last executing test programs: 12.152287156s ago: executing program 4 (id=1664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x0) 12.056898034s ago: executing program 4 (id=1665): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000300)={[], [{@appraise_type}, {@permit_directio}]}, 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000004840)=[{{&(0x7f0000002340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x300, 0x0}}], 0x1, 0x40002003, 0x0) 7.396909631s ago: executing program 1 (id=1678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 6.915000386s ago: executing program 4 (id=1680): socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) 6.633777982s ago: executing program 1 (id=1682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000800008004000000000000000000a5af0000ffffffff000000000000000000000000000000000000d45db7b709c070033c441d4badb322003a75341bbb2d4b01b6d5effa2acf47130122a1bd6946e5156024507668e5f92f811e00e324e5032cc6ae23f6b2c322381a31a0f7a2f58ed4243de55697"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.349693198s ago: executing program 1 (id=1684): syz_open_dev$usbfs(0x0, 0x76, 0x101301) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) unshare(0xa000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="bf8ab5d4db4f517b00a3f716b66700"/26], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc008551c, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x7ff, 0x3, {{0x10, 0x4, 0x1, 0x1d, 0x40, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}, {[@noop, @noop, @cipso={0x86, 0x27, 0x3, [{0x0, 0x10, "d06bde11f61f1e376498d4be45b2"}, {0x0, 0x11, "d4ef6f9d273e69e3dd2861de000000"}]}]}}}}}) getsockname$packet(r3, &(0x7f0000000e00), 0x0) sendmmsg$inet(r2, &(0x7f00000048c0)=[{{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000003c0)="504545302d27b5c813d700f701bd669e837796b083185d7cf5b5b8494a", 0x1d}, {0x0}, {&(0x7f00000004c0)="279626713cc6ddccb742ff2a40fd2ffdf874e2aac254ae219d519e10aa8cc3962ef551e697d13413aff98d6eadef9c36db16707751e69741e4725f8eaf97ecd42ea6740c31f368fea11e18e62893b3ccc474fafb", 0x54}], 0x3, &(0x7f0000000640)=ANY=[], 0x148}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000800)="3ac766648a47352832d5b9918e1a0d86f71751d9f2894e1498a9cf634a64554683d78f059eb6ebf4499d321581823369d991738557b829ffffffffffffff7f86ef6f5c4acf29bfdb9f7a7e06cb6675c085d88565c8ebac253418c859a92a83280ad8cffa80eb60b69114613c443b17fb40414c477d9b8e7e65af3ff6003a32c05797d4bd354384a04eb04edcee336a4b0b58843fb6ebc9681616609675311b85217440b3ab", 0xa5}, {&(0x7f0000000900)="660ebaee1655c2b16b719957292c51cefd51b35a7125e2d4996f519afc86c0b72e15f5f89e802a2ddfc1ca0321b86b64409e8e3a4c9aaa2fd6ffd09b2e3bba2fdc2ae4a05bdbbe98", 0x48}, {0x0}, {&(0x7f0000000a00)}, {&(0x7f0000000ac0)="4b81291eb1156956ce0ed34520bcc7141c8016cc6388351b4dddbd44", 0x1c}], 0x5, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}], 0x48}}, {{&(0x7f0000000c00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000c40)}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001100000000000000000000000100000000000000000000001400000000000000000000000200000005000000000000001c000000000000000000", @ANYRES32=r5, @ANYBLOB="ac1e0101e000000100000000500000000000000000000000070000000717987f000001e0000002000000000a010102ac1e0101940db86fc3c6043630505591a5440c5223ffffffff000000054408bc200000000100070732ac1414aa1c0000", @ANYRES32, @ANYBLOB], 0xd8}}, {{&(0x7f0000000f80)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000032c0)=[{&(0x7f00000012c0)}, {&(0x7f0000000fc0)="b3f95c23261de9c5382972ab057188c85bc0326c8a87e43f03b6dd681ce8dab728e419e8e0de9d4f2ad713091cdbadbf7b472ebc498458169adf7cf46d0e7e8d191bbe804bcf3a57ebe3a9ad48732d6e64e82294fff442c80d1665876261c77f6339c9fe29d75aba2ec186e6e8bcbd81ffacc20c001ca9b888deb2098530d6419b14", 0x82}, {&(0x7f0000001080)="ddf882ee49b2dd24aec080ff59db0f521308da11eaf61a8637b6e7d097be3c49d99933c4e2c721c6f7f5a8af4f9fed847bffdce2081f203c8b3b8937dc9bea95f294377c4dd10d8b55ffd515d4422759ad3913825a42cd9100d87759576c8cd59597be902ff30b655cff39b0ac8d181d1fb8b789cdc29ee586c4eb17db037492b848a35835a686d56fc2b9fce651dcac9375bc47d309c73a9dfcc7fa4b8e8a1002e2ceeff3c57c9045895f4054b0", 0xae}, {&(0x7f0000001140)="bd9ab0f471f8808f6f290c5438600004b401413402836cb348815c52d2bcfbbe4aff3492306eab3043977409eea6555cc6cd9ce0d0266646f23686c4a9aa1d5656c77e74332668", 0x47}, {&(0x7f0000001200)="c17640fb9e9c3a65fc03f5c112f861ff752d4a068ea933ee845957f3b5c2790a44a55b846ba32247f299c40907bf0a9166e793bc1c22206b8decaafe87e73429ffb7b42cefee3b4afae808b070bb8671ad24fac1508d5c8de15b46980d253c183f9e53ded9553d1f5e1a73c4c88a0e1b4154d5e5dfb1879e7d29be5db233", 0x7e}], 0x5}}, {{&(0x7f0000003340)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003400), 0x0, &(0x7f0000003440)=[@ip_retopts={{0x54, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x32, [@dev={0xac, 0x14, 0x14, 0x32}, @local]}, @cipso={0x86, 0x2d, 0x3, [{0x0, 0x12, "db62d6cb9399685a5a135ca9bc6a7959"}, {0x0, 0x2}, {0x1, 0xc, "edfdcfd71e4e4f1317e6"}, {0x6, 0x3, '0'}, {0x7, 0x4, "e08e"}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x70}}, {{&(0x7f0000003500)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000004880)=[{&(0x7f0000003740)="5e54aedf33ee3eac80c2de92b9bb232ecf72d6957f5813b9beb79c4b95217b7df447198230b49ebc78f52cdd5f37c68289c803042cc95bfe14e55f34ee790f50e1ab98427ee98b7bc6ec125750bae554a095bafeb80c73753be7afeb702cd8928b4f8efd314ef24dda4ae67e2f0e461bf57c3a2d221c71f30be28f37776096a8d648a99b8b1abae34d458a95ab3b2935f288d4185e8b238371103c5f4b4b39ea33150ec6b2717d5abc69c1b95e34fca5e955702ab49ec095a1c12771713a827656b40364b9d0f579d4db055b8c8fd2844e06e6bd2952b5f66bf0", 0xda}, {0x0}, {&(0x7f0000003880)="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", 0x1000}], 0x3}}], 0x7, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000101c0)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0xfffffffe, 0x85, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x12) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1e, 0x0, "826c052f5e9965e9e48a0c742fa5b80e43f9cefa47767f57fd210c5ddcaff771c786eb242339bbc8ff30879fb703508b184300f66d8dcc79340c8ce2742cf750f5d351e81b592c901f4ae2bbdb6e7649"}, 0xd8) 5.460965619s ago: executing program 3 (id=1686): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rtc_irq_set_state\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8000, 0x40) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, r2, 0x0) 5.45099208s ago: executing program 1 (id=1687): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) dup(0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 5.373265647s ago: executing program 3 (id=1688): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x25, &(0x7f00000009c0)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x20000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@uid_gt}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) close(r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x88}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000006800010000000000000000000000000000000000060003000000000014000200020000000000000000000000ff"], 0x34}}, 0x0) 5.312947833s ago: executing program 2 (id=1689): openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0, r0], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8101) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.069156085s ago: executing program 2 (id=1690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.434310573s ago: executing program 1 (id=1691): socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f00000021c0)={0x18, 0x0, r4, {0x7}}, 0x18) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002140)={0x20, 0x0, r5, {0x0, 0x0, 0x80003ff}}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) getdents64(r3, 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0x0, r6}, 0x10) open(0x0, 0x0, 0x0) getdents(r3, 0x0, 0x3e) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.376991688s ago: executing program 3 (id=1692): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) 4.020881161s ago: executing program 2 (id=1693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x50) 3.976719955s ago: executing program 0 (id=1694): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000800008004000000000000000000a5af0000ffffffff000000000000000000000000000000000000d45db7b709c070033c441d4badb322003a75341bbb2d4b01b6d5effa2acf47130122a1bd6946e5156024507668e5f92f811e00e324e5032cc6ae23f6b2c322381a31a0f7a2f58ed4243de55697"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x28}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.854698136s ago: executing program 2 (id=1695): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 3.644813995s ago: executing program 2 (id=1696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2, &(0x7f0000000200)=@raw=[@generic={0x4, 0x9, 0x9, 0x9, 0x10000000}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000300a9110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib6_table_lookup\x00', r3}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x54f6, &(0x7f0000005800)="$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") r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, 0x17ffffd, 0x0) fallocate(r4, 0x8, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000240)='trans=tcp,') 3.198868186s ago: executing program 3 (id=1697): syz_open_dev$usbfs(0x0, 0x76, 0x101301) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) unshare(0xa000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="bf8ab5d4db4f517b00a3f716b66700"/26], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc008551c, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x7ff, 0x3, {{0x10, 0x4, 0x1, 0x1d, 0x40, 0x68, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x16}, {[@noop, @noop, @cipso={0x86, 0x27, 0x3, [{0x0, 0x10, "d06bde11f61f1e376498d4be45b2"}, {0x0, 0x11, "d4ef6f9d273e69e3dd2861de000000"}]}]}}}}}) getsockname$packet(r3, &(0x7f0000000e00), 0x0) sendmmsg$inet(r2, &(0x7f00000048c0)=[{{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000003c0)="504545302d27b5c813d700f701bd669e837796b083185d7cf5b5b8494a", 0x1d}, {0x0}, {&(0x7f00000004c0)="279626713cc6ddccb742ff2a40fd2ffdf874e2aac254ae219d519e10aa8cc3962ef551e697d13413aff98d6eadef9c36db16707751e69741e4725f8eaf97ecd42ea6740c31f368fea11e18e62893b3ccc474fafb", 0x54}], 0x3, &(0x7f0000000640)=ANY=[], 0x148}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000800)="3ac766648a47352832d5b9918e1a0d86f71751d9f2894e1498a9cf634a64554683d78f059eb6ebf4499d321581823369d991738557b829ffffffffffffff7f86ef6f5c4acf29bfdb9f7a7e06cb6675c085d88565c8ebac253418c859a92a83280ad8cffa80eb60b69114613c443b17fb40414c477d9b8e7e65af3ff6003a32c05797d4bd354384a04eb04edcee336a4b0b58843fb6ebc9681616609675311b85217440b3ab", 0xa5}, {&(0x7f0000000900)="660ebaee1655c2b16b719957292c51cefd51b35a7125e2d4996f519afc86c0b72e15f5f89e802a2ddfc1ca0321b86b64409e8e3a4c9aaa2fd6ffd09b2e3bba2fdc2ae4a05bdbbe98", 0x48}, {0x0}, {&(0x7f0000000a00)}, {&(0x7f0000000ac0)="4b81291eb1156956ce0ed34520bcc7141c8016cc6388351b4dddbd44", 0x1c}], 0x5, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}], 0x48}}, {{&(0x7f0000000c00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000c40)}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001100000000000000000000000100000000000000000000001400000000000000000000000200000005000000000000001c000000000000000000", @ANYRES32=r5, @ANYBLOB="ac1e0101e000000100000000500000000000000000000000070000000717987f000001e0000002000000000a010102ac1e0101940db86fc3c6043630505591a5440c5223ffffffff000000054408bc200000000100070732ac1414aa1c0000", @ANYRES32, @ANYBLOB], 0xd8}}, {{&(0x7f0000000f80)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000032c0)=[{&(0x7f00000012c0)}, {&(0x7f0000000fc0)="b3f95c23261de9c5382972ab057188c85bc0326c8a87e43f03b6dd681ce8dab728e419e8e0de9d4f2ad713091cdbadbf7b472ebc498458169adf7cf46d0e7e8d191bbe804bcf3a57ebe3a9ad48732d6e64e82294fff442c80d1665876261c77f6339c9fe29d75aba2ec186e6e8bcbd81ffacc20c001ca9b888deb2098530d6419b14", 0x82}, {&(0x7f0000001080)="ddf882ee49b2dd24aec080ff59db0f521308da11eaf61a8637b6e7d097be3c49d99933c4e2c721c6f7f5a8af4f9fed847bffdce2081f203c8b3b8937dc9bea95f294377c4dd10d8b55ffd515d4422759ad3913825a42cd9100d87759576c8cd59597be902ff30b655cff39b0ac8d181d1fb8b789cdc29ee586c4eb17db037492b848a35835a686d56fc2b9fce651dcac9375bc47d309c73a9dfcc7fa4b8e8a1002e2ceeff3c57c9045895f4054b0", 0xae}, {&(0x7f0000001140)="bd9ab0f471f8808f6f290c5438600004b401413402836cb348815c52d2bcfbbe4aff3492306eab3043977409eea6555cc6cd9ce0d0266646f23686c4a9aa1d5656c77e74332668", 0x47}, {&(0x7f0000001200)="c17640fb9e9c3a65fc03f5c112f861ff752d4a068ea933ee845957f3b5c2790a44a55b846ba32247f299c40907bf0a9166e793bc1c22206b8decaafe87e73429ffb7b42cefee3b4afae808b070bb8671ad24fac1508d5c8de15b46980d253c183f9e53ded9553d1f5e1a73c4c88a0e1b4154d5e5dfb1879e7d29be5db233", 0x7e}], 0x5}}, {{&(0x7f0000003340)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003400), 0x0, &(0x7f0000003440)=[@ip_retopts={{0x54, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x32, [@dev={0xac, 0x14, 0x14, 0x32}, @local]}, @cipso={0x86, 0x2d, 0x3, [{0x0, 0x12, "db62d6cb9399685a5a135ca9bc6a7959"}, {0x0, 0x2}, {0x1, 0xc, "edfdcfd71e4e4f1317e6"}, {0x6, 0x3, '0'}, {0x7, 0x4, "e08e"}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x70}}, {{&(0x7f0000003500)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0}}, {{&(0x7f0000003680)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000004880)=[{&(0x7f0000003740)="5e54aedf33ee3eac80c2de92b9bb232ecf72d6957f5813b9beb79c4b95217b7df447198230b49ebc78f52cdd5f37c68289c803042cc95bfe14e55f34ee790f50e1ab98427ee98b7bc6ec125750bae554a095bafeb80c73753be7afeb702cd8928b4f8efd314ef24dda4ae67e2f0e461bf57c3a2d221c71f30be28f37776096a8d648a99b8b1abae34d458a95ab3b2935f288d4185e8b238371103c5f4b4b39ea33150ec6b2717d5abc69c1b95e34fca5e955702ab49ec095a1c12771713a827656b40364b9d0f579d4db055b8c8fd2844e06e6bd2952b5f66bf0", 0xda}, {0x0}, {&(0x7f0000003880)="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", 0x1000}], 0x3}}], 0x7, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000101c0)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0xfffffffe, 0x85, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x12) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1e, 0x0, "826c052f5e9965e9e48a0c742fa5b80e43f9cefa47767f57fd210c5ddcaff771c786eb242339bbc8ff30879fb703508b184300f66d8dcc79340c8ce2742cf750f5d351e81b592c901f4ae2bbdb6e7649"}, 0xd8) 3.114415604s ago: executing program 4 (id=1698): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rtc_irq_set_state\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8000, 0x40) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r1, r2, 0x0) 3.05116515s ago: executing program 1 (id=1699): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$char_usb(r0, &(0x7f0000000440)=""/156, 0x94) 2.669743854s ago: executing program 0 (id=1700): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x4, 0x0) 2.205870067s ago: executing program 3 (id=1701): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) unshare(0x20040600) connect$unix(r1, 0x0, 0x0) 2.080897729s ago: executing program 0 (id=1702): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x25, &(0x7f00000009c0)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x20000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@uid_gt}, {@appraise_type}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) close(r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x88}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000006800010000000000000000000000000000000000060003000000000014000200020000000000000000000000ff"], 0x34}}, 0x0) 2.014397145s ago: executing program 4 (id=1703): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000700)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@nocase}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}]}, 0x25, 0x35a, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x80000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000003c0)=""/43) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) statx(r0, &(0x7f0000000540)='./file0\x00', 0x1000, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r6 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0x0, r9) setregid(r7, r9) getgroups(0x7, &(0x7f00000006c0)=[0x0, r3, r4, r5, 0x0, r7, 0xee01]) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 1.95562756s ago: executing program 3 (id=1704): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) openat(r4, &(0x7f00000001c0)='./file1\x00', 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) 1.140055805s ago: executing program 0 (id=1705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x50) 988.728209ms ago: executing program 0 (id=1706): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x8a, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a886411000000000057", 0x0, 0xff, 0x60000000, 0xfffffd3c, 0x0, 0x0, 0x0}, 0x50) 660.575929ms ago: executing program 4 (id=1707): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000700)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@nocase}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}]}, 0x25, 0x35a, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x80000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f00000003c0)=""/43) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) statx(r0, &(0x7f0000000540)='./file0\x00', 0x1000, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r6 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0x0, r9) setregid(r7, r9) getgroups(0x7, &(0x7f00000006c0)=[0x0, r3, r4, r5, 0x0, r7, 0xee01]) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 406.559652ms ago: executing program 2 (id=1708): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000000002010400000000000000000200ebff040001803c0003800c00028005000100000000002c000180140a00000000000000000000000000000000000014000400fe8000000000000000000000000000bb3c00"], 0x90}}, 0x0) socket(0x11, 0x2, 0x400) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001500197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000008100"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x3000c00, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC], 0x1, 0x663, &(0x7f00000010c0)="$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") io_setup(0x7, &(0x7f0000001040)=0x0) io_submit(r5, 0x1, &(0x7f0000002840)=[&(0x7f0000002800)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) keyctl$KEYCTL_PKEY_ENCRYPT(0x18, &(0x7f0000000400)={0x0, 0x0, 0x1000}, 0x0, &(0x7f0000000980), &(0x7f0000000c00)=""/4096) 0s ago: executing program 0 (id=1709): socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 2335][ T3620] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 515.035620][ T9065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 516.157895][ T9074] loop1: detected capacity change from 0 to 1024 [ 516.320413][ T8507] handle_bad_sector: 2560 callbacks suppressed [ 516.320481][ T8507] attempt to access beyond end of device [ 516.320481][ T8507] loop3: rw=524288, want=58488, limit=40427 [ 516.554488][ T8507] attempt to access beyond end of device [ 516.554488][ T8507] loop3: rw=524288, want=58496, limit=40427 [ 516.637753][ T9077] loop0: detected capacity change from 0 to 512 [ 516.683287][ T8507] attempt to access beyond end of device [ 516.683287][ T8507] loop3: rw=524288, want=58504, limit=40427 [ 516.754882][ T8507] attempt to access beyond end of device [ 516.754882][ T8507] loop3: rw=524288, want=58512, limit=40427 [ 516.761680][ T9065] EXT4-fs (loop2): 1 truncate cleaned up [ 516.806228][ T8507] attempt to access beyond end of device [ 516.806228][ T8507] loop3: rw=524288, want=58520, limit=40427 [ 516.817972][ T8507] attempt to access beyond end of device [ 516.817972][ T8507] loop3: rw=524288, want=58528, limit=40427 [ 516.829742][ T8507] attempt to access beyond end of device [ 516.829742][ T8507] loop3: rw=524288, want=58536, limit=40427 [ 516.841955][ T8507] attempt to access beyond end of device [ 516.841955][ T8507] loop3: rw=524288, want=58544, limit=40427 [ 516.854748][ T9077] EXT4-fs (loop0): Ignoring removed bh option [ 516.868072][ T9065] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 516.880286][ T8507] attempt to access beyond end of device [ 516.880286][ T8507] loop3: rw=524288, want=58552, limit=40427 [ 516.893975][ T3620] usb 5-1: Using ep0 maxpacket: 8 [ 516.935685][ T8507] attempt to access beyond end of device [ 516.935685][ T8507] loop3: rw=524288, want=58560, limit=40427 [ 516.936476][ T9077] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.1255: inline data xattr refers to an external xattr inode [ 516.983947][ T9077] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1255: couldn't read orphan inode 12 (err -117) [ 517.028471][ T9077] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 517.060411][ T3620] usb 5-1: config 0 has no interfaces? [ 517.070166][ T3620] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 517.260364][ T3620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.351246][ T3620] usb 5-1: config 0 descriptor?? [ 517.573075][ T3613] usb 5-1: USB disconnect, device number 35 [ 517.958169][ T9087] loop4: detected capacity change from 0 to 512 [ 518.224084][ T9087] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 518.299524][ T9087] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 519.250207][ T9087] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1260: Directory hole found for htree leaf block 0 [ 519.562598][ T9101] loop1: detected capacity change from 0 to 2048 [ 519.929819][ T9101] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 520.563953][ T9108] loop2: detected capacity change from 0 to 2048 [ 520.619716][ T9112] loop4: detected capacity change from 0 to 512 [ 520.674914][ T9108] EXT4-fs (loop2): Ignoring removed orlov option [ 520.721088][ T9108] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 521.894957][ T8507] handle_bad_sector: 6153 callbacks suppressed [ 521.895274][ T8507] attempt to access beyond end of device [ 521.895274][ T8507] loop3: rw=524288, want=58832, limit=40427 [ 521.909685][ T8507] attempt to access beyond end of device [ 521.909685][ T8507] loop3: rw=524288, want=58840, limit=40427 [ 521.918664][ T8507] attempt to access beyond end of device [ 521.918664][ T8507] loop3: rw=524288, want=58848, limit=40427 [ 521.940096][ T8507] attempt to access beyond end of device [ 521.940096][ T8507] loop3: rw=524288, want=58856, limit=40427 [ 521.940201][ T8507] attempt to access beyond end of device [ 521.940201][ T8507] loop3: rw=524288, want=58864, limit=40427 [ 521.940265][ T8507] attempt to access beyond end of device [ 521.940265][ T8507] loop3: rw=524288, want=58872, limit=40427 [ 521.940328][ T8507] attempt to access beyond end of device [ 521.940328][ T8507] loop3: rw=524288, want=58880, limit=40427 [ 521.940390][ T8507] attempt to access beyond end of device [ 521.940390][ T8507] loop3: rw=524288, want=58888, limit=40427 [ 521.940452][ T8507] attempt to access beyond end of device [ 521.940452][ T8507] loop3: rw=524288, want=58896, limit=40427 [ 521.940515][ T8507] attempt to access beyond end of device [ 521.940515][ T8507] loop3: rw=524288, want=58904, limit=40427 [ 522.026838][ T9112] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 522.026945][ T9112] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 523.797813][ T9138] loop0: detected capacity change from 0 to 512 [ 523.896936][ T9138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 523.943866][ T9145] input: syz0 as /devices/virtual/input/input44 [ 523.964784][ T9138] EXT4-fs (loop0): 1 truncate cleaned up [ 523.985718][ T9138] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 524.742465][ T9155] loop2: detected capacity change from 0 to 512 [ 524.878552][ T9157] loop1: detected capacity change from 0 to 512 [ 524.972202][ T9155] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 524.990342][ T9155] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038 (0x7fffffff) [ 525.136105][ T9157] EXT4-fs (loop1): Ignoring removed bh option [ 525.222414][ T9155] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1275: Directory hole found for htree leaf block 0 [ 525.233661][ T9157] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.1278: inline data xattr refers to an external xattr inode [ 525.346629][ T9157] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1278: couldn't read orphan inode 12 (err -117) [ 525.411063][ T9157] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 526.078246][ T9172] loop0: detected capacity change from 0 to 512 [ 526.152085][ T9161] loop4: detected capacity change from 0 to 40427 [ 526.301226][ T9161] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 526.460234][ T9161] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 526.748299][ T9161] F2FS-fs (loop4): invalid crc value [ 526.765287][ T9172] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 526.951244][ T8507] handle_bad_sector: 5925 callbacks suppressed [ 526.951266][ T8507] attempt to access beyond end of device [ 526.951266][ T8507] loop3: rw=524288, want=57352, limit=40427 [ 526.976710][ T9172] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038 (0x7fffffff) [ 527.022300][ T9161] F2FS-fs (loop4): Found nat_bits in checkpoint [ 527.110869][ T9182] loop2: detected capacity change from 0 to 2048 [ 527.137881][ T8507] attempt to access beyond end of device [ 527.137881][ T8507] loop3: rw=524288, want=57360, limit=40427 [ 527.220853][ T8507] attempt to access beyond end of device [ 527.220853][ T8507] loop3: rw=524288, want=57368, limit=40427 [ 527.319751][ T9161] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 527.340094][ T9161] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 527.359414][ T8507] attempt to access beyond end of device [ 527.359414][ T8507] loop3: rw=524288, want=57376, limit=40427 [ 527.501327][ T9182] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 527.577755][ T8507] attempt to access beyond end of device [ 527.577755][ T8507] loop3: rw=524288, want=57384, limit=40427 [ 527.630256][ T8507] attempt to access beyond end of device [ 527.630256][ T8507] loop3: rw=524288, want=57392, limit=40427 [ 527.730113][ T8507] attempt to access beyond end of device [ 527.730113][ T8507] loop3: rw=524288, want=57400, limit=40427 [ 527.825869][ T8507] attempt to access beyond end of device [ 527.825869][ T8507] loop3: rw=524288, want=57408, limit=40427 [ 527.921237][ T8507] attempt to access beyond end of device [ 527.921237][ T8507] loop3: rw=524288, want=57416, limit=40427 [ 527.980158][ T8507] attempt to access beyond end of device [ 527.980158][ T8507] loop3: rw=524288, want=57424, limit=40427 [ 528.547692][ T9195] loop2: detected capacity change from 0 to 1024 [ 529.347758][ T9189] loop0: detected capacity change from 0 to 40427 [ 529.590798][ T9189] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 529.609452][ T9199] loop1: detected capacity change from 0 to 2048 [ 529.650454][ T9189] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 529.656489][ T9204] input: syz0 as /devices/virtual/input/input45 [ 529.986939][ T9206] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 530.168281][ T9189] F2FS-fs (loop0): invalid crc value [ 530.254738][ T9199] EXT4-fs (loop1): Ignoring removed orlov option [ 530.285325][ T9189] F2FS-fs (loop0): Found nat_bits in checkpoint [ 530.352110][ T9199] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 530.529420][ T9216] loop2: detected capacity change from 0 to 512 [ 530.809506][ T9216] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 530.866302][ T9216] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038 (0x7fffffff) [ 531.138921][ T9213] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1290: Directory hole found for htree leaf block 0 [ 531.337825][ T9228] loop1: detected capacity change from 0 to 256 [ 531.575894][ T9230] loop0: detected capacity change from 0 to 512 [ 531.696992][ T9234] loop4: detected capacity change from 0 to 2048 [ 531.760195][ T9230] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 532.551721][ T8507] handle_bad_sector: 4269 callbacks suppressed [ 532.551741][ T8507] attempt to access beyond end of device [ 532.551741][ T8507] loop3: rw=524288, want=58944, limit=40427 [ 532.573990][ T9230] EXT4-fs (loop0): 1 truncate cleaned up [ 532.579657][ T9230] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 532.656887][ T9242] loop2: detected capacity change from 0 to 256 [ 532.657372][ T9234] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 532.670431][ T8507] attempt to access beyond end of device [ 532.670431][ T8507] loop3: rw=524288, want=58952, limit=40427 [ 532.765205][ T8507] attempt to access beyond end of device [ 532.765205][ T8507] loop3: rw=524288, want=58960, limit=40427 [ 532.785374][ T8507] attempt to access beyond end of device [ 532.785374][ T8507] loop3: rw=524288, want=58968, limit=40427 [ 532.847868][ T9245] loop1: detected capacity change from 0 to 512 [ 532.856157][ T8507] attempt to access beyond end of device [ 532.856157][ T8507] loop3: rw=524288, want=58976, limit=40427 [ 532.971954][ T8507] attempt to access beyond end of device [ 532.971954][ T8507] loop3: rw=524288, want=58984, limit=40427 [ 533.039106][ T9245] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 533.060257][ T9245] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 533.170752][ T8507] attempt to access beyond end of device [ 533.170752][ T8507] loop3: rw=524288, want=58992, limit=40427 [ 533.220234][ T9245] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1295: Directory hole found for htree leaf block 0 [ 533.263928][ T9245] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1295: Directory hole found for htree leaf block 0 [ 533.277387][ T8507] attempt to access beyond end of device [ 533.277387][ T8507] loop3: rw=524288, want=59000, limit=40427 [ 533.855993][ T9253] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1295: Directory hole found for htree leaf block 0 [ 533.887097][ T8507] attempt to access beyond end of device [ 533.887097][ T8507] loop3: rw=524288, want=59008, limit=40427 [ 533.920161][ T8507] attempt to access beyond end of device [ 533.920161][ T8507] loop3: rw=524288, want=59016, limit=40427 [ 534.026274][ T9255] loop4: detected capacity change from 0 to 512 [ 534.177727][ T9255] EXT4-fs (loop4): Ignoring removed bh option [ 534.262824][ T9255] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.1296: inline data xattr refers to an external xattr inode [ 534.283874][ T9255] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1296: couldn't read orphan inode 12 (err -117) [ 534.296354][ T9255] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 534.963345][ T9262] loop1: detected capacity change from 0 to 512 [ 535.087379][ T9262] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 535.120153][ T9262] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 535.127306][ T9262] EXT4-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 535.460293][ T9271] input: syz0 as /devices/virtual/input/input46 [ 535.622967][ T9264] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 535.813773][ T9270] kvm: pic: non byte read [ 535.818482][ T9270] kvm: pic: non byte read [ 535.864600][ T9270] kvm: pic: non byte read [ 535.884065][ T9270] kvm: pic: non byte read [ 535.902636][ T9270] kvm: pic: non byte read [ 535.921238][ T9270] kvm: pic: non byte read [ 535.959606][ T9270] kvm: pic: non byte read [ 535.964294][ T9270] kvm: pic: non byte read [ 535.969027][ T9270] kvm: pic: single mode not supported [ 535.969102][ T9270] kvm: pic: non byte read [ 536.019862][ T9270] kvm: pic: non byte read [ 536.027846][ T9270] kvm: pic: level sensitive irq not supported [ 536.028195][ T9270] kvm: pic: level sensitive irq not supported [ 536.183369][ T9274] netem: change failed [ 536.250700][ T9258] loop0: detected capacity change from 0 to 40427 [ 536.314596][ T9258] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 536.354475][ T9258] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 536.385515][ T9258] F2FS-fs (loop0): invalid crc value [ 536.421767][ T9258] F2FS-fs (loop0): Found nat_bits in checkpoint [ 536.456769][ T9281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1298'. [ 536.525227][ T9258] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 536.534455][ T9258] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 536.660693][ T3611] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 537.572685][ T8507] handle_bad_sector: 6367 callbacks suppressed [ 537.572704][ T8507] attempt to access beyond end of device [ 537.572704][ T8507] loop3: rw=0, want=58960, limit=40427 [ 537.602556][ T8507] attempt to access beyond end of device [ 537.602556][ T8507] loop3: rw=0, want=58968, limit=40427 [ 537.620269][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.631420][ T8507] attempt to access beyond end of device [ 537.631420][ T8507] loop3: rw=0, want=58976, limit=40427 [ 537.644780][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.659847][ T8507] attempt to access beyond end of device [ 537.659847][ T8507] loop3: rw=0, want=58984, limit=40427 [ 537.679396][ T3611] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.718376][ T8507] attempt to access beyond end of device [ 537.718376][ T8507] loop3: rw=0, want=58992, limit=40427 [ 537.757932][ T3611] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 537.785288][ T8507] attempt to access beyond end of device [ 537.785288][ T8507] loop3: rw=0, want=59000, limit=40427 [ 537.818358][ T3611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.879519][ T8507] attempt to access beyond end of device [ 537.879519][ T8507] loop3: rw=0, want=59008, limit=40427 [ 537.901440][ T3611] usb 5-1: config 0 descriptor?? [ 537.950438][ T8507] attempt to access beyond end of device [ 537.950438][ T8507] loop3: rw=0, want=59016, limit=40427 [ 538.037119][ T8507] attempt to access beyond end of device [ 538.037119][ T8507] loop3: rw=0, want=59024, limit=40427 [ 538.146104][ T8507] attempt to access beyond end of device [ 538.146104][ T8507] loop3: rw=0, want=59032, limit=40427 [ 538.178254][ T9294] loop2: detected capacity change from 0 to 1024 [ 538.271042][ T9294] hfsplus: unable to parse mount options [ 538.520111][ T3611] usbhid 5-1:0.0: can't add hid device: -71 [ 538.526177][ T3611] usbhid: probe of 5-1:0.0 failed with error -71 [ 538.547941][ T3611] usb 5-1: USB disconnect, device number 36 [ 539.666842][ T9306] loop2: detected capacity change from 0 to 512 [ 540.301299][ T9306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 540.374323][ T9319] input: syz0 as /devices/virtual/input/input47 [ 540.381936][ T9306] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038 (0x7fffffff) [ 540.493368][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1315'. [ 540.837886][ T9306] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1310: Directory hole found for htree leaf block 0 [ 542.213134][ T9346] loop2: detected capacity change from 0 to 1764 [ 542.257842][ T9350] loop0: detected capacity change from 0 to 1024 [ 542.291243][ T9350] hfsplus: unable to parse mount options [ 542.462609][ T21] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 542.616114][ T8507] handle_bad_sector: 6014 callbacks suppressed [ 542.616132][ T8507] attempt to access beyond end of device [ 542.616132][ T8507] loop3: rw=0, want=58192, limit=40427 [ 542.713443][ T8507] attempt to access beyond end of device [ 542.713443][ T8507] loop3: rw=0, want=58200, limit=40427 [ 542.758115][ T8507] attempt to access beyond end of device [ 542.758115][ T8507] loop3: rw=0, want=58208, limit=40427 [ 542.826260][ T8507] attempt to access beyond end of device [ 542.826260][ T8507] loop3: rw=0, want=58216, limit=40427 [ 542.935404][ T8507] attempt to access beyond end of device [ 542.935404][ T8507] loop3: rw=0, want=58224, limit=40427 [ 542.946749][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.962764][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.975938][ T8507] attempt to access beyond end of device [ 542.975938][ T8507] loop3: rw=0, want=58232, limit=40427 [ 543.140502][ T21] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 544.274382][ T8507] attempt to access beyond end of device [ 544.274382][ T8507] loop3: rw=0, want=58240, limit=40427 [ 544.353507][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.363337][ T21] usb 2-1: config 0 descriptor?? [ 544.473422][ T8507] attempt to access beyond end of device [ 544.473422][ T8507] loop3: rw=0, want=58248, limit=40427 [ 544.497634][ T9369] loop2: detected capacity change from 0 to 512 [ 544.533511][ T21] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 544.542121][ T21] usb 2-1: USB disconnect, device number 15 [ 544.560317][ T8507] attempt to access beyond end of device [ 544.560317][ T8507] loop3: rw=0, want=58256, limit=40427 [ 544.572881][ T8507] attempt to access beyond end of device [ 544.572881][ T8507] loop3: rw=0, want=58264, limit=40427 [ 544.590811][ T9369] EXT4-fs (loop2): orphan cleanup on readonly fs [ 544.629364][ T9375] input: syz0 as /devices/virtual/input/input48 [ 545.090020][ T9369] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.1327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 545.116247][ T9369] EXT4-fs error (device loop2): ext4_quota_enable:6390: comm syz.2.1327: Bad quota inode: 4, type: 1 [ 545.143948][ T9369] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 545.158776][ T9369] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 545.165600][ T9369] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 545.207465][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 545.207479][ T26] audit: type=1326 audit(1727503634.047:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 545.400736][ T26] audit: type=1326 audit(1727503634.097:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 545.459611][ T9382] loop4: detected capacity change from 0 to 512 [ 546.332535][ T26] audit: type=1326 audit(1727503634.097:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 546.428584][ T9382] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 546.446379][ T9382] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 546.452789][ T9399] loop0: detected capacity change from 0 to 1024 [ 546.510730][ T9399] hfsplus: unable to parse mount options [ 546.527951][ T26] audit: type=1326 audit(1727503634.097:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 546.927368][ T9408] loop1: detected capacity change from 0 to 256 [ 547.694606][ T8507] handle_bad_sector: 2180 callbacks suppressed [ 547.694629][ T8507] attempt to access beyond end of device [ 547.694629][ T8507] loop3: rw=524288, want=57352, limit=40427 [ 547.772686][ T9415] syz.2.1336[9415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.773125][ T9415] syz.2.1336[9415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.380983][ T26] audit: type=1326 audit(1727503634.097:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 548.416394][ T8507] attempt to access beyond end of device [ 548.416394][ T8507] loop3: rw=524288, want=57360, limit=40427 [ 548.480784][ T8507] attempt to access beyond end of device [ 548.480784][ T8507] loop3: rw=524288, want=57368, limit=40427 [ 548.492539][ T26] audit: type=1326 audit(1727503634.217:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 548.580957][ T8507] attempt to access beyond end of device [ 548.580957][ T8507] loop3: rw=524288, want=57376, limit=40427 [ 548.612616][ T8507] attempt to access beyond end of device [ 548.612616][ T8507] loop3: rw=524288, want=57384, limit=40427 [ 548.764390][ T9426] input: syz0 as /devices/virtual/input/input49 [ 548.991238][ T9427] loop0: detected capacity change from 0 to 1024 [ 549.040480][ T8507] attempt to access beyond end of device [ 549.040480][ T8507] loop3: rw=524288, want=57392, limit=40427 [ 549.239510][ T8507] attempt to access beyond end of device [ 549.239510][ T8507] loop3: rw=524288, want=57400, limit=40427 [ 549.343789][ T8507] attempt to access beyond end of device [ 549.343789][ T8507] loop3: rw=524288, want=57408, limit=40427 [ 549.604391][ T26] audit: type=1326 audit(1727503634.217:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 549.879147][ T8507] attempt to access beyond end of device [ 549.879147][ T8507] loop3: rw=524288, want=57416, limit=40427 [ 549.894462][ T8507] attempt to access beyond end of device [ 549.894462][ T8507] loop3: rw=524288, want=57424, limit=40427 [ 550.017913][ T9434] overlayfs: failed to resolve './file0': -2 [ 550.113913][ T9433] loop1: detected capacity change from 0 to 256 [ 550.127225][ T26] audit: type=1326 audit(1727503634.217:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 550.334464][ T26] audit: type=1326 audit(1727503634.297:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 550.356882][ T26] audit: type=1326 audit(1727503634.297:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 550.390023][ T26] audit: type=1326 audit(1727503634.297:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 551.090076][ T21] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 551.116378][ T26] audit: type=1326 audit(1727503634.297:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 551.481828][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.585219][ T26] audit: type=1326 audit(1727503634.297:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 551.636713][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.676105][ T26] audit: type=1326 audit(1727503634.297:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 551.699198][ T26] audit: type=1326 audit(1727503634.297:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 551.769703][ T26] audit: type=1326 audit(1727503634.297:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 552.081146][ T21] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 552.090911][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.129973][ T26] audit: type=1326 audit(1727503634.297:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 552.161921][ T21] usb 2-1: config 0 descriptor?? [ 552.222110][ T9458] loop0: detected capacity change from 0 to 1024 [ 552.260912][ T26] audit: type=1326 audit(1727503634.297:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877c2b6ff9 code=0x7ffc0000 [ 552.301031][ T9458] hfsplus: unable to parse mount options [ 552.366169][ T9461] loop4: detected capacity change from 0 to 2048 [ 553.146867][ T9461] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 553.158224][ T8507] handle_bad_sector: 2236 callbacks suppressed [ 553.158241][ T8507] attempt to access beyond end of device [ 553.158241][ T8507] loop3: rw=524288, want=59000, limit=40427 [ 553.227666][ T8507] attempt to access beyond end of device [ 553.227666][ T8507] loop3: rw=524288, want=59008, limit=40427 [ 553.289016][ T8507] attempt to access beyond end of device [ 553.289016][ T8507] loop3: rw=524288, want=59016, limit=40427 [ 553.321677][ T8507] attempt to access beyond end of device [ 553.321677][ T8507] loop3: rw=524288, want=59024, limit=40427 [ 553.366616][ T9467] loop0: detected capacity change from 0 to 512 [ 553.419017][ T8507] attempt to access beyond end of device [ 553.419017][ T8507] loop3: rw=524288, want=59032, limit=40427 [ 553.481024][ T8507] attempt to access beyond end of device [ 553.481024][ T8507] loop3: rw=524288, want=59040, limit=40427 [ 553.570461][ T8507] attempt to access beyond end of device [ 553.570461][ T8507] loop3: rw=524288, want=59048, limit=40427 [ 553.656451][ T8507] attempt to access beyond end of device [ 553.656451][ T8507] loop3: rw=524288, want=59056, limit=40427 [ 553.736887][ T8507] attempt to access beyond end of device [ 553.736887][ T8507] loop3: rw=524288, want=59064, limit=40427 [ 553.806897][ T8507] attempt to access beyond end of device [ 553.806897][ T8507] loop3: rw=524288, want=59072, limit=40427 [ 554.060172][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 554.066153][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 554.083472][ T21] usb 2-1: USB disconnect, device number 16 [ 554.102119][ T9467] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 554.102221][ T9467] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038 (0x7fffffff) [ 554.270765][ T9467] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1350: Directory hole found for htree leaf block 0 [ 554.271973][ T9482] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 554.276100][ T9482] picdev_read: 3 callbacks suppressed [ 554.276115][ T9482] kvm: pic: non byte read [ 554.276467][ T9482] kvm: pic: non byte read [ 554.276656][ T9482] kvm: pic: non byte read [ 554.276973][ T9482] kvm: pic: non byte read [ 554.277153][ T9482] kvm: pic: non byte read [ 554.277408][ T9482] kvm: pic: non byte read [ 554.277652][ T9482] kvm: pic: non byte read [ 554.277948][ T9482] kvm: pic: non byte read [ 554.278105][ T9482] kvm: pic: single mode not supported [ 554.278208][ T9482] kvm: pic: non byte read [ 554.278407][ T9482] kvm: pic: non byte read [ 554.278593][ T9482] kvm: pic: level sensitive irq not supported [ 554.279262][ T9482] kvm: pic: level sensitive irq not supported [ 554.847427][ T9495] loop0: detected capacity change from 0 to 1764 [ 555.067769][ T9501] loop4: detected capacity change from 0 to 1024 [ 555.111401][ T9501] hfsplus: unable to parse mount options [ 555.556803][ T9506] loop4: detected capacity change from 0 to 512 [ 555.596966][ T9507] loop0: detected capacity change from 0 to 2048 [ 555.665011][ T9507] EXT4-fs (loop0): Ignoring removed orlov option [ 555.673533][ T9506] EXT4-fs (loop4): Ignoring removed bh option [ 555.871607][ T9506] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.1362: inline data xattr refers to an external xattr inode [ 555.888942][ T9507] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 555.980160][ T9506] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1362: couldn't read orphan inode 12 (err -117) [ 556.008967][ T9517] loop1: detected capacity change from 0 to 2048 [ 556.037826][ T9506] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 556.792620][ T9517] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 558.467998][ T8507] handle_bad_sector: 9686 callbacks suppressed [ 558.468018][ T8507] attempt to access beyond end of device [ 558.468018][ T8507] loop3: rw=524288, want=59048, limit=40427 [ 558.622969][ T8507] attempt to access beyond end of device [ 558.622969][ T8507] loop3: rw=524288, want=59056, limit=40427 [ 558.711356][ T9537] loop1: detected capacity change from 0 to 1764 [ 558.751009][ T8507] attempt to access beyond end of device [ 558.751009][ T8507] loop3: rw=524288, want=59064, limit=40427 [ 558.785051][ T9541] loop0: detected capacity change from 0 to 1024 [ 558.819271][ T8507] attempt to access beyond end of device [ 558.819271][ T8507] loop3: rw=524288, want=59072, limit=40427 [ 558.840211][ T8507] attempt to access beyond end of device [ 558.840211][ T8507] loop3: rw=524288, want=59080, limit=40427 [ 558.852743][ T8507] attempt to access beyond end of device [ 558.852743][ T8507] loop3: rw=524288, want=59088, limit=40427 [ 558.865444][ T8507] attempt to access beyond end of device [ 558.865444][ T8507] loop3: rw=524288, want=59096, limit=40427 [ 558.865878][ T9541] hfsplus: unable to parse mount options [ 558.880093][ T8507] attempt to access beyond end of device [ 558.880093][ T8507] loop3: rw=524288, want=59104, limit=40427 [ 558.886339][ T7] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 558.934297][ T8507] attempt to access beyond end of device [ 558.934297][ T8507] loop3: rw=524288, want=59112, limit=40427 [ 559.032684][ T8507] attempt to access beyond end of device [ 559.032684][ T8507] loop3: rw=524288, want=59120, limit=40427 [ 559.260067][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 559.393045][ T9552] loop0: detected capacity change from 0 to 2048 [ 559.400726][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.422631][ T7] usb 3-1: config 0 has no interfaces? [ 559.448027][ T7] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 559.464692][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.486035][ T7] usb 3-1: config 0 descriptor?? [ 559.605163][ T9552] EXT4-fs (loop0): Ignoring removed orlov option [ 559.636488][ T9558] loop4: detected capacity change from 0 to 512 [ 559.735059][ T9558] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1378: casefold flag without casefold feature [ 559.735128][ T9552] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 559.791821][ T9558] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1378: couldn't read orphan inode 15 (err -117) [ 559.833681][ T9558] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 559.866385][ T7] usb 3-1: USB disconnect, device number 23 [ 560.571034][ T9567] loop1: detected capacity change from 0 to 512 [ 560.637832][ T9567] EXT4-fs (loop1): Ignoring removed bh option [ 560.768596][ T9576] loop2: detected capacity change from 0 to 1024 [ 560.831486][ T9576] hfsplus: unable to parse mount options [ 562.383817][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 562.480098][ T9567] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.1379: inline data xattr refers to an external xattr inode [ 562.496586][ T9567] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1379: couldn't read orphan inode 12 (err -117) [ 562.550864][ T9586] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 562.586464][ T9591] loop2: detected capacity change from 0 to 1764 [ 562.606952][ T9567] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 562.644127][ T9589] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 562.701774][ T9589] bond1 (unregistering): Released all slaves [ 563.218096][ T9603] loop2: detected capacity change from 0 to 512 [ 563.280010][ T3620] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 563.354208][ T9603] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1390: casefold flag without casefold feature [ 563.395124][ T9603] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1390: couldn't read orphan inode 15 (err -117) [ 563.430525][ T9603] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 563.514813][ T8507] handle_bad_sector: 6408 callbacks suppressed [ 563.514831][ T8507] attempt to access beyond end of device [ 563.514831][ T8507] loop3: rw=524288, want=57352, limit=40427 [ 563.533099][ T3620] usb 5-1: Using ep0 maxpacket: 8 [ 563.712918][ T8507] attempt to access beyond end of device [ 563.712918][ T8507] loop3: rw=524288, want=57360, limit=40427 [ 563.744511][ T8507] attempt to access beyond end of device [ 563.744511][ T8507] loop3: rw=524288, want=57368, limit=40427 [ 563.759675][ T8507] attempt to access beyond end of device [ 563.759675][ T8507] loop3: rw=524288, want=57376, limit=40427 [ 563.770116][ T3620] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 563.778893][ T8507] attempt to access beyond end of device [ 563.778893][ T8507] loop3: rw=524288, want=57384, limit=40427 [ 563.789969][ T3620] usb 5-1: config 179 has no interface number 0 [ 563.797081][ T3620] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 563.797892][ T8507] attempt to access beyond end of device [ 563.797892][ T8507] loop3: rw=524288, want=57392, limit=40427 [ 563.822076][ T3620] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 563.844633][ T8507] attempt to access beyond end of device [ 563.844633][ T8507] loop3: rw=524288, want=57400, limit=40427 [ 563.851389][ T3620] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 563.881392][ T3620] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 563.883387][ T8507] attempt to access beyond end of device [ 563.883387][ T8507] loop3: rw=524288, want=57408, limit=40427 [ 563.914985][ T3620] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 563.931417][ T3620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.947655][ T8507] attempt to access beyond end of device [ 563.947655][ T8507] loop3: rw=524288, want=57416, limit=40427 [ 563.970245][ T9601] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 563.980767][ T8507] attempt to access beyond end of device [ 563.980767][ T8507] loop3: rw=524288, want=57424, limit=40427 [ 564.318453][ T3620] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input50 [ 564.478584][ T3620] usb 5-1: USB disconnect, device number 37 [ 564.489955][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 564.514840][ T3620] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 564.717539][ T9616] loop1: detected capacity change from 0 to 2048 [ 564.786796][ T9616] EXT4-fs (loop1): Ignoring removed orlov option [ 564.819449][ T9616] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 565.786186][ T9626] xt_hashlimit: size too large, truncated to 1048576 [ 566.836310][ T9634] loop4: detected capacity change from 0 to 2048 [ 566.958851][ T9634] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 567.868140][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.874510][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.921099][ T9650] netlink: 'syz.4.1404': attribute type 4 has an invalid length. [ 567.946876][ T9651] loop2: detected capacity change from 0 to 512 [ 568.538005][ T9660] loop1: detected capacity change from 0 to 512 [ 568.550032][ T8507] handle_bad_sector: 6587 callbacks suppressed [ 568.550052][ T8507] attempt to access beyond end of device [ 568.550052][ T8507] loop3: rw=0, want=59128, limit=40427 [ 568.590112][ T8507] attempt to access beyond end of device [ 568.590112][ T8507] loop3: rw=0, want=59136, limit=40427 [ 568.616517][ T8507] attempt to access beyond end of device [ 568.616517][ T8507] loop3: rw=0, want=59144, limit=40427 [ 568.650105][ T8507] attempt to access beyond end of device [ 568.650105][ T8507] loop3: rw=0, want=59152, limit=40427 [ 568.670285][ T9660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 568.696107][ T8507] attempt to access beyond end of device [ 568.696107][ T8507] loop3: rw=0, want=59160, limit=40427 [ 568.710924][ T9660] EXT4-fs (loop1): 1 truncate cleaned up [ 568.726833][ T9660] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 568.740052][ T8507] attempt to access beyond end of device [ 568.740052][ T8507] loop3: rw=0, want=59168, limit=40427 [ 568.780049][ T8507] attempt to access beyond end of device [ 568.780049][ T8507] loop3: rw=0, want=59176, limit=40427 [ 568.810024][ T8507] attempt to access beyond end of device [ 568.810024][ T8507] loop3: rw=0, want=59184, limit=40427 [ 568.854975][ T8507] attempt to access beyond end of device [ 568.854975][ T8507] loop3: rw=0, want=59192, limit=40427 [ 568.924510][ T8507] attempt to access beyond end of device [ 568.924510][ T8507] loop3: rw=0, want=59200, limit=40427 [ 570.730125][ T9651] EXT4-fs (loop2): Ignoring removed bh option [ 570.831624][ T9651] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.1403: inline data xattr refers to an external xattr inode [ 570.954724][ T9674] loop1: detected capacity change from 0 to 2048 [ 570.996956][ T9651] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1403: couldn't read orphan inode 12 (err -117) [ 571.315463][ T9651] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 571.616672][ T9674] EXT4-fs (loop1): Ignoring removed orlov option [ 571.805121][ T9674] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 571.822118][ T9681] loop4: detected capacity change from 0 to 1764 [ 573.033362][ T9702] loop1: detected capacity change from 0 to 2048 [ 573.129063][ T9702] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 573.878167][ T8507] handle_bad_sector: 18312 callbacks suppressed [ 573.878189][ T8507] attempt to access beyond end of device [ 573.878189][ T8507] loop3: rw=0, want=58824, limit=40427 [ 574.084211][ T8507] attempt to access beyond end of device [ 574.084211][ T8507] loop3: rw=0, want=58832, limit=40427 [ 574.095436][ T8507] attempt to access beyond end of device [ 574.095436][ T8507] loop3: rw=0, want=58840, limit=40427 [ 574.117678][ T8507] attempt to access beyond end of device [ 574.117678][ T8507] loop3: rw=0, want=58848, limit=40427 [ 574.141073][ T8507] attempt to access beyond end of device [ 574.141073][ T8507] loop3: rw=0, want=58856, limit=40427 [ 574.164517][ T8507] attempt to access beyond end of device [ 574.164517][ T8507] loop3: rw=0, want=58864, limit=40427 [ 574.188375][ T8507] attempt to access beyond end of device [ 574.188375][ T8507] loop3: rw=0, want=58872, limit=40427 [ 574.213701][ T8507] attempt to access beyond end of device [ 574.213701][ T8507] loop3: rw=0, want=58880, limit=40427 [ 574.235718][ T8507] attempt to access beyond end of device [ 574.235718][ T8507] loop3: rw=0, want=58888, limit=40427 [ 574.307961][ T8507] attempt to access beyond end of device [ 574.307961][ T8507] loop3: rw=0, want=58896, limit=40427 [ 575.004493][ T9732] input: syz0 as /devices/virtual/input/input52 [ 575.781468][ T9715] loop1: detected capacity change from 0 to 40427 [ 575.900186][ T13] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 575.919607][ T9715] F2FS-fs (loop1): Found nat_bits in checkpoint [ 575.998056][ T9745] loop2: detected capacity change from 0 to 512 [ 576.041207][ T9715] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 576.150951][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 576.290222][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 576.755533][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.782777][ T9739] chnl_net:caif_netlink_parms(): no params data found [ 576.791006][ T13] usb 5-1: config 0 descriptor?? [ 576.845044][ T13] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input53 [ 576.920270][ T9745] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 577.000144][ T9745] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038 (0x7fffffff) [ 577.060102][ T3012] bcm5974 5-1:0.0: could not read from device [ 577.130979][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.150165][ T3012] bcm5974 5-1:0.0: could not read from device [ 577.167666][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.175029][ T13] bcm5974 5-1:0.0: could not read from device [ 577.191034][ T9739] device bridge_slave_0 entered promiscuous mode [ 577.200015][ T3012] bcm5974 5-1:0.0: could not read from device [ 577.214629][ T13] input: failed to attach handler mousedev to device input53, error: -5 [ 577.251040][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.258330][ T9758] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1426: Directory hole found for htree leaf block 0 [ 577.259157][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.300243][ T3012] bcm5974 5-1:0.0: could not read from device [ 577.318103][ T13] usb 5-1: USB disconnect, device number 38 [ 577.345124][ T9739] device bridge_slave_1 entered promiscuous mode [ 577.356247][ T9760] loop1: detected capacity change from 0 to 512 [ 577.384720][ T3562] udevd[3562]: Error opening device "/dev/input/event4": No such file or directory [ 577.433213][ T3562] udevd[3562]: Unable to EVIOCGABS device "/dev/input/event4" [ 577.462211][ T3562] udevd[3562]: Unable to EVIOCGABS device "/dev/input/event4" [ 577.469800][ T3562] udevd[3562]: Unable to EVIOCGABS device "/dev/input/event4" [ 577.510084][ T3562] udevd[3562]: Unable to EVIOCGABS device "/dev/input/event4" [ 577.511212][ T9739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.561771][ T9760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 577.563673][ T9739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.632630][ T9760] EXT4-fs (loop1): 1 truncate cleaned up [ 577.655787][ T9739] team0: Port device team_slave_0 added [ 577.661770][ T9760] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 577.663496][ T9739] team0: Port device team_slave_1 added [ 577.706232][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.713268][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.758062][ T9739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.781697][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.788653][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.873415][ T9739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.015449][ T3996] Bluetooth: hci5: command 0x0409 tx timeout [ 578.333487][ T9770] loop2: detected capacity change from 0 to 1024 [ 578.484030][ T9770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 578.708580][ T9739] device hsr_slave_0 entered promiscuous mode [ 578.725706][ T9739] device hsr_slave_1 entered promiscuous mode [ 578.748426][ T9739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.778963][ T9739] Cannot create hsr debugfs directory [ 578.797612][ T9774] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1431'. [ 578.891136][ T8507] handle_bad_sector: 8816 callbacks suppressed [ 578.891168][ T8507] attempt to access beyond end of device [ 578.891168][ T8507] loop3: rw=524288, want=58024, limit=40427 [ 578.944141][ T8507] attempt to access beyond end of device [ 578.944141][ T8507] loop3: rw=524288, want=58032, limit=40427 [ 578.955777][ T8507] attempt to access beyond end of device [ 578.955777][ T8507] loop3: rw=524288, want=58040, limit=40427 [ 579.021867][ T8507] attempt to access beyond end of device [ 579.021867][ T8507] loop3: rw=524288, want=58048, limit=40427 [ 579.103633][ T8507] attempt to access beyond end of device [ 579.103633][ T8507] loop3: rw=524288, want=58056, limit=40427 [ 579.121335][ T8507] attempt to access beyond end of device [ 579.121335][ T8507] loop3: rw=524288, want=58064, limit=40427 [ 579.163701][ T8507] attempt to access beyond end of device [ 579.163701][ T8507] loop3: rw=524288, want=58072, limit=40427 [ 579.231468][ T9780] loop1: detected capacity change from 0 to 1024 [ 579.588902][ T3719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.628658][ T8507] attempt to access beyond end of device [ 579.628658][ T8507] loop3: rw=524288, want=58080, limit=40427 [ 579.761162][ T8507] attempt to access beyond end of device [ 579.761162][ T8507] loop3: rw=524288, want=58088, limit=40427 [ 579.784682][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 579.784696][ T26] audit: type=1326 audit(1727503668.627:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.3.1434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed3a059ff9 code=0x0 [ 579.811234][ T8507] attempt to access beyond end of device [ 579.811234][ T8507] loop3: rw=524288, want=58096, limit=40427 [ 579.865438][ T3719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.081965][ T3719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.087965][ T9786] program syz.3.1435 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.110369][ T9447] Bluetooth: hci5: command 0x041b tx timeout [ 580.187630][ T3614] Bluetooth: hci3: command 0x0406 tx timeout [ 580.228339][ T3719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.355167][ T9791] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 580.414761][ T9792] loop4: detected capacity change from 0 to 2048 [ 580.550022][ T9792] EXT4-fs (loop4): Ignoring removed orlov option [ 580.640091][ T13] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 580.740786][ T9792] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 580.920160][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 581.070442][ T13] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 581.673067][ T9788] loop1: detected capacity change from 0 to 40427 [ 581.761504][ T13] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 581.772317][ T13] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 581.785757][ T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 581.795006][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.799421][ T9788] F2FS-fs (loop1): Found nat_bits in checkpoint [ 581.855589][ T13] usbtmc 4-1:16.0: bulk endpoints not found [ 581.908903][ T9818] loop2: detected capacity change from 0 to 1024 [ 581.992509][ T9788] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 582.047507][ T9818] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 582.147686][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1439'. [ 582.194940][ T5043] Bluetooth: hci5: command 0x040f tx timeout [ 582.510947][ T9825] loop4: detected capacity change from 0 to 2048 [ 582.530583][ T3614] usb 4-1: USB disconnect, device number 20 [ 582.706430][ T9739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 582.821093][ T9739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 582.887634][ T9825] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 582.932530][ T9739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 582.966049][ T9739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.420016][ T8507] handle_bad_sector: 7184 callbacks suppressed [ 584.420035][ T8507] attempt to access beyond end of device [ 584.420035][ T8507] loop3: rw=524288, want=58448, limit=40427 [ 584.420149][ T8507] attempt to access beyond end of device [ 584.420149][ T8507] loop3: rw=524288, want=58456, limit=40427 [ 584.420215][ T8507] attempt to access beyond end of device [ 584.420215][ T8507] loop3: rw=524288, want=58464, limit=40427 [ 584.420277][ T8507] attempt to access beyond end of device [ 584.420277][ T8507] loop3: rw=524288, want=58472, limit=40427 [ 584.420340][ T8507] attempt to access beyond end of device [ 584.420340][ T8507] loop3: rw=524288, want=58480, limit=40427 [ 584.420402][ T8507] attempt to access beyond end of device [ 584.420402][ T8507] loop3: rw=524288, want=58488, limit=40427 [ 584.420464][ T8507] attempt to access beyond end of device [ 584.420464][ T8507] loop3: rw=524288, want=58496, limit=40427 [ 584.420552][ T8507] attempt to access beyond end of device [ 584.420552][ T8507] loop3: rw=524288, want=58504, limit=40427 [ 584.420614][ T8507] attempt to access beyond end of device [ 584.420614][ T8507] loop3: rw=524288, want=58512, limit=40427 [ 584.420677][ T8507] attempt to access beyond end of device [ 584.420677][ T8507] loop3: rw=524288, want=58520, limit=40427 [ 584.532783][ T9739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.562642][ T3614] Bluetooth: hci5: command 0x0419 tx timeout [ 584.596784][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 584.597314][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.601791][ T9739] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.284300][ T9739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.348643][ T9739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.428147][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 585.450928][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 585.639875][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.647044][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.715066][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 585.730617][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 585.757253][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.764528][ T3701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.407663][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 586.443062][ T9873] loop1: detected capacity change from 0 to 2048 [ 586.474372][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 586.504562][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 586.517677][ T9873] EXT4-fs (loop1): Ignoring removed orlov option [ 586.544051][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 586.577442][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 586.600946][ T9873] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 586.682451][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.692378][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 586.701900][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 586.711566][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 586.716475][ T9878] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 586.720059][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 586.936430][ T9878] EXT4-fs (loop1): Remounting filesystem read-only [ 587.600903][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.640719][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 587.664391][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.816806][ T3719] device hsr_slave_0 left promiscuous mode [ 587.880218][ T3719] device hsr_slave_1 left promiscuous mode [ 587.900952][ T3719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.908410][ T3719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.926575][ T3719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.950085][ T3719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.969028][ T3719] device bridge_slave_1 left promiscuous mode [ 587.988728][ T3719] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.015903][ T3719] device bridge_slave_0 left promiscuous mode [ 588.032718][ T9897] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 588.034450][ T3719] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.142992][ T3719] device veth1_macvtap left promiscuous mode [ 588.149034][ T3719] device veth0_macvtap left promiscuous mode [ 588.170372][ T3719] device veth1_vlan left promiscuous mode [ 588.250059][ T7] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 588.414501][ T9906] loop4: detected capacity change from 0 to 1024 [ 588.467058][ T9889] loop2: detected capacity change from 0 to 40427 [ 588.531651][ T9889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 588.581779][ T9906] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 588.646026][ T9889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 588.661912][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.696566][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 588.728657][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 588.766769][ T7] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 588.797040][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.858878][ T9898] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 589.287078][ T7] hub 2-1:1.0: bad descriptor, ignoring hub [ 589.293180][ T7] hub: probe of 2-1:1.0 failed with error -5 [ 589.311084][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 589.316331][ T7] cdc_wdm 2-1:1.0: skipping garbage [ 589.350491][ T7] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 589.366582][ T7] cdc_wdm 2-1:1.0: Unknown control protocol [ 589.423508][ T7] usb 2-1: USB disconnect, device number 17 [ 589.448470][ T8507] handle_bad_sector: 7681 callbacks suppressed [ 589.448489][ T8507] attempt to access beyond end of device [ 589.448489][ T8507] loop3: rw=524288, want=58776, limit=40427 [ 589.566777][ T8507] attempt to access beyond end of device [ 589.566777][ T8507] loop3: rw=524288, want=58784, limit=40427 [ 589.626880][ T8507] attempt to access beyond end of device [ 589.626880][ T8507] loop3: rw=524288, want=58792, limit=40427 [ 589.660111][ T8507] attempt to access beyond end of device [ 589.660111][ T8507] loop3: rw=524288, want=58800, limit=40427 [ 589.671869][ T8507] attempt to access beyond end of device [ 589.671869][ T8507] loop3: rw=524288, want=58808, limit=40427 [ 589.683525][ T8507] attempt to access beyond end of device [ 589.683525][ T8507] loop3: rw=524288, want=58816, limit=40427 [ 589.695221][ T8507] attempt to access beyond end of device [ 589.695221][ T8507] loop3: rw=524288, want=58824, limit=40427 [ 589.707012][ T8507] attempt to access beyond end of device [ 589.707012][ T8507] loop3: rw=524288, want=58832, limit=40427 [ 589.719189][ T8507] attempt to access beyond end of device [ 589.719189][ T8507] loop3: rw=524288, want=58840, limit=40427 [ 589.730834][ T8507] attempt to access beyond end of device [ 589.730834][ T8507] loop3: rw=524288, want=58848, limit=40427 [ 590.545323][ T9929] loop1: detected capacity change from 0 to 512 [ 590.670821][ T9929] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1462: casefold flag without casefold feature [ 590.721620][ T9929] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1462: couldn't read orphan inode 15 (err -117) [ 590.760252][ T9929] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 590.957619][ T3719] team0 (unregistering): Port device team_slave_1 removed [ 591.001670][ T3719] team0 (unregistering): Port device team_slave_0 removed [ 591.059124][ T3719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.138072][ T9935] input: syz0 as /devices/virtual/input/input54 [ 591.317692][ T3719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.041732][ T3719] bond0 (unregistering): Released all slaves [ 592.220458][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 592.227992][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 592.313571][ T9739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.390480][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 592.430698][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 592.601044][ T9950] loop1: detected capacity change from 0 to 512 [ 592.788113][ T9739] device veth0_vlan entered promiscuous mode [ 592.882542][ T9950] EXT4-fs (loop1): Ignoring removed bh option [ 592.906910][ T9739] device veth1_vlan entered promiscuous mode [ 592.943325][ T9950] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.1470: inline data xattr refers to an external xattr inode [ 593.040290][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 593.060740][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 593.080008][ T9950] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1470: couldn't read orphan inode 12 (err -117) [ 593.100240][ T9950] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 593.124010][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 593.150754][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 593.158533][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 593.440522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 593.455864][ T9962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.471189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 593.504349][ T9739] device veth0_macvtap entered promiscuous mode [ 593.530241][ T9739] device veth1_macvtap entered promiscuous mode [ 593.573477][ T9962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.657523][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.698931][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.761855][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.803027][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.832923][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.843757][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.854328][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.865122][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.875100][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.885803][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.896984][ T9739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.932011][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 593.943647][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 594.021816][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 594.041225][ T9132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.054195][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.075385][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.150072][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.177921][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.192341][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.209960][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.237680][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.253370][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.300013][ T9739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.306447][ T9977] input: syz0 as /devices/virtual/input/input55 [ 594.336524][ T9739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.447856][ T9739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.461041][ T8507] handle_bad_sector: 9670 callbacks suppressed [ 594.461147][ T8507] attempt to access beyond end of device [ 594.461147][ T8507] loop3: rw=524288, want=58688, limit=40427 [ 594.582870][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 594.613488][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.664190][ T9739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.700077][ T9739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.739536][ T9739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.780928][ T9739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.800819][ T8507] attempt to access beyond end of device [ 594.800819][ T8507] loop3: rw=524288, want=58696, limit=40427 [ 595.040101][ T8507] attempt to access beyond end of device [ 595.040101][ T8507] loop3: rw=524288, want=58704, limit=40427 [ 595.057592][ T9132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.107021][ T9132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.144511][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 595.162492][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.197060][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.240584][ T8507] attempt to access beyond end of device [ 595.240584][ T8507] loop3: rw=524288, want=58712, limit=40427 [ 595.247919][ T9887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 595.390143][ T8507] attempt to access beyond end of device [ 595.390143][ T8507] loop3: rw=524288, want=58720, limit=40427 [ 595.439384][ T9955] loop4: detected capacity change from 0 to 40427 [ 595.517240][ T8507] attempt to access beyond end of device [ 595.517240][ T8507] loop3: rw=524288, want=58728, limit=40427 [ 595.619574][ T8507] attempt to access beyond end of device [ 595.619574][ T8507] loop3: rw=524288, want=58736, limit=40427 [ 595.735285][ T8507] attempt to access beyond end of device [ 595.735285][ T8507] loop3: rw=524288, want=58744, limit=40427 [ 595.859524][ T9982] loop2: detected capacity change from 0 to 40427 [ 595.883225][ T9984] loop1: detected capacity change from 0 to 40427 [ 595.911652][ T8507] attempt to access beyond end of device [ 595.911652][ T8507] loop3: rw=524288, want=58752, limit=40427 [ 595.947845][ T9984] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 595.966559][ T9982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 595.973032][ T9984] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 596.005322][ T9984] F2FS-fs (loop1): invalid crc value [ 596.030663][ T8507] attempt to access beyond end of device [ 596.030663][ T8507] loop3: rw=524288, want=58760, limit=40427 [ 596.065979][ T9984] F2FS-fs (loop1): Found nat_bits in checkpoint [ 596.100245][ T9982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 596.391463][ T9984] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 596.409139][ T9984] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 596.714592][T10003] loop4: detected capacity change from 0 to 512 [ 597.010549][T10003] EXT4-fs (loop4): Ignoring removed bh option [ 597.167014][T10003] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.1482: inline data xattr refers to an external xattr inode [ 597.433105][T10003] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1482: couldn't read orphan inode 12 (err -117) [ 597.714731][T10003] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 597.979421][T10018] loop2: detected capacity change from 0 to 256 [ 598.865858][T10027] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 598.924236][T10027] picdev_read: 3 callbacks suppressed [ 598.924883][T10027] kvm: pic: non byte read [ 598.974769][T10027] kvm: pic: non byte read [ 598.979631][T10027] kvm: pic: non byte read [ 598.988315][T10027] kvm: pic: non byte read [ 598.992978][T10027] kvm: pic: non byte read [ 598.997550][T10027] kvm: pic: non byte read [ 599.023522][T10027] kvm: pic: non byte read [ 599.044010][T10027] kvm: pic: non byte read [ 599.064729][T10027] kvm: pic: single mode not supported [ 599.064790][T10027] kvm: pic: non byte read [ 599.098714][T10027] kvm: pic: non byte read [ 599.119165][T10027] kvm: pic: level sensitive irq not supported [ 599.122822][T10027] kvm: pic: level sensitive irq not supported [ 599.480569][ T8507] handle_bad_sector: 3668 callbacks suppressed [ 599.480610][ T8507] attempt to access beyond end of device [ 599.480610][ T8507] loop3: rw=0, want=57488, limit=40427 [ 599.537746][ T8507] attempt to access beyond end of device [ 599.537746][ T8507] loop3: rw=0, want=57496, limit=40427 [ 599.570527][ T8507] attempt to access beyond end of device [ 599.570527][ T8507] loop3: rw=0, want=57504, limit=40427 [ 599.600777][ T8507] attempt to access beyond end of device [ 599.600777][ T8507] loop3: rw=0, want=57512, limit=40427 [ 599.640604][ T8507] attempt to access beyond end of device [ 599.640604][ T8507] loop3: rw=0, want=57520, limit=40427 [ 599.673266][ T8507] attempt to access beyond end of device [ 599.673266][ T8507] loop3: rw=0, want=57528, limit=40427 [ 599.723602][ T8507] attempt to access beyond end of device [ 599.723602][ T8507] loop3: rw=0, want=57536, limit=40427 [ 599.750084][ T8507] attempt to access beyond end of device [ 599.750084][ T8507] loop3: rw=0, want=57544, limit=40427 [ 599.826665][T10047] loop0: detected capacity change from 0 to 512 [ 599.848817][ T8507] attempt to access beyond end of device [ 599.848817][ T8507] loop3: rw=0, want=57552, limit=40427 [ 599.860382][ T8507] attempt to access beyond end of device [ 599.860382][ T8507] loop3: rw=0, want=57560, limit=40427 [ 600.032273][T10047] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1495: casefold flag without casefold feature [ 600.057464][T10047] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1495: couldn't read orphan inode 15 (err -117) [ 600.120185][T10047] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 600.364255][T10033] loop4: detected capacity change from 0 to 40427 [ 600.507306][T10033] F2FS-fs (loop4): invalid crc value [ 600.595927][T10059] loop0: detected capacity change from 0 to 1024 [ 600.619814][T10041] loop1: detected capacity change from 0 to 40427 [ 600.627655][T10033] F2FS-fs (loop4): Found nat_bits in checkpoint [ 600.660040][ T8771] Bluetooth: hci0: command 0x0406 tx timeout [ 600.693457][T10041] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 600.711894][T10041] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 600.720562][T10059] hfsplus: unable to parse mount options [ 600.774482][T10033] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 600.796304][T10037] loop2: detected capacity change from 0 to 40427 [ 600.860541][T10041] F2FS-fs (loop1): invalid crc value [ 600.972678][T10037] F2FS-fs (loop2): invalid crc value [ 601.049598][T10041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 601.317254][T10037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 601.555414][T10041] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 601.588087][T10041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 601.747174][T10037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 602.020677][T10035] overlayfs: missing 'workdir' [ 602.481592][ T3718] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.613382][ T3718] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.695729][ T3718] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.832800][T10092] loop1: detected capacity change from 0 to 1024 [ 602.846357][ T3718] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.002711][T10092] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 603.892187][T10120] loop2: detected capacity change from 0 to 2048 [ 603.986159][T10120] EXT4-fs (loop2): Ignoring removed orlov option [ 604.159237][T10120] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 604.490183][ T8507] handle_bad_sector: 15283 callbacks suppressed [ 604.490205][ T8507] attempt to access beyond end of device [ 604.490205][ T8507] loop3: rw=0, want=57400, limit=40427 [ 604.587780][T10124] chnl_net:caif_netlink_parms(): no params data found [ 604.609774][ T8507] attempt to access beyond end of device [ 604.609774][ T8507] loop3: rw=0, want=57408, limit=40427 [ 604.621742][ T8507] attempt to access beyond end of device [ 604.621742][ T8507] loop3: rw=0, want=57416, limit=40427 [ 604.632891][ T8507] attempt to access beyond end of device [ 604.632891][ T8507] loop3: rw=0, want=57424, limit=40427 [ 604.670245][ T8507] attempt to access beyond end of device [ 604.670245][ T8507] loop3: rw=0, want=57432, limit=40427 [ 604.687084][ T8507] attempt to access beyond end of device [ 604.687084][ T8507] loop3: rw=0, want=57440, limit=40427 [ 604.736856][ T8507] attempt to access beyond end of device [ 604.736856][ T8507] loop3: rw=0, want=57448, limit=40427 [ 604.807654][ T3718] device hsr_slave_0 left promiscuous mode [ 604.818930][ T8507] attempt to access beyond end of device [ 604.818930][ T8507] loop3: rw=0, want=57456, limit=40427 [ 604.838163][ T8507] attempt to access beyond end of device [ 604.838163][ T8507] loop3: rw=0, want=57464, limit=40427 [ 604.876006][ T8507] attempt to access beyond end of device [ 604.876006][ T8507] loop3: rw=0, want=57472, limit=40427 [ 604.889928][ T3718] device hsr_slave_1 left promiscuous mode [ 604.917219][ T3718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.968478][ T3718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.003626][T10154] loop1: detected capacity change from 0 to 256 [ 605.015137][ T3718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.044743][ T3718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.084903][T10158] loop2: detected capacity change from 0 to 1024 [ 605.092895][ T3718] device bridge_slave_1 left promiscuous mode [ 605.095901][T10154] FAT-fs (loop1): Directory bread(block 64) failed [ 605.099100][ T3718] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.139843][ T3718] device bridge_slave_0 left promiscuous mode [ 605.148231][T10154] FAT-fs (loop1): Directory bread(block 65) failed [ 605.148714][ T3718] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.162522][T10154] FAT-fs (loop1): Directory bread(block 66) failed [ 605.169171][T10154] FAT-fs (loop1): Directory bread(block 67) failed [ 605.220552][T10154] FAT-fs (loop1): Directory bread(block 68) failed [ 605.227416][T10154] FAT-fs (loop1): Directory bread(block 69) failed [ 605.234756][T10158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 605.234942][T10154] FAT-fs (loop1): Directory bread(block 70) failed [ 605.252501][T10154] FAT-fs (loop1): Directory bread(block 71) failed [ 605.259081][T10154] FAT-fs (loop1): Directory bread(block 72) failed [ 605.265682][T10154] FAT-fs (loop1): Directory bread(block 73) failed [ 605.344299][ T3718] device veth1_macvtap left promiscuous mode [ 605.376618][ T3718] device veth0_macvtap left promiscuous mode [ 605.404655][ T3718] device veth1_vlan left promiscuous mode [ 605.573910][T10165] overlayfs: missing 'workdir' [ 606.250859][ T9447] Bluetooth: hci4: command 0x0406 tx timeout [ 606.290061][ T9447] Bluetooth: hci0: command 0x0409 tx timeout [ 606.318713][T10167] loop0: detected capacity change from 0 to 512 [ 606.327485][ T3718] device veth0_vlan left promiscuous mode [ 606.504049][T10167] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1522: casefold flag without casefold feature [ 606.638714][T10167] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1522: couldn't read orphan inode 15 (err -117) [ 606.753733][T10167] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 607.043865][T10186] loop1: detected capacity change from 0 to 2048 [ 607.116210][T10186] EXT4-fs (loop1): Ignoring removed orlov option [ 607.165518][T10186] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 607.576538][ T3718] team0 (unregistering): Port device team_slave_1 removed [ 607.615029][ T3718] team0 (unregistering): Port device team_slave_0 removed [ 607.682476][ T3718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.728257][ T3718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.082779][T10202] loop1: detected capacity change from 0 to 1024 [ 608.145887][ T3718] bond0 (unregistering): Released all slaves [ 608.315834][T10202] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 608.350131][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 609.160080][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.177687][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.186610][T10124] device bridge_slave_0 entered promiscuous mode [ 609.222148][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.229223][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.247549][T10124] device bridge_slave_1 entered promiscuous mode [ 609.367880][T10219] loop1: detected capacity change from 0 to 256 [ 609.406341][T10124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.432625][T10124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.487274][T10221] loop0: detected capacity change from 0 to 128 [ 609.511967][T10219] FAT-fs (loop1): Directory bread(block 64) failed [ 609.518859][T10219] FAT-fs (loop1): Directory bread(block 65) failed [ 609.530102][ T8507] handle_bad_sector: 12298 callbacks suppressed [ 609.530121][ T8507] attempt to access beyond end of device [ 609.530121][ T8507] loop3: rw=0, want=57944, limit=40427 [ 609.555665][T10219] FAT-fs (loop1): Directory bread(block 66) failed [ 609.562506][T10219] FAT-fs (loop1): Directory bread(block 67) failed [ 609.576958][T10219] FAT-fs (loop1): Directory bread(block 68) failed [ 609.697285][T10219] FAT-fs (loop1): Directory bread(block 69) failed [ 609.743590][T10219] FAT-fs (loop1): Directory bread(block 70) failed [ 609.764175][T10124] team0: Port device team_slave_0 added [ 609.774354][ T8507] attempt to access beyond end of device [ 609.774354][ T8507] loop3: rw=0, want=57952, limit=40427 [ 609.790350][T10219] FAT-fs (loop1): Directory bread(block 71) failed [ 609.796960][T10219] FAT-fs (loop1): Directory bread(block 72) failed [ 609.801345][T10124] team0: Port device team_slave_1 added [ 609.813786][ T8507] attempt to access beyond end of device [ 609.813786][ T8507] loop3: rw=0, want=57960, limit=40427 [ 609.832923][T10219] FAT-fs (loop1): Directory bread(block 73) failed [ 609.847394][ T8507] attempt to access beyond end of device [ 609.847394][ T8507] loop3: rw=0, want=57968, limit=40427 [ 609.942124][ T8507] attempt to access beyond end of device [ 609.942124][ T8507] loop3: rw=0, want=57976, limit=40427 [ 609.962126][ T8507] attempt to access beyond end of device [ 609.962126][ T8507] loop3: rw=0, want=57984, limit=40427 [ 610.002861][T10124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.017816][ T8507] attempt to access beyond end of device [ 610.017816][ T8507] loop3: rw=0, want=57992, limit=40427 [ 610.051617][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.073495][ T8507] attempt to access beyond end of device [ 610.073495][ T8507] loop3: rw=0, want=58000, limit=40427 [ 610.108954][ T8507] attempt to access beyond end of device [ 610.108954][ T8507] loop3: rw=0, want=58008, limit=40427 [ 610.135622][ T8507] attempt to access beyond end of device [ 610.135622][ T8507] loop3: rw=0, want=58016, limit=40427 [ 610.514109][T10124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.585925][T10124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.619983][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.720826][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 610.730143][T10124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.350205][T10259] loop2: detected capacity change from 0 to 1024 [ 611.610725][T10258] loop0: detected capacity change from 0 to 512 [ 611.910308][T10258] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1548: casefold flag without casefold feature [ 611.947279][T10124] device hsr_slave_0 entered promiscuous mode [ 612.029126][T10258] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1548: couldn't read orphan inode 15 (err -117) [ 612.051553][T10124] device hsr_slave_1 entered promiscuous mode [ 612.067002][T10124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.082786][T10258] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 612.104021][T10124] Cannot create hsr debugfs directory [ 612.210023][ T5043] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 612.730082][ T5043] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 612.748461][ T5043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.752375][ T9447] Bluetooth: hci0: command 0x0419 tx timeout [ 612.760160][ T3996] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 612.829977][ T5043] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.863985][ T5043] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 612.990104][ T5043] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 612.999176][ T5043] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 613.050362][ T5043] usb 4-1: Manufacturer: syz [ 613.077709][ T5043] usb 4-1: config 0 descriptor?? [ 613.186037][ T3996] usb 3-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 613.363836][ T3996] usb 3-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 613.607943][ T3996] usb 3-1: config 1 interface 0 has no altsetting 0 [ 613.860157][ T3996] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 613.919089][ T3996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.927820][ T3996] usb 3-1: Product: syz [ 613.933382][ T3996] usb 3-1: Manufacturer: syz [ 613.938110][ T3996] usb 3-1: SerialNumber: syz [ 614.042049][ T5043] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 614.059739][ T5043] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 614.155834][ T5043] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 614.293161][T10308] loop1: detected capacity change from 0 to 512 [ 614.312447][ T3996] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 614.330963][T10308] EXT4-fs (loop1): orphan cleanup on readonly fs [ 614.340068][T10308] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.1555: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 614.354148][ T3996] usb 3-1: USB disconnect, device number 24 [ 614.359436][T10308] EXT4-fs error (device loop1): ext4_quota_enable:6390: comm syz.1.1555: Bad quota inode: 4, type: 1 [ 614.367685][ T3996] usblp1: removed [ 614.376255][T10308] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 614.394686][T10308] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 614.401676][T10308] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 614.555685][ T8507] handle_bad_sector: 10371 callbacks suppressed [ 614.555708][ T8507] attempt to access beyond end of device [ 614.555708][ T8507] loop3: rw=524288, want=57352, limit=40427 [ 614.644986][ T8507] attempt to access beyond end of device [ 614.644986][ T8507] loop3: rw=524288, want=57360, limit=40427 [ 615.203080][T10124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 615.220869][ T8507] attempt to access beyond end of device [ 615.220869][ T8507] loop3: rw=524288, want=57368, limit=40427 [ 615.271986][ T8507] attempt to access beyond end of device [ 615.271986][ T8507] loop3: rw=524288, want=57376, limit=40427 [ 615.283780][ T8507] attempt to access beyond end of device [ 615.283780][ T8507] loop3: rw=524288, want=57384, limit=40427 [ 615.295380][ T8507] attempt to access beyond end of device [ 615.295380][ T8507] loop3: rw=524288, want=57392, limit=40427 [ 615.315960][ T8507] attempt to access beyond end of device [ 615.315960][ T8507] loop3: rw=524288, want=57400, limit=40427 [ 615.331640][ T8507] attempt to access beyond end of device [ 615.331640][ T8507] loop3: rw=524288, want=57408, limit=40427 [ 615.348669][ T8507] attempt to access beyond end of device [ 615.348669][ T8507] loop3: rw=524288, want=57416, limit=40427 [ 615.372342][T10124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 615.388116][ T8507] attempt to access beyond end of device [ 615.388116][ T8507] loop3: rw=524288, want=57424, limit=40427 [ 615.501416][T10323] input: syz0 as /devices/virtual/input/input56 [ 615.945010][T10124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 616.200559][T10124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.322341][T10338] loop1: detected capacity change from 0 to 1024 [ 617.108648][T10124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.215862][T10124] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.258283][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.286833][ T3996] usb 4-1: USB disconnect, device number 21 [ 617.318467][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.421928][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.514768][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 617.584370][ T2678] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.591670][ T2678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.599575][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.616806][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 617.633265][ T2678] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.640395][ T2678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.666691][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.723298][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 617.753405][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.086066][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.390769][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.440976][T10361] sctp: failed to load transform for md5: -2 [ 618.522222][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 618.591870][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 618.673362][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 618.704576][T10384] input: syz0 as /devices/virtual/input/input57 [ 618.778283][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 618.961682][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.092844][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.149140][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.178210][T10124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.437544][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.458698][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.675041][ T8507] handle_bad_sector: 5690 callbacks suppressed [ 619.675059][ T8507] attempt to access beyond end of device [ 619.675059][ T8507] loop3: rw=524288, want=58072, limit=40427 [ 619.681519][T10124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.701272][ T8507] attempt to access beyond end of device [ 619.701272][ T8507] loop3: rw=524288, want=58080, limit=40427 [ 619.712925][ T8507] attempt to access beyond end of device [ 619.712925][ T8507] loop3: rw=524288, want=58088, limit=40427 [ 619.740507][ T8507] attempt to access beyond end of device [ 619.740507][ T8507] loop3: rw=524288, want=58096, limit=40427 [ 619.910720][ T8507] attempt to access beyond end of device [ 619.910720][ T8507] loop3: rw=524288, want=58104, limit=40427 [ 620.143707][ T8507] attempt to access beyond end of device [ 620.143707][ T8507] loop3: rw=524288, want=58112, limit=40427 [ 620.417018][ T8507] attempt to access beyond end of device [ 620.417018][ T8507] loop3: rw=524288, want=58120, limit=40427 [ 620.428754][ T8507] attempt to access beyond end of device [ 620.428754][ T8507] loop3: rw=524288, want=58128, limit=40427 [ 620.470182][ T8507] attempt to access beyond end of device [ 620.470182][ T8507] loop3: rw=524288, want=58136, limit=40427 [ 620.479785][T10419] loop0: detected capacity change from 0 to 256 [ 620.589504][ T8507] attempt to access beyond end of device [ 620.589504][ T8507] loop3: rw=524288, want=58144, limit=40427 [ 620.702236][T10419] FAT-fs (loop0): Directory bread(block 64) failed [ 620.727157][T10419] FAT-fs (loop0): Directory bread(block 65) failed [ 620.822511][T10419] FAT-fs (loop0): Directory bread(block 66) failed [ 620.961889][T10419] FAT-fs (loop0): Directory bread(block 67) failed [ 621.122093][T10419] FAT-fs (loop0): Directory bread(block 68) failed [ 621.275619][T10419] FAT-fs (loop0): Directory bread(block 69) failed [ 621.418499][T10419] FAT-fs (loop0): Directory bread(block 70) failed [ 621.425172][T10419] FAT-fs (loop0): Directory bread(block 71) failed [ 621.432014][T10419] FAT-fs (loop0): Directory bread(block 72) failed [ 621.438563][T10419] FAT-fs (loop0): Directory bread(block 73) failed [ 621.660622][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 621.708762][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 622.302649][T10124] device veth0_vlan entered promiscuous mode [ 622.353540][T10124] device veth1_vlan entered promiscuous mode [ 622.403333][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 622.442497][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 622.476989][T10449] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1580'. [ 622.490911][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 622.525439][T10447] loop2: detected capacity change from 0 to 512 [ 622.537007][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 622.546376][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 622.608024][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 622.623678][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 622.627868][T10447] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 622.674745][T10447] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 622.691602][T10447] EXT4-fs (loop2): Unrecognized mount option "dont_appraise" or missing value [ 622.794007][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 622.828231][T10124] device veth0_macvtap entered promiscuous mode [ 622.888883][T10124] device veth1_macvtap entered promiscuous mode [ 623.584889][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.636604][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.682109][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.733322][T10469] input: syz0 as /devices/virtual/input/input58 [ 623.769109][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.800095][ T8771] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 623.889051][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.977223][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.039992][ T8771] usb 3-1: Using ep0 maxpacket: 16 [ 624.092343][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.160073][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.160115][ T8771] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 624.189924][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.219951][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.294740][T10124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.315458][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.339942][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.349772][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.350197][ T8771] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 624.381352][ T8771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 624.389541][ T8771] usb 3-1: Product: syz [ 624.416582][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.436877][ T8771] usb 3-1: Manufacturer: syz [ 624.445091][ T8771] usb 3-1: SerialNumber: syz [ 624.460674][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.491129][ T8771] r8152-cfgselector 3-1: config 0 descriptor?? [ 624.522017][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.533466][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.543933][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.559919][T10124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.580193][T10124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.723879][ T8507] handle_bad_sector: 6020 callbacks suppressed [ 624.723968][ T8507] attempt to access beyond end of device [ 624.723968][ T8507] loop3: rw=524288, want=57352, limit=40427 [ 624.764040][T10124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.844123][T10462] udc-core: couldn't find an available UDC or it's busy [ 624.962191][T10462] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 625.240091][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 625.250421][ T8507] attempt to access beyond end of device [ 625.250421][ T8507] loop3: rw=524288, want=57360, limit=40427 [ 625.262588][ T8507] attempt to access beyond end of device [ 625.262588][ T8507] loop3: rw=524288, want=57368, limit=40427 [ 625.274463][ T8507] attempt to access beyond end of device [ 625.274463][ T8507] loop3: rw=524288, want=57376, limit=40427 [ 625.292769][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 625.293152][ T8507] attempt to access beyond end of device [ 625.293152][ T8507] loop3: rw=524288, want=57384, limit=40427 [ 625.330480][ T8507] attempt to access beyond end of device [ 625.330480][ T8507] loop3: rw=524288, want=57392, limit=40427 [ 625.346486][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 625.363279][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 625.395478][ T8507] attempt to access beyond end of device [ 625.395478][ T8507] loop3: rw=524288, want=57400, limit=40427 [ 625.446599][ T8507] attempt to access beyond end of device [ 625.446599][ T8507] loop3: rw=524288, want=57408, limit=40427 [ 625.446818][T10124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.480982][ T8507] attempt to access beyond end of device [ 625.480982][ T8507] loop3: rw=524288, want=57416, limit=40427 [ 625.527640][T10124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.530601][ T8507] attempt to access beyond end of device [ 625.530601][ T8507] loop3: rw=524288, want=57424, limit=40427 [ 625.579176][T10124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.608207][T10124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.639571][T10462] device netdevsim0 entered promiscuous mode [ 625.667788][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 625.700266][T10462] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.780337][ T8771] r8152-cfgselector 3-1: Unknown version 0x0000 [ 625.799445][ T8771] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 625.920797][ T3751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.950577][ T3751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.987565][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 625.987593][ T3751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.045113][ T3751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.069215][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 626.796968][T10496] loop1: detected capacity change from 0 to 40427 [ 626.963434][T10496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 627.165227][T10496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 627.274252][T10542] loop0: detected capacity change from 0 to 2048 [ 627.414372][T10542] EXT4-fs (loop0): Ignoring removed orlov option [ 627.446431][T10519] loop4: detected capacity change from 0 to 40427 [ 627.530954][T10519] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 627.617777][T10542] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 627.672774][T10519] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 627.881966][T10562] input: syz0 as /devices/virtual/input/input59 [ 627.952482][T10519] F2FS-fs (loop4): invalid crc value [ 628.052263][T10519] F2FS-fs (loop4): Found nat_bits in checkpoint [ 628.163407][T10519] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 628.174574][T10571] loop2: detected capacity change from 0 to 256 [ 628.182157][T10519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 628.281549][T10571] FAT-fs (loop2): Directory bread(block 64) failed [ 628.288134][T10571] FAT-fs (loop2): Directory bread(block 65) failed [ 628.310565][T10571] FAT-fs (loop2): Directory bread(block 66) failed [ 628.330169][T10571] FAT-fs (loop2): Directory bread(block 67) failed [ 628.350370][T10571] FAT-fs (loop2): Directory bread(block 68) failed [ 628.376010][T10571] FAT-fs (loop2): Directory bread(block 69) failed [ 628.406881][T10571] FAT-fs (loop2): Directory bread(block 70) failed [ 628.420709][T10571] FAT-fs (loop2): Directory bread(block 71) failed [ 628.427324][T10571] FAT-fs (loop2): Directory bread(block 72) failed [ 628.491095][T10571] FAT-fs (loop2): Directory bread(block 73) failed [ 628.830211][ T26] audit: type=1400 audit(1727503717.647:508): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=262620B62402CE0B213EC78A7CE9AE50600E4EBC08727116666D121F8CC9C8F42A53EA359612E288C9F2953FEC644A165FE94D261EE817B543788F3BAED6AB141A9B8061C4414D646B68CCEDC534B04891946ABF6E84425E1ACC2F076F5D51EA6F745937ABBE7D0CCBE371B518C24BBF041F976277ECDEB3CE3D5E5EF73B6FA47BEA4E01601C1C626D6214BA3EC062B37250F7D6EC61311B972857831CAB3F87EC83E9B5BBB2933B9EA476F00D26DD16D5713C741F89257F22566D990626CED6B0AA8351222454B3E0FE985C7CE4EF380CF29293B3177F4BB75ADCC8DA8080E0457424A97712A5F849245FF1A5E6E62DC19D14 pid=10576 comm="syz.4.1601" [ 629.304020][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.310365][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.561899][T10587] loop2: detected capacity change from 0 to 256 [ 629.737486][ T8507] handle_bad_sector: 8684 callbacks suppressed [ 629.737528][ T8507] attempt to access beyond end of device [ 629.737528][ T8507] loop3: rw=524288, want=57520, limit=40427 [ 629.766536][T10591] loop1: detected capacity change from 0 to 128 [ 629.780175][ T8507] attempt to access beyond end of device [ 629.780175][ T8507] loop3: rw=524288, want=57528, limit=40427 [ 629.820001][ T8507] attempt to access beyond end of device [ 629.820001][ T8507] loop3: rw=524288, want=57536, limit=40427 [ 629.862406][ T8507] attempt to access beyond end of device [ 629.862406][ T8507] loop3: rw=524288, want=57544, limit=40427 [ 629.900943][T10574] loop0: detected capacity change from 0 to 40427 [ 629.907811][ T8507] attempt to access beyond end of device [ 629.907811][ T8507] loop3: rw=524288, want=57552, limit=40427 [ 629.937327][ T8507] attempt to access beyond end of device [ 629.937327][ T8507] loop3: rw=524288, want=57560, limit=40427 [ 629.962718][ T8507] attempt to access beyond end of device [ 629.962718][ T8507] loop3: rw=524288, want=57568, limit=40427 [ 629.989067][T10574] F2FS-fs (loop0): invalid crc value [ 630.543496][ T8507] attempt to access beyond end of device [ 630.543496][ T8507] loop3: rw=524288, want=57576, limit=40427 [ 630.570277][T10574] F2FS-fs (loop0): Found nat_bits in checkpoint [ 630.600112][ T8507] attempt to access beyond end of device [ 630.600112][ T8507] loop3: rw=524288, want=57584, limit=40427 [ 630.657316][T10599] loop4: detected capacity change from 0 to 2048 [ 630.665618][ T8507] attempt to access beyond end of device [ 630.665618][ T8507] loop3: rw=524288, want=57592, limit=40427 [ 630.730661][T10574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 630.765123][T10599] EXT4-fs (loop4): Ignoring removed orlov option [ 630.856053][T10599] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 631.005785][T10606] overlayfs: missing 'workdir' [ 632.317297][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 632.380628][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1612'. [ 632.447027][T10641] loop2: detected capacity change from 0 to 128 [ 632.659772][T10646] loop4: detected capacity change from 0 to 2048 [ 633.484069][T10646] EXT4-fs (loop4): Ignoring removed orlov option [ 633.571048][T10646] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 633.662451][T10654] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 633.699600][T10654] picdev_read: 3 callbacks suppressed [ 633.699616][T10654] kvm: pic: non byte read [ 633.740715][T10654] kvm: pic: non byte read [ 633.747582][T10654] kvm: pic: non byte read [ 633.755622][T10654] kvm: pic: non byte read [ 633.763576][T10654] kvm: pic: non byte read [ 633.772213][T10654] kvm: pic: non byte read [ 633.782965][T10654] kvm: pic: non byte read [ 633.791193][T10654] kvm: pic: non byte read [ 633.799417][T10654] kvm: pic: single mode not supported [ 633.799479][T10654] kvm: pic: non byte read [ 633.818834][T10654] kvm: pic: non byte read [ 633.827336][T10654] kvm: pic: level sensitive irq not supported [ 633.827943][T10654] kvm: pic: level sensitive irq not supported [ 633.976096][T10664] loop0: detected capacity change from 0 to 512 [ 634.076714][T10664] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 634.127108][T10664] EXT4-fs (loop0): 1 truncate cleaned up [ 634.146506][T10664] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 634.263168][ T3613] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 634.569958][ T3996] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 634.670808][T10674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 634.696385][ T3613] usb 4-1: config 0 has no interfaces? [ 634.702033][ T3613] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 634.726268][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.750154][ T8507] handle_bad_sector: 17820 callbacks suppressed [ 634.750173][ T8507] attempt to access beyond end of device [ 634.750173][ T8507] loop3: rw=524288, want=57352, limit=40427 [ 634.785385][ T3613] usb 4-1: config 0 descriptor?? [ 634.790041][ T8507] attempt to access beyond end of device [ 634.790041][ T8507] loop3: rw=524288, want=57360, limit=40427 [ 634.803346][ T8507] attempt to access beyond end of device [ 634.803346][ T8507] loop3: rw=524288, want=57368, limit=40427 [ 634.815342][ T3996] usb 3-1: Using ep0 maxpacket: 32 [ 634.832023][ T8507] attempt to access beyond end of device [ 634.832023][ T8507] loop3: rw=524288, want=57376, limit=40427 [ 634.850325][ T8507] attempt to access beyond end of device [ 634.850325][ T8507] loop3: rw=524288, want=57384, limit=40427 [ 634.862579][ T8507] attempt to access beyond end of device [ 634.862579][ T8507] loop3: rw=524288, want=57392, limit=40427 [ 634.875048][ T8507] attempt to access beyond end of device [ 634.875048][ T8507] loop3: rw=524288, want=57400, limit=40427 [ 634.893412][ T8507] attempt to access beyond end of device [ 634.893412][ T8507] loop3: rw=524288, want=57408, limit=40427 [ 634.907931][ T8507] attempt to access beyond end of device [ 634.907931][ T8507] loop3: rw=524288, want=57416, limit=40427 [ 634.931870][ T8507] attempt to access beyond end of device [ 634.931870][ T8507] loop3: rw=524288, want=57424, limit=40427 [ 634.950086][ T3996] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 635.069922][T10662] device team_slave_0 entered promiscuous mode [ 635.076712][T10662] device team_slave_1 entered promiscuous mode [ 635.114390][T10662] device vlan2 entered promiscuous mode [ 635.130194][ T3996] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 635.147824][T10662] device team0 entered promiscuous mode [ 635.159608][ T3996] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 635.167891][ T3996] usb 3-1: Product: syz [ 635.182324][ T3996] usb 3-1: Manufacturer: syz [ 635.186965][ T3996] usb 3-1: SerialNumber: syz [ 635.192000][T10662] device team0 left promiscuous mode [ 635.218142][ T3996] usb 3-1: config 0 descriptor?? [ 635.218469][T10662] device team_slave_0 left promiscuous mode [ 635.229258][T10662] device team_slave_1 left promiscuous mode [ 635.250254][T10672] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 635.397648][ T3620] usb 4-1: USB disconnect, device number 22 [ 635.811183][T10679] loop4: detected capacity change from 0 to 40427 [ 635.918945][T10679] F2FS-fs (loop4): Found nat_bits in checkpoint [ 635.991894][T10679] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 636.577414][T10694] loop0: detected capacity change from 0 to 2048 [ 636.674269][T10694] EXT4-fs (loop0): Ignoring removed orlov option [ 636.990005][T10694] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 637.475704][ T5043] usb 3-1: USB disconnect, device number 26 [ 637.655011][T10709] loop4: detected capacity change from 0 to 128 [ 638.396874][T10718] loop0: detected capacity change from 0 to 512 [ 638.475594][T10718] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 638.529389][T10718] EXT4-fs (loop0): 1 truncate cleaned up [ 638.570049][T10718] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 639.797420][T10728] loop2: detected capacity change from 0 to 40427 [ 639.804854][ T8507] handle_bad_sector: 19455 callbacks suppressed [ 639.804933][ T8507] attempt to access beyond end of device [ 639.804933][ T8507] loop3: rw=524288, want=58008, limit=40427 [ 639.844465][ T8507] attempt to access beyond end of device [ 639.844465][ T8507] loop3: rw=524288, want=58016, limit=40427 [ 639.866459][ T8507] attempt to access beyond end of device [ 639.866459][ T8507] loop3: rw=524288, want=58024, limit=40427 [ 640.002985][ T8507] attempt to access beyond end of device [ 640.002985][ T8507] loop3: rw=524288, want=58032, limit=40427 [ 640.155786][T10728] F2FS-fs (loop2): Found nat_bits in checkpoint [ 640.584806][ T8507] attempt to access beyond end of device [ 640.584806][ T8507] loop3: rw=524288, want=58040, limit=40427 [ 640.643731][T10728] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 640.822671][T10728] attempt to access beyond end of device [ 640.822671][T10728] loop2: rw=2049, want=53256, limit=40427 [ 640.837851][T10728] attempt to access beyond end of device [ 640.837851][T10728] loop2: rw=0, want=53256, limit=40427 [ 640.860069][ T8507] attempt to access beyond end of device [ 640.860069][ T8507] loop3: rw=524288, want=58048, limit=40427 [ 640.922027][ T8507] attempt to access beyond end of device [ 640.922027][ T8507] loop3: rw=524288, want=58056, limit=40427 [ 641.050623][ T6809] attempt to access beyond end of device [ 641.050623][ T6809] loop2: rw=2049, want=45104, limit=40427 [ 643.255449][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1659'. [ 644.102951][T10794] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.1662'. [ 644.307810][T10799] loop4: detected capacity change from 0 to 512 [ 644.444042][T10799] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 644.513441][T10799] EXT4-fs (loop4): 1 truncate cleaned up [ 644.519132][T10799] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 644.703445][ T26] audit: type=1326 audit(1727503733.547:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 644.811673][ T8507] handle_bad_sector: 8535 callbacks suppressed [ 644.811694][ T8507] attempt to access beyond end of device [ 644.811694][ T8507] loop3: rw=0, want=59024, limit=40427 [ 644.829562][ T26] audit: type=1326 audit(1727503733.587:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 644.990805][ T8507] attempt to access beyond end of device [ 644.990805][ T8507] loop3: rw=0, want=59032, limit=40427 [ 645.081425][ T8507] attempt to access beyond end of device [ 645.081425][ T8507] loop3: rw=0, want=59040, limit=40427 [ 645.275079][ T8507] attempt to access beyond end of device [ 645.275079][ T8507] loop3: rw=0, want=59048, limit=40427 [ 645.377595][ T26] audit: type=1326 audit(1727503733.587:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 645.502213][ T8507] attempt to access beyond end of device [ 645.502213][ T8507] loop3: rw=0, want=59056, limit=40427 [ 645.613618][ T8507] attempt to access beyond end of device [ 645.613618][ T8507] loop3: rw=0, want=59064, limit=40427 [ 645.646076][ T26] audit: type=1326 audit(1727503733.587:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 645.717907][T10789] loop0: detected capacity change from 0 to 40427 [ 645.872406][ T8507] attempt to access beyond end of device [ 645.872406][ T8507] loop3: rw=0, want=59072, limit=40427 [ 645.884205][ T26] audit: type=1326 audit(1727503733.587:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 646.217649][ T8507] attempt to access beyond end of device [ 646.217649][ T8507] loop3: rw=0, want=59080, limit=40427 [ 646.267378][ T26] audit: type=1326 audit(1727503733.587:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 646.312315][ T8507] attempt to access beyond end of device [ 646.312315][ T8507] loop3: rw=0, want=59088, limit=40427 [ 646.323554][ T8507] attempt to access beyond end of device [ 646.323554][ T8507] loop3: rw=0, want=59096, limit=40427 [ 646.365040][ T26] audit: type=1326 audit(1727503733.587:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 646.423327][T10789] F2FS-fs (loop0): Found nat_bits in checkpoint [ 646.607568][T10789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 646.608178][ T26] audit: type=1326 audit(1727503733.587:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 646.681346][T10826] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 646.867501][ T26] audit: type=1326 audit(1727503733.607:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 646.959409][ T26] audit: type=1326 audit(1727503733.607:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3a059ff9 code=0x7ffc0000 [ 648.869972][ T9447] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 648.979082][T10845] loop1: detected capacity change from 0 to 512 [ 649.130092][ T9447] usb 3-1: Using ep0 maxpacket: 32 [ 649.209818][T10845] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 649.230050][T10845] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038 (0x7fffffff) [ 649.300699][ T9447] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 649.434947][T10845] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.1678: Directory hole found for htree leaf block 0 [ 649.500301][ T9447] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 649.548411][ T9447] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 649.577527][ T9447] usb 3-1: Product: syz [ 649.597033][ T9447] usb 3-1: Manufacturer: syz [ 649.608711][ T9447] usb 3-1: SerialNumber: syz [ 649.647962][ T9447] usb 3-1: config 0 descriptor?? [ 649.690269][T10836] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.830010][ T8507] handle_bad_sector: 7896 callbacks suppressed [ 649.830028][ T8507] attempt to access beyond end of device [ 649.830028][ T8507] loop3: rw=524288, want=59008, limit=40427 [ 649.937751][ T8507] attempt to access beyond end of device [ 649.937751][ T8507] loop3: rw=524288, want=59016, limit=40427 [ 650.037158][ T8507] attempt to access beyond end of device [ 650.037158][ T8507] loop3: rw=524288, want=59024, limit=40427 [ 650.339266][ T8507] attempt to access beyond end of device [ 650.339266][ T8507] loop3: rw=524288, want=59032, limit=40427 [ 650.735906][ T8507] attempt to access beyond end of device [ 650.735906][ T8507] loop3: rw=524288, want=59040, limit=40427 [ 650.797630][ T8507] attempt to access beyond end of device [ 650.797630][ T8507] loop3: rw=524288, want=59048, limit=40427 [ 650.800420][T10849] loop0: detected capacity change from 0 to 40427 [ 650.817181][ T8507] attempt to access beyond end of device [ 650.817181][ T8507] loop3: rw=524288, want=59056, limit=40427 [ 650.840020][ T8507] attempt to access beyond end of device [ 650.840020][ T8507] loop3: rw=524288, want=59064, limit=40427 [ 650.881818][ T8507] attempt to access beyond end of device [ 650.881818][ T8507] loop3: rw=524288, want=59072, limit=40427 [ 650.928665][T10849] F2FS-fs (loop0): invalid crc value [ 650.940258][ T8507] attempt to access beyond end of device [ 650.940258][ T8507] loop3: rw=524288, want=59080, limit=40427 [ 650.971908][ T9447] usb 3-1: USB disconnect, device number 27 [ 651.005032][T10849] F2FS-fs (loop0): Found nat_bits in checkpoint [ 651.299519][T10849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 651.998431][T10892] overlayfs: failed to resolve './file2': -2 [ 652.634094][T10900] sp0: Synchronizing with TNC [ 654.270019][ T3996] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 654.387361][T10926] loop4: detected capacity change from 0 to 256 [ 654.710762][ T3996] usb 2-1: Using ep0 maxpacket: 32 [ 654.842243][ T8507] handle_bad_sector: 7020 callbacks suppressed [ 654.843000][ T8507] attempt to access beyond end of device [ 654.843000][ T8507] loop3: rw=524288, want=58120, limit=40427 [ 654.883530][ T3996] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 655.110850][T10926] FAT-fs (loop4): Directory bread(block 64) failed [ 655.117502][T10926] FAT-fs (loop4): Directory bread(block 65) failed [ 655.167302][T10926] FAT-fs (loop4): Directory bread(block 66) failed [ 655.171826][ T8507] attempt to access beyond end of device [ 655.171826][ T8507] loop3: rw=524288, want=58128, limit=40427 [ 655.180350][ T3996] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 655.185834][ T8507] attempt to access beyond end of device [ 655.185834][ T8507] loop3: rw=524288, want=58136, limit=40427 [ 655.200853][T10926] FAT-fs (loop4): Directory bread(block 67) failed [ 655.219205][T10926] FAT-fs (loop4): Directory bread(block 68) failed [ 655.226819][T10926] FAT-fs (loop4): Directory bread(block 69) failed [ 655.231617][T10905] loop2: detected capacity change from 0 to 40427 [ 655.241268][T10926] FAT-fs (loop4): Directory bread(block 70) failed [ 655.248721][T10926] FAT-fs (loop4): Directory bread(block 71) failed [ 655.255823][ T8507] attempt to access beyond end of device [ 655.255823][ T8507] loop3: rw=524288, want=58144, limit=40427 [ 655.256444][ T3996] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 655.267932][T10926] FAT-fs (loop4): Directory bread(block 72) failed [ 655.290158][T10926] FAT-fs (loop4): Directory bread(block 73) failed [ 655.306455][ T8507] attempt to access beyond end of device [ 655.306455][ T8507] loop3: rw=524288, want=58152, limit=40427 [ 655.307311][ T3996] usb 2-1: Product: syz [ 655.325125][ T8507] attempt to access beyond end of device [ 655.325125][ T8507] loop3: rw=524288, want=58160, limit=40427 [ 655.337028][ T3996] usb 2-1: Manufacturer: syz [ 655.354993][T10934] loop0: detected capacity change from 0 to 1024 [ 655.361787][ T8507] attempt to access beyond end of device [ 655.361787][ T8507] loop3: rw=524288, want=58168, limit=40427 [ 655.400459][ T8507] attempt to access beyond end of device [ 655.400459][ T8507] loop3: rw=524288, want=58176, limit=40427 [ 655.420893][T10934] hfsplus: unable to parse mount options [ 655.426934][ T8507] attempt to access beyond end of device [ 655.426934][ T8507] loop3: rw=524288, want=58184, limit=40427 [ 655.485036][ T3996] usb 2-1: SerialNumber: syz [ 655.492204][ T3996] usb 2-1: config 0 descriptor?? [ 655.494541][T10905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 655.511942][T10914] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 655.594250][ T8507] attempt to access beyond end of device [ 655.594250][ T8507] loop3: rw=524288, want=58192, limit=40427 [ 655.756877][T10941] loop4: detected capacity change from 0 to 256 [ 655.848384][T10941] FAT-fs (loop4): Directory bread(block 64) failed [ 655.873033][T10941] FAT-fs (loop4): Directory bread(block 65) failed [ 655.900157][T10941] FAT-fs (loop4): Directory bread(block 66) failed [ 655.928696][T10941] FAT-fs (loop4): Directory bread(block 67) failed [ 655.947152][T10941] FAT-fs (loop4): Directory bread(block 68) failed [ 655.967753][T10941] FAT-fs (loop4): Directory bread(block 69) failed [ 655.986144][T10941] FAT-fs (loop4): Directory bread(block 70) failed [ 656.007817][T10941] FAT-fs (loop4): Directory bread(block 71) failed [ 656.024518][T10941] FAT-fs (loop4): Directory bread(block 72) failed [ 656.038699][T10941] FAT-fs (loop4): Directory bread(block 73) failed [ 656.325530][ T27] INFO: task kworker/u4:0:9 blocked for more than 143 seconds. [ 656.356398][ T27] Not tainted 5.15.167-syzkaller #0 [ 656.366542][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.484666][T10948] loop2: detected capacity change from 0 to 1024 [ 656.638666][ T27] task:kworker/u4:0 state:D stack:20384 pid: 9 ppid: 2 flags:0x00004000 [ 656.737503][ T27] Workqueue: writeback wb_workfn (flush-7:3) [ 656.815743][ T27] Call Trace: [ 656.853569][ T27] [ 656.888944][ T27] __schedule+0x12c4/0x45b0 [ 656.961776][ T27] ? release_firmware_map_entry+0x190/0x190 [ 657.004445][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 657.010549][ T27] ? print_irqtrace_events+0x210/0x210 [ 657.016019][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 657.021218][ T27] ? wq_worker_sleeping+0x5d/0x200 [ 657.026348][ T27] schedule+0x11b/0x1f0 [ 657.027691][ T3613] usb 2-1: USB disconnect, device number 18 [ 657.040370][ T27] rwsem_down_write_slowpath+0xf0c/0x16a0 [ 657.053148][ T27] ? rwsem_write_trylock+0x210/0x210 [ 657.068796][ T27] ? read_lock_is_recursive+0x10/0x10 [ 657.076586][ T27] ? rwsem_write_trylock+0x166/0x210 [ 657.085409][ T27] ? clear_nonspinnable+0x60/0x60 [ 657.093067][ T27] ? from_kgid+0x1a3/0x730 [ 657.099802][ T27] ? has_not_enough_free_secs+0x3e3/0x920 [ 657.108234][ T27] f2fs_balance_fs+0x4d4/0x6a0 [ 657.117132][ T27] ? f2fs_commit_inmem_pages+0xc00/0xc00 [ 657.129709][ T27] ? __get_node_page+0x42c/0x820 [ 657.139455][ T27] ? unlock_page+0x188/0x200 [ 657.148863][ T27] ? f2fs_put_page+0x1f0/0x380 [ 657.158482][ T27] f2fs_write_inode+0x4c3/0x540 [ 657.169100][ T27] __writeback_single_inode+0x644/0xe30 [ 657.180561][ T27] writeback_sb_inodes+0xbce/0x1a40 [ 657.190356][ T27] ? queue_io+0x560/0x560 [ 657.200077][ T27] ? __writeback_inodes_wb+0x400/0x400 [ 657.211273][ T27] __writeback_inodes_wb+0x114/0x400 [ 657.223900][ T27] wb_writeback+0x465/0xc50 [ 657.231916][ T27] ? rcu_lock_release+0x20/0x20 [ 657.239100][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 657.248888][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 657.256465][ T27] ? cpumask_next+0xc3/0xf0 [ 657.263368][ T27] wb_workfn+0xc55/0x1130 [ 657.270175][ T27] ? mark_lock+0x98/0x340 [ 657.277999][ T27] ? inode_wait_for_writeback+0x280/0x280 [ 657.287230][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 657.297861][ T27] ? print_irqtrace_events+0x210/0x210 [ 657.306819][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 657.315251][ T27] process_one_work+0x8a1/0x10c0 [ 657.323661][ T27] ? worker_detach_from_pool+0x260/0x260 [ 657.336222][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 657.348882][ T27] ? kthread_data+0x4e/0xc0 [ 657.358221][ T27] ? wq_worker_running+0x97/0x170 [ 657.369002][ T27] worker_thread+0xaca/0x1280 [ 657.379643][ T27] kthread+0x3f6/0x4f0 [ 657.398045][ T27] ? rcu_lock_release+0x20/0x20 [ 657.408661][ T27] ? kthread_blkcg+0xd0/0xd0 [ 657.416896][ T27] ret_from_fork+0x1f/0x30 [ 657.424839][ T27] [ 657.429207][ T27] [ 657.429207][ T27] Showing all locks held in the system: [ 657.521562][ T27] 4 locks held by kworker/u4:0/9: [ 657.530064][ T27] #0: ffff888144784938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 657.552003][ T27] #1: ffffc90000ce7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 657.572966][ T27] #2: ffff888023b700e0 (&type->s_umount_key#74){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 657.589925][ T27] #3: ffff888079575108 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4d4/0x6a0 [ 657.606317][ T27] 1 lock held by khungtaskd/27: [ 657.615823][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 657.632208][ T27] 2 locks held by getty/3328: [ 657.640483][ T27] #0: ffff888029d4e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 657.664606][ T27] #1: ffffc9000228e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 657.685046][ T27] 3 locks held by kworker/u4:12/3718: [ 657.697285][ T27] 2 locks held by kworker/1:6/3996: [ 657.708353][ T27] #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 657.731019][ T27] #1: ffffc90003137d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 657.758167][ T27] 5 locks held by syz.3.1156/8507: [ 657.768996][ T27] 2 locks held by syz-executor/10124: [ 657.779948][ T27] #0: ffff888020df0918 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 657.799453][ T27] #1: ffff8881472af468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xbe0 [ 657.819792][ T27] 2 locks held by syz.2.1708/10943: [ 657.831900][ T27] #0: ffff8880627c6810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 657.853416][ T27] #1: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 657.876718][ T27] 2 locks held by syz.0.1709/10952: [ 657.888422][ T27] [ 657.894361][ T27] ============================================= [ 657.894361][ T27] [ 657.933180][ T27] NMI backtrace for cpu 1 [ 657.937528][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 657.945504][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 657.955559][ T27] Call Trace: [ 657.958839][ T27] [ 657.961776][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 657.966464][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 657.972101][ T27] ? panic+0x860/0x860 [ 657.976174][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 657.981290][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 657.986229][ T27] ? __wake_up_klogd+0xd5/0x100 [ 657.991081][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 657.997233][ T27] ? _printk+0xd1/0x120 [ 658.001394][ T27] ? panic+0x860/0x860 [ 658.005462][ T27] ? __wake_up_klogd+0xcc/0x100 [ 658.010310][ T27] ? panic+0x860/0x860 [ 658.014392][ T27] ? __rcu_read_unlock+0x92/0x100 [ 658.019422][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 658.025489][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 658.031481][ T27] watchdog+0xe72/0xeb0 [ 658.035653][ T27] kthread+0x3f6/0x4f0 [ 658.039723][ T27] ? hungtask_pm_notify+0x50/0x50 [ 658.044753][ T27] ? kthread_blkcg+0xd0/0xd0 [ 658.049348][ T27] ret_from_fork+0x1f/0x30 [ 658.053784][ T27] [ 658.057455][ T27] Sending NMI from CPU 1 to CPUs 0: [ 658.063061][ C0] NMI backtrace for cpu 0 [ 658.063072][ C0] CPU: 0 PID: 8507 Comm: syz.3.1156 Not tainted 5.15.167-syzkaller #0 [ 658.063088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 658.063096][ C0] RIP: 0010:kasan_check_range+0x3/0x290 [ 658.063116][ C0] Code: 48 89 c7 e8 7f cb 6a 08 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 41 57 <41> 56 53 b0 01 48 85 f6 0f 84 9a 01 00 00 48 89 fd 48 01 f5 0f 82 [ 658.063127][ C0] RSP: 0018:ffffc90002f664e8 EFLAGS: 00000246 [ 658.063141][ C0] RAX: ffffffff83a2602a RBX: 0000000000000000 RCX: ffffffff83a2603a [ 658.063151][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffea00014fc300 [ 658.063160][ C0] RBP: ffffea00014fc300 R08: ffffffff83a26008 R09: fffff9400029f861 [ 658.063170][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd400029f861 [ 658.063185][ C0] R13: dffffc0000000000 R14: ffffea00014fc308 R15: ffffea00014fc300 [ 658.063196][ C0] FS: 00007fc90edcc6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 658.063208][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.063218][ C0] CR2: 00007fcb08b8a000 CR3: 0000000079be4000 CR4: 00000000003506f0 [ 658.063230][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 658.063238][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 658.063247][ C0] Call Trace: [ 658.063252][ C0] [ 658.063256][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 658.063273][ C0] ? read_lock_is_recursive+0x10/0x10 [ 658.063288][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 658.063303][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 658.063324][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 658.063337][ C0] ? nmi_handle+0xf7/0x370 [ 658.063352][ C0] ? kasan_check_range+0x3/0x290 [ 658.063365][ C0] ? default_do_nmi+0x62/0x150 [ 658.063380][ C0] ? exc_nmi+0xa8/0x100 [ 658.063393][ C0] ? end_repeat_nmi+0x16/0x31 [ 658.063408][ C0] ? f2fs_finish_read_bio+0x4e8/0xa00 [ 658.063421][ C0] ? f2fs_finish_read_bio+0x50a/0xa00 [ 658.063433][ C0] ? f2fs_finish_read_bio+0x51a/0xa00 [ 658.063447][ C0] ? kasan_check_range+0x3/0x290 [ 658.063460][ C0] ? kasan_check_range+0x3/0x290 [ 658.063473][ C0] ? kasan_check_range+0x3/0x290 [ 658.063486][ C0] [ 658.063490][ C0] [ 658.063494][ C0] f2fs_finish_read_bio+0x51a/0xa00 [ 658.063512][ C0] submit_bio_checks+0x323/0x1940 [ 658.063529][ C0] ? f2fs_get_lock_data_page+0x54/0x250 [ 658.063543][ C0] ? __submit_bio+0x850/0x850 [ 658.063554][ C0] ? vfs_fallocate+0x54a/0x6b0 [ 658.063570][ C0] ? blk_try_enter_queue+0x38e/0x4e0 [ 658.063588][ C0] __submit_bio+0x5a1/0x850 [ 658.063605][ C0] ? rcu_lock_release+0x20/0x20 [ 658.063626][ C0] submit_bio_noacct+0x955/0xb30 [ 658.063642][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.063654][ C0] ? rcu_lock_release+0x5/0x20 [ 658.063670][ C0] ? blk_put_request+0x20/0x20 [ 658.063688][ C0] ? rcu_lock_release+0x5/0x20 [ 658.063706][ C0] submit_bio+0x2dd/0x560 [ 658.063722][ C0] ? submit_bio_noacct+0xb30/0xb30 [ 658.063737][ C0] ? f2fs_wait_on_block_writeback+0x1c0/0x2e0 [ 658.063755][ C0] f2fs_submit_page_read+0x24c/0x2c0 [ 658.063772][ C0] f2fs_get_read_data_page+0x455/0x6b0 [ 658.063787][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.063801][ C0] ? f2fs_get_block+0x310/0x310 [ 658.063817][ C0] ? inode_dio_wait+0x2a9/0x340 [ 658.063833][ C0] ? inode_owner_or_capable+0x210/0x210 [ 658.063846][ C0] ? f2fs_get_node_info+0x1b7/0x12c0 [ 658.063862][ C0] f2fs_get_lock_data_page+0x54/0x250 [ 658.063874][ C0] ? down_write_trylock+0x97/0x1b0 [ 658.063888][ C0] ? f2fs_start_bidx_of_node+0x49/0x370 [ 658.063905][ C0] do_garbage_collect+0x3645/0x7540 [ 658.063949][ C0] ? has_not_enough_free_secs+0x8e0/0x8e0 [ 658.063966][ C0] ? mark_lock+0x98/0x340 [ 658.063986][ C0] ? f2fs_gc+0x98c/0x1c30 [ 658.064000][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.064017][ C0] ? set_page_private_gcing+0x240/0x240 [ 658.064033][ C0] ? up_write+0x19d/0x580 [ 658.064049][ C0] ? __up_read+0x690/0x690 [ 658.064063][ C0] ? has_not_enough_free_secs+0x3da/0x8e0 [ 658.064081][ C0] f2fs_gc+0x9d2/0x1c30 [ 658.064106][ C0] ? f2fs_start_bidx_of_node+0x370/0x370 [ 658.064130][ C0] ? has_not_enough_free_secs+0x3e3/0x920 [ 658.064147][ C0] f2fs_balance_fs+0x4e8/0x6a0 [ 658.064161][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.064173][ C0] ? f2fs_commit_inmem_pages+0xc00/0xc00 [ 658.064192][ C0] ? __up_read+0x2b9/0x690 [ 658.064206][ C0] ? up_read+0x20/0x20 [ 658.064223][ C0] f2fs_map_blocks+0x265b/0x3720 [ 658.064251][ C0] ? f2fs_force_buffered_io+0x630/0x630 [ 658.064272][ C0] expand_inode_data+0x5dd/0xa40 [ 658.064293][ C0] ? f2fs_insert_range+0x3c0/0x3c0 [ 658.064304][ C0] ? file_update_time+0x3f8/0x460 [ 658.064319][ C0] ? file_remove_privs+0x610/0x610 [ 658.064337][ C0] f2fs_fallocate+0x42d/0x910 [ 658.064355][ C0] vfs_fallocate+0x54a/0x6b0 [ 658.064370][ C0] do_vfs_ioctl+0x2317/0x2b70 [ 658.064387][ C0] ? __x64_compat_sys_ioctl+0x80/0x80 [ 658.064402][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 658.064414][ C0] ? slab_free_freelist_hook+0xdd/0x160 [ 658.064430][ C0] ? tomoyo_path_number_perm+0x648/0x810 [ 658.064445][ C0] ? kfree+0xf1/0x270 [ 658.064460][ C0] ? tomoyo_path_number_perm+0x6ab/0x810 [ 658.064479][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 658.064512][ C0] ? __fget_files+0x413/0x480 [ 658.064530][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 658.064543][ C0] ? security_file_ioctl+0x7d/0xa0 [ 658.064560][ C0] __se_sys_ioctl+0x81/0x160 [ 658.064575][ C0] do_syscall_64+0x3b/0xb0 [ 658.064587][ C0] ? clear_bhb_loop+0x15/0x70 [ 658.064599][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 658.064614][ C0] RIP: 0033:0x7fc910995ff9 [ 658.064627][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.064637][ C0] RSP: 002b:00007fc90edcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.064651][ C0] RAX: ffffffffffffffda RBX: 00007fc910b4e130 RCX: 00007fc910995ff9 [ 658.064661][ C0] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 658.064670][ C0] RBP: 00007fc910a08296 R08: 0000000000000000 R09: 0000000000000000 [ 658.064678][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.064687][ C0] R13: 0000000000000000 R14: 00007fc910b4e130 R15: 00007ffd9728d3f8 [ 658.064703][ C0] [ 658.627525][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 658.708545][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 658.716514][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 658.726647][ T27] Call Trace: [ 658.729923][ T27] [ 658.732846][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 658.737528][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 658.743160][ T27] ? panic+0x860/0x860 [ 658.747234][ T27] panic+0x318/0x860 [ 658.751120][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 658.756747][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 658.762900][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 658.768192][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 658.774274][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 658.780435][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 658.786591][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 658.792830][ T27] watchdog+0xeb0/0xeb0 [ 658.797094][ T27] kthread+0x3f6/0x4f0 [ 658.801160][ T27] ? hungtask_pm_notify+0x50/0x50 [ 658.806183][ T27] ? kthread_blkcg+0xd0/0xd0 [ 658.810764][ T27] ret_from_fork+0x1f/0x30 [ 658.815191][ T27] [ 658.818302][ T27] Kernel Offset: disabled [ 658.822635][ T27] Rebooting in 86400 seconds..