 86.157820][ T4315] device gretap0 entered promiscuous mode [ 86.165662][ T4315] bridge0: port 3(gretap0) entered blocking state [ 86.172540][ T4315] bridge0: port 3(gretap0) entered forwarding state [ 86.280779][ T4315] device gretap0 left promiscuous mode [ 86.286812][ T4315] bridge0: port 3(gretap0) entered disabled state [ 86.572736][ T4318] loop3: detected capacity change from 0 to 4096 [ 86.808995][ T4318] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.921892][ T4325] loop4: detected capacity change from 0 to 40427 [ 88.123183][ T4325] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 88.171668][ T4325] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 88.712535][ T4325] F2FS-fs (loop4): invalid crc value [ 88.934730][ T4325] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 88.967839][ T4338] loop0: detected capacity change from 0 to 512 [ 88.998706][ T4325] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 89.044946][ T4338] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.071671][ T4338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.24: bg 0: block 248: padding at end of block bitmap is not set [ 89.206486][ T4338] Quota error (device loop0): write_blk: dquota write failed [ 89.250800][ T4338] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 89.281310][ T4338] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.24: Failed to acquire dquot type 1 [ 89.297478][ T4325] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 89.321589][ T4338] EXT4-fs (loop0): 1 truncate cleaned up [ 89.327966][ T4325] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.391657][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.666269][ T4354] loop3: detected capacity change from 0 to 256 [ 89.806640][ T4354] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.099384][ T4338] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.24: deleted inode referenced: 12 [ 90.844278][ T4363] overlayfs: missing 'lowerdir' [ 91.810570][ C0] sched: RT throttling activated [ 92.140099][ T4368] loop2: detected capacity change from 0 to 512 [ 92.278542][ T4365] loop1: detected capacity change from 0 to 512 [ 92.501654][ T4368] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.533549][ T4368] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 92.802724][ T13] cfg80211: failed to load regulatory.db [ 93.736722][ T4365] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.30: inode #1: comm syz.1.30: iget: illegal inode # [ 93.888494][ T4365] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.30: error while reading EA inode 1 err=-117 [ 93.963584][ T4365] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.017028][ T4365] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.30: inode #1: comm syz.1.30: iget: illegal inode # [ 94.050260][ T4365] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.30: error while reading EA inode 1 err=-117 [ 94.120216][ T4365] EXT4-fs (loop1): 1 orphan inode deleted [ 94.156028][ T4365] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 96.365640][ T4401] loop3: detected capacity change from 0 to 16 [ 96.471139][ T4401] erofs: (device loop3): mounted with root inode @ nid 36. [ 96.549055][ T4401] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 96.613873][ T4401] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 96.898819][ T4402] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 96.951171][ T4402] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 96.997058][ T4410] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 97.051508][ T4410] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 99.664220][ T4428] tipc: Started in network mode [ 99.670043][ T4428] tipc: Node identity 4, cluster identity 4711 [ 99.680525][ T4428] tipc: Node number set to 4 [ 99.931499][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 99.941767][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 99.970584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 99.980111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 99.989362][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 99.998819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.008092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.017405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.026521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 100.035787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 100.924664][ T4423] loop2: detected capacity change from 0 to 40427 [ 101.088906][ T4423] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 101.140800][ T4423] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.218840][ T4423] F2FS-fs (loop2): invalid crc value [ 101.634623][ T4423] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 105.147729][ T4468] loop2: detected capacity change from 0 to 512 [ 107.371841][ T4468] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.378788][ T4468] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 109.879517][ T4487] x_tables: duplicate underflow at hook 1 [ 111.128912][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.480909][ T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.500576][ T13] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.545732][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.571933][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 111.617877][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 111.624617][ T4483] loop1: detected capacity change from 0 to 40427 [ 111.762517][ T4483] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 111.770301][ T4483] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 111.771677][ T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.818124][ T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.850670][ T1111] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.859128][ T4483] F2FS-fs (loop1): invalid crc value [ 111.870500][ T13] usb 4-1: Product: syz [ 111.875316][ T13] usb 4-1: Manufacturer: syz [ 111.898340][ T4483] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 111.937803][ T4483] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 111.974043][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 111.979514][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 112.044908][ T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 112.065284][ T13] cdc_wdm 4-1:1.0: Unknown control protocol [ 112.110946][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 112.138161][ T4483] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.166140][ T4483] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.400924][ T1111] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 112.420314][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.447085][ T1111] usb 3-1: Product: syz [ 112.461736][ T1111] usb 3-1: Manufacturer: syz [ 112.466393][ T1111] usb 3-1: SerialNumber: syz [ 112.537183][ T1111] usb 3-1: config 0 descriptor?? [ 112.597758][ T1111] ums_eneub6250 3-1:0.0: USB Mass Storage device detected [ 112.610628][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 112.749126][ T1108] usb 4-1: USB disconnect, device number 2 [ 113.415618][ T4528] loop1: detected capacity change from 0 to 512 [ 116.227633][ T1108] usb 3-1: USB disconnect, device number 2 [ 118.155242][ T4541] loop2: detected capacity change from 0 to 512 [ 118.532623][ T4541] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.539456][ T4541] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 119.991422][ T4568] x_tables: duplicate underflow at hook 1 [ 124.069504][ T4592] overlayfs: failed to get inode (-116) [ 124.088236][ T4592] overlayfs: failed to get inode (-116) [ 124.549319][ T4604] process 'syz.4.93' launched './file1' with NULL argv: empty string added [ 127.174117][ T4603] capability: warning: `syz.4.93' uses deprecated v2 capabilities in a way that may be insecure [ 127.197402][ T4603] netlink: 96 bytes leftover after parsing attributes in process `syz.4.93'. [ 127.218157][ T4618] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 129.737650][ T4621] loop0: detected capacity change from 0 to 40427 [ 129.848263][ T4621] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 129.876218][ T4621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.894230][ T4621] F2FS-fs (loop0): invalid crc value [ 129.949739][ T4621] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 130.016395][ T4621] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 130.135917][ T4621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.156211][ T4621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.923849][ T4667] x_tables: duplicate underflow at hook 1 [ 132.573640][ T4667] bridge0: port 3(gretap0) entered blocking state [ 132.580144][ T4667] bridge0: port 3(gretap0) entered disabled state [ 132.587771][ T4667] device gretap0 entered promiscuous mode [ 132.594089][ T4667] bridge0: port 3(gretap0) entered blocking state [ 132.600606][ T4667] bridge0: port 3(gretap0) entered forwarding state [ 132.609777][ T4667] device gretap0 left promiscuous mode [ 132.615515][ T4667] bridge0: port 3(gretap0) entered disabled state [ 133.413728][ T4679] IPVS: persistence engine module ip_vs_pe_ not found [ 139.893277][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.899628][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.973442][ T4716] loop3: detected capacity change from 0 to 256 [ 140.052402][ T4716] exfat: Deprecated parameter 'namecase' [ 140.236498][ T4716] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 145.019488][ T4764] loop0: detected capacity change from 0 to 256 [ 145.171428][ T4764] exfat: Deprecated parameter 'namecase' [ 145.450013][ T4764] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 146.546919][ T4772] netlink: 'syz.4.146': attribute type 10 has an invalid length. [ 147.363968][ T4772] team0: Device hsr_slave_0 failed to register rx_handler [ 148.179406][ T26] audit: type=1326 audit(1745590595.276:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 148.215184][ T26] audit: type=1326 audit(1745590595.286:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f43df041f code=0x7ffc0000 [ 148.240237][ T26] audit: type=1326 audit(1745590595.286:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 148.262911][ T26] audit: type=1326 audit(1745590595.286:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 148.290648][ T26] audit: type=1326 audit(1745590595.286:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 148.312919][ T26] audit: type=1326 audit(1745590595.286:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 148.335462][ T26] audit: type=1326 audit(1745590595.286:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 148.403569][ T26] audit: type=1326 audit(1745590595.286:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 148.426738][ T26] audit: type=1326 audit(1745590595.286:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 148.484367][ T26] audit: type=1326 audit(1745590595.286:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4793 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9f43df1969 code=0x7ffc0000 [ 149.505975][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 149.948442][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 150.097823][ T4804] loop3: detected capacity change from 0 to 256 [ 150.172413][ T4804] exfat: Deprecated parameter 'namecase' [ 150.190866][ T13] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 150.254819][ T13] usb 2-1: config 0 has no interface number 0 [ 150.291181][ T4804] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 151.394320][ T13] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 151.446189][ T13] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 151.483526][ T13] usb 2-1: config 0 interface 41 has no altsetting 0 [ 151.556097][ T13] usb 2-1: string descriptor 0 read error: -71 [ 151.613419][ T13] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 151.655252][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.713286][ T13] usb 2-1: config 0 descriptor?? [ 152.740846][ T13] usb 2-1: can't set config #0, error -71 [ 152.781443][ T13] usb 2-1: USB disconnect, device number 2 [ 153.482290][ T4833] sctp: failed to load transform for md5: -2 [ 157.502325][ T4870] loop3: detected capacity change from 0 to 256 [ 157.649441][ T4870] exfat: Deprecated parameter 'namecase' [ 158.142513][ T4870] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 169.158795][ T4937] loop1: detected capacity change from 0 to 256 [ 169.291758][ T4937] exfat: Deprecated parameter 'namecase' [ 169.402913][ T4937] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 171.370137][ T4963] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 171.379228][ T4963] PKCS7: Only support pkcs7_signedData type [ 175.880688][ T1336] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 175.969576][ T5008] loop0: detected capacity change from 0 to 256 [ 176.051936][ T5008] exfat: Deprecated parameter 'namecase' [ 176.091309][ T5008] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 176.311056][ T1336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.230655][ T1336] usb 4-1: config 0 has no interfaces? [ 177.236202][ T1336] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 177.245893][ T1336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.256436][ T1336] usb 4-1: config 0 descriptor?? [ 177.553065][ T13] usb 4-1: USB disconnect, device number 3 [ 181.433676][ T5053] loop4: detected capacity change from 0 to 256 [ 181.472252][ T5053] exfat: Deprecated parameter 'namecase' [ 181.596164][ T5053] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 183.305753][ T5057] loop0: detected capacity change from 0 to 40427 [ 183.408731][ T5057] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 183.420613][ T5057] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 183.443536][ T5057] F2FS-fs (loop0): invalid crc value [ 183.505524][ T5057] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 183.554288][ T5082] loop3: detected capacity change from 0 to 256 [ 183.593921][ T5057] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 184.474918][ T5057] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 184.486150][ T5057] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 187.124355][ T5111] loop3: detected capacity change from 0 to 256 [ 187.201278][ T5111] exfat: Deprecated parameter 'namecase' [ 187.237420][ T5111] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 188.407100][ T5123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.236'. [ 188.581188][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.591315][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.598533][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.814184][ T5135] loop4: detected capacity change from 0 to 40427 [ 190.996113][ T5135] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 191.283076][ T5135] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 191.320629][ T5135] F2FS-fs (loop4): invalid crc value [ 192.215230][ T5173] Cannot find add_set index 0 as target [ 192.548109][ T5182] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 193.558368][ T5135] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 193.605057][ T5135] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 196.928300][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 196.988857][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 197.055193][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 197.270771][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 197.490680][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 198.776354][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 199.297883][ T5254] x_tables: duplicate underflow at hook 1 [ 199.305706][ T5254] bridge0: port 3(gretap0) entered blocking state [ 199.312276][ T5254] bridge0: port 3(gretap0) entered disabled state [ 199.319870][ T5254] device gretap0 entered promiscuous mode [ 199.326116][ T5254] bridge0: port 3(gretap0) entered blocking state [ 199.332636][ T5254] bridge0: port 3(gretap0) entered forwarding state [ 199.341718][ T5254] device gretap0 left promiscuous mode [ 199.348009][ T5254] bridge0: port 3(gretap0) entered disabled state [ 199.397897][ T5226] loop0: detected capacity change from 0 to 40427 [ 199.571353][ T5226] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 199.599706][ T5226] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 199.649274][ T5226] F2FS-fs (loop0): invalid crc value [ 199.699306][ T5226] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 199.747150][ T5226] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 199.857959][ T5226] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 199.868384][ T5226] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.882375][ T5263] Cannot find add_set index 0 as target [ 199.953233][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.959658][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.237504][ T5266] syz.0.268[5266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.238096][ T5266] syz.0.268[5266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.120243][ T5283] can: request_module (can-proto-0) failed. [ 208.567269][ T5320] loop4: detected capacity change from 0 to 256 [ 210.735088][ T5329] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 214.666952][ T5340] kernel profiling enabled (shift: 7) [ 215.943495][ T5375] loop4: detected capacity change from 0 to 256 [ 217.794985][ T5388] Cannot find add_set index 0 as target [ 217.986120][ T5390] x_tables: duplicate underflow at hook 1 [ 217.992717][ T5390] bridge0: port 3(gretap0) entered blocking state [ 217.999999][ T5390] bridge0: port 3(gretap0) entered disabled state [ 218.007666][ T5390] device gretap0 entered promiscuous mode [ 218.013950][ T5390] bridge0: port 3(gretap0) entered blocking state [ 218.020408][ T5390] bridge0: port 3(gretap0) entered forwarding state [ 218.030203][ T5390] device gretap0 left promiscuous mode [ 218.036028][ T5390] bridge0: port 3(gretap0) entered disabled state [ 218.246920][ T5395] loop4: detected capacity change from 0 to 512 [ 218.251494][ T5384] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 218.278779][ T5384] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 218.303834][ T5395] EXT4-fs (loop4): Test dummy encryption mode enabled [ 218.321499][ T5395] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 221.591165][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 223.953565][ T5437] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 223.993320][ T5437] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 224.673581][ T5433] Cannot find add_set index 0 as target [ 225.183413][ T5449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 226.429357][ T5456] loop2: detected capacity change from 0 to 512 [ 226.496126][ T5456] EXT4-fs (loop2): Test dummy encryption mode enabled [ 226.536065][ T5456] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 227.643007][ T5170] Bluetooth: hci4: command 0x0405 tx timeout [ 232.832031][ T5492] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 232.866044][ T5492] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 233.821670][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'. [ 233.995564][ T5504] tmpfs: Bad value for 'nr_inodes' [ 234.321070][ T13] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 235.615584][ T13] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 235.636564][ T13] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 235.687350][ T13] usb 3-1: config 8 has no interface number 0 [ 235.699993][ T13] usb 3-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 235.723760][ T13] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 235.743976][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.811953][ T13] usb 3-1: NFC: intf ffff88807eb63000 id ffffffff8d359f20 [ 235.946108][ T5523] loop0: detected capacity change from 0 to 256 [ 236.001654][ T5523] exfat: Deprecated parameter 'namecase' [ 236.054479][ T5523] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 236.077870][ T13] usb 3-1: USB disconnect, device number 3 [ 237.847298][ T5537] loop3: detected capacity change from 0 to 2048 [ 238.001058][ T5537] EXT4-fs (loop3): inline encryption not supported [ 238.031165][ T5537] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 239.301297][ T5549] loop2: detected capacity change from 0 to 16 [ 239.485964][ T5549] erofs: (device loop2): mounted with root inode @ nid 36. [ 239.540297][ T5549] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 239.602206][ T5538] loop0: detected capacity change from 0 to 40427 [ 239.621438][ T5549] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 239.660768][ T5538] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 239.668548][ T5538] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 239.680610][ T5556] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 239.717823][ T5556] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 239.741334][ T5538] F2FS-fs (loop0): invalid crc value [ 239.797714][ T5549] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 239.825634][ T5538] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 239.840928][ T5549] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 239.895021][ T5538] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 241.211137][ T5571] loop2: detected capacity change from 0 to 256 [ 241.341894][ T5571] exfat: Deprecated parameter 'namecase' [ 241.494979][ T5571] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 241.530892][ T5577] x_tables: duplicate underflow at hook 1 [ 241.545548][ T5577] bridge0: port 3(gretap0) entered blocking state [ 241.553118][ T5577] bridge0: port 3(gretap0) entered disabled state [ 241.574580][ T5577] device gretap0 entered promiscuous mode [ 241.583003][ T5577] bridge0: port 3(gretap0) entered blocking state [ 241.589478][ T5577] bridge0: port 3(gretap0) entered forwarding state [ 241.626013][ T5577] device gretap0 left promiscuous mode [ 241.634052][ T5577] bridge0: port 3(gretap0) entered disabled state [ 243.334036][ T5593] loop3: detected capacity change from 0 to 16 [ 243.401268][ T5593] erofs: (device loop3): mounted with root inode @ nid 36. [ 246.421359][ T5621] loop3: detected capacity change from 0 to 512 [ 246.734601][ T5621] EXT4-fs (loop3): Test dummy encryption mode enabled [ 246.903624][ T5621] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 248.859727][ T5637] loop3: detected capacity change from 0 to 256 [ 249.021288][ T5637] exfat: Deprecated parameter 'namecase' [ 249.069138][ T5637] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 250.836385][ T5644] loop2: detected capacity change from 0 to 16 [ 251.137929][ T5644] erofs: (device loop2): mounted with root inode @ nid 36. [ 251.399340][ T5653] loop3: detected capacity change from 0 to 16 [ 251.461863][ T5653] erofs: (device loop3): mounted with root inode @ nid 36. [ 252.226847][ T5653] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 252.237429][ T5653] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 252.278038][ T5653] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 252.354064][ T5653] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 252.387402][ T5667] loop1: detected capacity change from 0 to 256 [ 252.417855][ T5656] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 252.509825][ T5656] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 253.864246][ T4705] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 254.494039][ T5688] x_tables: duplicate underflow at hook 1 [ 254.500710][ T5688] bridge0: port 3(gretap0) entered blocking state [ 254.507178][ T5688] bridge0: port 3(gretap0) entered disabled state [ 254.514488][ T5688] device gretap0 entered promiscuous mode [ 254.520654][ T5688] bridge0: port 3(gretap0) entered blocking state [ 254.527103][ T5688] bridge0: port 3(gretap0) entered forwarding state [ 254.536073][ T5688] device gretap0 left promiscuous mode [ 254.541737][ T5688] bridge0: port 3(gretap0) entered disabled state [ 254.651017][ T4705] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 254.687485][ T4705] usb 4-1: config 0 has no interface number 0 [ 254.721063][ T4705] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 254.740811][ T4705] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 254.785869][ T4705] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 254.846067][ T4705] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.878342][ T4705] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 254.889261][ T4705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.918014][ T4705] usb 4-1: config 0 descriptor?? [ 254.944074][ T5683] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 254.975707][ T4705] ldusb 4-1:0.55: Interrupt in endpoint not found [ 255.184577][ T13] usb 4-1: USB disconnect, device number 4 [ 256.742416][ T5712] loop4: detected capacity change from 0 to 256 [ 256.814277][ T5714] loop1: detected capacity change from 0 to 16 [ 257.817787][ T5721] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 257.936278][ T5714] erofs: (device loop1): mounted with root inode @ nid 36. [ 257.997904][ T5714] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 258.043270][ T5714] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 258.085175][ T5714] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 258.206360][ T5714] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 258.532116][ T5731] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 258.571617][ T5730] loop2: detected capacity change from 0 to 16 [ 258.772186][ T5730] erofs: (device loop2): mounted with root inode @ nid 36. [ 258.869674][ T5731] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 259.357267][ T5744] loop3: detected capacity change from 0 to 2048 [ 259.428717][ T5744] EXT4-fs (loop3): inline encryption not supported [ 259.457675][ T5744] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 261.396011][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.406321][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.044906][ T5769] loop4: detected capacity change from 0 to 256 [ 263.203792][ T5774] loop3: detected capacity change from 0 to 16 [ 263.638126][ T5774] erofs: (device loop3): mounted with root inode @ nid 36. [ 263.657454][ T5774] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 263.667961][ T5774] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 263.677984][ T5774] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 263.688625][ T5774] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 263.697686][ T5774] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 264.369665][ T5774] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 266.652994][ T2285] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.673022][ T5813] loop4: detected capacity change from 0 to 16 [ 266.718357][ T2285] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 266.728433][ T5813] erofs: (device loop4): mounted with root inode @ nid 36. [ 266.736250][ T5808] loop1: detected capacity change from 0 to 2048 [ 266.807079][ T5806] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 266.827060][ T5806] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 266.977398][ T5808] EXT4-fs (loop1): inline encryption not supported [ 267.003471][ T5808] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 267.326832][ T5820] x_tables: duplicate underflow at hook 1 [ 267.333366][ T5820] bridge0: port 3(gretap0) entered blocking state [ 267.339859][ T5820] bridge0: port 3(gretap0) entered disabled state [ 267.347495][ T5820] device gretap0 entered promiscuous mode [ 267.353708][ T5820] bridge0: port 3(gretap0) entered blocking state [ 267.360229][ T5820] bridge0: port 3(gretap0) entered forwarding state [ 267.369423][ T5820] device gretap0 left promiscuous mode [ 267.375139][ T5820] bridge0: port 3(gretap0) entered disabled state [ 267.775750][ T5826] loop0: detected capacity change from 0 to 256 [ 268.062306][ T5828] loop3: detected capacity change from 0 to 16 [ 268.146764][ T5828] erofs: (device loop3): mounted with root inode @ nid 36. [ 268.234059][ T5828] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 268.271764][ T5828] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 268.310006][ T5828] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 268.353864][ T5828] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 268.404335][ T5833] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 268.429897][ T5833] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 271.539099][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.548392][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.576774][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.585587][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.594701][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.603138][ T5866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.068063][ T5868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.445'. [ 272.244375][ T5870] loop0: detected capacity change from 0 to 16 [ 272.331561][ T5873] loop2: detected capacity change from 0 to 256 [ 272.361302][ T5870] erofs: Unknown parameter 'ÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777184467440737095516150xffffffffffffffffÿÿÿÿ' [ 272.487698][ T5876] loop1: detected capacity change from 0 to 16 [ 272.778853][ T5876] erofs: (device loop1): mounted with root inode @ nid 36. [ 273.101481][ T5878] x_tables: duplicate underflow at hook 1 [ 273.107997][ T5878] bridge0: port 3(gretap0) entered blocking state [ 273.114531][ T5878] bridge0: port 3(gretap0) entered disabled state [ 273.122119][ T5878] device gretap0 entered promiscuous mode [ 273.128315][ T5878] bridge0: port 3(gretap0) entered blocking state [ 273.134821][ T5878] bridge0: port 3(gretap0) entered forwarding state [ 273.144040][ T5878] device gretap0 left promiscuous mode [ 273.149676][ T5878] bridge0: port 3(gretap0) entered disabled state [ 276.070373][ T5902] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 276.549527][ T5907] loop3: detected capacity change from 0 to 16 [ 276.603250][ T5908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.457'. [ 276.635890][ T5909] loop0: detected capacity change from 0 to 512 [ 276.636723][ T5910] loop4: detected capacity change from 0 to 2048 [ 276.667937][ T5907] erofs: (device loop3): mounted with root inode @ nid 36. [ 277.692841][ T5910] EXT4-fs (loop4): inline encryption not supported [ 277.711744][ T5909] EXT4-fs (loop0): Test dummy encryption mode enabled [ 277.734159][ T5909] EXT4-fs (loop0): Unrecognized mount option "=" or missing value [ 277.766276][ T5917] loop2: detected capacity change from 0 to 256 [ 277.773772][ T5910] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 280.595896][ T5949] loop3: detected capacity change from 0 to 16 [ 280.699836][ T5949] erofs: (device loop3): mounted with root inode @ nid 36. [ 281.060868][ T5951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.473'. [ 282.649201][ T5971] loop3: detected capacity change from 0 to 256 [ 282.679556][ T5970] loop4: detected capacity change from 0 to 2048 [ 282.776710][ T5970] EXT4-fs (loop4): inline encryption not supported [ 282.832364][ T5970] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 284.342335][ T5986] loop1: detected capacity change from 0 to 16 [ 284.448409][ T5986] erofs: (device loop1): mounted with root inode @ nid 36. [ 286.037071][ T5999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.487'. [ 286.660645][ T6017] loop1: detected capacity change from 0 to 256 [ 288.545523][ T6026] loop2: detected capacity change from 0 to 16 [ 288.661261][ T6026] erofs: (device loop2): mounted with root inode @ nid 36. [ 290.426482][ T6044] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 291.511500][ T6050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.503'. [ 291.750417][ T6053] loop2: detected capacity change from 0 to 2048 [ 291.826244][ T6053] EXT4-fs (loop2): inline encryption not supported [ 291.838383][ T6060] loop4: detected capacity change from 0 to 256 [ 291.851999][ T6053] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 298.441811][ T6107] loop4: detected capacity change from 0 to 256 [ 298.493163][ T6107] exfat: Deprecated parameter 'namecase' [ 298.503197][ T6110] loop2: detected capacity change from 0 to 256 [ 298.530991][ T6107] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 301.531793][ T6124] loop2: detected capacity change from 0 to 16 [ 301.552787][ T6117] nfs: Unknown parameter '/' [ 301.621593][ T6124] erofs: Unknown parameter 'ÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777184467440737095516150xffffffffffffffffÿÿÿÿ' [ 302.055932][ T6134] Cannot find add_set index 0 as target [ 303.588890][ T6156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 303.770761][ T6160] loop1: detected capacity change from 0 to 256 [ 304.592949][ T6165] loop3: detected capacity change from 0 to 256 [ 304.612834][ T6172] loop4: detected capacity change from 0 to 16 [ 304.647328][ T6169] loop0: detected capacity change from 0 to 2048 [ 304.657349][ T6172] erofs: Unknown parameter 'ÿÿÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777184467440737095516150xffffffffffffffffÿÿÿÿ' [ 304.712096][ T6165] exfat: Deprecated parameter 'namecase' [ 304.755480][ T6169] EXT4-fs (loop0): inline encryption not supported [ 304.779122][ T6165] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 304.800883][ T6171] Cannot find add_set index 0 as target [ 304.807087][ T6169] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 307.773948][ T6185] loop2: detected capacity change from 0 to 16 [ 307.854423][ T6185] erofs: (device loop2): mounted with root inode @ nid 36. [ 308.066002][ T6191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.543'. [ 309.657580][ T6210] loop2: detected capacity change from 0 to 256 [ 310.586745][ T6221] loop2: detected capacity change from 0 to 16 [ 310.683834][ T6221] erofs: (device loop2): mounted with root inode @ nid 36. [ 310.737971][ T6221] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 310.796358][ T6221] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 311.054768][ T6231] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 311.352161][ T6231] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 311.600032][ T6229] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 311.679122][ T6229] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 311.753199][ T6234] loop1: detected capacity change from 0 to 16 [ 311.794828][ T6236] loop4: detected capacity change from 0 to 2048 [ 311.847005][ T6234] erofs: (device loop1): mounted with root inode @ nid 36. [ 311.883206][ T6236] EXT4-fs (loop4): inline encryption not supported [ 311.903553][ T6236] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 313.566716][ T6252] netlink: 36 bytes leftover after parsing attributes in process `syz.1.558'. [ 313.654473][ T6256] loop2: detected capacity change from 0 to 256 [ 313.777223][ T6260] loop4: detected capacity change from 0 to 512 [ 313.900274][ T6260] EXT4-fs (loop4): Test dummy encryption mode enabled [ 313.924994][ T6260] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 315.692850][ T6273] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.12) [ 316.223914][ T6276] loop2: detected capacity change from 0 to 16 [ 316.819212][ T6285] loop1: detected capacity change from 0 to 2048 [ 316.850994][ T6280] loop4: detected capacity change from 0 to 16 [ 316.930790][ T6276] erofs: (device loop2): mounted with root inode @ nid 36. [ 317.967838][ T6276] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 317.986862][ T6285] EXT4-fs (loop1): inline encryption not supported [ 318.009119][ T6280] erofs: (device loop4): mounted with root inode @ nid 36. [ 318.017957][ T6276] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 318.030754][ T6285] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 318.213817][ T6276] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 318.238886][ T6276] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 318.259483][ T6276] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 318.269972][ T6276] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 318.560945][ T6308] loop3: detected capacity change from 0 to 256 [ 322.693811][ T6337] loop4: detected capacity change from 0 to 16 [ 322.810311][ T6339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.586'. [ 322.837388][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.843791][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.961742][ T6347] loop3: detected capacity change from 0 to 16 [ 325.038621][ T6337] erofs: (device loop4): mounted with root inode @ nid 36. [ 325.051819][ T6347] erofs: (device loop3): mounted with root inode @ nid 36. [ 325.102662][ T6337] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 325.317614][ T6337] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 325.319320][ T6362] loop2: detected capacity change from 0 to 256 [ 325.334145][ T6359] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 325.365230][ T6359] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 325.391917][ T6357] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 325.424074][ T6357] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 326.255070][ T6377] Cannot find add_set index 0 as target [ 326.864134][ T6379] loop4: detected capacity change from 0 to 512 [ 327.125484][ T6387] syz.1.600 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 327.387100][ T6387] loop1: detected capacity change from 0 to 512 [ 328.237925][ T6387] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.277846][ T6379] EXT4-fs (loop4): Test dummy encryption mode enabled [ 328.418403][ T6379] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 328.499144][ T6387] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 328.513286][ T6387] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.737351][ T6406] loop4: detected capacity change from 0 to 16 [ 331.094102][ T6406] erofs: (device loop4): mounted with root inode @ nid 36. [ 331.341104][ T6422] loop0: detected capacity change from 0 to 256 [ 331.935428][ T6425] Cannot find add_set index 0 as target [ 335.645531][ T6444] loop0: detected capacity change from 0 to 512 [ 335.740206][ T6444] EXT4-fs (loop0): Test dummy encryption mode enabled [ 335.760158][ T6444] EXT4-fs (loop0): Unrecognized mount option "=" or missing value [ 335.828373][ T6448] loop2: detected capacity change from 0 to 16 [ 335.929579][ T6448] erofs: (device loop2): mounted with root inode @ nid 36. [ 335.949907][ T6448] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 336.001546][ T6448] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 336.047599][ T6451] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 336.138046][ T6451] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 337.681072][ T6448] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 338.353777][ T6448] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 338.690244][ T6461] Cannot find add_set index 0 as target [ 340.531518][ T6475] loop4: detected capacity change from 0 to 512 [ 341.023759][ T6475] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.531927][ T6475] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 341.546192][ T6475] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 343.041635][ T6492] loop3: detected capacity change from 0 to 512 [ 343.140665][ T6492] EXT4-fs (loop3): Test dummy encryption mode enabled [ 343.147504][ T6492] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 344.104308][ T6496] loop4: detected capacity change from 0 to 16 [ 344.213075][ T6496] erofs: (device loop4): mounted with root inode @ nid 36. [ 344.246230][ T6496] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 344.301470][ T6496] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 344.331616][ T6496] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 344.408118][ T6496] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 344.483286][ T6506] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 344.521902][ T6506] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 345.368044][ T6513] syz.0.637 uses obsolete (PF_INET,SOCK_PACKET) [ 345.658387][ T6520] Cannot find add_set index 0 as target [ 345.784374][ T6525] loop4: detected capacity change from 0 to 512 [ 345.831397][ T6522] x_tables: duplicate underflow at hook 1 [ 345.838013][ T6522] bridge0: port 3(gretap0) entered blocking state [ 345.844547][ T6522] bridge0: port 3(gretap0) entered disabled state [ 345.854517][ T6522] device gretap0 entered promiscuous mode [ 345.862206][ T6522] bridge0: port 3(gretap0) entered blocking state [ 345.868732][ T6522] bridge0: port 3(gretap0) entered forwarding state [ 345.878132][ T6522] device gretap0 left promiscuous mode [ 345.883947][ T6522] bridge0: port 3(gretap0) entered disabled state [ 345.959592][ T6525] EXT4-fs (loop4): Test dummy encryption mode enabled [ 345.988251][ T6525] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 346.063213][ T6529] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 346.072009][ T6529] PKCS7: Only support pkcs7_signedData type [ 348.677842][ T6547] loop1: detected capacity change from 0 to 512 [ 349.971245][ T6547] EXT4-fs (loop1): Test dummy encryption mode enabled [ 349.978080][ T6547] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 350.229473][ T6558] loop4: detected capacity change from 0 to 16 [ 350.427892][ T6557] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 350.995062][ T6557] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 351.023769][ T6558] erofs: (device loop4): mounted with root inode @ nid 36. [ 351.064509][ T6558] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 351.107889][ T6558] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 351.167883][ T6558] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 351.380924][ T6558] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 351.389327][ T6567] erofs: (device loop4): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 351.414127][ T6568] Cannot find add_set index 0 as target [ 352.059812][ T6567] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 352.551014][ T6582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'. [ 353.349936][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.656'. [ 353.587222][ T6596] loop1: detected capacity change from 0 to 512 [ 353.986223][ T6596] EXT4-fs (loop1): Test dummy encryption mode enabled [ 354.021226][ T6596] EXT4-fs (loop1): Unrecognized mount option "=" or missing value [ 354.562398][ T6604] Cannot find add_set index 0 as target [ 355.854738][ T6611] loop2: detected capacity change from 0 to 16 [ 355.901467][ T6613] 9pnet: Insufficient options for proto=fd [ 355.966819][ T6611] erofs: (device loop2): mounted with root inode @ nid 36. [ 356.084199][ T6611] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 356.141839][ T6618] sp0: Synchronizing with TNC [ 356.171424][ T6618] [U] è [ 356.198386][ T6611] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 356.362828][ T6622] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 356.522636][ T6622] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 356.669421][ T6620] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 356.896010][ T6620] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 357.043329][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 357.145954][ T6626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.671'. [ 359.815625][ T6642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.674'. [ 360.376990][ T6650] loop3: detected capacity change from 0 to 512 [ 360.489327][ T6650] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 360.707851][ T6650] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 360.721888][ T6650] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.315994][ T6669] loop3: detected capacity change from 0 to 16 [ 366.328158][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 366.346488][ T6673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.685'. [ 366.383626][ T6669] erofs: (device loop3): mounted with root inode @ nid 36. [ 366.402219][ T6669] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 366.442162][ T6669] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 366.498379][ T6669] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 366.568795][ T6679] loop1: detected capacity change from 0 to 256 [ 366.775567][ T6682] FAT-fs (nullb0): bogus number of reserved sectors [ 366.775726][ T6682] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 366.789631][ T6669] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 367.762013][ T6669] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 367.777727][ T6669] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 367.831313][ T6679] exfat: Deprecated parameter 'namecase' [ 367.892149][ T6686] loop0: detected capacity change from 0 to 2048 [ 367.915094][ T6679] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 367.949414][ T6686] EXT4-fs (loop0): inline encryption not supported [ 367.986352][ T6686] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 372.877090][ T6709] overlayfs: overlapping lowerdir path [ 373.172940][ T6712] bridge0: port 3(gretap0) entered blocking state [ 373.185199][ T6712] bridge0: port 3(gretap0) entered disabled state [ 373.197927][ T6712] device gretap0 entered promiscuous mode [ 373.206385][ T6712] bridge0: port 3(gretap0) entered blocking state [ 373.212913][ T6712] bridge0: port 3(gretap0) entered forwarding state [ 373.225230][ T6712] device gretap0 left promiscuous mode [ 373.231618][ T6712] bridge0: port 3(gretap0) entered disabled state [ 373.465333][ T6715] IPv6: NLM_F_REPLACE set, but no existing node found! [ 373.821588][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 373.863858][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.697'. [ 374.187178][ T6727] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 374.239010][ T6727] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 375.974128][ T6738] loop1: detected capacity change from 0 to 16 [ 375.989531][ T6746] loop0: detected capacity change from 0 to 256 [ 376.141245][ T6746] exfat: Deprecated parameter 'namecase' [ 376.150990][ T6738] erofs: (device loop1): mounted with root inode @ nid 36. [ 376.167323][ T6746] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 376.182628][ T6738] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 376.230769][ T6738] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 376.465624][ T6754] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 376.476662][ T6754] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 376.489209][ T6751] loop3: detected capacity change from 0 to 2048 [ 376.516402][ T4214] Bluetooth: hci5: command 0x0409 tx timeout [ 376.689858][ T6738] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 377.181490][ T6751] EXT4-fs (loop3): inline encryption not supported [ 377.199036][ T6738] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 377.241384][ T6751] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 378.646647][ T6733] chnl_net:caif_netlink_parms(): no params data found [ 378.770584][ T4209] Bluetooth: hci5: command 0x041b tx timeout [ 378.983905][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 379.168524][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.302222][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.403123][ T6733] device bridge_slave_0 entered promiscuous mode [ 379.412119][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.419390][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.427822][ T6733] device bridge_slave_1 entered promiscuous mode [ 380.409184][ T6733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.310558][ T4210] Bluetooth: hci5: command 0x040f tx timeout [ 381.343228][ T6733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.434131][ T6733] team0: Port device team_slave_0 added [ 381.452491][ T6733] team0: Port device team_slave_1 added [ 382.575702][ T6797] loop1: detected capacity change from 0 to 16 [ 382.680146][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.690762][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.822545][ T6733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.838328][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.852989][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.339534][ T6733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.366809][ T6797] erofs: (device loop1): mounted with root inode @ nid 36. [ 383.390783][ T4210] Bluetooth: hci5: command 0x0419 tx timeout [ 383.411712][ T6797] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 383.458857][ T6797] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 383.504528][ T6797] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 383.570587][ T6797] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 383.632048][ T6797] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 383.714551][ T6797] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 383.777068][ T6809] loop0: detected capacity change from 0 to 2048 [ 384.779692][ T6733] device hsr_slave_0 entered promiscuous mode [ 384.807682][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.811954][ T6733] device hsr_slave_1 entered promiscuous mode [ 384.814086][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.890516][ T6809] EXT4-fs (loop0): inline encryption not supported [ 384.932854][ T6809] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 384.941088][ T6733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.948663][ T6733] Cannot create hsr debugfs directory [ 385.064710][ T6822] netlink: 36 bytes leftover after parsing attributes in process `syz.1.721'. [ 387.050184][ T6837] loop1: detected capacity change from 0 to 256 [ 387.128747][ T6837] exfat: Deprecated parameter 'namecase' [ 387.840095][ T6837] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 388.007370][ T6733] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.148114][ T6733] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 389.773381][ T6733] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 389.876595][ T6733] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 390.077676][ T6853] loop1: detected capacity change from 0 to 16 [ 390.261666][ T6853] erofs: (device loop1): mounted with root inode @ nid 36. [ 390.308407][ T6733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.346931][ T6853] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 390.605230][ T6853] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 390.708375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 390.775768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 390.866136][ T6856] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 390.934149][ T6733] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.984621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.019818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.100621][ T6856] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 391.125101][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.132262][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.143769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 391.163525][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.734'. [ 391.192348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 391.222100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 391.235852][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.243019][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.351492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 391.393461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 391.414934][ T6864] loop2: detected capacity change from 0 to 2048 [ 391.481929][ T6864] EXT4-fs (loop2): inline encryption not supported [ 391.613139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 391.622209][ T6864] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 392.562615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 392.656752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 392.943618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 392.982771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.910537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.994223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.012518][ T6733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.031616][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 395.071807][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.093394][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.395756][ T6903] loop0: detected capacity change from 0 to 16 [ 396.556465][ T6909] netlink: 36 bytes leftover after parsing attributes in process `syz.3.746'. [ 396.577610][ T6903] erofs: (device loop0): mounted with root inode @ nid 36. [ 396.625014][ T4605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.688088][ T6903] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 396.730749][ T6903] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 396.778016][ T6903] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 396.787895][ T6903] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 396.798800][ T6903] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 396.808732][ T6903] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 396.835875][ T4605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.548642][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.578644][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.669568][ T6733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.727699][ T6928] loop1: detected capacity change from 0 to 2048 [ 398.276779][ T4605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.374765][ T6928] EXT4-fs (loop1): inline encryption not supported [ 398.426909][ T6928] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 398.854650][ T4605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.820600][ T4265] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 402.101632][ T6963] loop0: detected capacity change from 0 to 16 [ 402.220891][ T4265] usb 2-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 402.273811][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 402.336082][ T6963] erofs: (device loop0): mounted with root inode @ nid 36. [ 402.455622][ T6963] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 402.481839][ T4265] usb 2-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 402.509881][ T6963] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 402.558220][ T6968] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 402.627863][ T6968] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 402.691220][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.733098][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.768377][ T6963] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 402.778465][ T6963] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 402.800645][ T4265] usb 2-1: New USB device found, idVendor=0b57, idProduct=3ff5, bcdDevice=e2.c7 [ 402.832190][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.470925][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.477741][ T4265] usb 2-1: Product: syz [ 403.479802][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.482951][ T4265] usb 2-1: Manufacturer: syz [ 403.495268][ T4265] usb 2-1: SerialNumber: syz [ 403.502621][ T4265] usb 2-1: config 0 descriptor?? [ 403.530361][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.618398][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.627189][ T4265] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 403.651723][ T6733] device veth0_vlan entered promiscuous mode [ 403.759309][ T13] usb 2-1: USB disconnect, device number 3 [ 403.882905][ T6982] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 404.177541][ T6733] device veth1_vlan entered promiscuous mode [ 404.454034][ T6733] device veth0_macvtap entered promiscuous mode [ 404.537472][ T6733] device veth1_macvtap entered promiscuous mode [ 404.604160][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.659162][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.711515][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 404.769784][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.786583][ T6999] loop0: detected capacity change from 0 to 2048 [ 404.865422][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.876018][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.904841][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.915105][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.925995][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.935882][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.946794][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.959208][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.970379][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.001418][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.010980][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 405.053720][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 405.093107][ T6999] EXT4-fs (loop0): inline encryption not supported [ 405.115049][ T6999] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 405.136450][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 405.841877][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.405510][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.422173][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.433408][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.450513][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.476767][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.510592][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.611975][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.653793][ T6733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.698423][ T6733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.753298][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.936819][ T6733] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.996529][ T6733] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.055146][ T6733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.108115][ T6733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.512008][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.553910][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.589303][ T7023] IPv6: Can't replace route, no match found [ 407.670931][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.679233][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.500915][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.918072][ T1336] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 412.190036][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.248079][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.839056][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 415.572912][ T7069] UBIFS error (pid: 7069): cannot open "./file0", error -22 [ 417.662511][ T7095] loop5: detected capacity change from 0 to 512 [ 418.195349][ T7095] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 418.417162][ T7095] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 418.431290][ T7095] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.583836][ T4605] device hsr_slave_0 left promiscuous mode [ 421.627979][ T4605] device hsr_slave_1 left promiscuous mode [ 421.660771][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 421.741925][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.950690][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 421.969029][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.091786][ T1108] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 422.237106][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.281015][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.354255][ T4605] device bridge_slave_1 left promiscuous mode [ 422.401423][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.439229][ T4605] device bridge_slave_0 left promiscuous mode [ 422.445761][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.475315][ T4605] device veth1_macvtap left promiscuous mode [ 422.482318][ T4605] device veth0_macvtap left promiscuous mode [ 422.488428][ T4605] device veth1_vlan left promiscuous mode [ 422.526804][ T4605] device veth0_vlan left promiscuous mode [ 422.605367][ T1108] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 422.630504][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.638637][ T1108] usb 6-1: Product: syz [ 422.650454][ T1108] usb 6-1: Manufacturer: syz [ 422.655096][ T1108] usb 6-1: SerialNumber: syz [ 422.710218][ T1108] usb 6-1: config 0 descriptor?? [ 425.602465][ T1108] usb 6-1: USB disconnect, device number 2 [ 426.423529][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 426.481285][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 426.558568][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.831035][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.061300][ T4605] bond0 (unregistering): Released all slaves [ 429.178345][ T7189] ax25_connect(): syz.5.806 uses autobind, please contact jreuter@yaina.de [ 440.514025][ T7300] libceph: resolve '0.' (ret=-3): failed [ 442.669224][ T7325] netlink: 788 bytes leftover after parsing attributes in process `syz.1.837'. [ 444.786645][ T7343] device erspan1 entered promiscuous mode [ 445.841136][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.847477][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.792895][ T7365] loop6: detected capacity change from 0 to 524287999 [ 448.775799][ T1092] blk_update_request: I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 449.165417][ T7378] loop2: detected capacity change from 0 to 512 [ 449.274585][ T7378] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 449.400558][ T7378] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 449.414116][ T7378] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 449.771072][ T7384] netlink: 68 bytes leftover after parsing attributes in process `syz.3.851'. [ 452.508283][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 456.632087][ T7464] capability: warning: `syz.3.871' uses 32-bit capabilities (legacy support in use) [ 461.830592][ T7427] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 462.110687][ T7427] usb 2-1: Using ep0 maxpacket: 8 [ 462.630750][ T7427] usb 2-1: config 0 has an invalid interface number: 94 but max is 0 [ 462.743228][ T7427] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 463.010473][ T7427] usb 2-1: config 0 has no interface number 0 [ 463.057451][ T7427] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice= d.dc [ 463.121115][ T7427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.241253][ T7427] usb 2-1: config 0 descriptor?? [ 463.487841][ T7427] usb 2-1: USB disconnect, device number 4 [ 464.444327][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.886'. [ 466.770585][ T7427] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 467.580616][ T7576] chnl_net:caif_netlink_parms(): no params data found [ 467.921070][ T7427] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.964819][ T7427] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 468.045495][ T7427] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 468.126623][ T7427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.309917][ T7427] usb 1-1: config 0 descriptor?? [ 468.432148][ T7427] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 468.475372][ T7427] dvb-usb: bulk message failed: -22 (3/0) [ 468.546776][ T7427] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 468.602088][ T7427] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 468.620885][ T7560] udc-core: couldn't find an available UDC or it's busy [ 468.627866][ T7560] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 468.682775][ T7427] usb 1-1: media controller created [ 468.727849][ T7427] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.827228][ T7560] dvb-usb: bulk message failed: -22 (6/0) [ 469.240696][ T4209] Bluetooth: hci4: command 0x0409 tx timeout [ 469.744939][ T7427] dvb-usb: bulk message failed: -22 (6/0) [ 469.751489][ T7427] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 469.991548][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.004170][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.013000][ T7576] device bridge_slave_0 entered promiscuous mode [ 470.023150][ T7427] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 470.038562][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.061967][ T7427] dvb-usb: schedule remote query interval to 150 msecs. [ 470.070548][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.086385][ T7427] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 470.094860][ T7576] device bridge_slave_1 entered promiscuous mode [ 470.134071][ T7427] usb 1-1: USB disconnect, device number 3 [ 470.819376][ T7576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.883588][ T7427] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 470.993531][ T7576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.973921][ T4209] Bluetooth: hci4: command 0x041b tx timeout [ 472.124244][ T7640] loop5: detected capacity change from 0 to 16 [ 472.706899][ T7640] erofs: (device loop5): mounted with root inode @ nid 36. [ 473.143670][ T7640] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 473.243439][ T7576] team0: Port device team_slave_0 added [ 473.263517][ T7640] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 473.302285][ T7576] team0: Port device team_slave_1 added [ 473.380713][ T7652] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 473.423604][ T7652] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 473.795697][ T7640] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 473.870420][ T7640] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 473.883481][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.928083][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.040629][ T2285] Bluetooth: hci4: command 0x040f tx timeout [ 474.127583][ T7576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.140445][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.147418][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.173612][ T7576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.865769][ T7665] loop0: detected capacity change from 0 to 512 [ 475.164236][ T7665] EXT4-fs (loop0): Test dummy encryption mode enabled [ 475.200569][ T7665] EXT4-fs (loop0): Unrecognized mount option "=" or missing value [ 476.283046][ T4210] Bluetooth: hci4: command 0x0419 tx timeout [ 476.324001][ T7576] device hsr_slave_0 entered promiscuous mode [ 476.843553][ T7576] device hsr_slave_1 entered promiscuous mode [ 478.210837][ T7694] sp0: Synchronizing with TNC [ 478.219716][ T7694] [U] è [ 480.184645][ T7576] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 480.307757][ T7718] loop5: detected capacity change from 0 to 16 [ 480.325862][ T7576] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 480.370952][ T7576] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 480.436992][ T7576] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 480.477443][ T7718] erofs: (device loop5): mounted with root inode @ nid 36. [ 480.545741][ T7718] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 480.641482][ T7718] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 480.716972][ T7725] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 480.750848][ T7725] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 480.787993][ T4605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.819064][ T7718] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 480.842431][ T7718] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 480.957505][ T4605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.096034][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.278128][ T4605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.041440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.096965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.141325][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.188326][ T4605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.235897][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 484.265493][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.303864][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.311169][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.357941][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.523481][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.558036][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.586765][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.594001][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.818828][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.056274][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.371665][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.432272][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.478087][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.531069][ T7576] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 485.640528][ T7576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.370698][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.379873][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.393059][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.442646][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.511748][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 487.564139][ T7782] loop5: detected capacity change from 0 to 16 [ 487.571226][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.643452][ C0] Unknown status report in ack skb [ 487.663103][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 487.731301][ T7782] erofs: (device loop5): mounted with root inode @ nid 36. [ 487.768663][ T7782] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 487.852254][ T7782] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 487.890541][ T7796] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 488.121572][ T7796] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 488.297339][ T7793] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 488.697996][ T7793] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 490.032448][ T7791] syz.3.930 (7791): drop_caches: 2 [ 490.091457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 490.099004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 490.224128][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.105643][ T7576] device veth0_vlan entered promiscuous mode [ 494.157287][ T7869] loop0: detected capacity change from 0 to 16 [ 494.166842][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 494.176653][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 494.190111][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 494.290780][ T7869] erofs: (device loop0): mounted with root inode @ nid 36. [ 494.367587][ T7869] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 494.791128][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.827462][ T7869] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 494.852478][ T7876] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 494.862356][ T7876] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 494.877888][ T7869] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 494.919100][ T7869] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 494.953418][ T7576] device veth1_vlan entered promiscuous mode [ 494.965233][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 494.976273][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.186286][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.207955][ T6272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.282319][ T7576] device veth0_macvtap entered promiscuous mode [ 495.327845][ T4605] device hsr_slave_0 left promiscuous mode [ 495.340890][ T4605] device hsr_slave_1 left promiscuous mode [ 495.362380][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.315312][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.491345][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.523449][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.574080][ T4605] device bridge_slave_1 left promiscuous mode [ 496.580432][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.631590][ T4605] device bridge_slave_0 left promiscuous mode [ 496.684693][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.747826][ T4605] device veth1_macvtap left promiscuous mode [ 496.819832][ T4605] device veth0_macvtap left promiscuous mode [ 496.912640][ T4605] device veth1_vlan left promiscuous mode [ 496.918492][ T4605] device veth0_vlan left promiscuous mode [ 497.020465][ T4588] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 497.380646][ T4588] usb 6-1: config 0 has no interfaces? [ 497.480792][ T4605] team0 (unregistering): Port device team_slave_1 removed [ 497.515707][ T4605] team0 (unregistering): Port device team_slave_0 removed [ 497.606555][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.647767][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.660807][ T4588] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 497.677331][ T4588] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.700459][ T4588] usb 6-1: Product: syz [ 497.704664][ T4588] usb 6-1: Manufacturer: syz [ 497.725538][ T4588] usb 6-1: SerialNumber: syz [ 497.759737][ T4588] usb 6-1: config 0 descriptor?? [ 497.956482][ T4605] bond0 (unregistering): Released all slaves [ 498.048249][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 498.081600][ T7576] device veth1_macvtap entered promiscuous mode [ 498.168133][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.223151][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.240645][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.257653][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.277554][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.288608][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.501587][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.372589][ T2285] Bluetooth: hci5: command 0x0406 tx timeout [ 500.394644][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.410287][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.424496][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 500.500476][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 500.574917][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.586282][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.596353][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.613129][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.636240][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.664257][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.795971][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.944942][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.180323][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.707512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.741840][ T7928] overlayfs: failed to resolve './file1': -2 [ 501.749858][ T7930] loop1: detected capacity change from 0 to 16 [ 501.758548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.786891][ T7576] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.810632][ T7576] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.853703][ T7576] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.870110][ T7576] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.965284][ T7930] erofs: (device loop1): mounted with root inode @ nid 36. [ 501.982482][ T7930] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 501.992346][ T7930] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 502.001488][ T7930] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 502.011605][ T7930] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 502.140813][ T7930] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 502.170562][ T7930] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 502.649531][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.825887][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.841133][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 503.897674][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.907696][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.938573][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 505.028778][ T4209] usb 6-1: USB disconnect, device number 3 [ 507.155327][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.162051][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.374928][ T7991] loop5: detected capacity change from 0 to 16 [ 507.475496][ T7991] erofs: (device loop5): mounted with root inode @ nid 36. [ 507.522798][ T7991] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 507.572824][ T7991] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 507.618705][ T7991] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 507.711720][ T7991] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 507.720022][ T8000] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 507.782231][ T8000] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 511.319188][ T8040] sp0: Synchronizing with TNC [ 511.329023][ T8040] [U] è [ 513.734934][ T8063] loop5: detected capacity change from 0 to 16 [ 513.885492][ T8063] erofs: (device loop5): mounted with root inode @ nid 36. [ 513.932833][ T8063] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 514.012677][ T8063] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 514.050625][ T8066] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 514.111635][ T8066] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 514.131433][ T8067] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 514.193555][ T8067] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 516.674067][ T1336] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 516.861833][ T8099] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 517.070948][ T1336] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 517.107125][ T1336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.234510][ T1336] usb 2-1: config 0 descriptor?? [ 518.442700][ T1336] ath6kl: Failed to submit usb control message: -110 [ 518.474868][ T1336] ath6kl: unable to send the bmi data to the device: -110 [ 518.588744][ T1336] ath6kl: Unable to send get target info: -110 [ 518.642848][ T1336] ath6kl: Failed to init ath6kl core: -110 [ 518.708869][ T1336] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 519.758741][ T1336] usb 2-1: USB disconnect, device number 5 [ 520.051861][ T8136] netlink: 68 bytes leftover after parsing attributes in process `syz.6.987'. [ 520.145970][ T8110] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 523.234951][ T8166] device netdevsim0 entered promiscuous mode [ 525.501838][ T8189] netlink: 68 bytes leftover after parsing attributes in process `syz.1.998'. [ 526.824421][ T8207] loop1: detected capacity change from 0 to 16 [ 527.079740][ T8207] erofs: (device loop1): mounted with root inode @ nid 36. [ 527.095916][ T8207] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 527.296922][ T8207] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 527.604825][ T8214] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 527.949561][ T8214] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 527.990547][ T8215] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 528.000239][ T8215] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 530.669018][ T8243] sp0: Synchronizing with TNC [ 532.028896][ T8259] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1009'. [ 532.144819][ T8260] batman_adv: Cannot find parent device [ 532.151728][ T8260] batman_adv: batadv0: Adding interface: gretap1 [ 532.158113][ T8260] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.184068][ T8260] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 534.508305][ T8183] [U] è [ 534.519865][ T4180] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 535.502494][ T8281] loop3: detected capacity change from 0 to 16 [ 535.653195][ T8281] erofs: (device loop3): mounted with root inode @ nid 36. [ 535.681275][ T8281] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 535.710237][ T8281] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 535.734677][ T8281] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 535.745164][ T8281] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 535.758470][ T8281] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 535.768911][ T8281] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 539.556671][ T8313] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1020'. [ 540.396955][ T4180] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 542.258980][ T8350] loop0: detected capacity change from 0 to 16 [ 542.575209][ T8350] erofs: (device loop0): mounted with root inode @ nid 36. [ 543.395328][ T8350] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 543.412750][ T8350] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 543.811303][ T8350] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 543.825505][ T8350] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 543.886614][ T8350] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 543.900934][ T8350] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 545.880812][ T8379] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1034'. [ 547.575189][ T4180] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 549.700189][ T8412] loop1: detected capacity change from 0 to 16 [ 549.763506][ T8412] erofs: (device loop1): mounted with root inode @ nid 36. [ 549.818076][ T8412] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 549.881058][ T8412] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 549.919885][ T8417] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 549.956021][ T8417] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 550.120996][ T8412] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 551.736150][ T8412] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 552.771839][ T8430] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1045'. [ 556.731172][ T8476] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1057'. [ 556.763320][ T8478] sctp: [Deprecated]: syz.3.1056 (pid 8478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.763320][ T8478] Use struct sctp_sack_info instead [ 562.673502][ T8527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1070'. [ 566.677369][ T8584] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1086'. [ 567.637066][ T8596] netlink: 'syz.6.1089': attribute type 39 has an invalid length. [ 568.030685][ T8564] loop3: detected capacity change from 0 to 40427 [ 568.604900][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.613259][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.997898][ T8638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1098'. [ 572.364180][ T8674] sp0: Synchronizing with TNC [ 572.375582][ T8674] [U] è [ 573.957997][ T8686] sp0: Synchronizing with TNC [ 573.970107][ T8686] [U] è [ 574.589062][ T8700] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1112'. [ 576.516040][ T8737] sctp: [Deprecated]: syz.1.1121 (pid 8737) Use of int in max_burst socket option deprecated. [ 576.516040][ T8737] Use struct sctp_assoc_value instead [ 576.955243][ T8749] sp0: Synchronizing with TNC [ 576.966147][ T8749] [U] è [ 578.492942][ T8756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1124'. [ 580.915741][ T8767] loop0: detected capacity change from 0 to 40427 [ 581.229856][ T8767] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 581.661429][ T8767] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 581.747795][ T8806] sp0: Synchronizing with TNC [ 581.761020][ T8806] [U] è [ 581.969936][ T8767] F2FS-fs (loop0): invalid crc value [ 581.975498][ T8767] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 582.048126][ T8815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1137'. [ 582.600793][ T8817] loop5: detected capacity change from 0 to 512 [ 582.764902][ T8817] EXT4-fs (loop5): Test dummy encryption mode enabled [ 582.781023][ T8817] EXT4-fs (loop5): Unrecognized mount option "=" or missing value [ 586.110483][ T8863] sp0: Synchronizing with TNC [ 586.123295][ T8863] [U] è [ 588.051428][ T8888] loop3: detected capacity change from 0 to 512 [ 588.200457][ T8853] loop1: detected capacity change from 0 to 40427 [ 588.280681][ T8888] EXT4-fs (loop3): Test dummy encryption mode enabled [ 588.322878][ T8888] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 590.106513][ T8919] device syzkaller0 entered promiscuous mode [ 591.743512][ T7425] Bluetooth: hci4: command 0x0406 tx timeout [ 592.447036][ T8949] loop0: detected capacity change from 0 to 512 [ 592.549099][ T8949] EXT4-fs (loop0): Test dummy encryption mode enabled [ 592.575093][ T8949] EXT4-fs (loop0): Unrecognized mount option "=" or missing value [ 594.372412][ T8946] loop6: detected capacity change from 0 to 40427 [ 594.462377][ T8946] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 594.470242][ T8946] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 594.510266][ T8946] F2FS-fs (loop6): invalid crc value [ 594.726855][ T8946] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 595.807869][ T8946] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 598.976099][ T9014] loop0: detected capacity change from 0 to 512 [ 599.509574][ T9014] EXT4-fs (loop0): Test dummy encryption mode enabled [ 599.550672][ T9014] EXT4-fs (loop0): Unrecognized mount option "=" or missing value [ 605.340956][ T9052] loop0: detected capacity change from 0 to 40427 [ 605.408560][ T9052] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 605.419649][ T9052] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 605.448509][ T9052] F2FS-fs (loop0): invalid crc value [ 605.633074][ T9052] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 605.663218][ T9052] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 606.789035][ T9052] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 606.796845][ T9052] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 609.895554][ T9097] sp0: Synchronizing with TNC [ 609.907948][ T9097] [U] è [ 611.760006][ T9115] loop3: detected capacity change from 0 to 128 [ 613.660465][ T4212] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 613.730473][ T1336] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 613.920570][ T4212] usb 4-1: Using ep0 maxpacket: 8 [ 614.071091][ T4212] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 614.197061][ T4212] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.228640][ T4212] usb 4-1: config 0 interface 0 has no altsetting 0 [ 614.248956][ T4212] usb 4-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 614.260600][ T1336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.289594][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.678636][ T1336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.770793][ T4212] usb 4-1: config 0 descriptor?? [ 616.810432][ T1336] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.870594][ T4212] usb 4-1: can't set config #0, error -71 [ 616.884779][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1217'. [ 616.911840][ T4212] usb 4-1: USB disconnect, device number 5 [ 616.934300][ T1336] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.979858][ T1336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.202624][ T1336] usb 7-1: config 0 descriptor?? [ 618.060653][ T1336] usb 7-1: can't set config #0, error -71 [ 618.320781][ T1336] usb 7-1: USB disconnect, device number 2 [ 619.904583][ T9160] sp0: Synchronizing with TNC [ 619.920249][ T9157] [U] è [ 622.444758][ T9191] mmap: syz.6.1228 (9191) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 625.397215][ T9219] sp0: Synchronizing with TNC [ 625.409176][ T9219] [U] è [ 626.196354][ T9227] device pim6reg1 entered promiscuous mode [ 630.525088][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.531474][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.238109][ T9320] loop6: detected capacity change from 0 to 128 [ 642.045661][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1271'. [ 643.042985][ T9368] loop6: detected capacity change from 0 to 16 [ 644.696012][ T9385] loop3: detected capacity change from 0 to 2048 [ 645.177087][ T9368] erofs: (device loop6): mounted with root inode @ nid 36. [ 645.231314][ T9385] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 649.793561][ T9416] sp0: Synchronizing with TNC [ 649.804900][ T9416] [U] è [ 650.387143][ T9419] input: syz0 as /devices/virtual/input/input7 [ 651.252241][ T9430] loop5: detected capacity change from 0 to 16 [ 652.695479][ T9430] erofs: (device loop5): mounted with root inode @ nid 36. [ 652.731611][ T9430] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 653.572184][ T9430] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 653.709205][ T9454] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 653.843181][ T9454] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 653.935197][ T9453] erofs: (device loop5): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 653.973879][ T9453] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 657.411003][ T9479] Restarting kernel threads ... done. [ 658.831577][ T9509] loop6: detected capacity change from 0 to 16 [ 658.938971][ T9505] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 658.954402][ T9509] erofs: (device loop6): mounted with root inode @ nid 36. [ 658.998856][ T9505] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 659.024715][ T9509] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 659.105334][ T9509] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 660.279122][ T9524] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 660.390548][ T9524] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 660.440527][ T9517] erofs: (device loop6): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 660.468340][ T9517] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 660.704595][ T9528] loop3: detected capacity change from 0 to 128 [ 660.752984][ T9528] FAT-fs (loop3): Directory bread(block 162) failed [ 660.761106][ T9528] FAT-fs (loop3): Directory bread(block 163) failed [ 660.767759][ T9528] FAT-fs (loop3): Directory bread(block 164) failed [ 660.958560][ T9528] FAT-fs (loop3): Directory bread(block 165) failed [ 660.965943][ T9528] FAT-fs (loop3): Directory bread(block 166) failed [ 660.972943][ T9528] FAT-fs (loop3): Directory bread(block 167) failed [ 660.979578][ T9528] FAT-fs (loop3): Directory bread(block 168) failed [ 661.068204][ T9528] FAT-fs (loop3): Directory bread(block 169) failed [ 661.727359][ C0] ------------[ cut here ]------------ [ 661.729293][ C0] [ 661.729300][ C0] ====================================================== [ 661.729306][ C0] WARNING: possible circular locking dependency detected [ 661.729312][ C0] 5.15.180-syzkaller #0 Not tainted [ 661.729322][ C0] ------------------------------------------------------ [ 661.729329][ C0] kworker/0:3/1336 is trying to acquire lock: [ 661.729339][ C0] ffffffff8cb14060 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 661.729407][ C0] [ 661.729407][ C0] but task is already holding lock: [ 661.729412][ C0] ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 661.729455][ C0] [ 661.729455][ C0] which lock already depends on the new lock. [ 661.729455][ C0] [ 661.729461][ C0] [ 661.729461][ C0] the existing dependency chain (in reverse order) is: [ 661.729466][ C0] [ 661.729466][ C0] -> #5 (&base->lock){-.-.}-{2:2}: [ 661.729492][ C0] lock_acquire+0x1db/0x4f0 [ 661.729512][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 661.729533][ C0] lock_timer_base+0x120/0x260 [ 661.729578][ C0] __mod_timer+0x1d6/0xeb0 [ 661.729596][ C0] queue_delayed_work_on+0x156/0x250 [ 661.729614][ C0] enqueue_task+0x28d/0x2e0 [ 661.729634][ C0] wake_up_new_task+0x515/0xb60 [ 661.729653][ C0] kernel_clone+0x44e/0x960 [ 661.729670][ C0] kernel_thread+0x12e/0x1a0 [ 661.729686][ C0] rest_init+0x21/0x330 [ 661.729702][ C0] start_kernel+0x48c/0x540 [ 661.729723][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 661.729743][ C0] [ 661.729743][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 661.729767][ C0] lock_acquire+0x1db/0x4f0 [ 661.729786][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 661.729818][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 661.729837][ C0] task_fork_fair+0x5d/0x350 [ 661.729852][ C0] sched_cgroup_fork+0x2d3/0x330 [ 661.729871][ C0] copy_process+0x224a/0x3ef0 [ 661.729887][ C0] kernel_clone+0x210/0x960 [ 661.729902][ C0] kernel_thread+0x12e/0x1a0 [ 661.729917][ C0] rest_init+0x21/0x330 [ 661.729933][ C0] start_kernel+0x48c/0x540 [ 661.729951][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 661.729969][ C0] [ 661.729969][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 661.729992][ C0] lock_acquire+0x1db/0x4f0 [ 661.730010][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 661.730029][ C0] try_to_wake_up+0xae/0x12c0 [ 661.730047][ C0] pollwake+0x1d0/0x280 [ 661.730064][ C0] __wake_up_common+0x2a0/0x4e0 [ 661.730084][ C0] __wake_up+0x112/0x1c0 [ 661.730101][ C0] tty_ldisc_lock+0x5c/0xb0 [ 661.730119][ C0] tty_ldisc_hangup+0x223/0x4b0 [ 661.730136][ C0] __tty_hangup+0x47a/0x6b0 [ 661.730151][ C0] tty_ioctl+0x608/0xc50 [ 661.730166][ C0] __se_sys_ioctl+0xf1/0x160 [ 661.730182][ C0] do_syscall_64+0x3b/0x80 [ 661.730201][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 661.730221][ C0] [ 661.730221][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 661.730244][ C0] lock_acquire+0x1db/0x4f0 [ 661.730263][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 661.730281][ C0] __wake_up+0xf5/0x1c0 [ 661.730298][ C0] tty_port_default_wakeup+0xa8/0x100 [ 661.730316][ C0] serial8250_tx_chars+0x60d/0x800 [ 661.730332][ C0] serial8250_handle_irq+0x505/0x600 [ 661.730349][ C0] serial8250_default_handle_irq+0xc8/0x1e0 [ 661.730367][ C0] serial8250_interrupt+0xa1/0x1e0 [ 661.730387][ C0] __handle_irq_event_percpu+0x292/0xa70 [ 661.730405][ C0] handle_irq_event+0xff/0x2b0 [ 661.730422][ C0] handle_edge_irq+0x245/0xbf0 [ 661.730440][ C0] __common_interrupt+0xd7/0x1f0 [ 661.730457][ C0] common_interrupt+0xae/0xd0 [ 661.730473][ C0] asm_common_interrupt+0x22/0x40 [ 661.730492][ C0] default_idle+0xb/0x10 [ 661.730508][ C0] default_idle_call+0x81/0xc0 [ 661.730525][ C0] do_idle+0x271/0x670 [ 661.730543][ C0] cpu_startup_entry+0x14/0x20 [ 661.730566][ C0] start_kernel+0x48c/0x540 [ 661.730586][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 661.730604][ C0] [ 661.730604][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 661.730627][ C0] lock_acquire+0x1db/0x4f0 [ 661.730645][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 661.730663][ C0] serial8250_console_write+0x19d/0x1180 [ 661.730680][ C0] console_unlock+0xced/0x12b0 [ 661.730696][ C0] vprintk_emit+0xbf/0x150 [ 661.730711][ C0] _printk+0xd1/0x120 [ 661.730728][ C0] register_console+0x65a/0x940 [ 661.730754][ C0] univ8250_console_init+0x41/0x50 [ 661.730770][ C0] console_init+0x18c/0x660 [ 661.730787][ C0] start_kernel+0x301/0x540 [ 661.730804][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 661.730823][ C0] [ 661.730823][ C0] -> #0 (console_owner){..-.}-{0:0}: [ 661.730844][ C0] validate_chain+0x1649/0x5930 [ 661.730858][ C0] __lock_acquire+0x1295/0x1ff0 [ 661.730876][ C0] lock_acquire+0x1db/0x4f0 [ 661.730894][ C0] console_lock_spinning_enable+0x51/0x60 [ 661.730910][ C0] console_unlock+0xa47/0x12b0 [ 661.730925][ C0] vprintk_emit+0xbf/0x150 [ 661.730938][ C0] _printk+0xd1/0x120 [ 661.730953][ C0] report_bug+0x1e5/0x2e0 [ 661.730968][ C0] handle_bug+0x3d/0x70 [ 661.730981][ C0] exc_invalid_op+0x16/0x40 [ 661.730994][ C0] asm_exc_invalid_op+0x16/0x20 [ 661.731010][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 661.731030][ C0] bpf_probe_read_user+0x26/0x70 [ 661.731048][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x354 [ 661.731062][ C0] bpf_trace_run3+0x1d1/0x380 [ 661.731077][ C0] enqueue_timer+0x3ae/0x540 [ 661.731094][ C0] __mod_timer+0xa60/0xeb0 [ 661.731110][ C0] call_timer_fn+0x16d/0x560 [ 661.731127][ C0] __run_timers+0x67c/0x890 [ 661.731145][ C0] run_timer_softirq+0x63/0xf0 [ 661.731162][ C0] handle_softirqs+0x3a7/0x930 [ 661.731176][ C0] __irq_exit_rcu+0x157/0x240 [ 661.731190][ C0] irq_exit_rcu+0x5/0x20 [ 661.731203][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 661.731220][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.731238][ C0] preempt_schedule_irq+0xf2/0x1c0 [ 661.731256][ C0] irqentry_exit+0x53/0x80 [ 661.731271][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 661.731289][ C0] lockdep_unregister_key+0x54e/0x5c0 [ 661.731309][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 661.731326][ C0] process_one_work+0x8a1/0x10c0 [ 661.731343][ C0] worker_thread+0xaca/0x1280 [ 661.731359][ C0] kthread+0x3f6/0x4f0 [ 661.731372][ C0] ret_from_fork+0x1f/0x30 [ 661.731388][ C0] [ 661.731388][ C0] other info that might help us debug this: [ 661.731388][ C0] [ 661.731393][ C0] Chain exists of: [ 661.731393][ C0] console_owner --> &rq->__lock --> &base->lock [ 661.731393][ C0] [ 661.731416][ C0] Possible unsafe locking scenario: [ 661.731416][ C0] [ 661.731420][ C0] CPU0 CPU1 [ 661.731425][ C0] ---- ---- [ 661.731428][ C0] lock(&base->lock); [ 661.731438][ C0] lock(&rq->__lock); [ 661.731448][ C0] lock(&base->lock); [ 661.731459][ C0] lock(console_owner); [ 661.731469][ C0] [ 661.731469][ C0] *** DEADLOCK *** [ 661.731469][ C0] [ 661.731472][ C0] 6 locks held by kworker/0:3/1336: [ 661.731483][ C0] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 661.731525][ C0] #1: ffffc900050e7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 661.731573][ C0] #2: ffffc90000007be0 ((&ops->cursor_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 661.731612][ C0] #3: ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 661.731651][ C0] #4: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 661.731690][ C0] #5: ffffffff8c9fbda0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa6/0x150 [ 661.731729][ C0] [ 661.731729][ C0] stack backtrace: [ 661.731735][ C0] CPU: 0 PID: 1336 Comm: kworker/0:3 Not tainted 5.15.180-syzkaller #0 [ 661.731752][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 661.731763][ C0] Workqueue: events pwq_unbound_release_workfn [ 661.731780][ C0] Call Trace: [ 661.731786][ C0] [ 661.731793][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 661.731816][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 661.731841][ C0] ? print_circular_bug+0x12b/0x1a0 [ 661.731862][ C0] check_noncircular+0x2f8/0x3b0 [ 661.731882][ C0] ? add_chain_block+0x850/0x850 [ 661.731900][ C0] ? lockdep_lock+0x11f/0x2a0 [ 661.731928][ C0] validate_chain+0x1649/0x5930 [ 661.731956][ C0] ? reacquire_held_locks+0x660/0x660 [ 661.731972][ C0] ? memset+0x1f/0x40 [ 661.731990][ C0] ? format_decode+0x72f/0x1f10 [ 661.732011][ C0] ? vsnprintf+0x1c70/0x1c70 [ 661.732031][ C0] ? memcpy+0x3c/0x60 [ 661.732047][ C0] ? mark_lock+0x98/0x340 [ 661.732065][ C0] __lock_acquire+0x1295/0x1ff0 [ 661.732093][ C0] lock_acquire+0x1db/0x4f0 [ 661.732112][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 661.732135][ C0] ? read_lock_is_recursive+0x10/0x10 [ 661.732156][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 661.732174][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 661.732193][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 661.732218][ C0] console_lock_spinning_enable+0x51/0x60 [ 661.732236][ C0] ? console_lock_spinning_enable+0x2c/0x60 [ 661.732253][ C0] console_unlock+0xa47/0x12b0 [ 661.732276][ C0] ? console_trylock_spinning+0x3f0/0x3f0 [ 661.732295][ C0] ? __down_trylock_console_sem+0x1f2/0x250 [ 661.732314][ C0] ? vprintk_emit+0xa6/0x150 [ 661.732330][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 661.732346][ C0] ? vprintk_emit+0xa6/0x150 [ 661.732362][ C0] ? console_trylock+0x70/0x70 [ 661.732385][ C0] ? vprintk_emit+0x150/0x150 [ 661.732404][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 661.732422][ C0] ? arch_stack_walk+0x10d/0x140 [ 661.732443][ C0] vprintk_emit+0xbf/0x150 [ 661.732461][ C0] _printk+0xd1/0x120 [ 661.732481][ C0] ? report_bug+0x16e/0x2e0 [ 661.732498][ C0] ? panic+0x860/0x860 [ 661.732518][ C0] ? find_bug+0x9c/0x350 [ 661.732534][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 661.732554][ C0] report_bug+0x1e5/0x2e0 [ 661.732580][ C0] handle_bug+0x3d/0x70 [ 661.732594][ C0] exc_invalid_op+0x16/0x40 [ 661.732610][ C0] asm_exc_invalid_op+0x16/0x20 [ 661.732627][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 661.732650][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b b1 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 b1 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 661.732672][ C0] RSP: 0018:ffffc900000078a0 EFLAGS: 00010046 [ 661.732687][ C0] RAX: ffffffff81aa911c RBX: 0000000000000000 RCX: ffff88802352d940 [ 661.732701][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.732711][ C0] RBP: dffffc0000000000 R08: ffffffff81aa902d R09: fffffbfff2131819 [ 661.732725][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 661.732736][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007908 [ 661.732751][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 661.732787][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 661.732813][ C0] bpf_probe_read_user+0x26/0x70 [ 661.732835][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x354 [ 661.732852][ C0] bpf_trace_run3+0x1d1/0x380 [ 661.732871][ C0] ? bpf_trace_run2+0x340/0x340 [ 661.732887][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 661.732908][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 661.732928][ C0] ? _raw_spin_lock+0x40/0x40 [ 661.732947][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 661.732972][ C0] enqueue_timer+0x3ae/0x540 [ 661.732994][ C0] __mod_timer+0xa60/0xeb0 [ 661.733017][ C0] ? mod_timer_pending+0x20/0x20 [ 661.733045][ C0] call_timer_fn+0x16d/0x560 [ 661.733065][ C0] ? fb_flashcursor+0x440/0x440 [ 661.733087][ C0] ? __run_timers+0x890/0x890 [ 661.733110][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 661.733130][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 661.733149][ C0] ? fb_flashcursor+0x440/0x440 [ 661.733186][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 661.733206][ C0] ? fb_flashcursor+0x440/0x440 [ 661.733226][ C0] __run_timers+0x67c/0x890 [ 661.733252][ C0] ? detach_timer+0x2f0/0x2f0 [ 661.733272][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 661.733298][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 661.733320][ C0] run_timer_softirq+0x63/0xf0 [ 661.733342][ C0] handle_softirqs+0x3a7/0x930 [ 661.733363][ C0] ? __irq_exit_rcu+0x157/0x240 [ 661.733383][ C0] ? do_softirq+0x240/0x240 [ 661.733403][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 661.733424][ C0] __irq_exit_rcu+0x157/0x240 [ 661.733441][ C0] ? irq_exit_rcu+0x20/0x20 [ 661.733464][ C0] irq_exit_rcu+0x5/0x20 [ 661.733480][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 661.733500][ C0] [ 661.733506][ C0] [ 661.733512][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.733534][ C0] RIP: 0010:preempt_schedule_irq+0xf2/0x1c0 [ 661.733567][ C0] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 97 00 00 00 bf 01 00 00 00 e8 69 ba 0f f7 e8 b4 28 3f f7 fb bf 01 00 00 00 d9 b2 ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 39 9c 82 f7 48 [ 661.733583][ C0] RSP: 0018:ffffc900050e79c0 EFLAGS: 00000282 [ 661.733599][ C0] RAX: 21be2fa7d6043100 RBX: 1ffff92000a1cf40 RCX: ffffffff81630638 [ 661.733614][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab18e0 RDI: 0000000000000001 [ 661.733627][ C0] RBP: ffffc900050e7a80 R08: dffffc0000000000 R09: fffffbfff213181e [ 661.733642][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000a1cf38 [ 661.733655][ C0] R13: 1ffff92000a1cf3c R14: ffffc900050e79e0 R15: dffffc0000000000 [ 661.733674][ C0] ? mark_lock+0x98/0x340 [ 661.733694][ C0] ? __cond_resched+0xf0/0xf0 [ 661.733723][ C0] irqentry_exit+0x53/0x80 [ 661.733741][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 661.733762][ C0] RIP: 0010:lockdep_unregister_key+0x54e/0x5c0 [ 661.733785][ C0] Code: 00 00 00 0f 85 8b 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5f 49 dc 08 41 f7 c4 00 02 00 00 74 86 fb 45 84 f6 <75> 85 eb 96 0f 0b 45 31 f6 e9 1a ff ff ff 0f 0b e9 5a fe ff ff 0f [ 661.733801][ C0] RSP: 0018:ffffc900050e7b40 EFLAGS: 00000246 [ 661.733817][ C0] RAX: dffffc0000000000 RBX: 1ffff92000a1cf70 RCX: ffffffff96a92f03 [ 661.733832][ C0] RDX: 0000000000000001 RSI: ffffffff8aab26e0 RDI: ffffffff8af9e940 [ 661.733845][ C0] RBP: ffffc900050e7c08 R08: dffffc0000000000 R09: fffffbfff212bba8 [ 661.733860][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000202 [ 661.733873][ C0] R13: 1ffff92000a1cf6c R14: 0000000000000000 R15: ffffc900050e7b80 [ 661.733896][ C0] ? lockdep_reset_lock+0x3f0/0x3f0 [ 661.733920][ C0] ? print_irqtrace_events+0x210/0x210 [ 661.733941][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 661.733965][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 661.733989][ C0] process_one_work+0x8a1/0x10c0 [ 661.734018][ C0] ? worker_detach_from_pool+0x260/0x260 [ 661.734041][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 661.734061][ C0] ? kthread_data+0x4e/0xc0 [ 661.734082][ C0] ? wq_worker_running+0x97/0x170 [ 661.734101][ C0] worker_thread+0xaca/0x1280 [ 661.734133][ C0] kthread+0x3f6/0x4f0 [ 661.734149][ C0] ? rcu_lock_release+0x20/0x20 [ 661.734168][ C0] ? kthread_blkcg+0xd0/0xd0 [ 661.734187][ C0] ret_from_fork+0x1f/0x30 [ 661.734214][ C0] [ 663.264353][ C0] WARNING: CPU: 0 PID: 1336 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 663.273642][ C0] Modules linked in: [ 663.277527][ C0] CPU: 0 PID: 1336 Comm: kworker/0:3 Not tainted 5.15.180-syzkaller #0 [ 663.285764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.295803][ C0] Workqueue: events pwq_unbound_release_workfn [ 663.301945][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 663.308087][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b b1 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 b1 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 663.327674][ C0] RSP: 0018:ffffc900000078a0 EFLAGS: 00010046 [ 663.333722][ C0] RAX: ffffffff81aa911c RBX: 0000000000000000 RCX: ffff88802352d940 [ 663.341680][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.349633][ C0] RBP: dffffc0000000000 R08: ffffffff81aa902d R09: fffffbfff2131819 [ 663.357587][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 663.365542][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007908 [ 663.373494][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 663.382403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.388985][ C0] CR2: 0000000000000000 CR3: 0000000068dc9000 CR4: 00000000003506f0 [ 663.396958][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 663.404910][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 663.412859][ C0] Call Trace: [ 663.416328][ C0] [ 663.419165][ C0] bpf_probe_read_user+0x26/0x70 [ 663.424089][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x354 [ 663.429612][ C0] bpf_trace_run3+0x1d1/0x380 [ 663.434272][ C0] ? bpf_trace_run2+0x340/0x340 [ 663.439101][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 663.444995][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 663.450439][ C0] ? _raw_spin_lock+0x40/0x40 [ 663.455095][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 663.461060][ C0] enqueue_timer+0x3ae/0x540 [ 663.465633][ C0] __mod_timer+0xa60/0xeb0 [ 663.470037][ C0] ? mod_timer_pending+0x20/0x20 [ 663.474963][ C0] call_timer_fn+0x16d/0x560 [ 663.479536][ C0] ? fb_flashcursor+0x440/0x440 [ 663.484388][ C0] ? __run_timers+0x890/0x890 [ 663.489054][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 663.494232][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 663.499410][ C0] ? fb_flashcursor+0x440/0x440 [ 663.504246][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 663.509430][ C0] ? fb_flashcursor+0x440/0x440 [ 663.514266][ C0] __run_timers+0x67c/0x890 [ 663.518776][ C0] ? detach_timer+0x2f0/0x2f0 [ 663.523445][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 663.529417][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 663.534687][ C0] run_timer_softirq+0x63/0xf0 [ 663.539433][ C0] handle_softirqs+0x3a7/0x930 [ 663.544180][ C0] ? __irq_exit_rcu+0x157/0x240 [ 663.549013][ C0] ? do_softirq+0x240/0x240 [ 663.553499][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 663.558683][ C0] __irq_exit_rcu+0x157/0x240 [ 663.563341][ C0] ? irq_exit_rcu+0x20/0x20 [ 663.567829][ C0] irq_exit_rcu+0x5/0x20 [ 663.572054][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 663.577670][ C0] [ 663.580583][ C0] [ 663.583509][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 663.589474][ C0] RIP: 0010:preempt_schedule_irq+0xf2/0x1c0 [ 663.595356][ C0] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 97 00 00 00 bf 01 00 00 00 e8 69 ba 0f f7 e8 b4 28 3f f7 fb bf 01 00 00 00 d9 b2 ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 39 9c 82 f7 48 [ 663.614942][ C0] RSP: 0018:ffffc900050e79c0 EFLAGS: 00000282 [ 663.620992][ C0] RAX: 21be2fa7d6043100 RBX: 1ffff92000a1cf40 RCX: ffffffff81630638 [ 663.628948][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab18e0 RDI: 0000000000000001 [ 663.636901][ C0] RBP: ffffc900050e7a80 R08: dffffc0000000000 R09: fffffbfff213181e [ 663.644856][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000a1cf38 [ 663.652833][ C0] R13: 1ffff92000a1cf3c R14: ffffc900050e79e0 R15: dffffc0000000000 [ 663.660792][ C0] ? mark_lock+0x98/0x340 [ 663.665108][ C0] ? __cond_resched+0xf0/0xf0 [ 663.669773][ C0] irqentry_exit+0x53/0x80 [ 663.674193][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 663.679638][ C0] RIP: 0010:lockdep_unregister_key+0x54e/0x5c0 [ 663.685777][ C0] Code: 00 00 00 0f 85 8b 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5f 49 dc 08 41 f7 c4 00 02 00 00 74 86 fb 45 84 f6 <75> 85 eb 96 0f 0b 45 31 f6 e9 1a ff ff ff 0f 0b e9 5a fe ff ff 0f [ 663.705361][ C0] RSP: 0018:ffffc900050e7b40 EFLAGS: 00000246 [ 663.711414][ C0] RAX: dffffc0000000000 RBX: 1ffff92000a1cf70 RCX: ffffffff96a92f03 [ 663.719368][ C0] RDX: 0000000000000001 RSI: ffffffff8aab26e0 RDI: ffffffff8af9e940 [ 663.727326][ C0] RBP: ffffc900050e7c08 R08: dffffc0000000000 R09: fffffbfff212bba8 [ 663.735281][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000202 [ 663.743237][ C0] R13: 1ffff92000a1cf6c R14: 0000000000000000 R15: ffffc900050e7b80 [ 663.751287][ C0] ? lockdep_reset_lock+0x3f0/0x3f0 [ 663.756472][ C0] ? print_irqtrace_events+0x210/0x210 [ 663.761911][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 663.767871][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 663.773573][ C0] process_one_work+0x8a1/0x10c0 [ 663.778501][ C0] ? worker_detach_from_pool+0x260/0x260 [ 663.784116][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 663.789643][ C0] ? kthread_data+0x4e/0xc0 [ 663.794130][ C0] ? wq_worker_running+0x97/0x170 [ 663.799169][ C0] worker_thread+0xaca/0x1280 [ 663.803842][ C0] kthread+0x3f6/0x4f0 [ 663.807892][ C0] ? rcu_lock_release+0x20/0x20 [ 663.812728][ C0] ? kthread_blkcg+0xd0/0xd0 [ 663.817299][ C0] ret_from_fork+0x1f/0x30 [ 663.821706][ C0] [ 663.824721][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 663.831979][ C0] CPU: 0 PID: 1336 Comm: kworker/0:3 Not tainted 5.15.180-syzkaller #0 [ 663.840204][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 663.850239][ C0] Workqueue: events pwq_unbound_release_workfn [ 663.856381][ C0] Call Trace: [ 663.859645][ C0] [ 663.862474][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 663.867137][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 663.872751][ C0] ? panic+0x860/0x860 [ 663.876825][ C0] ? panic+0x860/0x860 [ 663.880876][ C0] ? copy_from_user_nofault+0x140/0x1c0 [ 663.886421][ C0] ? copy_from_user_nofault+0x140/0x1c0 [ 663.891968][ C0] panic+0x318/0x860 [ 663.895845][ C0] ? __warn+0x16a/0x300 [ 663.899985][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 663.905168][ C0] ? ret_from_fork+0x1f/0x30 [ 663.909741][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 663.915282][ C0] __warn+0x2b2/0x300 [ 663.919254][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 663.924800][ C0] report_bug+0x1b7/0x2e0 [ 663.929133][ C0] handle_bug+0x3d/0x70 [ 663.933293][ C0] exc_invalid_op+0x16/0x40 [ 663.937806][ C0] asm_exc_invalid_op+0x16/0x20 [ 663.942639][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 663.948776][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b b1 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 b1 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 663.968362][ C0] RSP: 0018:ffffc900000078a0 EFLAGS: 00010046 [ 663.974417][ C0] RAX: ffffffff81aa911c RBX: 0000000000000000 RCX: ffff88802352d940 [ 663.982374][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.990327][ C0] RBP: dffffc0000000000 R08: ffffffff81aa902d R09: fffffbfff2131819 [ 663.998295][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 664.006248][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000007908 [ 664.014206][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 664.019652][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 664.025187][ C0] bpf_probe_read_user+0x26/0x70 [ 664.030131][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x354 [ 664.035679][ C0] bpf_trace_run3+0x1d1/0x380 [ 664.040340][ C0] ? bpf_trace_run2+0x340/0x340 [ 664.045189][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 664.051065][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 664.056506][ C0] ? _raw_spin_lock+0x40/0x40 [ 664.061169][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 664.067141][ C0] enqueue_timer+0x3ae/0x540 [ 664.071717][ C0] __mod_timer+0xa60/0xeb0 [ 664.076118][ C0] ? mod_timer_pending+0x20/0x20 [ 664.081044][ C0] call_timer_fn+0x16d/0x560 [ 664.085620][ C0] ? fb_flashcursor+0x440/0x440 [ 664.090466][ C0] ? __run_timers+0x890/0x890 [ 664.095126][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 664.100306][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 664.105488][ C0] ? fb_flashcursor+0x440/0x440 [ 664.110341][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 664.115536][ C0] ? fb_flashcursor+0x440/0x440 [ 664.120373][ C0] __run_timers+0x67c/0x890 [ 664.124865][ C0] ? detach_timer+0x2f0/0x2f0 [ 664.129523][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 664.135489][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 664.140758][ C0] run_timer_softirq+0x63/0xf0 [ 664.145506][ C0] handle_softirqs+0x3a7/0x930 [ 664.150277][ C0] ? __irq_exit_rcu+0x157/0x240 [ 664.155115][ C0] ? do_softirq+0x240/0x240 [ 664.159600][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 664.164784][ C0] __irq_exit_rcu+0x157/0x240 [ 664.169446][ C0] ? irq_exit_rcu+0x20/0x20 [ 664.173936][ C0] irq_exit_rcu+0x5/0x20 [ 664.178158][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 664.183793][ C0] [ 664.186741][ C0] [ 664.189655][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 664.195618][ C0] RIP: 0010:preempt_schedule_irq+0xf2/0x1c0 [ 664.201496][ C0] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 97 00 00 00 bf 01 00 00 00 e8 69 ba 0f f7 e8 b4 28 3f f7 fb bf 01 00 00 00 d9 b2 ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 39 9c 82 f7 48 [ 664.221081][ C0] RSP: 0018:ffffc900050e79c0 EFLAGS: 00000282 [ 664.227129][ C0] RAX: 21be2fa7d6043100 RBX: 1ffff92000a1cf40 RCX: ffffffff81630638 [ 664.235082][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab18e0 RDI: 0000000000000001 [ 664.243058][ C0] RBP: ffffc900050e7a80 R08: dffffc0000000000 R09: fffffbfff213181e [ 664.251031][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000a1cf38 [ 664.258995][ C0] R13: 1ffff92000a1cf3c R14: ffffc900050e79e0 R15: dffffc0000000000 [ 664.266972][ C0] ? mark_lock+0x98/0x340 [ 664.271289][ C0] ? __cond_resched+0xf0/0xf0 [ 664.275955][ C0] irqentry_exit+0x53/0x80 [ 664.280356][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 664.285822][ C0] RIP: 0010:lockdep_unregister_key+0x54e/0x5c0 [ 664.291964][ C0] Code: 00 00 00 0f 85 8b 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5f 49 dc 08 41 f7 c4 00 02 00 00 74 86 fb 45 84 f6 <75> 85 eb 96 0f 0b 45 31 f6 e9 1a ff ff ff 0f 0b e9 5a fe ff ff 0f [ 664.311584][ C0] RSP: 0018:ffffc900050e7b40 EFLAGS: 00000246 [ 664.317656][ C0] RAX: dffffc0000000000 RBX: 1ffff92000a1cf70 RCX: ffffffff96a92f03 [ 664.325633][ C0] RDX: 0000000000000001 RSI: ffffffff8aab26e0 RDI: ffffffff8af9e940 [ 664.333713][ C0] RBP: ffffc900050e7c08 R08: dffffc0000000000 R09: fffffbfff212bba8 [ 664.341702][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000202 [ 664.349670][ C0] R13: 1ffff92000a1cf6c R14: 0000000000000000 R15: ffffc900050e7b80 [ 664.357643][ C0] ? lockdep_reset_lock+0x3f0/0x3f0 [ 664.362858][ C0] ? print_irqtrace_events+0x210/0x210 [ 664.368303][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 664.374184][ C0] pwq_unbound_release_workfn+0x23d/0x290 [ 664.380004][ C0] process_one_work+0x8a1/0x10c0 [ 664.384946][ C0] ? worker_detach_from_pool+0x260/0x260 [ 664.390569][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 664.396105][ C0] ? kthread_data+0x4e/0xc0 [ 664.400602][ C0] ? wq_worker_running+0x97/0x170 [ 664.405612][ C0] worker_thread+0xaca/0x1280 [ 664.410280][ C0] kthread+0x3f6/0x4f0 [ 664.414332][ C0] ? rcu_lock_release+0x20/0x20 [ 664.419165][ C0] ? kthread_blkcg+0xd0/0xd0 [ 664.423736][ C0] ret_from_fork+0x1f/0x30 [ 664.428143][ C0] [ 665.569846][ C0] Shutting down cpus with NMI [ 665.574852][ C0] Kernel Offset: disabled [ 665.579182][ C0] Rebooting in 86400 seconds..