last executing test programs: 49.185067608s ago: executing program 4 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4800) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) 47.845862871s ago: executing program 4 (id=687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 44.620372453s ago: executing program 4 (id=691): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f00000010c0)=[{r4}, {r4, 0xad0}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000240)={0x0, 0x8, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) close_range(r0, r0, 0x2) preadv(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@polexpire={0xc0, 0x1b, 0x103, 0x70bd28, 0x0, {{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x8}, {0x20000000000, 0x100000001}}}}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x80) 42.817398166s ago: executing program 4 (id=694): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000f40)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@dioread_nolock}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000001880)={0x8, {"0a903b29b1f56a8e81ca81550b1f43fb88dcd8d1d02a14a32f7b45869199c800bdc910478be98ed486f8f0ef7e562d1ced14dc592aa3219e36ae29f7f21e4777d693675b97565ac6cfceba3fff2e0e848e1b229b434fa546a71d12da394987c9caa66b3d7e1b905a6c9d760d3b4416d4a2b86b4332a25c5606959695545bda9139cc5c17931816f75a077ca392635a624bdc621c572c8d533305add804c0b77deae6d58543ca911ba405ac870ccb984f48d6b0d9314dcbefb5e09b435e9cc0a85323bd4d57a88f50012c50251bf9adfae5ea8b08a2b922f08459e342492fe8d033ba3107e8885f7850800f076be11462dcb5c801eaadf34c96226fa9c034c2511cd80e12b242f60526941642e55140b1d51997f78084b87b5873cb0755c0ff8981974bb80077bf18fe129cc6837df8a8a1397f037d5e051f1db8b9caaefdcafa13b18002391c459dcdf9ec11124dba8d9ef2f0ed8a3a37bf41ac9e7bff098ed113fcaa1e7848f9f1c6fc126d29b32fb4e6bdf26979e0698874ff221b4ff0069086477e81a3cc174685a29262a5b5ba251adbc2001449608771eafa5210dfa9bdf05573fcfe9bb99fd00c6d741b1d6a9e994454af3f937152e821fc082c6ff02433ab26d30a5899d5b047229473b12ef3fb81eb0f9bb68b90f2f5b4c7f98a31e7bfde8b84bf5bf8dff67f9ed339d97dd5ab6cc3b645f1592c264938f6ddb115708b3929401aa619919894c26c2a754ae25999bbc9539173b7b46c7b5a5dcb9370300d97dfbcee2e20b67a94fecf6a7bb86788198f7c89caf6c42e70bfe5557d206aef98f2daa637096d6684ff6c1957bebd66e64346d0bb353e9f46278edf6ac51dda1ba1e3f4c9b989c202aa9b430517aeeccd7b488cec296d0b82a306f2b3ec7df7057e5308b4f08165eea1717c0df4a562a1a925c56a4ef4af998581ec2c90b9823759576f102f552b2afa801f6438d912f1b74ca4e260bce3e7a7bda3e634450582d2cbcfeddeef5e2f384d434392dd9fee597566af9f6a46dc77ef4d4267c057987e27b2aee6986f98472a53ec7dc322fbe2b14daf2ce4a457a394f15667bc81f20680d70dfe32d2d145c276015d463b135a8de595ce7133d72108eb1e9d0617e71271e2e274e3059297540bc5785abb163999dedfb27a99bdde2db83aaf73998f0117db011b76d435dca1fab75ad532f082a0cef3ce2bdd1044332e6b7397cc7999863cd5e2ca55e22c78ce903fdeb4d29b269b70222c54c9576b9acc86affaa4cef208a4eb3b09d20621ff9a5426fcfb82dc5927d1a83b2f9c9e3b7621a52565dac56a623847e1c1abd23b79cb82a96fc2948e2e51dcf4a729030ff17734843069ff4696a85dce50105aec57cdf2376ffbb2345762dd127a7e2854d3c9da5b2092268dac3541fda9812daa725d438357adc8873920d092c2a926d311dcd2371ffa7d6aec8038511872c0fe90f0ac1030319af229f5202edafeb4b29a34096c0f1db326ba451594c74bd237df191ff12683c9fc72d56998cc8b2185f28557e540d69591bdd531186df7b7ab8de51c364fd5f370082764afca138db66a4293ff730b29b95f8b62ee4a3bba7e11c50d5395cc2af9f48a4e45b03ff80b3fc14d76948e8a54bb269dc15399c1e653340ec8892057bdfe6919acc9b85b9f1f0444beefd529136295382c3a9cb6f6fa34878c69abaa81a0a0d88e084f8a3c0197a59e4b53b65e47b813de9e436d0927a06401ff79f5ec7004b4e07257020ed9d5c4f7b5c2036724d8c7cbb3ebfa3548782c7b04455791dba1e5db822a6e593a2cdf7bddae1dd8b78e4cfb8c43c98b0beaefc3ee6c9f60cba9631ff8d515a732d5f62ee3fb0087d019544f672841f84577d3f7c6858363c6258cf20bb798159ea070b7704d3578e20a4402dff6df0e02b6a752c8f22344bda17a88bb01e80d134a660e3dd0ac006f3afa35f48c898e14b07ea75a01f0be88d0be3a0f5327d81b17dcf56506ae0c6ed78fe1dc044bbd839a7d63af2d6c690636bf5a9f8151fb95c6cd9ec9a0fc59d8753d4f886ab212f9f53734418fa41ce18e7249716dca226a91000025efe880636af6babb801e1b7ce04c773971ee2680740ddd360ade3a8fd69a08d0f1819ad8ab0d87e694569d62ffd2bf7a911b2a39cd13f76852267156ee9e9155c9afbac92282a6865566e825bdd54f3d713d4c299383f3249053ba02406e202deeb235092878b33052c26d74250d652a963057e9ae2bcfcd8f7c15c21fd2f389ec1230980822357438610b73e223c86538d56f98b39d06ab06caf0ebd5edc74c465d10c5f5f292fb7cff79febf5b9740d7c3d6f68f69d533a83f23c31d1d8dc40d27ab049e648685e28a07f13a0802782f0321e2d8705b6cfe8a3e42db80be3945be2a3f384e2d51562cdfe1b2fd1d73bc1104813d24076216211d558df4aa406a4903a8437cbd852bebdce778e496cc4fe9dc0ab2afa6fab38c5dddc956e006c4c5aa4c1d356076f7f0316e9e9f232927af7f03f158d73f413376a2a6bdc195a4a57ebf71fa4e931f4921a5dd7a073c004a505ba2b18bf61192677fca5b21a2f4cf85043d71213692997a5a66416e9922da2239bd08eb0b33609c42391dc3282dfd5430b17adfbac8c5c48eee9bd739e17dedd17de4a45fe2929c37525d007682108cfee4ae2a4a7491d6dbda99db33eba628b92815eb681123324ef4ee3f92405f94ef4bded0fd75a1849b9614e3134870eed09090703d1df828a762f27950aea8e52b26da50524c0c8df4ea2d48b05d8a7ccbb9c00a2f3a643f2947c03aee20bd803e7b731894eca535ced3344eab3028d1d4677e8c10ac0307f3c46d4a9c7b5c57b499938caa457010f75a2d060d732dcce00c78d5e1c7f386f83b3c68c3258188f44041e141f1542d6bd9dbfe5039c1870c32bb6bbb5e41b3b2a6de9ff62580adba515c6c0c142d0e47cb429592901a50f9111aa72c15cc2951f56f11601bbdb2ce4745ef7f61d0c39c14f997544458362144a8e331e13a1cb22c80f1a0e89b471054246bfac5cab7590da29a72b4ce3a1f81d8d3ba9d2f94164afbc6c9e621af5132dc453e2b7e98575c5918d5c29849421a1aac60798b63a46e8a9ed0257809f7f3c504a99e286b0bcb2a58b1251d4099c92d86561d3cf762e1b17a8e0d6d4f72be4cbc862fb363ff85de0012b1f6b310a851a7c1d30f6852eb61f95cd3dc2d6f39ed036f9ab3f542fcc6e57a9f9c3e3024f5008b3583b3eb7718674bcc9d6c042e3ac92b0da7d438f658b025d52902c51948a4f7630fa9ba60841c699a3d69cb88ef4097a73a282c973daaeedf018a606af7561f98720ad89dac4859573a676e2f71919f1c473ac8f01898390f9bc1a4261e8430b2d8726a59d58e3cfac217a81c923c027a02dffa2c33bdf1eb38f6e9c2df1a7c8c2d4982b52e458e4239d37791a30f66541889fb58b894e9a3085b6d5a1de7789fc7c0d2741f8246d317c9fabdfad575253e19523f45c3804d134a87db9825e73c3a5fbe68cba1dac2b11b2548f377fae8f418d2fcbce5663436277887aab4cdaa610257eec471417145e5ffee784e1c6358abff67cf7541cdc2adbeffaa2a2067c35a57347517942285c8650a74484c97c2779d19c0c8c4d5486926c5396904904dd11cf93146d0e255687e3832dd909d98dd7defaf304c926b12d0491500ec9aaf2dec99e2da254b37b624f3f7a29c90a86a6506a4b9bb87241a74e605535993a340750459dcbeba979002e508607685e0444c465826c8fd81ce4a63874e9a432eb586d8cb2ae27299f347462feb2faa9a7415c44bc0d5a99333e49239cf24327e697f6b6a18b0a756d7a2b2499c49496363d5cb0c74c69e09390da3a02bb6af42f046d230e6ac1b95249eac4692ebb1f3946d61033e55a9fcd19cfe1cae15297d0b62cdc385cb88e3875955cde8df4b43b95eb1079a34d9ba88001a9bd9c8a8c6fc1989069f9bbad7baa0830453c949d3ce26818c273cb1631f919390cb66898f25594f934ed63125ba287281c098b8f34c56fbfa43f8c6966610cfdff4b1a005ebc9dfe80c0429bfda4bbe4c849aa090f12ab37f5d7ac18a67da1af382d7204494e17d6def8558f42849afb030600068dc36ceb47eb1e7bd5ca94a8affc3852f9aa4d062c2c006664c573aa31ef6d46c5a4dc383ba0ae4fcf95d3f9c4f84a1b57312c10ca518101101635624d8ec6b6d465a9704a4284b68fafec136794f22bbcdbdab5a486e88b6b255a0dfa2a6b88f3c1d7a8f22d1e5127ee77ec7c31e18fb764a9ba692818f7c7462400d82032db378641b62ac29d4e351e1763d4588a70c162e7e334d6d4ca2b546faef10ff06c1193c5f4c86edae045f9638a9ec8f04a99137f12267e9eecd8968840b8bb45aa161211635fa830c589d41d2274f6bfabb4b3a1a6d3bb43eab9654881dfc57094b045298552ad9c6d67ddaf5e86deb5dfbe7269fca1380ff89f0724f62401a9a98e1ada14632c5cdc21aee8318b5c1add184d667158561074f3b95db281a9d5c62ac8a5401af542c1937956c3a90b9a50159f42f9ea805419a21ed54e139df2d0b1a79b77bc72c3c2b86e868a97d6c90abe34ab473c25fbfdb6ae00622acfe2f66081416d22346f0560115ddee79e6d56d1515e8a471946ad85ac4166af66eb98d113a955b7c3c14c361079c0f32b5819732e4ce34125380ab86032a13868eeb0be2e23bf2faec7685b058e626a5bf41f708eb6c45f8a283d3a30bddca949d839816f23b307811e5bf6987843320b53166042fe49b00826794b2f20ebb079aafb319fd42b4a1156fc7acb0f062e5a41e06658d5838f0e4b1817601df49b2b6be2c2169b2c607c5e41f1b83031ac9c9a9bff13141f01d63ea88ea8d6f43b16db4fa2880d0aa0d4bf76d5f0a75cfd9baa2472b8c736005d8130665f5e2f0d43049962c0c748d186a90a9743be1d6b95923c1ed98e7a601202065753598990a7ed46ce2b1ff3325aa1c1c85b56b06e6312dca0bd976d8932aad3dad3bb9fce44d5230bad998a3ae56916335996165ee98232ca0d3473a748c4e1526b72b74fb9e22c7f2cae8735c5dbc7ba94739a462a94ab8c98d3d846182a328db513789cc5e4e7e14827a8e17ddb401bb22d2a0e8ad99f9e2b199cdb1078e5a22aa9507364d69aaca209191c5d466b875282f5443aea7c5e198318f22edb8240da69f0061ec663742c5dadf269ee91017afaacbd8b65f5063138b1aaff5926d879f8e8ece246b0be007663b7429bc87cabdb4beafab28003543ed0b5f4cf78dc2e8287127e306a79ac4e19d3accaf91e15bde4fdb322c31bccbd7870d18f4801bc49e21f153f1056f8fdf196bcfe23b53f84e4d5ab850594249c784942cf957b160dd85a34294da555fda262cbf43e4d219754ab68a4fab24ea7741a9f0f0b2508a7b9a451ca43ea6574e0f66b1b8d4fe8f61a9e18c4a0512a63eaad21b39265baf6ae5a3920f52ccdf6060ca51d8a43eb840b06fa1cb6493fc26ec2381b50ec6d18cc90ea23aab34770d150ac5caef61beb9c7bcb7e59b8e9954a3e54580ecbba03bb6e32eba8aa71d8a2b7c9873687cf4cc44c0a2e36e22af0bd281a9728d1bf4793f695c4f76439f43042b95b5fcf50bd3af44ff8a6f3ac5a367bedbbe6e7ad978bc595e5f42fd77f88f21cf13a33eb24a0d1645ea6b35f2fdd182eb4d2692c0a491059a5e4d9a6f92df4cf1370f041ede68ea9b12e237b080fc7d5657cdc9c33c00bb0fb278d913f4d4d08c9959622730b7404689c067c8c0", 0x1000}}, 0x1006) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x4, 0x2f2, &(0x7f0000000200)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r7, @ANYRESHEX=r1, @ANYRESHEX=r7, @ANYRES8=r0], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) 39.56720095s ago: executing program 4 (id=705): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c00000001090212000100"], 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000880)="66b801000f00d0c744240032140000c744240200000000c7442406000000000f011c24c74424009d29a9b0c744240210000000c7442406000000000f011424f30f017b0065f340a766bad104b817000000efc74424000000ffffc744240200000000c7442406000000000f011c24430fc71c16460f0766baf80cb8fbf7ed88ef66bafc0cb008ee", 0x87}], 0x1, 0xb92d95bef6f056f6, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 38.459252034s ago: executing program 4 (id=709): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$packet(0x11, 0x3, 0x300) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x0, 0x0, @thr={&(0x7f00000004c0), &(0x7f00000005c0)}}, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113520000000000bf2000000000000007000000182000003d030100000000009500f000000000006926200000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000003d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003e2d6326f54ef34aa37506d8b22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981ba32d1ac0b9ecc8f604dcac2463e1c1e7624000921e4e725ab3ac14aa5a358c83bbde146b5e809c3e9f2be78545d14035ffa316d0b0e2faaf52e137464baf9a6164ccb8603083f459c03b0665451aa6a9279c234c597a547b4aef1a3a251fbc6f42b7f2e122486e430e0099f9530a4070bdc4c700567ff33d461b487f0f8c208836ffce33fa172"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22.334767245s ago: executing program 1 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$packet(0x11, 0x3, 0x300) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x0, 0x0, @thr={&(0x7f00000004c0), &(0x7f00000005c0)}}, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 19.759901362s ago: executing program 1 (id=738): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c00000001090212"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000880)="66b801000f00d0c744240032140000c744240200000000c7442406000000000f011c24c74424009d29a9b0c744240210000000c7442406000000000f011424f30f017b0065f340a766bad104b817000000efc74424000000ffffc744240200000000c7442406000000000f011c24430fc71c16460f0766baf80cb8fbf7ed88ef66bafc0cb008ee", 0x87}], 0x1, 0xb92d95bef6f056f6, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 14.306924992s ago: executing program 1 (id=742): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, 0x0}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") 12.252772086s ago: executing program 1 (id=745): syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/252) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 12.012121546s ago: executing program 3 (id=746): syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x11}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6(0xa, 0x80002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x40000000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x254}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x49, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0xa4}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000003b80)) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x40000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009280)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x8000) 11.125390581s ago: executing program 2 (id=748): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2008002, &(0x7f0000000240), 0x1, 0x553, &(0x7f00000009c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[], [], 0x2c}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x21, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 10.404209942s ago: executing program 3 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x6, 0x6, 0x201}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) readv(r0, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/230, 0xe6}], 0x1) stat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000240)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@resuid={'resuid', 0x3d, r2}}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=r3, 0x4) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4a9, &(0x7f0000000b40)="$eJzs3E9sFFUYAPBvtru0gEhFREHUIhobjS0UFA5eMJp40MSIBz02bSFIoYbWRAjRkhg8GhLvxqNXD17Vm/Fk4hUPHkwMCTFcAE9jZnem3e6flrbbLri/X7L0vZk3+963b97s23m7BNCzhrJ/koiHIuJ6ROysZZcWGKr9uXPr8sTdW5cnYj5NT/6TVMvdzvK54rjteWa4FFH6Iml4wprZi5fOjk9PT13I86Nz5z4enb146eUz58ZPT52eOj92/PjRI4ePvTr2yuqDalFfFtftfZ/N7N/71ofX3pkoF9sH8r/1cXTKUAy1akrV852urMt21KWTchcbwqpk53/WXZXq+N8ZfaHzoFekaZr2t989nza60rQFeGAl0e0WAN1RvNFnn3+LxyZNPe4LN0/UPgBlcd/JH7U95SjlZSoNn287aSgiPpj/95vsEcvdh/hzgxoAAPScn04UM8HG+V8p9tSVezhfQxmMiEciYldEPBoRuyPisYhq2ccj4onGCpKIdJn6dzfkm+c/pRvriW8l2fzvtXxta+n8r5j9xWBfntsRUUyYpw7lr8lwVPpPnZmeOrxMHT+/8ftX7fbVz/+yR1Z/MRfM23Gj3HCDbnJ8bnzNATe4eSViX7kx/qScdVyxEpBExN6I2LeK5x2sS5958bv9C5nK0nIrx1+VtlxH68BSRfptxAu1/p+PJf2/WGOy/Prk6EBMTx0azc6CQy3r+PW3q++2q3/F+H/4q/GQN4/9eHK9YS/I+n9b3fkfxfrtYvyDSUSysF47u/o6rv7xZfV5hw4271vr+b8leb+a3pJv+3R8bu7C4YgtydvN28cWjy3yRfks/uGDrcf/rvyY7JV4MiKyk/ipiHg6Ip7J234gIp6NiBahLfjl9ec+arfvHs//DZPFP9ny+rek/xfX69eQ6Dt74PrdNhePe+v/o9XUcL6l9fUvWXKJuNcGduAlBAAAgPteKarf/S+NLKRLpZGR2j2g3bGtND0zO/fSqZlPzk/WfiMwGJVScaerdj+4khT3Pwfr8mMN+SP5feOv+7ZW8yMTM9OT3Q4eetz26phPmsZ/5u++brcO2HB+8gO9a6Xxv+faJjUE2HTe/6F31Y3/+TZF5n1TBv6fvP9D72o1/j9fwzHAgyU1lqGnGf/Qu8rx3kK61NWWAJvN+z/0pPX8rn/lRNrfetdANBeOgY1pxtYWdXUlkc2sulL71rUcVfxvCm3LRGl1T9gfzbv6otMhVyJixcKn93T85E/z78p3uge/35Rx2irRlcsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAx/0XAAD//8p53a4=") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000340)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rmdir(&(0x7f0000000200)='./file0\x00') 9.877263766s ago: executing program 1 (id=750): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x2, 0x80000000, 0x0, 0x7, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x8, 0x6, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x0, @void, @value, @void, @value}, 0x48) inotify_init1(0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x329141, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5fc1, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 9.584586961s ago: executing program 0 (id=752): r0 = syz_open_procfs(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x177, 0xfc0, 0x80, 0x296, 0xffffffffffffffff, 0xffffff9c, '\x00', 0x0, r0, 0x0, 0x5, 0x3, 0xf, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x1b, &(0x7f0000001f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000200000085000000860000001801000020756c0c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) process_mrelease(0xffffffffffffffff, 0x0) io_uring_setup(0x614c, &(0x7f0000000000)={0x0, 0x4db0, 0x4, 0x100, 0x1be}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd571012c}, 0x12e) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[], 0x100000530) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xfffffffa, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 9.435527183s ago: executing program 3 (id=753): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x51a, &(0x7f00000008c0)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) 8.64656436s ago: executing program 2 (id=754): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") mount(0x0, 0x0, 0x0, 0x5000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYBLOB="0000002f0314fa006e9549c82a348675f8b5930000000000b708000000000000798af8ff00000000bfffb70300"/61], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setgroups(0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) close(r5) write$binfmt_script(r0, &(0x7f0000000d80), 0x208e24b) 8.509005522s ago: executing program 1 (id=755): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000dfff000000000006bb8d8d00"}) r2 = syz_open_pts(r1, 0x48f00) readv(r2, &(0x7f0000001500)=[{&(0x7f0000000200)=""/110, 0x6e}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000280)={0x4, 0x6, 0x3a9f, 0x9, 0x4, "055d34032977609f6fa1e24d5dfcdb679b5553"}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)}], 0x1}, 0x20000801) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) sigaltstack(0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0xcf6}}) 8.332435747s ago: executing program 0 (id=756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0xa01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r6, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x407, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000140)={{0x7, 0x3, 0x6244, 0x3, 'syz0\x00', 0x7}, 0x1, [0x7b97, 0x7, 0x5, 0x10000, 0x0, 0x6, 0x9, 0x180000000000000, 0x100, 0x1, 0x67, 0x400, 0x6, 0x100000000000, 0x2, 0x3, 0x7, 0x9, 0x100000001, 0x2, 0x80000001, 0x8, 0x7, 0x100000001, 0x6, 0x0, 0x200, 0x3, 0xffff, 0x3, 0x7, 0xe7, 0x42a, 0x0, 0x80000000, 0x964, 0x7fffffffffffffff, 0x7fffffff, 0x2, 0x6, 0x4f9, 0x9, 0x3, 0x40, 0x9, 0x1, 0x7d65, 0xb12, 0xfffffffffffffff7, 0x200, 0x8, 0x1, 0x5, 0x8, 0xa, 0xffffffffffff3451, 0x1, 0x4, 0x4, 0x3, 0x3, 0x4, 0x200, 0x2, 0x7, 0x81, 0xffffffffffffffff, 0xfffffffffffff890, 0x4, 0x7, 0x8000, 0x5c, 0x400, 0x1, 0xfffffffffffffffa, 0xf9f2, 0x7, 0x3, 0xfffffffffffffff6, 0x10, 0x6, 0x4, 0xffffffff80000000, 0x7, 0x1, 0x9, 0x1, 0x7fffffff, 0xa0000000, 0x6, 0x1, 0x0, 0x100, 0x240000000000, 0x100000000, 0xb, 0x6, 0x2, 0x1, 0x101, 0x3, 0xe150, 0x200, 0x4, 0x5, 0xd, 0x7f, 0x4, 0x7, 0x4, 0x1, 0x4, 0x14, 0x8, 0x9, 0x4, 0x0, 0x8, 0xffff, 0x8, 0x80, 0x10, 0xfffffffffffffffb, 0x5, 0xfffffffffffffff8, 0x6, 0x1ff]}) 6.974302641s ago: executing program 0 (id=757): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x0, 0x200000, 0x8000, 0x3513, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f00000001c0)) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f040e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64064a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) flistxattr(0xffffffffffffffff, 0x0, 0x91) keyctl$clear(0x3, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000080)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3\x89f\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) 6.731539332s ago: executing program 0 (id=758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0xfffffff9, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newspdinfo={0x44, 0x24, 0x103, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x44}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0202, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000027bd7000000000000800f500", @ANYRES32=r5, @ANYBLOB="ff0040ad4b5dd57068ea77c753db545fc991239503aba89b045fbc3e465adfe63a92983d17a94e13a0d4e1a86db5fc2ed48d646fabd36c86089467ba148e36469ec596a079ffbcaecf0fb1807084e395ecb58e76afdfc85ffe7e1a4afc597993ea7df852cdb4d796f8f7d77fad85f6fa0ebb8c058b31799b"], 0x18}], 0x1}, 0x20004010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x2000000) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fdatasync(r7) r8 = socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000200)) 6.095901475s ago: executing program 2 (id=759): prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x302, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040efc07140c"], 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$inet6(0xa, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 5.893138803s ago: executing program 3 (id=760): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c00000001"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000880)="66b801000f00d0c744240032140000c744240200000000c7442406000000000f011c24c74424009d29a9b0c744240210000000c7442406000000000f011424f30f017b0065f340a766bad104b817000000efc74424000000ffffc744240200000000c7442406000000000f011c24430fc71c16460f0766baf80cb8fbf7ed88ef66bafc0cb008ee", 0x87}], 0x1, 0xb92d95bef6f056f6, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 4.97777215s ago: executing program 2 (id=761): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$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") ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a00000000df0000"], 0x18}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(0xffffffffffffffff, r6) flock(0xffffffffffffffff, 0x1) 4.9763265s ago: executing program 0 (id=770): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r4, &(0x7f0000000200), 0x0) recvmmsg(r4, &(0x7f0000003e40), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000340)="41000000010007", 0x7) syz_clone(0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)="bde8696507a123bb2b84398bd8e41b76912a5feef11859db7aa258f6022458655255b1aa264b1e887ff833c74fd788e99abbb683447021e71e5d5ce2df4478945629") 3.219974958s ago: executing program 2 (id=762): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) futex(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x4) futex(0x0, 0x2, 0x1, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000140)=0x21, 0x39) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) 2.14114342s ago: executing program 3 (id=763): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xfffff59e}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305839, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) unshare(0x2c060000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r5, 0x0, 0x0, 0x0, &(0x7f0000006a80)={0x0, 0x3938700}) 1.700633986s ago: executing program 0 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x17}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000ec0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x120c81c, &(0x7f0000000180)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c686964652c6e6f726f636b2c636865636b3d72656c617865642c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303430302c00ef49cf86458fe7d77ad665fd54ecde2920ecf341fdc99e3dd3bbb43add61fbd65ef0936a80c2f39e63"], 0x1, 0x52c, &(0x7f0000000580)="$eJzs3W9v00gewPGfS3tUOQmdjhNCVYGh3ElFKsFxICjikc+ZpAOOHdkOah+hiqaoIoUT5aRtn+zyhN2Vdl8ET/dF7DtC+xJ2ZTspLW1ioH+Cqu8ngpnYY89vUss/uY3HAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxPIatl2xxDdBd0WN5jWisP3x7WDrQwvk9oFiTL8iVvpPZmflar7o6r8+rr6S/rcg8/m7eZlNi1nZ/fuVfzy8PD013H5MwGdie2f3xVq/33s96UBO0bWLo9e1dGDi0LTdllYmDlW9VrPvLjdj1TS+jlfjRLeVF2k3CSO16N1WlXq9qnR5NewGrYbr6+HCB3cc266pR+WOdqM4DO4+KsfesvF9E7SyNunqtM2D9EB8bBKVaLet1MZmv1ctGkDaqPI5jZyiRo7tOJWK41Rq9+v3H9j29KEF9ifkUIvJH7SYrBM8ewPHMzXI/+KLkUC6siLqyJcnDYkklPaI9QPD/P+fu3psv/vz/zDLX/24ek6y/H89f3d9VP4fEcvZvbZlR3blhaxJX/rSk9cTj+hsXy3REoiRWEIx0hY3W6IGS5TUpSY1seWpLEtTYlHSFCO+aIllVWJJRGdHlCeRaHElkVAiUbIontwWJRWpS12qokRLWVYllK4E0pKGuNleNmQz+9yroqxRMe41qowcRml43PXEGTNa8j+O70TP38Bx/DnM/wAAAAAA4Nyyst++p9f/M3ItqzWNr+1JhwUAAAAAAE5Q9pf/+bSYSWvXxOL6HwAAAACA88bK7rGzRKQkN/LahljZ7VL8EgAAAAAAgHMi+/v/9bTI5kC5IdbedClc/wMAAAAAcE78VDjHfty5aP3+h0TRjPW2s/Jva8tN27lbF/LtLny6x6Q5Z10a7CQrankxPe3peWs2b7Q3CeaHQbFRFId1VAA/fEkAl6flF7mZt7m5npfrwzV5L6Wm8XXZC/2HFXHdS1OJXkn+/3LzO8mG/3PQvmTJxma/V372qr+exfI23cvbrcEEiofmURwTy5tsvoXsnosjRzyT3Ygx6LeU92vvH/9UvvnUF/T5ThbyNguDGW9LB8c/m/ZZKY8a/SCKyjFH/k5u5W1uLd7KiyOicIqicPZH8VWfxWdEUS2KonrMKABgUjYKspB1OPF/xVnu67K7fGF2fyeLeZvFuezEOj13xBndLjqj28fMbr8degbSqByb9vvrJ1n1fbrB+5H9xr5jpR/hhTdb/5Mr2zu7dza31p73nvdeOk61Zt+z7fuOzGTDGBTkHgDAEYqfsVPYwrpXcFX9z72vFJTlmbySvqzLUna3QfaNgyP3Wtr3NYSlgqvWUpYm8ye8LI25qvtbdpfDcL/O2LYHY6ie/g8CAIAztFCQhz8n/y8VXHcfzOXjr45L+57WBgAAToeOPlil5EcrikznaaVer7jJslZR6D1WkWm0tDJBoiNv2Q1aWnWiMAm90E8rT0xDxyrudjphlKhmGKlOGJuV7MnvavDo91i33SAxXtzxtRtr5YVB4nqJapjYU53uf30TL+so2zjuaM80jecmJgxUHHYjT5eVirXe19A0dJCYpkmrgepEpu1Gq+pJ6HfbWjV07EWmk4T5Dod9maAZRu1st+VJf9gAAHwjtnd2X6z1+73Xp1iZ9BgBAMBBZGkAAAAAAAAAAAAAAAAAAAAAAL59Z3H/H5VzXhlOBf2txEPlBCqFp47vT/3kBOBU/RUAAP//q6hPjA==") openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) 1.53702429s ago: executing program 3 (id=765): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x800) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r6, &(0x7f00000004c0)=@rc={0x1f, @none, 0x8}, 0x80) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e0000002000000000000fffc0000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setfsgid(0x0) get_robust_list(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_clone3(&(0x7f0000000340)={0x101000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): 357.934563][ T6203] F2FS-fs (loop0): invalid crc value [ 357.967969][ T6203] F2FS-fs (loop0): Found nat_bits in checkpoint [ 358.013847][ T6203] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 358.021000][ T6203] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 358.060513][ T6205] EXT4-fs (loop2): 1 truncate cleaned up [ 358.069641][ T6205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 359.497317][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 360.092190][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.153700][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.472'. [ 360.320872][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.320903][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.320923][ T14] usb 4-1: Product: syz [ 360.320938][ T14] usb 4-1: Manufacturer: syz [ 360.320951][ T14] usb 4-1: SerialNumber: syz [ 360.423861][ T6240] netlink: 272 bytes leftover after parsing attributes in process `syz.1.472'. [ 360.473131][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 360.709073][ T5469] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.760918][ T5469] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.913627][ T6252] loop4: detected capacity change from 0 to 1024 [ 361.921714][ T5469] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.999047][ T6252] EXT4-fs: Mount option(s) incompatible with ext2 [ 362.078678][ T5469] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.295480][ T3646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.309435][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.318394][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.351569][ T3646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.382099][ T14] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 362.390055][ T6256] syz.4.475[6256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.390144][ T6256] syz.4.475[6256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.872075][ T3646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 362.872812][ T14] cdc_ncm 4-1:1.0: bind() failure [ 362.897076][ T3646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.901355][ T14] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 362.910895][ T14] cdc_ncm 4-1:1.1: bind() failure [ 362.946365][ T14] usb 4-1: USB disconnect, device number 8 [ 363.039906][ T6258] loop4: detected capacity change from 0 to 512 [ 363.052394][ T6258] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 363.223367][ T6258] EXT4-fs (loop4): 1 truncate cleaned up [ 363.229013][ T6258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 364.931079][ T3653] Bluetooth: hci3: command tx timeout [ 364.949869][ T5713] EXT4-fs (loop4): unmounting filesystem. [ 365.559204][ T6253] chnl_net:caif_netlink_parms(): no params data found [ 367.077553][ T3653] Bluetooth: hci3: command tx timeout [ 367.404647][ T6299] loop0: detected capacity change from 0 to 2048 [ 367.980413][ T6299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 368.121617][ T6299] ext4 filesystem being mounted at /5/bus supports timestamps until 2038 (0x7fffffff) [ 368.250711][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 368.317947][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.375863][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.420803][ T6253] device bridge_slave_0 entered promiscuous mode [ 368.890965][ T41] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 368.943380][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.965915][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.987411][ T6253] device bridge_slave_1 entered promiscuous mode [ 369.032970][ T5726] EXT4-fs (loop0): unmounting filesystem. [ 369.066490][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.090850][ T3646] Bluetooth: hci3: command tx timeout [ 369.117352][ T14] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.141329][ T14] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 369.155796][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.173263][ T14] usb 4-1: config 0 descriptor?? [ 369.178747][ T6327] loop1: detected capacity change from 0 to 16 [ 369.206849][ T6253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.222761][ T6327] erofs: (device loop1): mounted with root inode @ nid 36. [ 369.551180][ T6331] bio_check_eod: 18 callbacks suppressed [ 369.551197][ T6331] syz.1.488: attempt to access beyond end of device [ 369.551197][ T6331] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 369.573236][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 369.582429][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 369.591648][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 369.600903][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 369.610010][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 369.619255][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 369.628520][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 369.637931][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 369.647603][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 369.656935][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 369.666159][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 369.675312][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 369.684514][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 369.693727][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 369.702911][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 369.712262][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 369.721436][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 369.750191][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 369.759315][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 369.768512][ T6331] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 369.778024][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 369.787158][ T6331] syz.1.488: attempt to access beyond end of device [ 369.787158][ T6331] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 369.800784][ T6331] syz.1.488: attempt to access beyond end of device [ 369.800784][ T6331] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 369.814765][ T6331] syz.1.488: attempt to access beyond end of device [ 369.814765][ T6331] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 369.828434][ T6331] syz.1.488: attempt to access beyond end of device [ 369.828434][ T6331] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 369.842809][ T6331] syz.1.488: attempt to access beyond end of device [ 369.842809][ T6331] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 369.856976][ T6331] syz.1.488: attempt to access beyond end of device [ 369.856976][ T6331] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 369.871306][ T6331] syz.1.488: attempt to access beyond end of device [ 369.871306][ T6331] loop1: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 369.885641][ T6331] syz.1.488: attempt to access beyond end of device [ 369.885641][ T6331] loop1: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 369.899913][ T6331] syz.1.488: attempt to access beyond end of device [ 369.899913][ T6331] loop1: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 369.916895][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 369.926075][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 369.935288][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 369.944527][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 369.954339][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 369.963566][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 369.972719][ T6331] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 369.982208][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 369.991439][ T6331] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 370.000826][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 370.009928][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 370.019042][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 370.028379][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 370.037524][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 370.046670][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 370.056367][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 370.065520][ T6331] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 370.074888][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 370.095800][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 370.104960][ T6331] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 371.539398][ T3646] Bluetooth: hci3: command tx timeout [ 371.678195][ T6253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.980787][ T41] usb 5-1: unable to read config index 0 descriptor/all [ 371.987857][ T41] usb 5-1: can't read configurations, error -71 [ 372.047695][ T6337] loop1: detected capacity change from 0 to 512 [ 372.110779][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 372.111709][ T6337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 372.137440][ T3684] usb 4-1: USB disconnect, device number 9 [ 372.166328][ T6337] EXT4-fs (loop1): 1 truncate cleaned up [ 372.172162][ T6337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 372.214151][ T6341] netlink: 232 bytes leftover after parsing attributes in process `syz.4.490'. [ 372.317825][ T6253] team0: Port device team_slave_0 added [ 372.405641][ T6253] team0: Port device team_slave_1 added [ 373.682959][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 373.701555][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.708518][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.809880][ T6253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.866837][ T5469] device hsr_slave_0 left promiscuous mode [ 373.873421][ T5469] device hsr_slave_1 left promiscuous mode [ 373.879825][ T5469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.887863][ T5469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.896478][ T5469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.987028][ T5469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.005800][ T5469] device bridge_slave_1 left promiscuous mode [ 374.014765][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.026594][ T5469] device bridge_slave_0 left promiscuous mode [ 374.033385][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.084429][ T5469] device veth1_macvtap left promiscuous mode [ 374.100724][ T5469] device veth0_macvtap left promiscuous mode [ 374.109913][ T5469] device veth1_vlan left promiscuous mode [ 374.120596][ T5469] device veth0_vlan left promiscuous mode [ 374.316823][ T6366] loop1: detected capacity change from 0 to 16 [ 374.353980][ T6366] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x5ac3cbcf, 0xc32427af expected [ 375.141991][ T5469] team0 (unregistering): Port device team_slave_1 removed [ 375.194532][ T5469] team0 (unregistering): Port device team_slave_0 removed [ 375.240348][ T5469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.292751][ T5469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.974182][ T5469] bond0 (unregistering): Released all slaves [ 376.079722][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.086965][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.113635][ T6253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.216115][ T6253] device hsr_slave_0 entered promiscuous mode [ 376.222979][ T6253] device hsr_slave_1 entered promiscuous mode [ 376.793652][ T6253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.805598][ T6253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.819110][ T6253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.834050][ T6253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.940378][ T6253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.966248][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.985386][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.002014][ T6253] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.019411][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 377.029062][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.044937][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.052075][ T5475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.087888][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.096954][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.112976][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.127319][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.134461][ T5475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.148595][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.158863][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.190542][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.207607][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.218286][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.227683][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.236048][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.245132][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.254505][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.269182][ T6253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.286706][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.296127][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.307428][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.558417][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.566001][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.585009][ T6253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.612957][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.622883][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.646718][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 377.656059][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.666953][ T6253] device veth0_vlan entered promiscuous mode [ 377.679046][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.686781][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.695475][ T6253] device veth1_vlan entered promiscuous mode [ 377.721154][ T6253] device veth0_macvtap entered promiscuous mode [ 377.748254][ T6253] device veth1_macvtap entered promiscuous mode [ 377.755471][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 377.764818][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 377.773127][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.782171][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.791174][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.799162][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.818605][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.831499][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.842169][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.853554][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.863586][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.874575][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.884629][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.895617][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.907063][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.919065][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.929720][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.941354][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.952676][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.965954][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.979388][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.999126][ T6253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.010046][ T6253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.026720][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.034636][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 378.048172][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 378.058250][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 378.072879][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 378.090045][ T6253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.099426][ T6253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.108565][ T6253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.117785][ T6253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.202021][ T5492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.212725][ T5492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.236857][ T5475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.239038][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 378.245560][ T5475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.263648][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 378.462550][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.468255][ T6444] loop0: detected capacity change from 0 to 1024 [ 378.468954][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.972203][ T6445] loop4: detected capacity change from 0 to 1024 [ 381.001660][ T6445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.014471][ T6444] hfsplus: request for non-existent node 3 in B*Tree [ 381.041828][ T6444] hfsplus: request for non-existent node 3 in B*Tree [ 381.059313][ T6445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 381.403739][ T6445] EXT4-fs: error -4 creating inode table initialization thread [ 381.417513][ T6445] EXT4-fs (loop4): mount failed [ 383.584789][ T6480] xt_l2tp: wrong L2TP version: 0 [ 384.100267][ T6484] loop1: detected capacity change from 0 to 16 [ 384.445324][ T6484] erofs: (device loop1): mounted with root inode @ nid 36. [ 384.771151][ T6495] bio_check_eod: 18 callbacks suppressed [ 384.771169][ T6495] syz.1.499: attempt to access beyond end of device [ 384.771169][ T6495] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 384.800121][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 384.809236][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 384.818494][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 384.827943][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 384.837222][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 384.846523][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 384.855898][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 384.865011][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 384.874122][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 384.883393][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 384.892518][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 384.901629][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 384.910891][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 384.919962][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 384.929153][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 384.938854][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 385.006518][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 385.016848][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 385.025992][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 385.035419][ T6495] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 385.044862][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 385.054225][ T6495] syz.1.499: attempt to access beyond end of device [ 385.054225][ T6495] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 385.068014][ T6495] syz.1.499: attempt to access beyond end of device [ 385.068014][ T6495] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 385.082242][ T6495] syz.1.499: attempt to access beyond end of device [ 385.082242][ T6495] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 385.095910][ T6495] syz.1.499: attempt to access beyond end of device [ 385.095910][ T6495] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 385.110111][ T6495] syz.1.499: attempt to access beyond end of device [ 385.110111][ T6495] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 385.128933][ T6495] syz.1.499: attempt to access beyond end of device [ 385.128933][ T6495] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 385.143017][ T6495] syz.1.499: attempt to access beyond end of device [ 385.143017][ T6495] loop1: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 385.157124][ T6495] syz.1.499: attempt to access beyond end of device [ 385.157124][ T6495] loop1: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 385.171289][ T6495] syz.1.499: attempt to access beyond end of device [ 385.171289][ T6495] loop1: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 385.187228][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 385.196354][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 385.205511][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 385.215007][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 385.224220][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 385.233327][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 385.242437][ T6495] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 385.252265][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 385.261342][ T6495] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 385.270660][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 385.279694][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 385.288770][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 385.297943][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 385.306998][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 385.316402][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 385.325504][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 385.334752][ T6495] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 385.344061][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 385.353146][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 385.362192][ T6495] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 385.660682][ T3730] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 386.078107][ T6500] loop1: detected capacity change from 0 to 512 [ 386.091738][ T6500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.100556][ T6502] loop3: detected capacity change from 0 to 16 [ 386.123173][ T6502] erofs: (device loop3): mounted with root inode @ nid 36. [ 386.141430][ T6500] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.310346][ T6505] loop0: detected capacity change from 0 to 512 [ 386.310873][ T6500] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 386.331850][ T6505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 386.411975][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 386.421079][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 386.430190][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 386.439599][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 386.448734][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 386.458043][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 386.467356][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 386.476539][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 386.485771][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 386.495030][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 386.504313][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 386.513479][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 386.522850][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 386.532838][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 386.542713][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 386.552234][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 386.561502][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 386.570890][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 386.579967][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 386.589272][ T6508] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 386.598797][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 386.639222][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 386.649057][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 386.659314][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 386.668700][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 386.677892][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 386.687304][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 386.702540][ T6508] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 386.711939][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 386.721093][ T6508] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 386.730437][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 386.739686][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 386.748818][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 386.758152][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 386.767282][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 386.776408][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 386.785528][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 386.794673][ T6508] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 386.804071][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 386.813317][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 386.822457][ T6508] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 387.097963][ T6500] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 387.140812][ T3730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.157712][ T3730] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.172946][ T6505] EXT4-fs (loop0): 1 truncate cleaned up [ 387.188590][ T6500] EXT4-fs (loop1): 1 truncate cleaned up [ 387.197936][ T6505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 387.198513][ T6500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 387.217963][ T3730] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 387.286932][ T6500] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 4: comm syz.1.508: lblock 0 mapped to illegal pblock 4 (length 1) [ 387.298032][ T3730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.401728][ T3730] usb 3-1: config 0 descriptor?? [ 387.910024][ T6500] EXT4-fs (loop1): Remounting filesystem read-only [ 387.920738][ T3730] usb 3-1: can't set config #0, error -71 [ 387.927790][ T3730] usb 3-1: USB disconnect, device number 8 [ 388.141349][ T6500] EXT4-fs error (device loop1): __ext4_remount:6448: comm syz.1.508: Abort forced by user [ 388.241889][ T6500] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 388.804443][ T5726] EXT4-fs (loop0): unmounting filesystem. [ 389.045083][ T6520] loop2: detected capacity change from 0 to 1024 [ 389.060401][ T6520] hfsplus: request for non-existent node 3 in B*Tree [ 389.077562][ T6520] hfsplus: request for non-existent node 3 in B*Tree [ 391.430419][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 391.535342][ T6536] loop3: detected capacity change from 0 to 64 [ 391.548475][ T6536] hfs: unable to parse mount options [ 391.662923][ T6540] loop0: detected capacity change from 0 to 16 [ 391.702582][ T6540] erofs: (device loop0): mounted with root inode @ nid 36. [ 393.027811][ T6542] bio_check_eod: 46 callbacks suppressed [ 393.027832][ T6542] syz.0.518: attempt to access beyond end of device [ 393.027832][ T6542] loop0: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 393.056399][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 393.065556][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 393.074796][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 393.084123][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 393.097123][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 393.106384][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 393.115685][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 393.124807][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 393.133956][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 393.143075][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 393.152254][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 393.161339][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 393.170532][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 393.179804][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 393.188964][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 393.199408][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 393.209193][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 393.218562][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 393.227620][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 393.236828][ T6542] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 393.246329][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 393.255677][ T6542] syz.0.518: attempt to access beyond end of device [ 393.255677][ T6542] loop0: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 393.269359][ T6542] syz.0.518: attempt to access beyond end of device [ 393.269359][ T6542] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 393.283389][ T6542] syz.0.518: attempt to access beyond end of device [ 393.283389][ T6542] loop0: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 393.297106][ T6542] syz.0.518: attempt to access beyond end of device [ 393.297106][ T6542] loop0: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 393.312484][ T6542] syz.0.518: attempt to access beyond end of device [ 393.312484][ T6542] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 393.326159][ T6542] syz.0.518: attempt to access beyond end of device [ 393.326159][ T6542] loop0: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 393.340346][ T6542] syz.0.518: attempt to access beyond end of device [ 393.340346][ T6542] loop0: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 393.354632][ T6542] syz.0.518: attempt to access beyond end of device [ 393.354632][ T6542] loop0: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 393.368929][ T6542] syz.0.518: attempt to access beyond end of device [ 393.368929][ T6542] loop0: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 393.386736][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 393.395958][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 393.406210][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 393.415521][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 393.424659][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 393.433874][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 393.443120][ T6542] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 393.452499][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 393.461621][ T6542] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 393.471031][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 393.480180][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 393.489291][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 393.498611][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 393.508798][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 393.517876][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 393.526998][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 393.536126][ T6542] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 393.545537][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 393.554781][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 393.563909][ T6542] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 393.789253][ T3875] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.885152][ T6536] loop3: detected capacity change from 0 to 1024 [ 393.892033][ T3875] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.930806][ T3875] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.945478][ T6536] ext2: Unknown parameter 'dont_hash' [ 393.972452][ T3875] Buffer I/O error on dev loop3, logical block 0, async page read [ 394.317894][ T3646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 394.401230][ T3646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 394.409948][ T3646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 394.418363][ T3652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 394.427810][ T3646] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 394.440826][ T3652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.106952][ T6571] loop2: detected capacity change from 0 to 512 [ 396.246962][ T6571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 396.410114][ T6571] EXT4-fs (loop2): 1 truncate cleaned up [ 396.460973][ T6571] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 396.531615][ T3653] Bluetooth: hci5: command tx timeout [ 397.952351][ T6253] EXT4-fs (loop2): unmounting filesystem. [ 398.362244][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 399.246764][ T6596] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 399.275757][ T6596] overlayfs: failed to look up (file1) for ino (-5) [ 399.438649][ T3653] Bluetooth: hci5: command tx timeout [ 399.856172][ T6592] loop2: detected capacity change from 0 to 512 [ 399.915457][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.924459][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.933070][ T6551] device bridge_slave_0 entered promiscuous mode [ 399.942338][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.949717][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.955722][ T6592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 399.959201][ T6551] device bridge_slave_1 entered promiscuous mode [ 400.002639][ T6592] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 400.015261][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.027016][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.093007][ T6607] loop1: detected capacity change from 0 to 16 [ 400.101809][ T6607] erofs: (device loop1): mounted with root inode @ nid 36. [ 400.782363][ T3653] Bluetooth: Wrong link type (-22) [ 400.787771][ T3653] Bluetooth: Wrong link type (-22) [ 401.490935][ T3653] Bluetooth: hci5: command tx timeout [ 401.626888][ T6253] EXT4-fs (loop2): unmounting filesystem. [ 402.391308][ T6621] bio_check_eod: 18 callbacks suppressed [ 402.391323][ T6621] syz.1.530: attempt to access beyond end of device [ 402.391323][ T6621] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 402.454671][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 402.463802][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 402.472982][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 402.482152][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 402.491308][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 402.500393][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 402.509560][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 402.518658][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 402.527746][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 402.536884][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 402.545974][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 402.555059][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 402.564196][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 402.573286][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 402.582391][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 402.591681][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 402.600793][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 402.609932][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 402.618973][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 402.628062][ T6621] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 402.637508][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 402.646589][ T6621] syz.1.530: attempt to access beyond end of device [ 402.646589][ T6621] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 402.660154][ T6621] syz.1.530: attempt to access beyond end of device [ 402.660154][ T6621] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 402.674087][ T6621] syz.1.530: attempt to access beyond end of device [ 402.674087][ T6621] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 402.687758][ T6621] syz.1.530: attempt to access beyond end of device [ 402.687758][ T6621] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 402.702026][ T6621] syz.1.530: attempt to access beyond end of device [ 402.702026][ T6621] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 402.715602][ T6621] syz.1.530: attempt to access beyond end of device [ 402.715602][ T6621] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 402.729695][ T6621] syz.1.530: attempt to access beyond end of device [ 402.729695][ T6621] loop1: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 402.743870][ T6621] syz.1.530: attempt to access beyond end of device [ 402.743870][ T6621] loop1: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 402.758049][ T6621] syz.1.530: attempt to access beyond end of device [ 402.758049][ T6621] loop1: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 402.774018][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 402.783145][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 402.792327][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 402.801512][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 402.810556][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 402.819705][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 402.828845][ T6621] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 402.838197][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 402.847291][ T6621] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 402.856641][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 402.865776][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 402.874866][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 402.884083][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 402.893182][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 402.902284][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 402.911379][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 402.920407][ T6621] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 402.929759][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 402.938906][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 402.948002][ T6621] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 402.997998][ T6551] team0: Port device team_slave_0 added [ 404.286382][ T3653] Bluetooth: hci5: command tx timeout [ 404.483105][ T6551] team0: Port device team_slave_1 added [ 404.509243][ T6626] loop3: detected capacity change from 0 to 1024 [ 404.560844][ T3653] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 404.569734][ T3653] Bluetooth: hci4: Injecting HCI hardware error event [ 404.593556][ T3653] Bluetooth: hci4: hardware error 0x00 [ 404.643654][ T6626] hfsplus: request for non-existent node 3 in B*Tree [ 404.650466][ T6626] hfsplus: request for non-existent node 3 in B*Tree [ 404.671826][ T6631] loop1: detected capacity change from 0 to 16 [ 404.821302][ T6631] erofs: (device loop1): mounted with root inode @ nid 36. [ 405.058750][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.319804][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.481040][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 405.490400][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 405.499900][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 405.509466][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 405.518661][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 405.527982][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 405.537314][ T6634] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 405.546816][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 405.555950][ T6634] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 405.565295][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 405.574932][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 405.584050][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 405.593356][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 405.602488][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 405.611596][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 405.620700][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 405.629774][ T6634] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 405.639117][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 405.694585][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 405.703678][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 405.712839][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 405.721900][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 405.730996][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 405.740053][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 405.749150][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 405.758289][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 405.767415][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 405.776477][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 405.785508][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 405.794612][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 405.803663][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 405.812745][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 405.821820][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 405.830869][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 405.839902][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 405.849089][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 405.858149][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 405.867312][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 405.876287][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 405.885844][ T6634] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 405.895233][ T6634] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 405.960748][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.510978][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.526293][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.706089][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.922710][ T6551] device hsr_slave_0 entered promiscuous mode [ 406.930797][ T3653] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 406.947570][ T6551] device hsr_slave_1 entered promiscuous mode [ 406.957743][ T6551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.968983][ T6551] Cannot create hsr debugfs directory [ 407.078593][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.086632][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.096106][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.103662][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.869409][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.883796][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.895480][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.906497][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.918775][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.930071][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.941155][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.949631][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.958782][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.971921][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 407.979425][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.000134][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.016406][ T6658] loop2: detected capacity change from 0 to 1024 [ 408.028361][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.055282][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.064460][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.072156][ T6658] hfsplus: invalid btree extent records (0 size) [ 408.079135][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.083944][ T6658] hfsplus: failed to load attributes file [ 408.087088][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.100910][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.109640][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.117480][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.125115][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.132843][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.140234][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.148299][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.155914][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.211100][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.218732][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.233837][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 408.904712][ T6658] loop2: detected capacity change from 0 to 128 [ 408.927201][ T6658] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 408.995892][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.009583][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.017065][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.024500][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.031946][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.039338][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.046763][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.054232][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.064651][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.072417][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.079798][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 409.098840][ T41] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 409.391491][ T5492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.878036][ T6671] loop3: detected capacity change from 0 to 512 [ 410.960304][ T6671] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 410.989891][ T6671] EXT4-fs (loop3): orphan cleanup on readonly fs [ 411.007106][ T6671] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 411.023034][ T6671] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 411.043330][ T6671] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 411.086333][ T5492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.102560][ T6671] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.543: casefold flag without casefold feature [ 411.227137][ T6671] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.543: couldn't read orphan inode 16 (err -117) [ 411.311842][ T6679] loop0: detected capacity change from 0 to 256 [ 411.318742][ T6671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 412.019723][ T5492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.063607][ T6679] FAT-fs (loop0): Directory bread(block 64) failed [ 412.070165][ T6679] FAT-fs (loop0): Directory bread(block 65) failed [ 412.222194][ T6679] FAT-fs (loop0): Directory bread(block 66) failed [ 412.250822][ T6679] FAT-fs (loop0): Directory bread(block 67) failed [ 412.266312][ T6687] loop2: detected capacity change from 0 to 16 [ 412.304780][ T6679] FAT-fs (loop0): Directory bread(block 68) failed [ 412.332307][ T6687] erofs: (device loop2): mounted with root inode @ nid 36. [ 412.360098][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 412.363062][ T6679] FAT-fs (loop0): Directory bread(block 69) failed [ 412.372565][ T6679] FAT-fs (loop0): Directory bread(block 70) failed [ 412.379099][ T6679] FAT-fs (loop0): Directory bread(block 71) failed [ 412.386063][ T5492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.387180][ T6679] FAT-fs (loop0): Directory bread(block 72) failed [ 412.402912][ T6679] FAT-fs (loop0): Directory bread(block 73) failed [ 412.563165][ T6695] loop3: detected capacity change from 0 to 512 [ 412.656375][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 412.665551][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 412.674730][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 412.684063][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 412.693323][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 412.702470][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 412.711767][ T6698] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 412.721283][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 412.730375][ T6698] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 412.740317][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 412.749845][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 412.759558][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 412.768973][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 412.778212][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 412.787408][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 412.796639][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 412.805917][ T6698] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 412.815665][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 412.824965][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 412.834189][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 412.870578][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 412.879745][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 412.889012][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 412.898288][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 412.907634][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 412.916995][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 412.926306][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 412.935518][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 412.944720][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 412.953956][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 412.963980][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 412.973141][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 412.982381][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 412.991508][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 413.000713][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 413.010049][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 413.019231][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 413.028581][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 413.037699][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 413.046931][ T6698] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 413.056454][ T6698] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 413.065679][ T6698] bio_check_eod: 40 callbacks suppressed [ 413.065691][ T6698] syz.2.547: attempt to access beyond end of device [ 413.065691][ T6698] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 413.085431][ T6698] syz.2.547: attempt to access beyond end of device [ 413.085431][ T6698] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 413.099206][ T6698] syz.2.547: attempt to access beyond end of device [ 413.099206][ T6698] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 413.113625][ T6698] syz.2.547: attempt to access beyond end of device [ 413.113625][ T6698] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 413.127276][ T6698] syz.2.547: attempt to access beyond end of device [ 413.127276][ T6698] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 413.141510][ T6698] syz.2.547: attempt to access beyond end of device [ 413.141510][ T6698] loop2: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 413.155782][ T6698] syz.2.547: attempt to access beyond end of device [ 413.155782][ T6698] loop2: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 413.170175][ T6698] syz.2.547: attempt to access beyond end of device [ 413.170175][ T6698] loop2: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 413.184307][ T6698] syz.2.547: attempt to access beyond end of device [ 413.184307][ T6698] loop2: rw=524288, sector=790384, nr_sectors = 16 limit=16 [ 413.213823][ T6698] syz.2.547: attempt to access beyond end of device [ 413.213823][ T6698] loop2: rw=524288, sector=72, nr_sectors = 16 limit=16 [ 413.475016][ T6695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 413.495913][ T6695] ext4 filesystem being mounted at /147/bus supports timestamps until 2038 (0x7fffffff) [ 416.801680][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 419.116946][ T6551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 419.173419][ T6551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 419.193475][ T6551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 419.247308][ T6551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 419.570757][ T3653] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 419.579536][ T3653] Bluetooth: hci3: Injecting HCI hardware error event [ 419.589410][ T3646] Bluetooth: hci3: hardware error 0x00 [ 419.703282][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.243565][ T6768] loop3: detected capacity change from 0 to 4096 [ 420.257944][ T6768] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 420.780496][ T6768] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 421.624963][ T6787] loop0: detected capacity change from 0 to 1024 [ 421.663663][ T6787] EXT4-fs: Ignoring removed orlov option [ 421.703165][ T6787] EXT4-fs (loop0): Test dummy encryption mode enabled [ 421.744687][ T6787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 422.580901][ T6795] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 422.590871][ T6795] overlayfs: upper fs does not support tmpfile. [ 422.601518][ T6795] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 422.798452][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.854685][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.876768][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.944164][ T3635] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 422.979260][ T5726] EXT4-fs (loop0): unmounting filesystem. [ 423.261800][ T26] audit: type=1326 audit(1729126929.259:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 423.270484][ T6808] loop1: detected capacity change from 0 to 40427 [ 423.341145][ T26] audit: type=1326 audit(1729126929.319:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 423.385411][ T6808] F2FS-fs (loop1): invalid crc value [ 423.398196][ T6808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 423.452854][ T26] audit: type=1326 audit(1729126929.329:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 423.483703][ T6808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 423.852691][ T6825] overlayfs: failed to resolve './file0': -2 [ 425.362387][ T3646] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 425.428160][ T26] audit: type=1326 audit(1729126929.329:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 425.461044][ T26] audit: type=1326 audit(1729126929.329:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 425.489158][ T3636] bio_check_eod: 12 callbacks suppressed [ 425.489173][ T3636] syz-executor: attempt to access beyond end of device [ 425.489173][ T3636] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 425.522596][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.531841][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.542184][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.549251][ T5466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.566500][ T26] audit: type=1326 audit(1729126929.339:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 425.611935][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.639154][ T26] audit: type=1326 audit(1729126929.339:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 425.664171][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.680189][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.687282][ T5466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.695406][ T26] audit: type=1326 audit(1729126929.339:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 425.731786][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.779301][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.868903][ T26] audit: type=1326 audit(1729126929.369:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 425.904648][ T26] audit: type=1326 audit(1729126929.369:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.2.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e557dff9 code=0x7ffc0000 [ 426.028860][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.066349][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.185940][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.877166][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.010433][ T5492] device hsr_slave_0 left promiscuous mode [ 427.051940][ T5492] device hsr_slave_1 left promiscuous mode [ 427.098393][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.110915][ T5492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.209464][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.227163][ T5492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.241740][ T5492] device bridge_slave_1 left promiscuous mode [ 427.243430][ T6836] loop0: detected capacity change from 0 to 8192 [ 427.254683][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.306669][ T6836] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 427.313171][ T5492] device bridge_slave_0 left promiscuous mode [ 427.334919][ T6836] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 427.345196][ T6836] REISERFS (device loop0): using ordered data mode [ 427.352019][ T6836] reiserfs: using flush barriers [ 427.358304][ T6836] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 427.375119][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.386403][ T6836] REISERFS (device loop0): checking transaction log (loop0) [ 427.401286][ T6836] REISERFS (device loop0): Using r5 hash to sort names [ 427.413421][ T6836] REISERFS (device loop0): using 3.5.x disk format [ 427.461248][ T6836] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 427.481452][ T5492] device veth1_macvtap left promiscuous mode [ 427.487460][ T5492] device veth0_macvtap left promiscuous mode [ 427.590122][ T5492] device veth1_vlan left promiscuous mode [ 427.622106][ T5492] device veth0_vlan left promiscuous mode [ 429.869607][ T5492] team0 (unregistering): Port device team_slave_1 removed [ 429.918329][ T5492] team0 (unregistering): Port device team_slave_0 removed [ 429.985581][ T5492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.049741][ T5492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.460302][ T5492] bond0 (unregistering): Released all slaves [ 430.537057][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.545885][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.554466][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 430.564079][ T5479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.578678][ T6852] sch_fq: defrate 0 ignored. [ 430.703917][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.733617][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.776030][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.923026][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.930480][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.938209][ T3653] Bluetooth: hci5: command tx timeout [ 430.949641][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.136996][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.146238][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.188043][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.196536][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.204884][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.213910][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.226467][ T6551] device veth0_vlan entered promiscuous mode [ 431.238787][ T6551] device veth1_vlan entered promiscuous mode [ 431.257606][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 431.266030][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 431.274499][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.284150][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.295297][ T6551] device veth0_macvtap entered promiscuous mode [ 431.307475][ T6551] device veth1_macvtap entered promiscuous mode [ 431.320245][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.330988][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.341453][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.351935][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.362060][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.372596][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.382484][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.393102][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.404386][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.412570][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.421555][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.429363][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.437927][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.450832][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.461338][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.471420][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.482078][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.492435][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.503941][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.513885][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.524333][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.535740][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.546868][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.555749][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.566045][ T6551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.575622][ T6551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.584906][ T6551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.594336][ T6551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.663123][ T5469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.676382][ T5469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.689155][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.703861][ T5479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.712746][ T5479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.724757][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 432.016603][ T6884] loop0: detected capacity change from 0 to 512 [ 434.766106][ T6884] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 434.853498][ T6884] EXT4-fs (loop0): 1 truncate cleaned up [ 434.859179][ T6884] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 437.171844][ T6903] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 437.178808][ T6903] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 437.270242][ T5726] EXT4-fs (loop0): unmounting filesystem. [ 437.352487][ T6903] vhci_hcd vhci_hcd.0: Device attached [ 437.740807][ T3053] vhci_hcd: vhci_device speed not set [ 437.753695][ T6922] futex_wake_op: syz.3.578 tries to shift op by -1; fix this program [ 437.827116][ T3053] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 439.295017][ T6914] vhci_hcd: connection closed [ 439.299881][ T5479] vhci_hcd: stop threads [ 439.358385][ T5479] vhci_hcd: release socket [ 439.417379][ T5479] vhci_hcd: disconnect device [ 439.505918][ T3053] usb 13-1: enqueue for inactive port 0 [ 439.590818][ T3053] vhci_hcd: vhci_device speed not set [ 439.988679][ T6942] loop0: detected capacity change from 0 to 40427 [ 440.016646][ T6937] loop2: detected capacity change from 0 to 1024 [ 440.023546][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.029833][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.677557][ T6942] F2FS-fs (loop0): invalid crc value [ 440.692496][ T6937] EXT4-fs: Mount option(s) incompatible with ext2 [ 440.708785][ T6942] F2FS-fs (loop0): Found nat_bits in checkpoint [ 440.806106][ T6942] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 442.073964][ T6954] overlayfs: failed to resolve './file0': -2 [ 442.434782][ T4329] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 442.679205][ T6960] loop4: detected capacity change from 0 to 8192 [ 442.799147][ T6960] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 442.813291][ T5726] syz-executor: attempt to access beyond end of device [ 442.813291][ T5726] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 442.821013][ T6960] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 443.033171][ T6960] REISERFS (device loop4): using ordered data mode [ 443.186380][ T6960] reiserfs: using flush barriers [ 443.382572][ T6960] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 443.533517][ T6960] REISERFS (device loop4): checking transaction log (loop4) [ 443.556305][ T6960] REISERFS (device loop4): Using r5 hash to sort names [ 443.573646][ T6960] REISERFS (device loop4): using 3.5.x disk format [ 443.642974][ T6960] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 444.583566][ T6960] sch_fq: defrate 0 ignored. [ 444.624506][ T6977] loop3: detected capacity change from 0 to 256 [ 444.855577][ T6975] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 445.087690][ T6977] FAT-fs (loop3): Directory bread(block 64) failed [ 445.135138][ T6977] FAT-fs (loop3): Directory bread(block 65) failed [ 445.551478][ T6977] FAT-fs (loop3): Directory bread(block 66) failed [ 445.558178][ T6977] FAT-fs (loop3): Directory bread(block 67) failed [ 445.605474][ T6977] FAT-fs (loop3): Directory bread(block 68) failed [ 445.925184][ T6977] FAT-fs (loop3): Directory bread(block 69) failed [ 445.962112][ T6977] FAT-fs (loop3): Directory bread(block 70) failed [ 445.968669][ T6977] FAT-fs (loop3): Directory bread(block 71) failed [ 446.028146][ T6977] FAT-fs (loop3): Directory bread(block 72) failed [ 446.100198][ T6977] FAT-fs (loop3): Directory bread(block 73) failed [ 449.636724][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.599'. [ 449.895636][ T7004] loop4: detected capacity change from 0 to 2048 [ 449.954564][ T7004] loop4: p1 < > p2 p3 < p5 > p4 [ 449.959548][ T7004] loop4: partition table partially beyond EOD, truncated [ 450.060339][ T7004] loop4: p1 start 4278190080 is beyond EOD, truncated [ 450.067803][ T7004] loop4: p2 start 16908800 is beyond EOD, truncated [ 450.101016][ T7004] loop4: p4 start 11326 is beyond EOD, truncated [ 450.117651][ T7004] loop4: p5 start 16908800 is beyond EOD, truncated [ 451.060862][ T152] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 451.393861][ T152] usb 3-1: Using ep0 maxpacket: 16 [ 451.526915][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.541728][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 451.563398][ T152] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 451.573530][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.583930][ T152] usb 3-1: config 0 descriptor?? [ 452.062153][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.093343][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.121998][ T152] hid (null): unknown global tag 0xd [ 452.127634][ T152] hid (null): report_id 0 is invalid [ 452.141347][ T152] hid (null): report_id 0 is invalid [ 452.159144][ T152] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 452.166748][ T152] hid-generic 0003:0158:0100.0003: unexpected long global item [ 452.175191][ T152] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 452.198626][ T7030] loop1: detected capacity change from 0 to 128 [ 452.240246][ T7030] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 452.576272][ T7032] loop4: detected capacity change from 0 to 40427 [ 452.640766][ T7032] F2FS-fs (loop4): invalid crc value [ 452.826563][ T7032] F2FS-fs (loop4): Found nat_bits in checkpoint [ 453.007040][ T7032] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 453.148248][ T152] usb 3-1: USB disconnect, device number 9 [ 453.414548][ T7043] overlayfs: failed to resolve './file0': -2 [ 453.876874][ T5475] wlan1: Trigger new scan to find an IBSS to join [ 454.176369][ T6551] syz-executor: attempt to access beyond end of device [ 454.176369][ T6551] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 454.257963][ T7048] loop3: detected capacity change from 0 to 16 [ 454.275935][ T7049] loop1: detected capacity change from 0 to 1024 [ 454.281885][ T7048] erofs: (device loop3): mounted with root inode @ nid 36. [ 454.882648][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 454.883098][ T7049] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 454.891858][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 454.909447][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 454.918665][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 454.928098][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 454.937269][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 454.946514][ T7051] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 454.955869][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 454.964998][ T7051] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 454.974481][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 454.983635][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 454.992751][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 455.001862][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 455.010942][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 455.019982][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 455.029111][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 455.038217][ T7051] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 455.047752][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 455.056874][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 455.066002][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 455.075133][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 455.084276][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 455.093726][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 455.102870][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 455.111954][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 455.121025][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 455.130062][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 455.139114][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 455.148162][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 455.157398][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 455.166444][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 455.177683][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 455.186784][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 455.195834][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 455.204916][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 455.214035][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 455.223094][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 455.232208][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 455.241184][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 455.250146][ T7051] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 455.259691][ T7051] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 455.268692][ T7051] syz.3.608: attempt to access beyond end of device [ 455.268692][ T7051] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 455.282567][ T7051] syz.3.608: attempt to access beyond end of device [ 455.282567][ T7051] loop3: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 455.296145][ T7051] syz.3.608: attempt to access beyond end of device [ 455.296145][ T7051] loop3: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 455.310367][ T7051] syz.3.608: attempt to access beyond end of device [ 455.310367][ T7051] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 455.323883][ T7051] syz.3.608: attempt to access beyond end of device [ 455.323883][ T7051] loop3: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 455.337924][ T7051] syz.3.608: attempt to access beyond end of device [ 455.337924][ T7051] loop3: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 455.352062][ T7051] syz.3.608: attempt to access beyond end of device [ 455.352062][ T7051] loop3: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 455.366344][ T7051] syz.3.608: attempt to access beyond end of device [ 455.366344][ T7051] loop3: rw=524288, sector=133693448, nr_sectors = 8 limit=16 [ 455.380287][ T7051] syz.3.608: attempt to access beyond end of device [ 455.380287][ T7051] loop3: rw=524288, sector=790384, nr_sectors = 16 limit=16 [ 455.729659][ T7058] loop2: detected capacity change from 0 to 256 [ 456.172861][ T7058] FAT-fs (loop2): Directory bread(block 64) failed [ 456.216908][ T7058] FAT-fs (loop2): Directory bread(block 65) failed [ 456.292426][ T7058] FAT-fs (loop2): Directory bread(block 66) failed [ 456.327342][ T7058] FAT-fs (loop2): Directory bread(block 67) failed [ 456.363662][ T7058] FAT-fs (loop2): Directory bread(block 68) failed [ 456.370215][ T7058] FAT-fs (loop2): Directory bread(block 69) failed [ 456.380570][ T7058] FAT-fs (loop2): Directory bread(block 70) failed [ 456.392797][ T7058] FAT-fs (loop2): Directory bread(block 71) failed [ 456.399392][ T7058] FAT-fs (loop2): Directory bread(block 72) failed [ 456.409958][ T7058] FAT-fs (loop2): Directory bread(block 73) failed [ 456.461218][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 456.694747][ T7062] loop3: detected capacity change from 0 to 512 [ 456.701591][ T7062] EXT4-fs: quotafile must be on filesystem root [ 458.567470][ T7075] loop2: detected capacity change from 0 to 512 [ 458.687165][ T5479] wlan1: Trigger new scan to find an IBSS to join [ 459.369539][ T7075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 459.530132][ T7075] ext4 filesystem being mounted at /28/bus supports timestamps until 2038 (0x7fffffff) [ 461.762840][ T5472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.791416][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 462.921912][ T6253] EXT4-fs (loop2): unmounting filesystem. [ 464.347735][ T7109] loop3: detected capacity change from 0 to 40427 [ 465.237702][ T7119] loop2: detected capacity change from 0 to 1024 [ 467.218200][ T7109] F2FS-fs (loop3): invalid crc value [ 467.262939][ T7109] F2FS-fs (loop3): Found nat_bits in checkpoint [ 467.330768][ T7109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 467.468369][ T7131] loop0: detected capacity change from 0 to 1024 [ 467.698692][ T7139] overlayfs: failed to resolve './file0': -2 [ 467.705750][ T3053] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 467.754544][ T7138] loop2: detected capacity change from 0 to 256 [ 468.248765][ T3635] bio_check_eod: 13 callbacks suppressed [ 468.248780][ T3635] syz-executor: attempt to access beyond end of device [ 468.248780][ T3635] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 468.312235][ T7131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 468.334471][ T3053] usb 2-1: device descriptor read/64, error -71 [ 468.352883][ T7138] FAT-fs (loop2): Directory bread(block 64) failed [ 468.380801][ T7138] FAT-fs (loop2): Directory bread(block 65) failed [ 468.387414][ T7138] FAT-fs (loop2): Directory bread(block 66) failed [ 468.473282][ T7138] FAT-fs (loop2): Directory bread(block 67) failed [ 468.511775][ T7138] FAT-fs (loop2): Directory bread(block 68) failed [ 468.536207][ T7138] FAT-fs (loop2): Directory bread(block 69) failed [ 468.557332][ T7138] FAT-fs (loop2): Directory bread(block 70) failed [ 468.580318][ T7138] FAT-fs (loop2): Directory bread(block 71) failed [ 468.635212][ T7138] FAT-fs (loop2): Directory bread(block 72) failed [ 468.718815][ T7138] FAT-fs (loop2): Directory bread(block 73) failed [ 469.241758][ T5726] EXT4-fs (loop0): unmounting filesystem. [ 469.274024][ T7148] loop3: detected capacity change from 0 to 512 [ 469.290779][ T7148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 469.300922][ T3053] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 469.371201][ T7148] EXT4-fs (loop3): 1 truncate cleaned up [ 469.376871][ T7148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 469.465385][ T7151] loop0: detected capacity change from 0 to 256 [ 469.490757][ T3053] usb 2-1: device descriptor read/64, error -71 [ 470.331215][ T3053] usb usb2-port1: attempt power cycle [ 471.081561][ T7151] FAT-fs (loop0): Directory bread(block 64) failed [ 471.095591][ T7151] FAT-fs (loop0): Directory bread(block 65) failed [ 471.110376][ T7151] FAT-fs (loop0): Directory bread(block 66) failed [ 472.158897][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 472.317042][ T7151] FAT-fs (loop0): Directory bread(block 67) failed [ 472.363157][ T7151] FAT-fs (loop0): Directory bread(block 68) failed [ 472.369710][ T7151] FAT-fs (loop0): Directory bread(block 69) failed [ 472.401224][ T7151] FAT-fs (loop0): Directory bread(block 70) failed [ 472.438542][ T7151] FAT-fs (loop0): Directory bread(block 71) failed [ 472.476419][ T7151] FAT-fs (loop0): Directory bread(block 72) failed [ 472.483375][ T7151] FAT-fs (loop0): Directory bread(block 73) failed [ 472.698342][ T7170] program syz.2.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.708807][ T7170] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 475.303822][ T3053] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 475.411188][ T3053] usb 2-1: device descriptor read/8, error -71 [ 475.599141][ T6998] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 475.692364][ T3053] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 475.906730][ T7188] loop0: detected capacity change from 0 to 1024 [ 477.127554][ T3053] usb 2-1: device not accepting address 12, error -71 [ 477.652535][ T3053] usb usb2-port1: unable to enumerate USB device [ 478.010845][ T6998] usb 4-1: device descriptor read/all, error -71 [ 478.315995][ T7199] loop0: detected capacity change from 0 to 40427 [ 478.351474][ T7199] F2FS-fs (loop0): invalid crc value [ 478.462369][ T7199] F2FS-fs (loop0): Found nat_bits in checkpoint [ 478.566456][ T7199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 479.300113][ T7194] loop1: detected capacity change from 0 to 4096 [ 479.364597][ T7194] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 479.448929][ T7207] loop3: detected capacity change from 0 to 256 [ 479.462493][ T7194] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 479.471120][ T5726] syz-executor: attempt to access beyond end of device [ 479.471120][ T5726] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 479.557398][ T7207] FAT-fs (loop3): Directory bread(block 64) failed [ 479.567730][ T7211] loop2: detected capacity change from 0 to 512 [ 479.578437][ T7207] FAT-fs (loop3): Directory bread(block 65) failed [ 479.596749][ T7207] FAT-fs (loop3): Directory bread(block 66) failed [ 479.616664][ T7207] FAT-fs (loop3): Directory bread(block 67) failed [ 479.626492][ T7207] FAT-fs (loop3): Directory bread(block 68) failed [ 479.633466][ T7207] FAT-fs (loop3): Directory bread(block 69) failed [ 479.643650][ T7207] FAT-fs (loop3): Directory bread(block 70) failed [ 479.650195][ T7207] FAT-fs (loop3): Directory bread(block 71) failed [ 479.656624][ T7214] device veth0_vlan left promiscuous mode [ 479.657209][ T7211] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 479.666504][ T7207] FAT-fs (loop3): Directory bread(block 72) failed [ 479.682073][ T7207] FAT-fs (loop3): Directory bread(block 73) failed [ 479.694697][ T7214] device veth0_vlan entered promiscuous mode [ 479.752190][ T7211] EXT4-fs (loop2): 1 truncate cleaned up [ 479.757962][ T7211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 479.971278][ T3636] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 481.057884][ T6253] EXT4-fs (loop2): unmounting filesystem. [ 482.791520][ T7225] binder_alloc: 7221: binder_alloc_buf size 16408 failed, no address space [ 482.801545][ T7225] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 482.837139][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 486.936997][ T7249] loop1: detected capacity change from 0 to 40427 [ 486.947419][ T7249] F2FS-fs (loop1): invalid crc value [ 486.972503][ T7249] F2FS-fs (loop1): Found nat_bits in checkpoint [ 487.021409][ T7249] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 487.292312][ T7261] loop4: detected capacity change from 0 to 64 [ 487.306937][ T7261] hfs: bad allocation block size 4095 [ 487.312513][ T7261] hfs: can't find a HFS filesystem on dev loop4 [ 488.347716][ T7263] overlayfs: failed to resolve './file0': -2 [ 489.127680][ T3636] syz-executor: attempt to access beyond end of device [ 489.127680][ T3636] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 489.728792][ T7270] random: crng reseeded on system resumption [ 490.356532][ T7271] loop3: detected capacity change from 0 to 40427 [ 490.446165][ T7271] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 490.454061][ T7271] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 490.478940][ T7271] F2FS-fs (loop3): invalid crc value [ 490.944837][ T7271] F2FS-fs (loop3): Found nat_bits in checkpoint [ 490.964893][ T7276] loop0: detected capacity change from 0 to 256 [ 490.985620][ T7271] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 490.993006][ T7271] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 490.996977][ T7276] FAT-fs (loop0): Directory bread(block 64) failed [ 491.027139][ T7276] FAT-fs (loop0): Directory bread(block 65) failed [ 491.783239][ T7276] FAT-fs (loop0): Directory bread(block 66) failed [ 491.789888][ T7276] FAT-fs (loop0): Directory bread(block 67) failed [ 491.796906][ T7276] FAT-fs (loop0): Directory bread(block 68) failed [ 491.814645][ T7272] futex_wake_op: syz.4.661 tries to shift op by -1; fix this program [ 491.830845][ T7276] FAT-fs (loop0): Directory bread(block 69) failed [ 491.858454][ T7276] FAT-fs (loop0): Directory bread(block 70) failed [ 491.942791][ T7276] FAT-fs (loop0): Directory bread(block 71) failed [ 491.951085][ T7276] FAT-fs (loop0): Directory bread(block 72) failed [ 491.957631][ T7276] FAT-fs (loop0): Directory bread(block 73) failed [ 491.985576][ T7287] loop4: detected capacity change from 0 to 512 [ 492.040221][ T7287] loop4: detected capacity change from 0 to 128 [ 492.838831][ T7302] loop1: detected capacity change from 0 to 256 [ 492.845822][ T7302] exfat: Deprecated parameter 'namecase' [ 493.054225][ T7302] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 493.067922][ T7302] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000010) [ 493.077188][ T7302] exFAT-fs (loop1): failed to load alloc-bitmap [ 493.083594][ T7302] exFAT-fs (loop1): failed to recognize exfat type [ 493.843857][ T7313] loop3: detected capacity change from 0 to 2048 [ 494.635375][ T7324] loop1: detected capacity change from 0 to 256 [ 495.930006][ T7331] loop0: detected capacity change from 0 to 512 [ 496.546408][ T7331] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.675: iget: bad extended attribute block 128 [ 496.559985][ T7331] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.675: couldn't read orphan inode 16 (err -117) [ 496.572899][ T7331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 496.582279][ T7331] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038 (0x7fffffff) [ 497.583040][ T7345] random: crng reseeded on system resumption [ 498.214144][ T7346] loop2: detected capacity change from 0 to 40427 [ 498.347608][ T7346] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 498.355444][ T7346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 498.390322][ T7346] F2FS-fs (loop2): invalid crc value [ 498.435175][ T5726] EXT4-fs (loop0): unmounting filesystem. [ 498.582636][ T7339] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 498.589268][ T7339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 498.660535][ T7339] vhci_hcd vhci_hcd.0: Device attached [ 498.674729][ T7346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 498.727328][ T7339] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 498.733955][ T7339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 498.798532][ T7339] vhci_hcd vhci_hcd.0: Device attached [ 498.846795][ T7346] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 498.853945][ T7346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 499.305824][ T7088] vhci_hcd: vhci_device speed not set [ 499.321757][ T7348] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 499.328387][ T7348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 499.336593][ T7348] vhci_hcd vhci_hcd.0: Device attached [ 499.356434][ T7347] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 499.363044][ T7347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 499.380755][ T7088] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 499.394077][ T7347] vhci_hcd vhci_hcd.0: Device attached [ 499.467539][ T7362] vhci_hcd: connection closed [ 499.468519][ T7359] vhci_hcd: connection closed [ 499.474308][ T7355] vhci_hcd: connection closed [ 499.479474][ T5475] vhci_hcd: stop threads [ 499.489208][ T7350] vhci_hcd: connection reset by peer [ 499.497259][ T5475] vhci_hcd: release socket [ 499.506330][ T5475] vhci_hcd: disconnect device [ 499.512890][ T5475] vhci_hcd: stop threads [ 499.517236][ T5475] vhci_hcd: release socket [ 499.531232][ T5475] vhci_hcd: disconnect device [ 499.536571][ T5475] vhci_hcd: stop threads [ 499.545086][ T5475] vhci_hcd: release socket [ 499.549658][ T5475] vhci_hcd: disconnect device [ 499.568695][ T5475] vhci_hcd: stop threads [ 499.604921][ T5475] vhci_hcd: release socket [ 499.609700][ T5475] vhci_hcd: disconnect device [ 499.652202][ T4621] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 499.711489][ T7371] loop0: detected capacity change from 0 to 8192 [ 499.742048][ T7371] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 499.773279][ T7375] fuse: Unknown parameter 'use00000000000000000000' [ 500.281543][ T4621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.316581][ T4621] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 500.433111][ T4621] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 500.552921][ T4621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.767941][ T4621] usb 2-1: config 0 descriptor?? [ 501.116929][ T7385] loop2: detected capacity change from 0 to 1024 [ 502.249003][ T7393] binder_alloc: 7382: binder_alloc_buf size 16408 failed, no address space [ 502.259393][ T7393] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 502.280201][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.306498][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.474929][ T7398] loop0: detected capacity change from 0 to 164 [ 505.781948][ T7088] vhci_hcd: vhci_device speed not set [ 505.836700][ T3053] usb 2-1: USB disconnect, device number 13 [ 505.875120][ T7398] rock: directory entry would overflow storage [ 505.881678][ T7398] rock: sig=0x4f50, size=4, remaining=3 [ 505.887273][ T7398] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 506.130364][ T7414] loop4: detected capacity change from 0 to 1024 [ 507.314392][ T6998] kernel write not supported for file bpf-prog (pid: 6998 comm: kworker/0:6) [ 507.348848][ T7435] loop1: detected capacity change from 0 to 256 [ 507.366515][ T7437] loop3: detected capacity change from 0 to 128 [ 507.418071][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 507.418083][ T26] audit: type=1326 audit(1729127013.409:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.2.696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95e557dff9 code=0x0 [ 507.447596][ T7437] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 507.459203][ T7435] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 507.480507][ T7437] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038 (0x7fffffff) [ 508.430509][ T7450] loop2: detected capacity change from 0 to 764 [ 508.624189][ T7450] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 508.696909][ T7452] loop1: detected capacity change from 0 to 2048 [ 508.703888][ T7452] EXT4-fs: Ignoring removed bh option [ 508.709566][ T7452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.712221][ T7450] Cannot find set identified by id 0 to match [ 508.716263][ T7452] EXT4-fs: Ignoring removed nobh option [ 508.762694][ T7452] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 508.792762][ T7452] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 508.823591][ T7452] EXT4-fs error (device loop1): __ext4_remount:6448: comm syz.1.703: Abort forced by user [ 508.828183][ T7437] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 508.847351][ T7452] EXT4-fs (loop1): Remounting filesystem read-only [ 508.867384][ T7452] raw_sendmsg: syz.1.703 forgot to set AF_INET. Fix it! [ 508.904427][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 509.053537][ T6551] hfsplus: bad catalog entry type [ 509.119906][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 510.176081][ T5477] hfsplus: b-tree write err: -5, ino 8 [ 510.274411][ T7466] loop1: detected capacity change from 0 to 512 [ 510.362376][ T7466] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 510.439861][ T5461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.480349][ T7466] EXT4-fs (loop1): 1 truncate cleaned up [ 510.497708][ T7466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 511.355264][ T5461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.271396][ T3646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 513.286879][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 513.297758][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.309527][ T3652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.318279][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 513.326071][ T3652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 513.542832][ T5461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.685814][ T5461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.606330][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 514.705618][ T7501] loop2: detected capacity change from 0 to 256 [ 514.740163][ T3684] hid-generic 0000:0000:0000.0004: item fetching failed at offset 0/1 [ 514.758600][ T3684] hid-generic: probe of 0000:0000:0000.0004 failed with error -22 [ 514.768322][ T7501] FAT-fs (loop2): Directory bread(block 64) failed [ 514.779669][ T7501] FAT-fs (loop2): Directory bread(block 65) failed [ 514.796516][ T7501] FAT-fs (loop2): Directory bread(block 66) failed [ 514.867000][ T7501] FAT-fs (loop2): Directory bread(block 67) failed [ 514.894663][ T7501] FAT-fs (loop2): Directory bread(block 68) failed [ 514.904034][ T7501] FAT-fs (loop2): Directory bread(block 69) failed [ 514.911021][ T7502] device veth0_vlan left promiscuous mode [ 514.917857][ T7502] device veth0_vlan entered promiscuous mode [ 514.926224][ T7501] FAT-fs (loop2): Directory bread(block 70) failed [ 514.946370][ T7486] chnl_net:caif_netlink_parms(): no params data found [ 514.953645][ T7501] FAT-fs (loop2): Directory bread(block 71) failed [ 514.978363][ T7501] FAT-fs (loop2): Directory bread(block 72) failed [ 514.996833][ T7501] FAT-fs (loop2): Directory bread(block 73) failed [ 515.461834][ T3653] Bluetooth: hci2: command tx timeout [ 518.302534][ T3652] Bluetooth: hci2: command tx timeout [ 519.315529][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.350795][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.359546][ T7486] device bridge_slave_0 entered promiscuous mode [ 519.446672][ T7486] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.517837][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.596827][ T7486] device bridge_slave_1 entered promiscuous mode [ 519.658540][ T7544] loop1: detected capacity change from 0 to 4096 [ 519.770978][ T7088] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 519.842967][ T7544] NILFS (loop1): invalid segment: Checksum error in segment payload [ 519.902830][ T7544] NILFS (loop1): trying rollback from an earlier position [ 519.911632][ T7486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.960545][ T7486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.017350][ T7544] NILFS (loop1): recovery complete [ 520.051509][ T7088] usb 3-1: no configurations [ 520.056154][ T7088] usb 3-1: can't read configurations, error -22 [ 520.084150][ T7553] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 520.500937][ T7486] team0: Port device team_slave_0 added [ 521.297818][ T3653] Bluetooth: hci2: command tx timeout [ 521.565682][ T7088] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 521.836599][ T7486] team0: Port device team_slave_1 added [ 521.970828][ T7088] usb 3-1: no configurations [ 521.970848][ T7088] usb 3-1: can't read configurations, error -22 [ 521.975872][ T7088] usb usb3-port1: attempt power cycle [ 522.090011][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.110869][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.157367][ T7486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.267285][ T7574] loop1: detected capacity change from 0 to 512 [ 522.317832][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.337875][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.540362][ T7574] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.724: iget: bad extended attribute block 128 [ 522.554276][ T7574] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.724: couldn't read orphan inode 16 (err -117) [ 522.569207][ T7574] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 522.578596][ T7574] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038 (0x7fffffff) [ 522.984107][ T7486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.041093][ T7088] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 523.043408][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 523.343859][ T7088] usb 3-1: device not accepting address 12, error -71 [ 523.371324][ T3653] Bluetooth: hci2: command tx timeout [ 523.430099][ T7566] Falling back ldisc for ttyS3. [ 525.625291][ T7486] device hsr_slave_0 entered promiscuous mode [ 525.681532][ T7486] device hsr_slave_1 entered promiscuous mode [ 525.750800][ T7486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.058936][ T7486] Cannot create hsr debugfs directory [ 526.076537][ T7606] loop3: detected capacity change from 0 to 1024 [ 529.200748][ T7088] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 529.620292][ T7630] loop2: detected capacity change from 0 to 1024 [ 529.637130][ T7088] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.669000][ T7088] usb 2-1: config 0 has no interfaces? [ 529.704577][ T7088] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 529.760744][ T7562] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 529.769473][ T7088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.819558][ T7088] usb 2-1: config 0 descriptor?? [ 530.540888][ T7562] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 530.548486][ T7562] usb 4-1: can't read configurations, error -61 [ 531.398943][ T7562] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 532.950118][ T5461] device hsr_slave_0 left promiscuous mode [ 532.956761][ T5461] device hsr_slave_1 left promiscuous mode [ 532.989763][ T5461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.004314][ T5461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.012654][ T5461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.030322][ T5461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.052411][ T5461] device bridge_slave_1 left promiscuous mode [ 533.058623][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.086778][ T5461] device bridge_slave_0 left promiscuous mode [ 533.108220][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.152032][ T5461] device veth1_macvtap left promiscuous mode [ 533.158194][ T5461] device veth0_macvtap left promiscuous mode [ 533.169896][ T5461] device veth1_vlan left promiscuous mode [ 533.175950][ T5461] device veth0_vlan left promiscuous mode [ 533.853007][ T5461] team0 (unregistering): Port device team_slave_1 removed [ 533.918386][ T5461] team0 (unregistering): Port device team_slave_0 removed [ 533.979785][ T5461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.045301][ T5461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.336399][ T3715] usb 2-1: USB disconnect, device number 14 [ 534.493496][ T7663] loop2: detected capacity change from 0 to 2048 [ 534.554320][ T7663] EXT4-fs: Ignoring removed nobh option [ 534.595483][ T7663] EXT4-fs: Ignoring removed mblk_io_submit option [ 534.925188][ T7673] random: crng reseeded on system resumption [ 535.812404][ T7669] loop1: detected capacity change from 0 to 40427 [ 535.830064][ T7669] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 535.837870][ T7669] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 535.848694][ T7669] F2FS-fs (loop1): invalid crc value [ 536.066057][ T7669] F2FS-fs (loop1): Found nat_bits in checkpoint [ 536.116838][ T7669] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 536.123965][ T7669] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 536.184510][ T5461] bond0 (unregistering): Released all slaves [ 536.417956][ T7663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 537.286960][ T7674] xt_CT: No such helper "pptp" [ 538.018032][ T6253] EXT4-fs (loop2): unmounting filesystem. [ 538.969333][ T7696] loop2: detected capacity change from 0 to 512 [ 538.988499][ T7695] loop3: detected capacity change from 0 to 1024 [ 538.999752][ T7695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 539.042358][ T7695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 539.094266][ T7696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 539.121088][ T7696] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038 (0x7fffffff) [ 539.186533][ T7486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 539.211785][ T7486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 539.229292][ T7486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 539.252185][ T7486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 539.273270][ T7699] input: syz0 as /devices/virtual/input/input6 [ 539.287163][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 539.513501][ T7712] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.748: Directory hole found for htree leaf block 0 [ 540.060273][ T6253] EXT4-fs (loop2): unmounting filesystem. [ 540.077801][ T7486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.167101][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.181497][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.206537][ T7486] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.261765][ T7718] loop3: detected capacity change from 0 to 512 [ 540.269444][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.301408][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.309059][ T7724] loop2: detected capacity change from 0 to 1024 [ 540.318561][ T7718] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 540.318901][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.334934][ T5477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.372383][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.391609][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.406608][ T7724] EXT4-fs: Ignoring removed orlov option [ 540.408496][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.421535][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.428663][ T5477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.556540][ T7724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.567031][ T7718] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 540.568322][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.593076][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.696269][ T7486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.696294][ T7486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.729632][ T7724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 541.770016][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 541.772247][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 541.772859][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 541.774290][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 541.774885][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 541.775435][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.776137][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 541.776642][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.791281][ T7718] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 541.791383][ T7718] System zones: 0-2, 18-18, 34-34 [ 541.794369][ T7718] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 541.797759][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.798423][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 541.811572][ T7718] EXT4-fs (loop3): 1 truncate cleaned up [ 541.811599][ T7718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 542.538882][ T6253] EXT4-fs (loop2): unmounting filesystem. [ 542.775959][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 542.942241][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 543.495098][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 543.495178][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 543.530049][ T7486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.620749][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 543.826585][ T7767] loop2: detected capacity change from 0 to 2048 [ 543.951818][ T7767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 543.952122][ T7767] ext4 filesystem being mounted at /61/bus supports timestamps until 2038 (0x7fffffff) [ 544.021098][ T14] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 544.021315][ T14] usb 4-1: can't read configurations, error -61 [ 544.170844][ T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 545.040928][ T14] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 545.040963][ T14] usb 4-1: can't read configurations, error -61 [ 545.041473][ T14] usb usb4-port1: attempt power cycle [ 545.437427][ T3652] Bluetooth: hci2: command tx timeout [ 545.443467][ T6253] EXT4-fs (loop2): unmounting filesystem. [ 545.452197][ T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 545.700984][ T14] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 545.701058][ T14] usb 4-1: can't read configurations, error -61 [ 545.850828][ T14] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 546.086734][ T7771] Bluetooth: MGMT ver 1.22 [ 546.100787][ T14] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 546.100818][ T14] usb 4-1: can't read configurations, error -61 [ 546.100977][ T14] usb usb4-port1: unable to enumerate USB device [ 546.968700][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 546.990130][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.037846][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.058682][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.109106][ T7486] device veth0_vlan entered promiscuous mode [ 547.135391][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.162217][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.191639][ T7486] device veth1_vlan entered promiscuous mode [ 548.411826][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 548.451299][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 548.499153][ T7486] device veth0_macvtap entered promiscuous mode [ 548.526877][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 548.552374][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 548.581753][ T7486] device veth1_macvtap entered promiscuous mode [ 548.598491][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.711475][ T5482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 548.746209][ T7803] [ 548.748568][ T7803] ====================================================== [ 548.755589][ T7803] WARNING: possible circular locking dependency detected [ 548.762604][ T7803] 6.1.112-syzkaller #0 Not tainted [ 548.767698][ T7803] ------------------------------------------------------ [ 548.774700][ T7803] syz.3.765/7803 is trying to acquire lock: [ 548.780573][ T7803] ffff88807d783130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x57/0x300 [ 548.792054][ T7803] [ 548.792054][ T7803] but task is already holding lock: [ 548.799398][ T7803] ffff8880778a6928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0 [ 548.808266][ T7803] [ 548.808266][ T7803] which lock already depends on the new lock. [ 548.808266][ T7803] [ 548.818650][ T7803] [ 548.818650][ T7803] the existing dependency chain (in reverse order) is: [ 548.827645][ T7803] [ 548.827645][ T7803] -> #3 (&d->lock){+.+.}-{3:3}: [ 548.834671][ T7803] lock_acquire+0x1f8/0x5a0 [ 548.839687][ T7803] __mutex_lock+0x132/0xd80 [ 548.844701][ T7803] __rfcomm_dlc_close+0x259/0x6d0 [ 548.850238][ T7803] rfcomm_dlc_close+0xed/0x180 [ 548.855516][ T7803] __rfcomm_sock_close+0x104/0x220 [ 548.861151][ T7803] rfcomm_sock_shutdown+0xb4/0x230 [ 548.866785][ T7803] rfcomm_sock_release+0x55/0x110 [ 548.872319][ T7803] sock_close+0xcd/0x230 [ 548.877070][ T7803] __fput+0x3f6/0x8d0 [ 548.881558][ T7803] task_work_run+0x246/0x300 [ 548.886662][ T7803] get_signal+0x15fc/0x17d0 [ 548.891675][ T7803] arch_do_signal_or_restart+0xb0/0x1a10 [ 548.897815][ T7803] exit_to_user_mode_loop+0x6a/0x100 [ 548.903609][ T7803] exit_to_user_mode_prepare+0xb1/0x140 [ 548.909661][ T7803] syscall_exit_to_user_mode+0x60/0x270 [ 548.915716][ T7803] do_syscall_64+0x47/0xb0 [ 548.920639][ T7803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.927045][ T7803] [ 548.927045][ T7803] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 548.934415][ T7803] lock_acquire+0x1f8/0x5a0 [ 548.939432][ T7803] __mutex_lock+0x132/0xd80 [ 548.944519][ T7803] rfcomm_dlc_exists+0xa2/0x370 [ 548.949884][ T7803] rfcomm_dev_ioctl+0xb2d/0x2180 [ 548.955341][ T7803] rfcomm_sock_ioctl+0x82/0xc0 [ 548.960622][ T7803] sock_do_ioctl+0x152/0x450 [ 548.965727][ T7803] sock_ioctl+0x47f/0x770 [ 548.970562][ T7803] __se_sys_ioctl+0xf1/0x160 [ 548.975666][ T7803] do_syscall_64+0x3b/0xb0 [ 548.980589][ T7803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.986996][ T7803] [ 548.986996][ T7803] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 548.994888][ T7803] lock_acquire+0x1f8/0x5a0 [ 548.999904][ T7803] __mutex_lock+0x132/0xd80 [ 549.005196][ T7803] rfcomm_dev_ioctl+0x233/0x2180 [ 549.010648][ T7803] rfcomm_sock_ioctl+0x82/0xc0 [ 549.015923][ T7803] sock_do_ioctl+0x152/0x450 [ 549.021018][ T7803] sock_ioctl+0x47f/0x770 [ 549.025861][ T7803] __se_sys_ioctl+0xf1/0x160 [ 549.030957][ T7803] do_syscall_64+0x3b/0xb0 [ 549.035880][ T7803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.042285][ T7803] [ 549.042285][ T7803] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 549.051649][ T7803] validate_chain+0x1661/0x5950 [ 549.057003][ T7803] __lock_acquire+0x125b/0x1f80 [ 549.062366][ T7803] lock_acquire+0x1f8/0x5a0 [ 549.067380][ T7803] lock_sock_nested+0x44/0x100 [ 549.072654][ T7803] rfcomm_sk_state_change+0x57/0x300 [ 549.078450][ T7803] __rfcomm_dlc_close+0x2b2/0x6d0 [ 549.084000][ T7803] rfcomm_dlc_close+0xed/0x180 [ 549.089284][ T7803] __rfcomm_sock_close+0x104/0x220 [ 549.094910][ T7803] rfcomm_sock_shutdown+0xb4/0x230 [ 549.100536][ T7803] rfcomm_sock_release+0x55/0x110 [ 549.106417][ T7803] sock_close+0xcd/0x230 [ 549.111177][ T7803] __fput+0x3f6/0x8d0 [ 549.115671][ T7803] task_work_run+0x246/0x300 [ 549.120771][ T7803] get_signal+0x15fc/0x17d0 [ 549.125789][ T7803] arch_do_signal_or_restart+0xb0/0x1a10 [ 549.131953][ T7803] exit_to_user_mode_loop+0x6a/0x100 [ 549.137747][ T7803] exit_to_user_mode_prepare+0xb1/0x140 [ 549.143797][ T7803] syscall_exit_to_user_mode+0x60/0x270 [ 549.149853][ T7803] do_syscall_64+0x47/0xb0 [ 549.154775][ T7803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.161184][ T7803] [ 549.161184][ T7803] other info that might help us debug this: [ 549.161184][ T7803] [ 549.171394][ T7803] Chain exists of: [ 549.171394][ T7803] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock [ 549.171394][ T7803] [ 549.185290][ T7803] Possible unsafe locking scenario: [ 549.185290][ T7803] [ 549.192722][ T7803] CPU0 CPU1 [ 549.198070][ T7803] ---- ---- [ 549.203421][ T7803] lock(&d->lock); [ 549.207215][ T7803] lock(rfcomm_mutex); [ 549.213890][ T7803] lock(&d->lock); [ 549.220209][ T7803] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 549.226353][ T7803] [ 549.226353][ T7803] *** DEADLOCK *** [ 549.226353][ T7803] [ 549.234479][ T7803] 3 locks held by syz.3.765/7803: [ 549.239487][ T7803] #0: ffff8880746f1a10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 549.249663][ T7803] #1: ffffffff8e6762e8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x37/0x180 [ 549.259050][ T7803] #2: ffff8880778a6928 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0 [ 549.268351][ T7803] [ 549.268351][ T7803] stack backtrace: [ 549.274230][ T7803] CPU: 1 PID: 7803 Comm: syz.3.765 Not tainted 6.1.112-syzkaller #0 [ 549.282198][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 549.292246][ T7803] Call Trace: [ 549.295515][ T7803] [ 549.298435][ T7803] dump_stack_lvl+0x1e3/0x2cb [ 549.303108][ T7803] ? nf_tcp_handle_invalid+0x642/0x642 [ 549.308566][ T7803] ? print_circular_bug+0x12b/0x1a0 [ 549.313766][ T7803] check_noncircular+0x2fa/0x3b0 [ 549.318694][ T7803] ? add_lock_to_list+0x1de/0x2e0 [ 549.323707][ T7803] ? add_chain_block+0x850/0x850 [ 549.328631][ T7803] ? lockdep_lock+0x11f/0x2a0 [ 549.333303][ T7803] ? _find_first_zero_bit+0xd0/0x100 [ 549.338583][ T7803] validate_chain+0x1661/0x5950 [ 549.343429][ T7803] ? register_lock_class+0x100/0x990 [ 549.348705][ T7803] ? reacquire_held_locks+0x660/0x660 [ 549.354071][ T7803] ? is_dynamic_key+0x260/0x260 [ 549.358913][ T7803] ? mark_lock+0x9a/0x340 [ 549.363263][ T7803] ? __lock_acquire+0x125b/0x1f80 [ 549.368303][ T7803] ? mark_lock+0x9a/0x340 [ 549.372629][ T7803] __lock_acquire+0x125b/0x1f80 [ 549.377475][ T7803] lock_acquire+0x1f8/0x5a0 [ 549.381970][ T7803] ? rfcomm_sk_state_change+0x57/0x300 [ 549.387423][ T7803] ? read_lock_is_recursive+0x10/0x10 [ 549.392787][ T7803] ? __mutex_lock+0x2f7/0xd80 [ 549.397455][ T7803] ? rcu_is_watching+0x11/0xb0 [ 549.402204][ T7803] ? detach_timer+0x17d/0x380 [ 549.406871][ T7803] ? __rfcomm_dlc_close+0x259/0x6d0 [ 549.412058][ T7803] ? mutex_lock_nested+0x10/0x10 [ 549.416985][ T7803] lock_sock_nested+0x44/0x100 [ 549.421741][ T7803] ? rfcomm_sk_state_change+0x57/0x300 [ 549.427189][ T7803] rfcomm_sk_state_change+0x57/0x300 [ 549.432462][ T7803] __rfcomm_dlc_close+0x2b2/0x6d0 [ 549.437476][ T7803] rfcomm_dlc_close+0xed/0x180 [ 549.442229][ T7803] __rfcomm_sock_close+0x104/0x220 [ 549.447332][ T7803] rfcomm_sock_shutdown+0xb4/0x230 [ 549.452431][ T7803] rfcomm_sock_release+0x55/0x110 [ 549.457447][ T7803] sock_close+0xcd/0x230 [ 549.461677][ T7803] ? sock_mmap+0x90/0x90 [ 549.465908][ T7803] __fput+0x3f6/0x8d0 [ 549.469883][ T7803] task_work_run+0x246/0x300 [ 549.474461][ T7803] ? __sys_connect+0x161/0x300 [ 549.479213][ T7803] ? __x64_sys_connect+0x76/0x80 [ 549.484141][ T7803] ? task_work_cancel+0x2e0/0x2e0 [ 549.489158][ T7803] get_signal+0x15fc/0x17d0 [ 549.493657][ T7803] ? ptrace_notify+0x370/0x370 [ 549.498421][ T7803] arch_do_signal_or_restart+0xb0/0x1a10 [ 549.504064][ T7803] ? task_work_add+0x314/0x3a0 [ 549.508817][ T7803] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 549.514184][ T7803] ? get_sigframe_size+0x10/0x10 [ 549.519112][ T7803] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 549.525087][ T7803] ? exit_to_user_mode_loop+0x39/0x100 [ 549.530533][ T7803] exit_to_user_mode_loop+0x6a/0x100 [ 549.535805][ T7803] exit_to_user_mode_prepare+0xb1/0x140 [ 549.541338][ T7803] syscall_exit_to_user_mode+0x60/0x270 [ 549.546875][ T7803] do_syscall_64+0x47/0xb0 [ 549.551278][ T7803] ? clear_bhb_loop+0x45/0xa0 [ 549.555944][ T7803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.561836][ T7803] RIP: 0033:0x7f522a97dff9 [ 549.566242][ T7803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.585837][ T7803] RSP: 002b:00007f522b717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 549.594240][ T7803] RAX: fffffffffffffffc RBX: 00007f522ab36130 RCX: 00007f522a97dff9 [ 549.602458][ T7803] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 000000000000000a [ 549.610418][ T7803] RBP: 00007f522a9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 549.618374][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.626338][ T7803] R13: 0000000000000000 R14: 00007f522ab36130 R15: 00007ffe5e6ec6c8 [ 549.634302][ T7803] [ 549.666108][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.781217][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.235920][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.259494][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.276592][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.320119][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.368308][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.400703][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.423321][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.430604][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 550.447638][ T5477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 550.468255][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.491221][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.510674][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.530703][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.540583][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.571990][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.582873][ T7486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.593507][ T7486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.604879][ T7486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.611001][ T3653] Bluetooth: hci2: command tx timeout [ 550.616986][ T7486] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.626663][ T7486] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.637195][ T7486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.646336][ T7486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.666724][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 550.683036][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 550.723398][ T7486] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 550.742567][ T5469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.751323][ T7486] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 550.759069][ T5469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.769985][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 550.791554][ T5492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.799646][ T5492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.808886][ T5469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready