last executing test programs: 27.397006202s ago: executing program 2 (id=2853): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000bb253ce200000000000001000000138450f2a731b036327e9b2da70a0bea7e2b50702474b25478a895615a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) 26.882022335s ago: executing program 2 (id=2854): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x2a00000, &(0x7f0000000600)={[{@init_itable_val={'init_itable', 0x3d, 0x5c9}}, {@grpid}, {@noblock_validity}, {@jqfmt_vfsv1}, {@grpid}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fff}}, {@delalloc}, {@dioread_nolock}, {@quota}]}, 0xfe, 0x54f, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0)={[], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x17}}, {@hash}]}, 0x3, 0x4ae, &(0x7f0000000a00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00090000040000000400f2c4ff0f6400819c00000000000000d31dd38df9689fd577bef681e177f595565dd07bb7ce", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000300)=ANY=[], 0x4, 0x688, &(0x7f0000001a40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001280)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f00000010c0)="$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") creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() prlimit64(0x0, 0x4, &(0x7f0000000040)={0x4f2b, 0x1bc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) rename(0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) r1 = open(&(0x7f0000000000)='./file1\x00', 0x14527e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f8) sendfile(r1, r1, 0x0, 0x100000008) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x80e, &(0x7f00000004c0), 0x3, 0x451, &(0x7f0000000f80)="$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") 25.510529263s ago: executing program 2 (id=2860): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) 24.16217748s ago: executing program 2 (id=2865): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffe38) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8", 0xe17}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) 22.268074738s ago: executing program 2 (id=2870): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0x4, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x2}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) 22.027842476s ago: executing program 2 (id=2874): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000180), 0x12) 21.948458371s ago: executing program 1 (id=2875): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x34) syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000300)=ANY=[@ANYBLOB='nointegrity,usrquota,quota,iocharset=cp866,noquota,gid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=r0, @ANYBLOB="2c001327217cfc71da44b3da29ba0fd0ddd0e6a0b8ff582c2cced037f6f1d39ed1399055e1e6537b0c74ecb9fbef1e9dca8228f0870ccf2ada794c88ac0e2dcd270aaf029b214bb0314dd4f948029001c63fb6e620662a5d2392a14cfcc057f6f2e3b2b7daa03863d54514e80c0b9d48d79aa7c5f794b02a832eae6d46fa40a6deca73bcb53fe0741db28d4c0bcb94fe5983ff63f61d74800ed313b2eb"], 0x0, 0x6117, &(0x7f000000c680)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x3}}}, 0x30}}, 0x2400c004) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048004}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{&(0x7f0000000d00)=@tipc=@id, 0x80, 0x0}}, {{&(0x7f0000001000)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000001840)=""/50, 0x32}, 0xb5}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001c40)=@qipcrtr, 0x80, &(0x7f0000002040)=[{0x0}, {&(0x7f0000000300)=""/82, 0x52}], 0x2, &(0x7f00000020c0)=""/196, 0xc4}}, {{0x0, 0x0, &(0x7f0000003900)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)=""/179, 0xb3}, 0x6}, {{&(0x7f0000003bc0)=@qipcrtr, 0x80, 0x0}, 0x20}], 0x7, 0x20a0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061197800000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000180), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000c00), 0x1, 0x5de, &(0x7f0000000600)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(0x0) 20.960495816s ago: executing program 3 (id=2878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) syz_open_procfs(0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX, @ANYBLOB=',gid=', @ANYRESHEX, @ANYBLOB="ee0b"]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x110e, &(0x7f0000001080), 0x2, 0x482, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) 20.171448288s ago: executing program 1 (id=2879): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) membarrier(0x20, 0x0) 19.145795212s ago: executing program 1 (id=2880): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0xfffffe38) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe17}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) 19.140812914s ago: executing program 3 (id=2881): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x8, 0x8, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r7 = socket$inet6(0xa, 0x3, 0x88) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r8, 0x1, 0x2e, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xbc1}, {0x2}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x34ff}}, 0xe8) syz_open_dev$rtc(&(0x7f0000000040), 0x1, 0x240800) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x40, 0x20, 0x8c, 0x7}, &(0x7f0000000280)=0x18) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 19.127511454s ago: executing program 4 (id=2882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 18.871669544s ago: executing program 4 (id=2883): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000680)=@nfc_llcp, &(0x7f0000000700)=0x80, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000180)="eb", 0x1, 0x80, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @private0}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0), &(0x7f0000000340)=0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB="000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) 18.177126036s ago: executing program 4 (id=2885): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0x4, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x2}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) 18.068226121s ago: executing program 4 (id=2887): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x0, 0x3}) 18.001821418s ago: executing program 0 (id=2888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfff}]}}}}}}}, 0x0) 17.383417428s ago: executing program 0 (id=2889): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x7c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x48, 0x4, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x4}, @AF_MPLS={0x4}]}]}, 0x7c}}, 0x0) 17.093346063s ago: executing program 4 (id=2890): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) membarrier(0x20, 0x0) 13.167991358s ago: executing program 3 (id=2891): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc5060000ffffff970386780df56e5be7070101080a4e7719b506a0977b", 0xffbf}], 0x1}, 0x0) 13.069399462s ago: executing program 0 (id=2892): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x2, 0xd4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0xfffffffe}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 12.773609931s ago: executing program 4 (id=2893): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x2a00000, &(0x7f0000000600)={[{@init_itable_val={'init_itable', 0x3d, 0x5c9}}, {@grpid}, {@noblock_validity}, {@jqfmt_vfsv1}, {@grpid}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fff}}, {@delalloc}, {@dioread_nolock}, {@quota}]}, 0xfe, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0)={[], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x17}}, {@hash}]}, 0x3, 0x4ae, &(0x7f0000000a00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00090000040000000400f2c4ff0f6400819c00000000000000d31dd38df9689fd577bef681e177f595565dd07bb7ce74b2157813e1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000300)=ANY=[], 0x4, 0x688, &(0x7f0000001a40)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001280)=ANY=[], 0x835, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f00000010c0)="$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") creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() prlimit64(0x0, 0x4, &(0x7f0000000040)={0x4f2b, 0x1bc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) rename(0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r1 = open(&(0x7f0000000000)='./file1\x00', 0x14527e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f8) sendfile(r1, r1, 0x0, 0x100000008) mmap(&(0x7f00002a7000/0x5000)=nil, 0x5000, 0x0, 0x3032, 0xffffffffffffffff, 0x4000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x80e, &(0x7f00000004c0), 0x3, 0x451, &(0x7f0000000f80)="$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") 12.701423531s ago: executing program 3 (id=2894): timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) pipe(0x0) 12.391596395s ago: executing program 3 (id=2895): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$eJzs3T1re1UYAPDnpmkSdUgGJxG8oIPTn7arS4qkUMykZFAHLbYFaYLQQsEXDJ1cXRz9BILg5pdw8RsIroKbHQpHbnIvSWuaNtK0vvx+Q3t67vOc85zTQ18oOf3w5dHJYR7HF1/8Eq1WFrVudOMyi07UopJSSjHT/ToAgH+zy5Ti9zS1Sl4WEa31lQUArNHK3/9/WHtJAMCavfPue2/t9vu9t/O8FXujr84HxW/2xfvp893j+DiGcRRb0Y6r6d8Cqp8Wird7KaVxPS904rXR+HxQZI4++Kkcf/e3iEn+drSjM+m6nr/f723nU3P546KO58v5u0X+TrTjxQXz7/d7OwvyY9CI11+dq/9ZtOPnj+KTGMbhpIhZ/pfbef5m+uaPz98vyivys/H5oDmJm0kbj/ypAQAAAAAAAAAAAAAAAAAAAADgP+xZeXdOMyb39xRd5f07G1fFB5uRVzrX7+eZ5mfVQDfuBxqn+DalZj2i39vK8zyVgbP8erxUj/rTrBoAAAAAAAAAAAAAAAAAAAD+Wc4+/ezkYDg8On2QRnUbQPWy/r87Tneu55VYHtyczVUrm0tGjo0qJotYWkaxiAfalrsaz91W83ffrzpg6+6YzWX78zCN6nSdHGSL97AZVU+rOiQ/zsc04p5zNW57lFY6fo2Fj9orr73xwqQxXhIT2bLC3vh1unNlT3ZzFY3Jri5M3ywbc+k3zsZK5/mvXysyt3UAAAAAAAAAAAAAAAAAAMBazV70u+DhxdLUWmqurSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFSz//+/QmNcJt8juBGnZ0+8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4H/gwAAP//GX9i/A==") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x7, 0x0, 0x56, @mcast1, @rand_addr=' \x01\x00', 0x7800, 0x20, 0x8, 0x10000}}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='net/llc/socket\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[], 0xfd14) sendfile(r2, r2, 0x0, 0x100000000) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4) 12.093589697s ago: executing program 1 (id=2896): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200058c0}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.065640503s ago: executing program 0 (id=2898): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0xfffffebe, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.873789986s ago: executing program 3 (id=2899): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x8, 0x8, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r7 = socket$inet6(0xa, 0x3, 0x88) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r8, 0x1, 0x2e, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xbc1}, {0x2}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x34ff}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_open_dev$rtc(&(0x7f0000000040), 0x1, 0x240800) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x40, 0x20, 0x8c, 0x7}, &(0x7f0000000280)=0x18) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 5.658672924s ago: executing program 0 (id=2900): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0xfffffffe}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0xf, 0x0, [@remote, @multicast1, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 3.907961023s ago: executing program 1 (id=2901): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfff}]}}}}}}}, 0x0) 121.2627ms ago: executing program 1 (id=2903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 0s ago: executing program 0 (id=2904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 8][T14912] F2FS-fs (loop2): invalid crc value [ 869.367853][T14912] F2FS-fs (loop2): Found nat_bits in checkpoint [ 869.414860][T14914] netlink: 'syz.0.2256': attribute type 20 has an invalid length. [ 869.568204][T14912] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 869.577120][T14912] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 869.798361][T14925] loop4: detected capacity change from 0 to 1024 [ 870.719350][T14927] syz.2.2257: attempt to access beyond end of device [ 870.719350][T14927] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 871.045762][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.054512][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.139979][T13398] hsr_slave_0: left promiscuous mode [ 871.188842][T13398] hsr_slave_1: left promiscuous mode [ 871.277092][T13398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.317690][T13398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.350488][T13398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.400385][T13398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.527926][T13398] veth1_macvtap: left promiscuous mode [ 871.560376][T13398] veth0_macvtap: left promiscuous mode [ 871.567789][T13398] veth1_vlan: left promiscuous mode [ 871.573231][T13398] veth0_vlan: left promiscuous mode [ 874.220993][T14953] Cannot find set identified by id 0 to match [ 875.201578][T13398] team0 (unregistering): Port device team_slave_1 removed [ 875.491420][T13398] team0 (unregistering): Port device team_slave_0 removed [ 877.508280][T14958] tipc: Enabling of bearer rejected, failed to enable media [ 878.168717][T14981] Cannot find set identified by id 0 to match [ 878.340868][T14829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 878.658320][T14829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 879.008212][T14829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 879.068716][T14829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 879.605377][T14829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.635685][T14829] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.671463][T13401] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.678708][T13401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.856868][T13401] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.864024][T13401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.902102][T15013] loop2: detected capacity change from 0 to 128 [ 879.981934][T14829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 880.044034][T15013] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 880.095729][T15013] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 880.751569][T14829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.997810][T14829] veth0_vlan: entered promiscuous mode [ 881.702858][T14829] veth1_vlan: entered promiscuous mode [ 882.221427][T14829] veth0_macvtap: entered promiscuous mode [ 882.236939][T14829] veth1_macvtap: entered promiscuous mode [ 882.622400][T14829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.681233][T14829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.718337][T14829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.768391][T13342] Bluetooth: hci5: command 0x0406 tx timeout [ 882.784774][T14829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.825392][T14829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.885548][T14829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.905501][T14829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 882.985421][T14829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.017848][T14829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.083908][T14829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.119935][T14829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.162881][T14829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.268605][T14829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.286650][T14829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.304108][T14829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.316227][T14829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.333082][T14829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.376149][T14829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.394493][T14829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.405020][T14829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.413917][T14829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.423159][T14829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.459296][T14193] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 883.853127][ T6667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.861277][ T6667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.742512][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.758768][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.436489][T15057] xt_connbytes: Forcing CT accounting to be enabled [ 885.443388][T15057] Cannot find add_set index 0 as target [ 885.522088][T15067] loop3: detected capacity change from 0 to 2048 [ 885.645801][T15067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.742486][T15080] loop4: detected capacity change from 0 to 2048 [ 885.871190][T15080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.205906][T15092] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 886.221698][T15092] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 886.234131][T15092] EXT4-fs (loop3): This should not happen!! Data will be lost [ 886.234131][T15092] [ 886.243941][T15092] EXT4-fs (loop3): Total free blocks count 0 [ 886.250039][T15092] EXT4-fs (loop3): Free/Dirty block details [ 886.256085][T15092] EXT4-fs (loop3): free_blocks=2415919104 [ 886.261877][T15092] EXT4-fs (loop3): dirty_blocks=16 [ 886.267082][T15092] EXT4-fs (loop3): Block reservation details [ 886.273701][T15092] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 886.309613][T15093] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 887.169113][T15100] loop3: detected capacity change from 0 to 512 [ 887.178882][T15100] ext2: Unknown parameter 'dont_appraise' [ 887.252348][T15090] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 887.420526][T15096] loop2: detected capacity change from 0 to 40427 [ 887.428038][T15096] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 887.435839][T15096] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 887.447218][T15096] F2FS-fs (loop2): invalid crc value [ 887.465453][T15090] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 887.488215][T15090] EXT4-fs (loop4): This should not happen!! Data will be lost [ 887.488215][T15090] [ 887.517360][T15090] EXT4-fs (loop4): Total free blocks count 0 [ 887.523428][T15090] EXT4-fs (loop4): Free/Dirty block details [ 887.534345][T15090] EXT4-fs (loop4): free_blocks=2415919104 [ 887.540174][T15090] EXT4-fs (loop4): dirty_blocks=16 [ 887.547918][T15096] F2FS-fs (loop2): Found nat_bits in checkpoint [ 887.592136][T15090] EXT4-fs (loop4): Block reservation details [ 887.600032][T15090] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 887.614703][T15096] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 887.621944][T15096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 888.196654][T15110] syz.2.2291: attempt to access beyond end of device [ 888.196654][T15110] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 890.934430][ T63] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 891.000336][ T63] EXT4-fs (loop4): This should not happen!! Data will be lost [ 891.000336][ T63] [ 891.040752][T15118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2297'. [ 891.049784][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2297'. [ 891.060579][T15118] Cannot find set identified by id 0 to match [ 891.091856][ T63] EXT4-fs (loop4): Total free blocks count 0 [ 891.115143][ T63] EXT4-fs (loop4): Free/Dirty block details [ 891.125935][ T63] EXT4-fs (loop4): free_blocks=2415919104 [ 891.131681][ T63] EXT4-fs (loop4): dirty_blocks=16 [ 891.143803][ T63] EXT4-fs (loop4): Block reservation details [ 891.166461][ T63] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 891.176921][T15121] Cannot find set identified by id 0 to match [ 891.542235][T12918] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.917837][T15133] loop2: detected capacity change from 0 to 8192 [ 894.757746][T15155] xt_connbytes: Forcing CT accounting to be enabled [ 894.780639][T15159] loop4: detected capacity change from 0 to 1024 [ 894.797400][T15155] Cannot find add_set index 0 as target [ 894.911760][T15151] xt_connbytes: Forcing CT accounting to be enabled [ 894.920189][T15151] Cannot find add_set index 0 as target [ 894.973450][T15159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.545649][ T46] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 897.186121][T15178] xt_connbytes: Forcing CT accounting to be enabled [ 897.193374][T15178] Cannot find add_set index 0 as target [ 897.410720][T15181] Cannot find set identified by id 0 to match [ 897.441490][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 897.441527][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.441549][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 897.441573][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 897.640669][T15185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2314'. [ 897.654235][ T29] audit: type=1800 audit(1727652615.581:325): pid=15184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2307" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 898.015789][ T46] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 898.015825][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.015847][ T46] usb 3-1: Product: syz [ 898.015863][ T46] usb 3-1: Manufacturer: syz [ 898.015878][ T46] usb 3-1: SerialNumber: syz [ 898.032508][ T46] usb 3-1: config 0 descriptor?? [ 898.048166][ T46] redrat3 3-1:0.0: Couldn't find all endpoints [ 898.083644][T12918] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.466691][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.766013][T15192] capability: warning: `syz.4.2316' uses deprecated v2 capabilities in a way that may be insecure [ 898.787732][T15194] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 898.793127][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.816316][T15189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.827004][T15189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.067933][T15192] program syz.4.2316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 899.814413][T15203] Cannot find add_set index 0 as target [ 899.913964][ T5281] usb 3-1: USB disconnect, device number 23 [ 900.472037][T15218] Cannot find add_set index 0 as target [ 900.703552][T15216] evm: overlay not supported [ 900.952275][T15222] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2324'. [ 901.628938][T15201] loop4: detected capacity change from 0 to 40427 [ 901.646327][T15201] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3) [ 901.654033][T15201] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 901.662568][T15201] F2FS-fs (loop4): heap/no_heap options were deprecated [ 901.669844][T15201] F2FS-fs (loop4): Image doesn't support compression [ 901.715401][T15201] F2FS-fs (loop4): invalid crc value [ 901.928161][T15201] F2FS-fs (loop4): Found nat_bits in checkpoint [ 902.911767][T15233] Cannot find add_set index 0 as target [ 902.965535][T15201] F2FS-fs (loop4): Start checkpoint disabled! [ 903.277581][T15223] loop2: detected capacity change from 0 to 32768 [ 904.545614][ T5284] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 905.387060][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 905.527374][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 905.542418][ T5284] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 905.553011][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.555429][T15260] Cannot find set identified by id 0 to match [ 905.568422][ T5284] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 905.602077][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.707443][T15266] loop2: detected capacity change from 0 to 1024 [ 906.901244][ T5284] usb 5-1: Product: syz [ 906.953750][ T5284] usb 5-1: Manufacturer: syz [ 906.972143][ T5284] usb 5-1: SerialNumber: syz [ 907.148167][ T5284] usb 5-1: config 0 descriptor?? [ 907.267689][T15273] loop2: detected capacity change from 0 to 1024 [ 907.918450][ T5284] usb 5-1: can't set config #0, error -71 [ 908.134838][ T5284] usb 5-1: USB disconnect, device number 33 [ 908.207498][T15274] Cannot find add_set index 0 as target [ 908.871332][T15279] loop4: detected capacity change from 0 to 1024 [ 911.491205][T15290] loop2: detected capacity change from 0 to 32768 [ 912.183357][T15311] read_mapping_page failed! [ 912.188137][T15311] ialloc: diAlloc returned -5! [ 912.755497][ T9717] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 914.736362][T15330] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2354'. [ 915.286212][T15337] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2355'. [ 916.370303][T13342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 916.382257][T13342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 916.391338][T13342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 916.420174][T13342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 916.436599][T13342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 916.450770][T13342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 916.748131][T15341] chnl_net:caif_netlink_parms(): no params data found [ 916.948359][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.961509][T15341] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.971348][T15341] bridge_slave_0: entered allmulticast mode [ 916.981843][T15341] bridge_slave_0: entered promiscuous mode [ 916.993157][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.003083][T15341] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.013291][T15341] bridge_slave_1: entered allmulticast mode [ 917.023067][T15341] bridge_slave_1: entered promiscuous mode [ 917.710924][T15357] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2360'. [ 918.275140][T15341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.490679][ T2536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.527824][ T5232] Bluetooth: hci3: command tx timeout [ 918.589112][T15341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.605772][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 919.507946][ T2536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.608744][T15341] team0: Port device team_slave_0 added [ 919.746008][ T2536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.853643][T15341] team0: Port device team_slave_1 added [ 920.463181][ T2536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.512000][T15341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.535501][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.611079][T13342] Bluetooth: hci3: command tx timeout [ 920.625466][T15341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.677477][T15341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.678362][T15366] loop2: detected capacity change from 0 to 32768 [ 920.684625][T15341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.684649][T15341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.206478][T15379] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 921.206478][T15379] [ 921.215861][T15379] ERROR: (device loop2): remounting filesystem as read-only [ 921.223645][T15379] ialloc: diAlloc returned -5! [ 921.808787][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2366'. [ 921.885796][T15341] hsr_slave_0: entered promiscuous mode [ 921.895904][T15341] hsr_slave_1: entered promiscuous mode [ 921.917812][T15341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.935691][T15341] Cannot create hsr debugfs directory [ 922.013959][ T2536] bridge_slave_1: left allmulticast mode [ 922.029408][ T2536] bridge_slave_1: left promiscuous mode [ 922.037035][ T2536] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.048741][ T2536] bridge_slave_0: left allmulticast mode [ 922.054440][ T2536] bridge_slave_0: left promiscuous mode [ 922.211582][ T2536] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.678374][T15385] Cannot find add_set index 0 as target [ 922.686967][T13342] Bluetooth: hci3: command tx timeout [ 925.095527][T13342] Bluetooth: hci3: command tx timeout [ 925.420262][T15403] loop2: detected capacity change from 0 to 1024 [ 927.045079][T15412] Cannot find add_set index 0 as target [ 927.770290][T15406] xt_connbytes: Forcing CT accounting to be enabled [ 927.780258][T15406] Cannot find add_set index 0 as target [ 927.782772][T15417] loop2: detected capacity change from 0 to 512 [ 927.910792][T15417] loop2: detected capacity change from 0 to 1024 [ 927.919505][T15417] hfsplus: unable to parse mount options [ 929.502902][ T2536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.516253][ T2536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.525724][ T5282] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 929.535159][ T2536] bond0 (unregistering): Released all slaves [ 929.678454][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.691980][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1576, setting to 1024 [ 929.703770][ T5282] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 929.713237][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.740037][ T5282] usb 5-1: config 0 descriptor?? [ 929.746896][T15432] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 929.979072][T15429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.027408][T15429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.167491][ T2536] hsr_slave_0: left promiscuous mode [ 930.180009][ T2536] hsr_slave_1: left promiscuous mode [ 930.180864][ T2536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.180903][ T2536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.181548][ T2536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.181575][ T2536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.266885][ T2536] veth1_macvtap: left promiscuous mode [ 930.378823][ T2536] veth0_macvtap: left promiscuous mode [ 930.378967][ T2536] veth1_vlan: left promiscuous mode [ 930.379061][ T2536] veth0_vlan: left promiscuous mode [ 931.301948][T15454] random: crng reseeded on system resumption [ 931.949001][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.957145][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.705476][ T5312] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 932.867385][ T5312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.877967][ T5312] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 932.896828][ T5312] usb 2-1: New USB device found, idVendor=045e, idProduct=01da, bcdDevice= 0.80 [ 932.915604][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.934866][ T5312] usb 2-1: config 0 descriptor?? [ 933.263120][ T2536] team0 (unregistering): Port device team_slave_1 removed [ 933.337369][ T2536] team0 (unregistering): Port device team_slave_0 removed [ 933.950155][T15465] loop2: detected capacity change from 0 to 1024 [ 934.244173][T13342] Bluetooth: hci4: command 0x0406 tx timeout [ 934.765962][ T5312] usb 2-1: USB disconnect, device number 23 [ 934.771666][ T5282] usb 5-1: string descriptor 0 read error: -32 [ 934.803243][ T5282] usbhid 5-1:0.0: can't add hid device: -32 [ 934.817146][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 935.738581][T15432] nlmon0: entered promiscuous mode [ 935.804806][T15432] vlan2: entered promiscuous mode [ 935.813697][T15432] vlan2: entered allmulticast mode [ 935.819282][T15432] nlmon0: entered allmulticast mode [ 935.827264][T15432] nlmon0: left allmulticast mode [ 935.833408][T15432] nlmon0: left promiscuous mode [ 935.887900][T15467] netlink: 'syz.2.2385': attribute type 6 has an invalid length. [ 935.896375][T15472] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2387'. [ 936.383661][T15485] Cannot find add_set index 0 as target [ 936.761076][T15488] blktrace: Concurrent blktraces are not allowed on loop5 [ 936.934498][ T5282] usb 5-1: USB disconnect, device number 34 [ 937.084465][T15494] loop4: detected capacity change from 0 to 128 [ 937.130082][T15494] EXT4-fs (loop4): Test dummy encryption mode enabled [ 937.523676][T15494] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 937.591822][T15494] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 937.596586][T15502] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2391'. [ 938.127696][T15514] Cannot find set identified by id 0 to match [ 938.643185][T15341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 940.083978][T15341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 940.966239][T15341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 941.002290][T12918] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 941.009762][T15341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 941.154879][T15341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.174810][T15341] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.189861][T13398] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.197057][T13398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.220477][T15529] loop4: detected capacity change from 0 to 1024 [ 941.257394][T13398] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.264646][T13398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.299194][T15529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.467933][T15341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 941.770032][T15341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 941.949733][T15539] netlink: 'syz.1.2401': attribute type 6 has an invalid length. [ 942.076029][ T29] audit: type=1800 audit(1727652660.001:326): pid=15534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2399" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 942.289687][T12918] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.545404][ T9717] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 942.587224][T15557] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2404'. [ 943.030788][ T9717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.066480][ T9717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1576, setting to 1024 [ 943.077516][T15341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.113121][ T9717] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 943.143979][ T9717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.182269][ T9717] usb 3-1: config 0 descriptor?? [ 943.213419][T15546] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 943.247704][T15341] veth0_vlan: entered promiscuous mode [ 943.276938][T15341] veth1_vlan: entered promiscuous mode [ 943.301871][T15567] loop4: detected capacity change from 0 to 512 [ 943.342507][T15567] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 943.370959][T15341] veth0_macvtap: entered promiscuous mode [ 943.426605][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2406'. [ 943.451570][T15341] veth1_macvtap: entered promiscuous mode [ 943.454755][T15546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.477195][T15546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.513815][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.546006][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.546046][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.546065][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.546082][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.546096][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.546113][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.546127][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.547487][T15341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.554068][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.554094][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.554107][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.554120][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.554131][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.554143][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.554154][T15341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.554167][T15341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.565568][T15341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.572570][T15341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.572608][T15341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.572635][T15341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.572662][T15341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.632611][T15572] nlmon0: entered promiscuous mode [ 943.632675][T15572] vlan3: entered promiscuous mode [ 943.632871][T15572] vlan3: entered allmulticast mode [ 943.632887][T15572] nlmon0: entered allmulticast mode [ 943.647807][T15572] nlmon0: left allmulticast mode [ 943.647976][T15572] nlmon0: left promiscuous mode [ 943.872592][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.872618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.435789][T15581] Cannot find set identified by id 0 to match [ 944.651512][ T9717] usb 3-1: string descriptor 0 read error: -71 [ 944.681787][ T9717] usbhid 3-1:0.0: can't add hid device: -71 [ 944.735502][ T9717] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 944.756688][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.764675][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.901606][ T9717] usb 3-1: USB disconnect, device number 24 [ 945.951671][T15595] blktrace: Concurrent blktraces are not allowed on loop9 [ 946.671746][T15601] loop2: detected capacity change from 0 to 40427 [ 946.754993][T15601] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 946.776476][T15601] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 946.908579][T15601] F2FS-fs (loop2): heap/no_heap options were deprecated [ 946.944512][T15601] F2FS-fs (loop2): Image doesn't support compression [ 946.963893][T15601] F2FS-fs (loop2): invalid crc value [ 946.971123][T15601] F2FS-fs (loop2): Found nat_bits in checkpoint [ 947.405433][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'. [ 947.429749][T15601] F2FS-fs (loop2): Start checkpoint disabled! [ 947.440469][T15604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.461128][T15601] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 947.470512][T15601] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 947.485750][T15604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.668528][T15604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.688437][T15604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.717425][T15620] syz.2.2410: attempt to access beyond end of device [ 947.717425][T15620] loop2: rw=2049, sector=53248, nr_sectors = 544 limit=40427 [ 947.795540][ T5281] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 947.985483][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 947.996735][ T5281] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 948.015101][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.044950][ T11] kworker/u8:0: attempt to access beyond end of device [ 948.044950][ T11] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 948.067726][ T5281] usb 4-1: Product: syz [ 948.072483][T15604] batadv0 (unregistering): left allmulticast mode [ 948.080036][T15604] batadv0 (unregistering): left promiscuous mode [ 948.092758][ T5281] usb 4-1: Manufacturer: syz [ 948.101237][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 948.113461][ T5281] usb 4-1: SerialNumber: syz [ 948.124634][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 948.162464][ T5281] r8152-cfgselector 4-1: Unknown version 0x0000 [ 948.180441][ T5281] r8152-cfgselector 4-1: config 0 descriptor?? [ 949.162475][T15615] xt_l2tp: v2 doesn't support IP mode [ 949.396179][T15619] loop4: detected capacity change from 0 to 32768 [ 949.498333][T15647] loop2: detected capacity change from 0 to 8 [ 949.694084][T15647] SQUASHFS error: Unable to read inode 0x9 [ 949.783206][T15619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2413 (15619) [ 950.149170][T15619] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 950.196436][T15619] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 950.207026][T15619] BTRFS info (device loop4): using free-space-tree [ 951.199952][T15673] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2418'. [ 951.785941][T12918] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 952.959637][ T5233] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 953.226569][T15705] loop3: detected capacity change from 0 to 1024 [ 953.235221][T15706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2423'. [ 953.607618][T15705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.670050][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2426'. [ 953.694058][T15719] 9pnet_virtio: no channels available for device syz [ 954.825420][T15723] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2425'. [ 955.267144][T15717] Cannot find add_set index 0 as target [ 955.453681][T15341] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.403375][T15737] loop2: detected capacity change from 0 to 32768 [ 957.508849][T15751] random: crng reseeded on system resumption [ 958.507604][T15757] netlink: 'syz.3.2436': attribute type 20 has an invalid length. [ 958.601203][T15759] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 959.621109][T15762] read_mapping_page failed! [ 959.635090][T15762] ialloc: diAlloc returned -5! [ 960.600104][T15773] block device autoloading is deprecated and will be removed. [ 960.651112][T15769] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2438'. [ 961.129884][T15777] Cannot find add_set index 0 as target [ 961.838209][T15782] loop2: detected capacity change from 0 to 1024 [ 962.040692][T15782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.941905][T15772] loop3: detected capacity change from 0 to 40427 [ 962.991356][T15772] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 963.034042][T15772] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 963.053036][T13342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 963.083084][T13342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 963.113523][T13342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 963.140267][T15772] F2FS-fs (loop3): Found nat_bits in checkpoint [ 963.156013][T13342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 963.482761][T13342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 963.499796][ T29] audit: type=1800 audit(1727652681.431:327): pid=15796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2445" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 963.520911][T13342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 963.904174][T14193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.209881][ T6291] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.037997][T15810] random: crng reseeded on system resumption [ 965.549475][ T6291] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.720418][T15818] blktrace: Concurrent blktraces are not allowed on loop5 [ 965.796119][T15817] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2451'. [ 965.856591][T13342] Bluetooth: hci0: command tx timeout [ 966.315245][ T6291] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.061530][ T6291] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.930214][ T5232] Bluetooth: hci0: command tx timeout [ 967.948519][ T6291] bridge_slave_1: left allmulticast mode [ 967.958166][ T6291] bridge_slave_1: left promiscuous mode [ 967.972518][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.933069][T15847] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 969.096108][ T6291] bridge_slave_0: left allmulticast mode [ 969.102222][ T6291] bridge_slave_0: left promiscuous mode [ 969.110429][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.600862][T15850] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2457'. [ 970.025421][T13342] Bluetooth: hci0: command tx timeout [ 970.087113][T15859] loop2: detected capacity change from 0 to 1024 [ 970.686400][T15859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.013832][T15875] random: crng reseeded on system resumption [ 972.143316][T13342] Bluetooth: hci0: command tx timeout [ 972.335513][ T29] audit: type=1800 audit(1727652690.261:328): pid=15859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2458" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 972.469182][T15881] loop1: detected capacity change from 0 to 2048 [ 972.641028][T14193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.655942][T15881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.765570][T15881] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 972.783097][T15881] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 972.784038][ T6291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.795507][T15881] EXT4-fs (loop1): This should not happen!! Data will be lost [ 972.795507][T15881] [ 972.795561][T15881] EXT4-fs (loop1): Total free blocks count 0 [ 972.795577][T15881] EXT4-fs (loop1): Free/Dirty block details [ 972.795595][T15881] EXT4-fs (loop1): free_blocks=2415919104 [ 972.795613][T15881] EXT4-fs (loop1): dirty_blocks=16 [ 972.795635][T15881] EXT4-fs (loop1): Block reservation details [ 972.795650][T15881] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 972.852977][T15886] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 972.892512][ T6291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.945121][ T6291] bond0 (unregistering): Released all slaves [ 973.043691][T15788] chnl_net:caif_netlink_parms(): no params data found [ 975.811340][T15901] Cannot find add_set index 0 as target [ 976.217403][T15905] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2466'. [ 976.534351][T15788] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.588877][T15788] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.608656][T15788] bridge_slave_0: entered allmulticast mode [ 976.641111][T15788] bridge_slave_0: entered promiscuous mode [ 978.180400][T15925] loop3: detected capacity change from 0 to 1024 [ 979.547558][T15925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.561761][T15788] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.576783][T15788] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.584158][T15788] bridge_slave_1: entered allmulticast mode [ 979.673563][T15937] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 980.316604][T15788] bridge_slave_1: entered promiscuous mode [ 980.367005][T15788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.637811][ T29] audit: type=1800 audit(1727652698.551:329): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2471" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 980.720859][T15788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.156327][T15950] Cannot find set identified by id 0 to match [ 982.176818][T15341] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.677445][T15958] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2477'. [ 983.082399][T15966] loop1: detected capacity change from 0 to 256 [ 983.101055][T15966] exfat: Unknown parameter '0xffffffffffffffff' [ 983.229243][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2476'. [ 984.496961][T15973] loop1: detected capacity change from 0 to 16 [ 984.874818][T15973] erofs: (device loop1): mounted with root inode @ nid 36. [ 984.900903][ T6291] hsr_slave_0: left promiscuous mode [ 984.913886][ T6291] hsr_slave_1: left promiscuous mode [ 984.982544][ T6291] veth1_macvtap: left promiscuous mode [ 985.054814][ T6291] veth0_macvtap: left promiscuous mode [ 985.456917][ T6291] veth1_vlan: left promiscuous mode [ 985.462281][ T6291] veth0_vlan: left promiscuous mode [ 985.959172][T15993] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 988.342041][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 988.409695][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 988.988930][T15788] team0: Port device team_slave_0 added [ 989.085530][T15997] netem: change failed [ 989.169390][T15788] team0: Port device team_slave_1 added [ 989.308993][T16003] loop3: detected capacity change from 0 to 1024 [ 989.692419][T16008] Cannot find set identified by id 0 to match [ 989.795243][T15788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.905428][T15788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.180392][T15788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.276044][T15788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.285457][T15788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.324249][T15788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.302893][T16003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.459962][T16024] Cannot find add_set index 0 as target [ 991.915699][ T29] audit: type=1800 audit(1727652709.841:330): pid=16032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2487" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 992.713613][T16034] Cannot find add_set index 0 as target [ 993.129981][T15341] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.138997][T15788] hsr_slave_0: entered promiscuous mode [ 993.416519][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.423113][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.584444][T15788] hsr_slave_1: entered promiscuous mode [ 993.806092][T15788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 993.813709][T15788] Cannot create hsr debugfs directory [ 993.846058][T16045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2495'. [ 994.000866][T16053] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 995.175116][T16058] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2498'. [ 995.247267][T16055] xt_connbytes: Forcing CT accounting to be enabled [ 995.258493][T16055] Cannot find add_set index 0 as target [ 996.936691][T16075] Cannot find set identified by id 0 to match [ 999.140464][T16081] Cannot find add_set index 0 as target [ 999.239841][T16100] loop2: detected capacity change from 0 to 256 [ 999.271283][T16100] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 999.280644][T16096] netlink: 'syz.0.2505': attribute type 20 has an invalid length. [ 999.307571][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'. [ 999.333181][T16100] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 999.355541][T16102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.363862][T16102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.384130][T16102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.517602][T16102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.751892][ T29] audit: type=1800 audit(1727652717.561:331): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2506" name="bus" dev="loop2" ino=1048827 res=0 errno=0 [ 1000.236467][T16102] tipc: Resetting bearer [ 1000.624059][T16102] tipc: Disabling bearer [ 1001.583582][T16130] Cannot find add_set index 0 as target [ 1002.103412][T16134] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2511'. [ 1002.846628][T15788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1002.869024][T15788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1002.875978][T16138] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2512'. [ 1002.905818][T15788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1003.148476][T15788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1005.623503][T15788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.641252][T15788] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.675234][T15788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1005.685828][T15788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1005.762491][T15960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.769689][T15960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.006092][T15960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.006165][T15960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.024652][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2520'. [ 1006.376019][ T46] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1006.527573][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 1006.547087][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1006.547245][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1006.547308][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1006.547395][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.547623][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1006.547710][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.379713][T15788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.611666][ T46] usb 4-1: GET_CAPABILITIES returned 0 [ 1007.611705][ T46] usbtmc 4-1:16.0: can't read capabilities [ 1008.155048][T15788] veth0_vlan: entered promiscuous mode [ 1008.594415][T15788] veth1_vlan: entered promiscuous mode [ 1008.600433][ T9717] usb 4-1: USB disconnect, device number 26 [ 1009.237795][T15788] veth0_macvtap: entered promiscuous mode [ 1009.258483][T15788] veth1_macvtap: entered promiscuous mode [ 1010.078930][T15788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.089804][T15788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.100059][T15788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.110876][T15788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.120984][T15788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.131788][T15788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.143175][T15788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.152846][T15788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.163631][T15788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.173844][T15788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.185513][T15788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.196188][T15788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.206763][T15788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.217873][T15788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.227898][T15788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.236779][T15788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.245559][T15788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.254440][T15788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.498146][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.572199][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.620530][T15960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.653872][T15960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.684254][T16245] Cannot find add_set index 0 as target [ 1013.033652][T16242] Cannot find set identified by id 0 to match [ 1014.343008][T16268] can0: slcan on ptm0. [ 1014.945912][T16256] xt_connbytes: Forcing CT accounting to be enabled [ 1014.952554][T16256] Cannot find add_set index 0 as target [ 1015.009432][T16257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2533'. [ 1015.126803][T16234] can0 (unregistered): slcan off ptm0. [ 1015.264432][T16276] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2534'. [ 1016.498663][T16286] loop4: detected capacity change from 0 to 512 [ 1016.841798][T16296] loop4: detected capacity change from 0 to 1024 [ 1017.108881][T16302] loop1: detected capacity change from 0 to 512 [ 1017.136938][ T5312] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1017.187001][T16302] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 1017.309896][T16302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2540'. [ 1017.485386][ T5312] usb 4-1: Using ep0 maxpacket: 8 [ 1017.492549][ T5312] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1017.502776][ T5312] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1017.518274][ T5312] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 1017.534462][ T5312] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1017.664876][ T5312] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1018.032506][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.658279][T16322] Cannot find add_set index 0 as target [ 1018.894569][T16323] Cannot find set identified by id 0 to match [ 1019.165575][ T5312] usb 4-1: GET_CAPABILITIES returned 0 [ 1019.175440][ T5312] usbtmc 4-1:16.0: can't read capabilities [ 1020.259355][T16334] loop1: detected capacity change from 0 to 2048 [ 1020.320855][T16334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.325927][ T5312] usb 4-1: USB disconnect, device number 27 [ 1020.365384][T16340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2546'. [ 1020.546407][T16351] overlayfs: missing 'lowerdir' [ 1020.772417][T16354] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1020.790637][T16354] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 1020.803080][T16354] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1020.803080][T16354] [ 1020.812902][T16354] EXT4-fs (loop1): Total free blocks count 0 [ 1020.819015][T16354] EXT4-fs (loop1): Free/Dirty block details [ 1020.825499][T16354] EXT4-fs (loop1): free_blocks=2415919104 [ 1020.831302][T16354] EXT4-fs (loop1): dirty_blocks=16 [ 1020.836961][T16354] EXT4-fs (loop1): Block reservation details [ 1020.843016][T16354] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1020.880336][T16355] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 1021.448147][T16360] loop2: detected capacity change from 0 to 512 [ 1021.460397][T16360] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1021.719709][T16358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2549'. [ 1021.817615][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'. [ 1022.733262][ T5281] IPVS: starting estimator thread 0... [ 1022.761098][T16369] Cannot find set identified by id 0 to match [ 1022.910009][T16380] IPVS: using max 32 ests per chain, 76800 per kthread [ 1023.035991][T16384] Cannot find set identified by id 0 to match [ 1023.574589][T16390] Cannot find add_set index 0 as target [ 1024.340605][T16399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2558'. [ 1024.388625][T11307] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1024.554348][T11307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.585190][T11307] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 1024.610739][T11307] usb 5-1: New USB device found, idVendor=045e, idProduct=01da, bcdDevice= 0.80 [ 1024.655451][T11307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.707061][T11307] usb 5-1: config 0 descriptor?? [ 1025.006184][T16411] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1026.047664][T16420] random: crng reseeded on system resumption [ 1027.719298][T16438] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2565'. [ 1028.185413][ T5281] usb 5-1: USB disconnect, device number 35 [ 1028.366931][T16443] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2570'. [ 1028.661455][T16446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2569'. [ 1029.108172][T16451] can0: slcan on ptm0. [ 1030.072188][T16459] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1030.209665][T16447] can0 (unregistered): slcan off ptm0. [ 1031.806513][T16463] blktrace: Concurrent blktraces are not allowed on loop7 [ 1034.609706][T16467] Cannot find add_set index 0 as target [ 1034.725641][ T46] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1034.766801][T16491] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2582'. [ 1035.253344][T16493] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1035.399413][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 1035.420698][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1035.494361][T16498] random: crng reseeded on system resumption [ 1036.270733][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1036.281095][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1036.307665][ T46] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1036.316993][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.325132][ T46] usb 3-1: Product: syz [ 1036.330304][ T46] usb 3-1: Manufacturer: syz [ 1036.335043][ T46] usb 3-1: SerialNumber: syz [ 1036.347257][ T46] usb 3-1: config 0 descriptor?? [ 1036.458918][ T46] redrat3 3-1:0.0: Couldn't find all endpoints [ 1036.880775][T16501] loop1: detected capacity change from 0 to 40427 [ 1036.965340][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.975070][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.990063][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.999913][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.098721][T16506] overlayfs: missing 'workdir' [ 1037.196051][T16501] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3) [ 1037.290574][T16501] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1037.602620][T16501] F2FS-fs (loop1): heap/no_heap options were deprecated [ 1037.615403][T16501] F2FS-fs (loop1): Image doesn't support compression [ 1037.632691][T16501] F2FS-fs (loop1): invalid crc value [ 1037.651515][T16501] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1037.881989][T16514] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1038.587221][T11307] usb 3-1: USB disconnect, device number 25 [ 1038.703282][T16501] F2FS-fs (loop1): Start checkpoint disabled! [ 1038.719897][T16501] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1038.752035][T16501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1039.201794][T16523] syz.1.2585: attempt to access beyond end of device [ 1039.201794][T16523] loop1: rw=2049, sector=53248, nr_sectors = 544 limit=40427 [ 1040.219348][ T2482] kworker/u8:6: attempt to access beyond end of device [ 1040.219348][ T2482] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1040.227856][T16531] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2594'. [ 1040.282114][ T2482] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1040.329252][ T2482] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1040.534801][T16519] loop4: detected capacity change from 0 to 40427 [ 1040.668178][T16519] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1040.715381][T16519] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1040.816558][T16519] F2FS-fs (loop4): invalid crc value [ 1040.992461][T16519] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1041.747248][T16519] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1041.789560][T16519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1041.820793][T16525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1041.841642][T16525] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1041.863321][T13342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1041.871525][T13342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1041.881034][T13342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1041.885616][T16525] Bluetooth: hci3: command 0x0406 tx timeout [ 1041.894267][T13342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1042.721178][T16543] chnl_net:caif_netlink_parms(): no params data found [ 1044.005466][T13342] Bluetooth: hci2: command tx timeout [ 1044.080507][ T2482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.131218][T16549] loop1: detected capacity change from 0 to 32768 [ 1044.137870][T16543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.144989][T16543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.160350][T16543] bridge_slave_0: entered allmulticast mode [ 1044.173708][T16543] bridge_slave_0: entered promiscuous mode [ 1044.185763][T16543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.199013][T16543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.199425][T16569] loop2: detected capacity change from 0 to 512 [ 1044.206362][T16543] bridge_slave_1: entered allmulticast mode [ 1044.226564][T16549] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1044.268256][T16543] bridge_slave_1: entered promiscuous mode [ 1044.269725][T16569] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.2600: iget: bogus i_mode (0) [ 1044.310318][T16569] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2600: couldn't read orphan inode 17 (err -117) [ 1044.332414][T16569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.342360][T16549] XFS (loop1): Ending clean mount [ 1044.361483][ T5233] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x20 [ 1044.374564][ T5233] XFS (loop1): Unmount and run xfs_repair [ 1044.380920][ T5233] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1044.388624][ T5233] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1044.398133][ T5233] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1044.410339][ T5233] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1044.419683][ T5233] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1044.428703][ T5233] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1044.437793][ T5233] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1044.447031][ T5233] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1044.456040][ T5233] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1044.488791][T16582] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1044.557492][ T2482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.568696][T16549] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x20 len 8 error 74 [ 1044.671337][T16569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2600: bg 0: block 7: invalid block bitmap [ 1044.781093][T16549] XFS (loop1): Failed to initialize disk quotas. [ 1044.824424][T16543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.159844][ T2482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.204224][T13852] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1045.205169][T16543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.217942][T13852] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 1045.265454][T14193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.382961][T16543] team0: Port device team_slave_0 added [ 1045.927576][ T2482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.077204][T13342] Bluetooth: hci2: command tx timeout [ 1046.157748][T16543] team0: Port device team_slave_1 added [ 1046.354727][T16543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.118698][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.254275][T16595] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2605'. [ 1047.575961][T16543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.602231][T16543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.609436][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.635831][T16543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.872833][ T2482] bridge_slave_1: left allmulticast mode [ 1047.892703][ T2482] bridge_slave_1: left promiscuous mode [ 1047.900808][T16597] Cannot find add_set index 0 as target [ 1047.927328][ T2482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.981836][ T2482] bridge_slave_0: left allmulticast mode [ 1047.987664][ T2482] bridge_slave_0: left promiscuous mode [ 1047.993470][ T2482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.205745][T13342] Bluetooth: hci2: command tx timeout [ 1049.785241][T16604] loop2: detected capacity change from 0 to 40427 [ 1049.793073][T16604] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1049.828244][T16604] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1049.857342][T16604] F2FS-fs (loop2): invalid crc value [ 1049.871075][T16604] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1049.958514][T16604] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1049.965934][T16604] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1049.988068][ T29] audit: type=1800 audit(1727652767.901:332): pid=16604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2607" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 1050.018928][T16604] syz.2.2607: attempt to access beyond end of device [ 1050.018928][T16604] loop2: rw=2049, sector=77824, nr_sectors = 968 limit=40427 [ 1050.122799][T16604] syz.2.2607: attempt to access beyond end of device [ 1050.122799][T16604] loop2: rw=0, sector=78792, nr_sectors = 8 limit=40427 [ 1050.178120][ T2482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.191312][ T2482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.203154][ T2482] bond0 (unregistering): Released all slaves [ 1050.261276][T16610] netlink: 'syz.1.2608': attribute type 39 has an invalid length. [ 1050.296536][T13342] Bluetooth: hci2: command tx timeout [ 1050.312018][T16610] veth0_macvtap: left promiscuous mode [ 1050.413207][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 1050.678775][T16543] hsr_slave_0: entered promiscuous mode [ 1050.723563][T16634] loop4: detected capacity change from 0 to 2048 [ 1050.730994][T16543] hsr_slave_1: entered promiscuous mode [ 1050.770359][T16543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1050.797996][T16543] Cannot create hsr debugfs directory [ 1050.824441][T16634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.975447][ T9717] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1051.912048][T16648] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1052.339657][ T9717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.357764][ T9717] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 1052.368362][ T9717] usb 2-1: New USB device found, idVendor=045e, idProduct=01da, bcdDevice= 0.80 [ 1052.381562][T15788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.387575][ T9717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.422087][ T9717] usb 2-1: config 0 descriptor?? [ 1052.596574][T16655] loop4: detected capacity change from 0 to 1024 [ 1052.639806][T16655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.874083][T16665] loop2: detected capacity change from 0 to 512 [ 1053.179589][T16671] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2618'. [ 1053.485783][ T29] audit: type=1800 audit(1727652771.391:333): pid=16667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2615" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1054.162808][T15788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.499580][ T2482] hsr_slave_0: left promiscuous mode [ 1054.499695][T16682] loop2: detected capacity change from 0 to 1024 [ 1054.522520][ T2482] hsr_slave_1: left promiscuous mode [ 1054.540289][T15700] usb 2-1: USB disconnect, device number 24 [ 1054.548349][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.571128][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.594248][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.612839][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.767869][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.774401][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.961178][ T2482] veth1_macvtap: left promiscuous mode [ 1055.973752][ T2482] veth0_macvtap: left promiscuous mode [ 1055.992886][ T2482] veth1_vlan: left promiscuous mode [ 1056.013672][ T2482] veth0_vlan: left promiscuous mode [ 1056.047776][T16694] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2623'. [ 1057.631832][T16703] slcan: can't register candev [ 1057.665729][T16703] Falling back ldisc for ptm0. [ 1058.535212][T16717] loop2: detected capacity change from 0 to 2048 [ 1058.621031][T16717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.701769][ T2482] team0 (unregistering): Port device team_slave_1 removed [ 1058.831884][ T2482] team0 (unregistering): Port device team_slave_0 removed [ 1058.968528][T16722] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1058.983638][T16722] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 1058.996165][T16722] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1058.996165][T16722] [ 1059.005941][T16722] EXT4-fs (loop2): Total free blocks count 0 [ 1059.011933][T16722] EXT4-fs (loop2): Free/Dirty block details [ 1059.017927][T16722] EXT4-fs (loop2): free_blocks=2415919104 [ 1059.025080][T16722] EXT4-fs (loop2): dirty_blocks=16 [ 1059.030312][T16722] EXT4-fs (loop2): Block reservation details [ 1059.036345][T16722] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1059.048351][T16723] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 1059.520387][T16725] loop2: detected capacity change from 0 to 1024 [ 1059.540332][T16725] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1059.551789][T16725] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1059.562268][T16725] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1059.574723][T16725] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.2628: unexpected bad inode w/o EXT4_IGET_BAD [ 1059.619000][T16725] EXT4-fs (loop2): no journal found [ 1059.624285][T16725] EXT4-fs (loop2): can't get journal size [ 1059.650073][T16725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1059.685065][T16725] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2628: bg 0: block 32: padding at end of block bitmap is not set [ 1059.731537][T14193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.861226][T16728] loop2: detected capacity change from 0 to 1024 [ 1059.909651][T16728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.106081][ T29] audit: type=1800 audit(1727652778.021:334): pid=16731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2629" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1060.751786][T14193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.086966][T16739] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2631'. [ 1061.707936][T16747] fuse: Bad value for 'fd' [ 1062.570366][T16543] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1062.893043][T16543] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1063.345876][T16543] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1063.663057][T16746] loop4: detected capacity change from 0 to 32768 [ 1063.692202][T16543] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1064.466266][T16775] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 1064.466266][T16775] [ 1064.475858][T16775] ERROR: (device loop4): remounting filesystem as read-only [ 1064.483311][T16775] ialloc: diAlloc returned -5! [ 1064.915128][T16543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.933825][T16543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.981465][T15960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.988816][T15960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.029385][T15960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.036611][T15960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.105051][T16543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1065.874314][T16766] slcan: can't register candev [ 1065.879515][T16543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.954336][ T29] audit: type=1326 audit(1727652783.881:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16781 comm="syz.2.2638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cea37dff9 code=0x0 [ 1066.014659][T16766] Falling back ldisc for ptm0. [ 1066.259448][T16793] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1066.276527][T16793] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1066.585433][ T29] audit: type=1326 audit(1727652784.431:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1066.635727][ T29] audit: type=1326 audit(1727652784.431:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1066.683712][T16543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.734558][ T29] audit: type=1326 audit(1727652784.441:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1066.757654][T16543] veth0_vlan: entered promiscuous mode [ 1066.776837][T16543] veth1_vlan: entered promiscuous mode [ 1066.803024][T16543] veth0_macvtap: entered promiscuous mode [ 1066.812330][T16543] veth1_macvtap: entered promiscuous mode [ 1066.840065][ T29] audit: type=1326 audit(1727652784.441:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1066.899296][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.940809][ T29] audit: type=1326 audit(1727652784.441:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1066.967675][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.998408][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.027102][ T29] audit: type=1326 audit(1727652784.441:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1067.104487][ T29] audit: type=1326 audit(1727652784.441:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1067.225643][ T29] audit: type=1326 audit(1727652784.441:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1067.248388][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.260920][T16815] fuse: Unknown parameter '0x0000000000000008' [ 1067.281955][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.314434][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.325388][ T29] audit: type=1326 audit(1727652784.441:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16800 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1067.356822][T16543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.397360][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.431010][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.455357][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.474058][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.486866][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.498633][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.510774][T16543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.597092][T16543] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.615386][T16543] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.636016][T16543] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.649566][T16543] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.038484][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.047111][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.091924][T15419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.206029][ T5281] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1068.245685][T15419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.332185][T16838] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2646'. [ 1069.194064][T16846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2648'. [ 1069.331634][T16846] Cannot find set identified by id 0 to match [ 1069.345428][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 1069.604616][T16862] random: crng reseeded on system resumption [ 1070.439812][ T5281] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1070.451826][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.463298][ T5281] usb 3-1: Product: syz [ 1070.475361][ T5281] usb 3-1: Manufacturer: syz [ 1070.480030][ T5281] usb 3-1: SerialNumber: syz [ 1070.587786][ T5281] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1070.605417][ T5281] r8152-cfgselector 3-1: config 0 descriptor?? [ 1070.849235][T16871] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2651'. [ 1071.495054][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1071.580626][ T29] audit: type=1326 audit(1727652789.421:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16869 comm="syz.3.2652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50a437dff9 code=0x0 [ 1071.622891][T16840] xt_l2tp: v2 doesn't support IP mode [ 1071.764699][T16872] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1071.767464][ T5281] r8152-cfgselector 3-1: USB disconnect, device number 26 [ 1071.886682][T16881] loop4: detected capacity change from 0 to 2048 [ 1071.958080][T16881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.248823][T15788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.654949][T16893] fuse: Unknown parameter '0x0000000000000008' [ 1072.927715][T16901] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1075.027059][T16909] Cannot find add_set index 0 as target [ 1075.436960][T16910] blktrace: Concurrent blktraces are not allowed on loop5 [ 1075.485543][T16902] xt_connbytes: Forcing CT accounting to be enabled [ 1075.530186][T16902] Cannot find add_set index 0 as target [ 1075.818523][T16914] random: crng reseeded on system resumption [ 1077.105179][T16918] Cannot find add_set index 0 as target [ 1079.592357][T16935] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2666'. [ 1080.130639][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1080.141523][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1080.160774][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1080.203274][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1080.224166][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1080.231831][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1080.352118][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.489308][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.636609][ T29] audit: type=1326 audit(1727652798.571:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16946 comm="syz.2.2673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cea37dff9 code=0x0 [ 1080.793850][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.852011][T16942] chnl_net:caif_netlink_parms(): no params data found [ 1080.937626][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.130791][T16942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.157485][T16942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.198409][T16942] bridge_slave_0: entered allmulticast mode [ 1081.233031][T16942] bridge_slave_0: entered promiscuous mode [ 1081.320396][T16942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.345840][T16942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.364612][T16942] bridge_slave_1: entered allmulticast mode [ 1081.372530][T16942] bridge_slave_1: entered promiscuous mode [ 1081.534077][ T53] bridge_slave_1: left allmulticast mode [ 1081.544386][ T53] bridge_slave_1: left promiscuous mode [ 1081.731382][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.958891][ T53] bridge_slave_0: left allmulticast mode [ 1081.975931][ T53] bridge_slave_0: left promiscuous mode [ 1081.982435][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.359737][ T5232] Bluetooth: hci3: command tx timeout [ 1082.549826][T16971] random: crng reseeded on system resumption [ 1083.535442][ T29] audit: type=1326 audit(1727652801.461:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1083.678746][T13342] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1083.697958][ T29] audit: type=1326 audit(1727652801.461:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1083.720610][ T29] audit: type=1326 audit(1727652801.461:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1083.743101][ T29] audit: type=1326 audit(1727652801.461:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1083.745535][T13342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1083.765776][ T29] audit: type=1326 audit(1727652801.461:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1083.778039][T13342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1083.795010][ T29] audit: type=1326 audit(1727652801.461:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1083.807804][T13342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1083.826334][ T29] audit: type=1326 audit(1727652801.461:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1083.832938][T13342] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1083.861792][T13342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1083.875401][ T29] audit: type=1326 audit(1727652801.461:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1083.912176][ T29] audit: type=1326 audit(1727652801.461:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.0.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6b17dff9 code=0x7ffc0000 [ 1084.157316][T16983] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2677'. [ 1084.224615][T16983] Cannot find set identified by id 0 to match [ 1084.336168][T16986] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2678'. [ 1084.490846][T13342] Bluetooth: hci3: command tx timeout [ 1084.909322][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.931514][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.943866][ T53] bond0 (unregistering): Released all slaves [ 1085.157167][T16942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.192203][ T53] tipc: Left network mode [ 1085.243859][T16942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.734909][T16995] Cannot find add_set index 0 as target [ 1085.965396][T13342] Bluetooth: hci5: command tx timeout [ 1086.159605][T16998] Cannot find add_set index 0 as target [ 1086.486517][T16942] team0: Port device team_slave_0 added [ 1086.525658][T13342] Bluetooth: hci3: command tx timeout [ 1086.650015][T16942] team0: Port device team_slave_1 added [ 1086.888456][T17004] Cannot find add_set index 0 as target [ 1087.249141][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1087.249155][ T29] audit: type=1326 audit(1727652805.181:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17005 comm="syz.2.2682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cea37dff9 code=0x0 [ 1087.314554][T16942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.357681][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.427741][T16942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.506769][T16979] chnl_net:caif_netlink_parms(): no params data found [ 1087.540097][T16942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.568434][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.626599][T16942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.868423][T16942] hsr_slave_0: entered promiscuous mode [ 1087.887374][T16942] hsr_slave_1: entered promiscuous mode [ 1087.903121][T16942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1087.919811][T16942] Cannot create hsr debugfs directory [ 1088.045588][T13342] Bluetooth: hci5: command tx timeout [ 1088.189154][T16979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.196833][T16979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.206109][T16979] bridge_slave_0: entered allmulticast mode [ 1088.213189][T16979] bridge_slave_0: entered promiscuous mode [ 1088.218320][T17015] loop4: detected capacity change from 0 to 32768 [ 1088.227970][T16979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.247091][T16979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.261216][T16979] bridge_slave_1: entered allmulticast mode [ 1088.268510][T16979] bridge_slave_1: entered promiscuous mode [ 1088.468642][T16979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.480493][T16979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.670298][T13342] Bluetooth: hci3: command tx timeout [ 1088.807556][T17038] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 1088.807556][T17038] [ 1088.817032][T17038] ERROR: (device loop4): remounting filesystem as read-only [ 1088.824636][T17038] ialloc: diAlloc returned -5! [ 1089.343738][T16979] team0: Port device team_slave_0 added [ 1089.380687][T16979] team0: Port device team_slave_1 added [ 1090.033466][T17048] Cannot find add_set index 0 as target [ 1090.125801][T13342] Bluetooth: hci5: command tx timeout [ 1090.133820][T16979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.141716][T16979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.169374][T16979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.741172][T17066] syz.2.2689[17066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.741265][T17066] syz.2.2689[17066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.753953][T17066] syz.2.2689[17066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.778283][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1091.040852][T17071] Cannot find add_set index 0 as target [ 1091.331288][T16979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.344579][T16979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.460963][T16979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.607087][ T53] hsr_slave_0: left promiscuous mode [ 1091.613952][ T53] hsr_slave_1: left promiscuous mode [ 1091.753080][T17078] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2691'. [ 1092.067779][ T53] veth1_macvtap: left promiscuous mode [ 1092.076841][ T53] veth1_vlan: left promiscuous mode [ 1092.082739][ T53] veth0_vlan: left promiscuous mode [ 1092.205910][T13342] Bluetooth: hci5: command tx timeout [ 1092.208375][T17081] Cannot find add_set index 0 as target [ 1092.512882][T17085] syz.0.2694[17085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.512981][T17085] syz.0.2694[17085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.544472][T17085] syz.0.2694[17085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.569801][T17083] Cannot find add_set index 0 as target [ 1092.680969][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1093.573436][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1093.649440][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1094.669398][T17101] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2699'. [ 1094.777468][T16979] hsr_slave_0: entered promiscuous mode [ 1094.820313][T16979] hsr_slave_1: entered promiscuous mode [ 1094.863946][T16979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.872537][T16979] Cannot create hsr debugfs directory [ 1095.581982][T17106] loop2: detected capacity change from 0 to 40427 [ 1095.637058][T17106] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 1095.644730][T17106] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1095.675874][T17106] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1095.691676][T17106] F2FS-fs (loop2): Image doesn't support compression [ 1095.864718][T17112] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2703'. [ 1095.876393][T17106] F2FS-fs (loop2): invalid crc value [ 1096.005090][T17106] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1096.278377][T17106] F2FS-fs (loop2): Start checkpoint disabled! [ 1096.386804][T17106] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1096.419115][T17106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1096.749634][T13401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.822566][T17134] syz.2.2701: attempt to access beyond end of device [ 1096.822566][T17134] loop2: rw=2049, sector=53248, nr_sectors = 544 limit=40427 [ 1097.180314][T13401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.217066][T13398] kworker/u8:9: attempt to access beyond end of device [ 1097.217066][T13398] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1097.242287][T13398] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1097.270921][T13398] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1097.423978][T13401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.501118][T16942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1097.526170][T16942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1097.552515][T17144] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2709'. [ 1097.617794][T13401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.641416][T16942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1097.670880][T16942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1097.812704][T17150] loop2: detected capacity change from 0 to 1024 [ 1097.833134][T17150] EXT4-fs: Ignoring removed oldalloc option [ 1097.875997][T17150] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1097.906376][T17150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1098.181324][T13401] bridge_slave_1: left allmulticast mode [ 1098.203300][T13401] bridge_slave_1: left promiscuous mode [ 1098.236478][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.294344][T13401] bridge_slave_0: left allmulticast mode [ 1098.298200][T14193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.301085][T13401] bridge_slave_0: left promiscuous mode [ 1098.342139][T13401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.615665][T17176] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2712'. [ 1100.000548][T17187] slcan: can't register candev [ 1100.005993][T17187] Falling back ldisc for ptm0. [ 1100.108665][T13401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.149860][T13401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.162324][T13401] bond0 (unregistering): Released all slaves [ 1100.203588][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 1100.555978][T17209] syz.4.2717[17209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.556080][T17209] syz.4.2717[17209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.619179][T17209] syz.4.2717[17209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1100.705775][T16942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.735886][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1100.843910][T13401] hsr_slave_0: left promiscuous mode [ 1100.854646][T13401] hsr_slave_1: left promiscuous mode [ 1100.911819][T13401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.920979][T13401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.948608][T17205] loop2: detected capacity change from 0 to 40427 [ 1100.956671][T17205] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 1100.965188][T13401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.986735][T17205] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1100.995448][T13401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.014524][T17222] loop4: detected capacity change from 0 to 256 [ 1101.015434][T17205] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1101.050841][T17205] F2FS-fs (loop2): Image doesn't support compression [ 1101.070122][T17222] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1101.076654][T13401] veth1_macvtap: left promiscuous mode [ 1101.099986][T17205] F2FS-fs (loop2): invalid crc value [ 1101.125036][T17205] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1101.128212][T17222] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1101.132696][T13401] veth0_macvtap: left promiscuous mode [ 1101.192067][T13401] veth1_vlan: left promiscuous mode [ 1101.197702][T13401] veth0_vlan: left promiscuous mode [ 1101.238063][T17205] F2FS-fs (loop2): Start checkpoint disabled! [ 1101.254978][T17205] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1101.262157][T17205] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1101.619099][T17231] syz.2.2716: attempt to access beyond end of device [ 1101.619099][T17231] loop2: rw=2049, sector=53248, nr_sectors = 544 limit=40427 [ 1101.647528][ T29] audit: type=1800 audit(1727652819.491:382): pid=17232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2719" name="bus" dev="loop4" ino=1048836 res=0 errno=0 [ 1101.962667][T15960] kworker/u8:15: attempt to access beyond end of device [ 1101.962667][T15960] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1102.003079][T15960] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1102.032402][T15960] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1103.717120][T17263] Cannot find add_set index 0 as target [ 1104.338743][T17275] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2725'. [ 1105.175062][T13401] team0 (unregistering): Port device team_slave_1 removed [ 1105.258233][T13401] team0 (unregistering): Port device team_slave_0 removed [ 1105.952576][T16942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.987036][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2727'. [ 1106.056265][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.063427][ T6291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.398666][T17296] Cannot find add_set index 0 as target [ 1106.695805][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.703029][ T6291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.764589][T16979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1106.784595][T16979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1106.825871][T16979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1106.873737][T16979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1107.108458][T16979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.124861][T16979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.157285][T16979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1107.167808][T16979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1107.226694][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.233849][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.257415][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.264593][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.180388][T16942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.351978][T16942] veth0_vlan: entered promiscuous mode [ 1108.374487][T16942] veth1_vlan: entered promiscuous mode [ 1108.444279][T17317] loop4: detected capacity change from 0 to 1024 [ 1108.460475][T16942] veth0_macvtap: entered promiscuous mode [ 1108.479677][T17317] EXT4-fs: Ignoring removed oldalloc option [ 1108.489409][T16942] veth1_macvtap: entered promiscuous mode [ 1108.529062][T17317] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1108.530903][T16979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.583044][T17317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.600741][T16942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.632935][T16942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.703530][T16942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.732814][T16942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.760558][T16942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.774161][T16942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.797947][T15788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.813948][T16942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.883834][T16942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.925764][T16942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.965548][T16942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.997644][T16942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.029321][T16942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.060883][T16942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.134043][T16942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.177691][T16942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.198358][T16942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.514910][T16942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.626936][T16942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.058197][T16979] veth0_vlan: entered promiscuous mode [ 1110.069572][T16979] veth1_vlan: entered promiscuous mode [ 1111.314040][T17337] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2737'. [ 1111.511009][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.534807][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.615222][T16979] veth0_macvtap: entered promiscuous mode [ 1111.770240][T16979] veth1_macvtap: entered promiscuous mode [ 1111.887854][T13401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.898313][T13401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.908356][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.934729][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.959255][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.972181][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.982545][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.993723][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.004266][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.015376][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.034103][T16979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.070505][T17344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.536739][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.595665][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.615385][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.633727][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.663088][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.681800][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.694583][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.705651][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.717980][T16979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.732659][T16979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.750192][T16979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.776834][T16979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.792234][T16979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.016115][T17356] Cannot find set identified by id 0 to match [ 1113.484581][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.497893][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.590759][ T6511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.618266][ T6511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.677868][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1114.594053][T17365] loop4: detected capacity change from 0 to 1024 [ 1114.866404][T17365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.881322][ T29] audit: type=1326 audit(1727652832.811:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.3.2675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe88a57dff9 code=0x0 [ 1114.954498][T17380] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1114.964992][ T29] audit: type=1804 audit(1727652832.881:384): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2745" name="/newroot/58/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 1115.050672][T17378] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2747'. [ 1115.270749][T15788] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.211511][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.218348][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.224908][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'. [ 1116.238061][T17393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.273933][T17393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.283876][T17393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.445640][T17392] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2751'. [ 1119.206312][T17426] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2762'. [ 1120.727317][T17450] trusted_key: encrypted_key: insufficient parameters specified [ 1122.658883][T17459] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2766'. [ 1126.431358][T17493] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2778'. [ 1132.503570][T17547] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2793'. [ 1133.694476][T17562] loop4: detected capacity change from 0 to 256 [ 1133.716327][T17562] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1134.410959][T17562] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1134.506834][ T29] audit: type=1800 audit(1727652852.431:385): pid=17562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2796" name="bus" dev="loop4" ino=1048845 res=0 errno=0 [ 1138.441616][T17607] Cannot find add_set index 0 as target [ 1138.575840][T17617] loop4: detected capacity change from 0 to 256 [ 1138.583228][T17617] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1138.631781][T17617] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1138.732193][ T29] audit: type=1800 audit(1727652856.661:386): pid=17617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2810" name="bus" dev="loop4" ino=1048846 res=0 errno=0 [ 1139.946329][T17633] loop2: detected capacity change from 0 to 8 [ 1140.069189][T17633] SQUASHFS error: Unable to read inode 0x9 [ 1140.156278][T17640] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2814'. [ 1140.570878][T17624] loop3: detected capacity change from 0 to 32768 [ 1140.662017][T17624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2812 (17624) [ 1141.216972][T17624] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1141.247780][T17624] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1141.446679][T17624] BTRFS info (device loop3): using free-space-tree [ 1141.756838][T17624] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1141.763389][T17624] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1142.173484][T17624] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1142.228250][T17624] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1142.296326][T17624] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1142.334720][T17624] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1142.352996][T17624] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1142.376237][T17624] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1143.320333][T17624] BTRFS error (device loop3): open_ctree failed [ 1144.624672][T17686] loop1: detected capacity change from 0 to 256 [ 1144.633575][T17686] /dev/loop1: Can't open blockdev [ 1144.882872][T17691] loop1: detected capacity change from 0 to 128 [ 1144.900211][T17691] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1144.913125][T17691] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.370547][T16942] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1146.753249][T17709] loop1: detected capacity change from 0 to 1024 [ 1146.843014][T17709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1147.455517][ T29] audit: type=1800 audit(1727652865.371:387): pid=17715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2829" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1147.906417][T16942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.914708][T17705] loop2: detected capacity change from 0 to 40427 [ 1147.951995][T17705] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 1148.006874][T17705] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1148.040081][T17705] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1148.091458][T17705] F2FS-fs (loop2): Image doesn't support compression [ 1149.004896][T17705] F2FS-fs (loop2): invalid crc value [ 1149.069202][T17705] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1149.194589][T17705] F2FS-fs (loop2): Start checkpoint disabled! [ 1149.286652][T17705] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1149.297315][T17705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1149.551068][T17735] syz.2.2828: attempt to access beyond end of device [ 1149.551068][T17735] loop2: rw=2049, sector=53248, nr_sectors = 544 limit=40427 [ 1149.620282][T17737] loop4: detected capacity change from 0 to 256 [ 1149.647031][T17737] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1149.671510][T17737] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1150.001802][T15960] kworker/u8:15: attempt to access beyond end of device [ 1150.001802][T15960] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1150.016281][T15960] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1150.023184][T15960] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1150.172078][ T29] audit: type=1800 audit(1727652868.101:388): pid=17741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2835" name="bus" dev="loop4" ino=1048847 res=0 errno=0 [ 1150.380763][T17731] loop1: detected capacity change from 0 to 32768 [ 1150.416767][T17731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2833 (17731) [ 1150.595942][T17731] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1150.642166][T17731] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1150.676636][T17733] loop3: detected capacity change from 0 to 40427 [ 1150.720646][T17731] BTRFS info (device loop1): using free-space-tree [ 1150.735429][T17733] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1150.743524][T17733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1151.038911][T17733] F2FS-fs (loop3): invalid crc value [ 1151.103347][T17733] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1151.150443][T17733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1151.159331][T17733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1151.214291][ T29] audit: type=1800 audit(1727652869.131:389): pid=17733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2834" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 1151.228966][T17733] syz.3.2834: attempt to access beyond end of device [ 1151.228966][T17733] loop3: rw=2049, sector=77824, nr_sectors = 968 limit=40427 [ 1151.363919][T17772] loop4: detected capacity change from 0 to 128 [ 1151.393752][T17733] syz.3.2834: attempt to access beyond end of device [ 1151.393752][T17733] loop3: rw=0, sector=78792, nr_sectors = 8 limit=40427 [ 1151.427247][T17772] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1151.466369][T17772] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.164627][T16942] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1152.492746][T15788] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1153.808791][T17800] fuse: Bad value for 'fd' [ 1156.240117][T17823] loop4: detected capacity change from 0 to 256 [ 1156.260192][T17823] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1156.282444][T17823] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1157.114456][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2851'. [ 1157.156851][ T29] audit: type=1800 audit(1727652875.091:390): pid=17832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2849" name="bus" dev="loop4" ino=1048848 res=0 errno=0 [ 1157.197166][T17828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.206873][T17828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.285637][T17837] loop2: detected capacity change from 0 to 128 [ 1157.294485][T17828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.303936][T17828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.336912][T17837] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1157.355709][T17837] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.731015][T17835] netlink: 'syz.0.2852': attribute type 1 has an invalid length. [ 1157.744551][T14193] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1157.788288][T17835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1157.801679][T17839] vlan2: entered promiscuous mode [ 1157.833160][T17839] bond1: entered promiscuous mode [ 1157.878437][T17839] vlan2: entered allmulticast mode [ 1157.902477][T17839] bond1: entered allmulticast mode [ 1158.016422][T17846] loop2: detected capacity change from 0 to 1024 [ 1158.069884][T17846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.769142][ T29] audit: type=1800 audit(1727652876.391:391): pid=17856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2854" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1159.097575][T14193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.435464][ T5285] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1160.688102][ T5285] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1160.699500][ T5285] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1160.710456][ T5285] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1160.719761][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.737435][T17877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1160.743733][ T5285] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1161.174925][ T5285] usb 2-1: USB disconnect, device number 25 [ 1163.562385][T17921] loop1: detected capacity change from 0 to 32768 [ 1164.025879][T17936] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 1164.025879][T17936] [ 1164.035211][T17936] ERROR: (device loop1): remounting filesystem as read-only [ 1164.042973][T17936] ialloc: diAlloc returned -5! [ 1164.072650][T17935] loop3: detected capacity change from 0 to 512 [ 1164.399631][ T5232] Bluetooth: hci0: command 0x0406 tx timeout [ 1164.544532][T17939] loop3: detected capacity change from 0 to 1024 [ 1166.016468][T17956] Cannot find add_set index 0 as target [ 1171.465282][ C1] sched: DL replenish lagged too much [ 1171.995144][T17986] loop4: detected capacity change from 0 to 1024 [ 1172.136748][T17986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.350558][T17994] loop3: detected capacity change from 0 to 256 [ 1172.409283][T17994] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1172.500350][T17994] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1174.184200][ T29] audit: type=1800 audit(1727652892.111:392): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2893" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1177.649940][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.656621][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.994181][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1183.009017][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1183.018603][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1183.028011][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1183.092554][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1183.108696][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1185.184015][T18025] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1185.190148][ T5232] Bluetooth: hci1: command tx timeout [ 1185.529501][T13342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1185.542966][T13342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1185.552632][T13342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1185.562710][T13342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1185.576493][T13342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1185.584079][T13342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1187.245742][ T5232] Bluetooth: hci1: command tx timeout [ 1187.645423][ T5232] Bluetooth: hci2: command tx timeout [ 1189.325681][ T5232] Bluetooth: hci1: command tx timeout [ 1189.728745][ T5232] Bluetooth: hci2: command tx timeout [ 1191.405675][ T5232] Bluetooth: hci1: command tx timeout [ 1191.805409][ T5232] Bluetooth: hci2: command tx timeout [ 1193.885503][ T5232] Bluetooth: hci2: command tx timeout [ 1205.333639][ T5232] Bluetooth: hci3: command 0x0406 tx timeout [ 1210.454323][T13342] Bluetooth: hci5: command 0x0406 tx timeout [ 1239.092758][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.101609][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.529172][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.538051][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.735431][T18039] Bluetooth: hci1: command 0x0406 tx timeout [ 1307.741519][T18039] Bluetooth: hci2: command 0x0406 tx timeout [ 1317.631264][ T2536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.569353][ T30] INFO: task kworker/0:6:7919 blocked for more than 143 seconds. [ 1323.585210][ T30] Not tainted 6.11.0-next-20240927-syzkaller #0 [ 1323.612635][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1323.650113][ T30] task:kworker/0:6 state:D stack:21584 pid:7919 tgid:7919 ppid:2 flags:0x00004000 [ 1323.683135][ T30] Workqueue: usb_hub_wq hub_event [ 1323.695559][ T30] Call Trace: [ 1323.698913][ T30] [ 1323.701871][ T30] __schedule+0x1895/0x4b30 [ 1323.718677][ T30] ? __pfx___schedule+0x10/0x10 [ 1323.744286][ T30] ? __pfx_lock_release+0x10/0x10 [ 1323.755363][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1323.761430][ T30] ? kthread_data+0x52/0xd0 [ 1323.782426][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1323.792074][ T30] ? schedule+0x90/0x320 [ 1323.805421][ T30] schedule+0x14b/0x320 [ 1323.809667][ T30] usb_kill_urb+0x1c9/0x300 [ 1323.814203][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 1323.844699][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1323.857435][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1323.862728][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1323.881614][ T30] usb_hcd_flush_endpoint+0x373/0x3f0 [ 1323.897623][ T30] usb_disable_interface+0x1fd/0x2e0 [ 1323.902997][ T30] usb_unbind_interface+0x238/0x940 [ 1323.923141][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1323.937332][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1323.943132][ T30] device_release_driver_internal+0x503/0x7c0 [ 1323.965543][ T30] bus_remove_device+0x34f/0x420 [ 1323.970567][ T30] device_del+0x57a/0x9b0 [ 1323.975015][ T30] ? kobject_put+0x272/0x480 [ 1324.001119][ T30] ? __pfx_device_del+0x10/0x10 [ 1324.015383][ T30] ? kobject_put+0x44d/0x480 [ 1324.020084][ T30] usb_disable_device+0x3bf/0x850 [ 1324.039218][ T30] usb_disconnect+0x340/0x950 [ 1324.044076][ T30] hub_event+0x1ebc/0x5150 [ 1324.060443][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 1324.075372][ T30] ? __pfx_hub_event+0x10/0x10 [ 1324.080316][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1324.115308][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1324.121378][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1324.154240][ T30] ? process_scheduled_works+0x976/0x1850 [ 1324.165502][ T30] process_scheduled_works+0xa63/0x1850 [ 1324.171148][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1324.195494][ T30] ? assign_work+0x364/0x3d0 [ 1324.200190][ T30] worker_thread+0x870/0xd30 [ 1324.204822][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1324.229579][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1324.242614][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1324.261480][ T30] kthread+0x2f0/0x390 [ 1324.269123][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1324.274321][ T30] ? __pfx_kthread+0x10/0x10 [ 1324.295386][ T30] ret_from_fork+0x4b/0x80 [ 1324.299888][ T30] ? __pfx_kthread+0x10/0x10 [ 1324.304509][ T30] ret_from_fork_asm+0x1a/0x30 [ 1324.326071][ T30] [ 1324.333663][ T30] INFO: task syz.0.599:8389 blocked for more than 144 seconds. [ 1324.358872][ T30] Not tainted 6.11.0-next-20240927-syzkaller #0 [ 1324.375307][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1324.384042][ T30] task:syz.0.599 state:D stack:24592 pid:8389 tgid:8388 ppid:7718 flags:0x00004006 [ 1324.415356][ T30] Call Trace: [ 1324.418712][ T30] [ 1324.421672][ T30] __schedule+0x1895/0x4b30 [ 1324.442108][ T30] ? __pfx___schedule+0x10/0x10 [ 1324.455359][ T30] ? __pfx_lock_release+0x10/0x10 [ 1324.460555][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1324.484912][ T30] ? kobject_put+0x446/0x480 [ 1324.495423][ T30] ? schedule+0x90/0x320 [ 1324.499746][ T30] schedule+0x14b/0x320 [ 1324.504112][ T30] usb_kill_urb+0x1c9/0x300 [ 1324.525302][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 1324.530422][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1324.555360][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1324.565293][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 1324.570470][ T30] ? __asan_memset+0x23/0x50 [ 1324.575180][ T30] adu_release+0x23a/0x870 [ 1324.597821][ T30] ? __pfx_adu_release+0x10/0x10 [ 1324.602937][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1324.632135][ T30] ? evm_file_release+0x13d/0x1c0 [ 1324.642402][ T30] ? __pfx_adu_release+0x10/0x10 [ 1324.659543][ T30] __fput+0x23f/0x880 [ 1324.663624][ T30] task_work_run+0x24f/0x310 [ 1324.676681][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1324.681886][ T30] ? switch_task_namespaces+0xe4/0x110 [ 1324.716470][ T30] do_exit+0xa2f/0x28e0 [ 1324.720726][ T30] ? __pfx_do_exit+0x10/0x10 [ 1324.736511][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1324.742051][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1324.763581][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1324.788899][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1324.794097][ T30] do_group_exit+0x207/0x2c0 [ 1324.809042][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1324.814570][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1324.835308][ T30] get_signal+0x16a3/0x1740 [ 1324.839989][ T30] ? __pfx_get_signal+0x10/0x10 [ 1324.844872][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1324.884495][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1324.893819][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1324.908750][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1324.931861][ T30] do_syscall_64+0x100/0x230 [ 1324.949439][ T30] ? clear_bhb_loop+0x35/0x90 [ 1324.970718][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.995347][ T30] RIP: 0033:0x7f61a017dff9 [ 1324.999832][ T30] RSP: 002b:00007f61a0ed1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1325.025354][ T30] RAX: fffffffffffffffc RBX: 00007f61a0335f80 RCX: 00007f61a017dff9 [ 1325.046754][ T30] RDX: 00000000000000ef RSI: 0000000020000280 RDI: 0000000000000005 [ 1325.071312][ T30] RBP: 00007f61a01f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1325.105299][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.113353][ T30] R13: 0000000000000000 R14: 00007f61a0335f80 R15: 00007ffe149b0108 [ 1325.146230][ T30] [ 1325.155446][ T30] [ 1325.155446][ T30] Showing all locks held in the system: [ 1325.164615][ T30] 3 locks held by kworker/u8:0/11: [ 1325.189112][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1325.218750][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1325.243336][ T30] #2: ffffffff8fcd3308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1325.269387][ T30] 1 lock held by khungtaskd/30: [ 1325.274302][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1325.301004][ T30] 7 locks held by kworker/u8:7/2536: [ 1325.311985][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1325.341755][ T30] #1: ffffc90009517d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1325.364901][ T30] #2: ffffffff8fcc6810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1325.388891][ T30] #3: ffff8880320350e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1325.412887][ T30] #4: ffff888032036250 (&devlink->lock_key#30){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1325.439088][ T30] #5: ffffffff8fcd3308 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1325.461547][ T30] #6: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1325.501508][ T30] 1 lock held by klogd/4674: [ 1325.513383][ T30] 2 locks held by getty/4989: [ 1325.525360][ T30] #0: ffff88803285a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1325.535220][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1325.574386][ T30] 2 locks held by syz-executor/5217: [ 1325.589982][ T30] #0: ffff888024f06070 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 1325.613593][ T30] #1: ffff888031de0518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 1325.635352][ T30] 7 locks held by kworker/1:6/5285: [ 1325.640623][ T30] 5 locks held by kworker/0:6/7919: [ 1325.671418][ T30] #0: ffff888144ea9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1325.697756][ T30] #1: ffffc900047afd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1325.733395][ T30] #2: ffff8881447f6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1325.752788][ T30] #3: ffff88805b59b190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 1325.777553][ T30] #4: ffff88806f350160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1325.803318][ T30] 1 lock held by syz.0.599/8389: [ 1325.825349][ T30] #0: ffffffff8f686868 (adutux_mutex){+.+.}-{3:3}, at: adu_release+0xbf/0x870 [ 1325.834426][ T30] 1 lock held by syz-executor/18016: [ 1325.855380][ T30] #0: ffffffff8fcd3308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1325.864893][ T30] 2 locks held by syz.1.2903/18023: [ 1325.893514][ T30] #0: ffff888026cd8a90 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 1325.920535][ T30] #1: ffff888031de0518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 1325.945386][ T30] 2 locks held by syz.1.2903/18025: [ 1325.950660][ T30] #0: ffff888031de0420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5e/0x200 [ 1325.982879][ T30] #1: ffff888031de4160 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b4/0x380 [ 1326.009103][ T30] 2 locks held by syz.0.2904/18027: [ 1326.014384][ T30] #0: ffff888070eef730 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 1326.049147][ T30] #1: ffff888031de0518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 1326.089940][ T30] 1 lock held by syz-executor/18028: [ 1326.105479][ T30] #0: ffffffff8fcd3308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1326.129724][ T30] [ 1326.139935][ T30] ============================================= [ 1326.139935][ T30] [ 1326.155548][ T30] NMI backtrace for cpu 0 [ 1326.159961][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-next-20240927-syzkaller #0 [ 1326.169650][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1326.179740][ T30] Call Trace: [ 1326.183038][ T30] [ 1326.185984][ T30] dump_stack_lvl+0x241/0x360 [ 1326.190782][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1326.196004][ T30] ? __pfx__printk+0x10/0x10 [ 1326.200809][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1326.205821][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1326.211566][ T30] ? _printk+0xd5/0x120 [ 1326.215748][ T30] ? __pfx__printk+0x10/0x10 [ 1326.220451][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1326.225328][ T30] ? __pfx__printk+0x10/0x10 [ 1326.229957][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1326.235084][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1326.241107][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1326.247216][ T30] watchdog+0xff4/0x1040 [ 1326.251512][ T30] ? watchdog+0x1ea/0x1040 [ 1326.255981][ T30] ? __pfx_watchdog+0x10/0x10 [ 1326.260775][ T30] kthread+0x2f0/0x390 [ 1326.264866][ T30] ? __pfx_watchdog+0x10/0x10 [ 1326.269567][ T30] ? __pfx_kthread+0x10/0x10 [ 1326.274180][ T30] ret_from_fork+0x4b/0x80 [ 1326.278623][ T30] ? __pfx_kthread+0x10/0x10 [ 1326.283247][ T30] ret_from_fork_asm+0x1a/0x30 [ 1326.288079][ T30] [ 1326.292222][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1326.298266][ C1] NMI backtrace for cpu 1 [ 1326.298283][ C1] CPU: 1 UID: 0 PID: 5285 Comm: kworker/1:6 Not tainted 6.11.0-next-20240927-syzkaller #0 [ 1326.298303][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1326.298314][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 1326.298344][ C1] RIP: 0010:nft_do_chain+0x0/0x1da0 [ 1326.298363][ C1] Code: 03 38 c1 7c a0 48 89 df e8 6d ea 13 f8 eb 96 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 1326.298378][ C1] RSP: 0018:ffffc90000a185f8 EFLAGS: 00000246 [ 1326.298392][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802e6a3c00 [ 1326.298404][ C1] RDX: ffffc90000a18670 RSI: ffff88807c26d250 RDI: ffffc90000a18670 [ 1326.298417][ C1] RBP: ffffc90000a18708 R08: 0000000000000001 R09: ffffffff89f210de [ 1326.298430][ C1] R10: 0000000000000002 R11: ffff88802e6a3c00 R12: ffff88807c26d250 [ 1326.298442][ C1] R13: 1ffff920001430c4 R14: ffff888071c3ce78 R15: dffffc0000000000 [ 1326.298455][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1326.298469][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1326.298482][ C1] CR2: 0000000000000000 CR3: 0000000055936000 CR4: 00000000003526f0 [ 1326.298496][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1326.298506][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1326.298517][ C1] Call Trace: [ 1326.298524][ C1] [ 1326.298533][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1326.298554][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1326.298578][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1326.298597][ C1] ? nmi_handle+0x2a/0x5a0 [ 1326.298621][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1326.298641][ C1] ? nmi_handle+0x14f/0x5a0 [ 1326.298663][ C1] ? nmi_handle+0x2a/0x5a0 [ 1326.298681][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1326.298697][ C1] ? default_do_nmi+0x63/0x160 [ 1326.298717][ C1] ? exc_nmi+0x123/0x1f0 [ 1326.298737][ C1] ? end_repeat_nmi+0xf/0x53 [ 1326.298757][ C1] ? nft_do_chain_inet+0x11e/0x6b0 [ 1326.298775][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1326.298791][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1326.298809][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1326.298825][ C1] [ 1326.298831][ C1] [ 1326.298837][ C1] nft_do_chain_inet+0x418/0x6b0 [ 1326.298855][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1326.298870][ C1] ? ipt_do_table+0x312/0x1860 [ 1326.298894][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1326.298909][ C1] nf_hook_slow+0xc3/0x220 [ 1326.298931][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1326.298951][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1326.298970][ C1] NF_HOOK+0x29e/0x450 [ 1326.298991][ C1] ? NF_HOOK+0x9a/0x450 [ 1326.299008][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1326.299027][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1326.299049][ C1] ? ip_rcv_finish+0x406/0x560 [ 1326.299069][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1326.299086][ C1] NF_HOOK+0x3a4/0x450 [ 1326.299104][ C1] ? __lock_acquire+0x1384/0x2050 [ 1326.299119][ C1] ? NF_HOOK+0x9a/0x450 [ 1326.299137][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1326.299154][ C1] ? ip_rcv_core+0x801/0xd10 [ 1326.299173][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1326.299196][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1326.299214][ C1] __netif_receive_skb+0x2bf/0x650 [ 1326.299237][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1326.299258][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1326.299277][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1326.299299][ C1] ? __pfx_lock_release+0x10/0x10 [ 1326.299314][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1326.299335][ C1] process_backlog+0x662/0x15b0 [ 1326.299358][ C1] ? process_backlog+0x33b/0x15b0 [ 1326.299382][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1326.299402][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1326.299425][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1326.299448][ C1] __napi_poll+0xcb/0x490 [ 1326.299470][ C1] net_rx_action+0x89b/0x1240 [ 1326.299501][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1326.299521][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1326.299558][ C1] handle_softirqs+0x2c5/0x980 [ 1326.299582][ C1] ? do_softirq+0x11b/0x1e0 [ 1326.299602][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1326.299622][ C1] ? rcu_is_watching+0x15/0xb0 [ 1326.299641][ C1] do_softirq+0x11b/0x1e0 [ 1326.299665][ C1] [ 1326.299671][ C1] [ 1326.299677][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1326.299696][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1326.299718][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1326.299739][ C1] ? rcu_is_watching+0x15/0xb0 [ 1326.299757][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1326.299777][ C1] ? wg_packet_decrypt_worker+0x2a9/0xd80 [ 1326.299798][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1326.299818][ C1] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 1326.299842][ C1] wg_packet_decrypt_worker+0x2a9/0xd80 [ 1326.299870][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1326.299888][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 1326.299916][ C1] ? look_up_lock_class+0x77/0x170 [ 1326.299933][ C1] ? register_lock_class+0x102/0x980 [ 1326.299953][ C1] ? try_to_wake_up+0x5f4/0x1480 [ 1326.299970][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1326.299988][ C1] ? __pfx_lock_release+0x10/0x10 [ 1326.300003][ C1] ? __pfx_register_lock_class+0x10/0x10 [ 1326.300026][ C1] ? mark_lock+0x9a/0x360 [ 1326.300044][ C1] ? __lock_acquire+0x1384/0x2050 [ 1326.300071][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1326.300092][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1326.300115][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1326.300141][ C1] ? process_scheduled_works+0x976/0x1850 [ 1326.300162][ C1] process_scheduled_works+0xa63/0x1850 [ 1326.300194][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1326.300218][ C1] ? assign_work+0x364/0x3d0 [ 1326.300240][ C1] worker_thread+0x870/0xd30 [ 1326.300267][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1326.300289][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1326.300309][ C1] kthread+0x2f0/0x390 [ 1326.300325][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1326.300344][ C1] ? __pfx_kthread+0x10/0x10 [ 1326.300360][ C1] ret_from_fork+0x4b/0x80 [ 1326.300380][ C1] ? __pfx_kthread+0x10/0x10 [ 1326.300396][ C1] ret_from_fork_asm+0x1a/0x30 [ 1326.300423][ C1] [ 1326.961539][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1326.968497][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-next-20240927-syzkaller #0 [ 1326.978855][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1326.989032][ T30] Call Trace: [ 1326.992330][ T30] [ 1326.995275][ T30] dump_stack_lvl+0x241/0x360 [ 1327.000082][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1327.005488][ T30] ? __pfx__printk+0x10/0x10 [ 1327.010106][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1327.016227][ T30] ? vscnprintf+0x5d/0x90 [ 1327.020682][ T30] panic+0x349/0x880 [ 1327.024630][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1327.030816][ T30] ? __pfx_panic+0x10/0x10 [ 1327.035345][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1327.040740][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1327.046395][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1327.052063][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1327.058245][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1327.064526][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1327.070809][ T30] watchdog+0x1033/0x1040 [ 1327.075174][ T30] ? watchdog+0x1ea/0x1040 [ 1327.079724][ T30] ? __pfx_watchdog+0x10/0x10 [ 1327.084436][ T30] kthread+0x2f0/0x390 [ 1327.088540][ T30] ? __pfx_watchdog+0x10/0x10 [ 1327.093264][ T30] ? __pfx_kthread+0x10/0x10 [ 1327.098591][ T30] ret_from_fork+0x4b/0x80 [ 1327.103064][ T30] ? __pfx_kthread+0x10/0x10 [ 1327.107680][ T30] ret_from_fork_asm+0x1a/0x30 [ 1327.112569][ T30] [ 1327.115889][ T30] Kernel Offset: disabled [ 1327.120246][ T30] Rebooting in 86400 seconds..