last executing test programs: 9m25.383724107s ago: executing program 0 (id=93): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000006}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 9m23.325701699s ago: executing program 0 (id=96): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004640)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r8, 0x4004ae52, &(0x7f0000000080)=0xfffffffffffffffb) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x1008001, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000007010200000000000000000000000b090001"], 0x20}}, 0x0) 9m21.587028749s ago: executing program 0 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000003c0)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000440)={0x0, 0x12, r5}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgrp(0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$inet(r9, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 9m19.214519714s ago: executing program 0 (id=108): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setxattr$security_ima(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140), &(0x7f0000001180)=@v2={0x3, 0x1, 0xa, 0xc, 0x8e, "eb01e02073b860768aaddae684dfaea3d72310c4b083e54e5c9060674168829225f4cb9989aa235c76f48910ffb0444860813c5b4febef6041f13d480b28a48d0d267f5c6389ad21ad1d5d8188761cbef8ac62a6b4fa82bbcb86a7cb1821c700c2f1e499db6b831d2cb18560100e97b88c498b1f1a7c680bb3caa353c46f395ee7325de03ba3bb368d0fc26f6f40"}, 0x97, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000001240)={r2, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x81, 0x0, &(0x7f00000010c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRES8, @ANYRES16], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPbxxzsww4Uki8ceD05Ab+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6e3Br8=") r4 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r4, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) syz_usb_connect(0x6, 0x43, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/197, 0xc5, 0x8000) syz_usb_connect$uac1(0x5, 0x93, &(0x7f0000001300)=ANY=[@ANYBLOB="12011003000000106b1d21014000010203010902810003010740bc0904000000010100000a24019800030201020b240543071c2f3fb936d1082404000cd510fe0904010000010200000904010101010200000905010900027f13010725018109ae0409040200000102000009040201010102000008240201060292390724010b07011009058209ff030505040725010204"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 9m16.090188392s ago: executing program 0 (id=104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r1 = getpid() syz_pidfd_open(r1, 0x0) prlimit64(r1, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x10000, &(0x7f0000000440)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r3}, 0x18) mlockall(0x2) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 9m15.286426017s ago: executing program 0 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setrlimit(0x6, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffdffffe, @rand_addr=' \x01\x00', 0x5}, 0x1c) r3 = gettid() syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)='r', 0x1}], 0x1}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 8m59.368428643s ago: executing program 32 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setrlimit(0x6, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffdffffe, @rand_addr=' \x01\x00', 0x5}, 0x1c) r3 = gettid() syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)='r', 0x1}], 0x1}, 0x0) chdir(&(0x7f0000000300)='./file0\x00') 21.88433116s ago: executing program 2 (id=831): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/66], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r7, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200001f, &(0x7f00000001c0)={[{@block_validity}, {@errors_remount}, {@journal_dev}, {@noinit_itable}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$eJzs3UFrHG0dAPD/THZ9mzavm6qHWrAttpIU7SZpbBs8VAXRU0Gt9xqTbQjZZEuyaZtQNMUPIIio4EVPXgQ/gCD9CCIU9C4qimirBw/Vkd2djWm6m6R0s8ub/f3gycwzOzv/559lnp1nZtgJYGhdiojJiMiyLLsaEaV8eZqX2GmVxnovXzxZaJQksuzu35NI8mXtbb2XT8/kbzsVEV//SsS3kjfjbmxtr8xXq5X1vD5VX01eZdn2teXV+aXKUmVtdnbm5tytuRtz0z3Jczwibn/pzz/83s+/fPvXn3n0h3t/nfx2K8GWvXn0Uiv1YvN/0VaIiPXjCDYghWaGLTcG3BYAAA7WON7/SER8MiKuRilGmkdzAAAAwEmSfX4sXiWt638AAADAyZRGxFgkaTm/33cs0rRcbt3D+7E4nVZrG/VPZ6Xd8wXjUUzvL1cr0/m9A+NRTBr1mfwe23b9+r76bEScjYgflEab9fJCrbo40DMfAAAAMDzO7Bv//6vUGv8DAAAAJ8z4oBsAAAAAHDvjfwAAADj5jP8BAADgRPvqnTuNkrWff734cGtzpfbw2mJlY6W8urlQXqitPygv1WpLzd/sWz1se9Va7cFnY23z8VS9slGf2tjavrda21yr31t+7RHYAAAAQB+dvfjs90lE7HxuNI2ILNnzWjEiG9m7cqH/7QOOT/o2K//p+NoB9N/IoBsADIxDehhexUE3ABi4w/qBrjfv/Kb3bQEAAI7HxMd3r/83CzA88uv/STLohgB95/o/DC/X/2F4FQ86AjAogBMvPcKu/u7X/7PsrRoFAAD03FizJGk5HweMRZqWyxHvNx8LUEzuL1cr0xHx4Yj4Xan4XqM+03xn4vQAAAAAAAAAAAAAAAAAAAAAAAAAABxRliWRdTG6uw4AAADwQRaR/iXJn/81Uboytv/8wIeSf5ea04h49JO7P3o8X6+vzzSW/2N3ef3H+fLr/T57AQAAAHTSHqe3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EsvXzxZaJd+xv3bFyNivFP8QpxqTk9FMSJO/zOJwp73JREx0oP4O08j4lyn+EmjWTGet2J//DQiRgcc/0wP4sMwe9bof77Qaf9L41Jz2nn/K+TlXXXv/9Ld/m+kS//3fqcNpm8uOv/8l1Nd4z+NOF/o3P+04ydd4l8+Yo7f/Mb2drfXsp9FTHT8/kleizWVFB5MbWxtX1tenV+qLFXWZmdnbs7dmrsxNz11f7layf92jPH9T/zqvwflf7pL/PFD8r9yxPz/8/zxi4+2Zov7XirGT7Ns8nLnz/9cl/jt775P5R93oz7Rnt9pze914Re/vXDxgPwXu+R/2Oc/ecT8r37tu3884qoAQB9sbG2vzFerlXUzZo5tZjT6GHQ+DlqnfRDbh/Z8Jw/1rtvJSoPYTwfYKQEAAMfi/wf9g24JAAAAAAAAAAAAAAAAAAAADK/DfgYsevBzYvtj7gwmVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA/0vAAD//+XXyps=") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_freeze_timeout', 0x149a82, 0x240) 19.251687096s ago: executing program 2 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmdt(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) 17.323354837s ago: executing program 2 (id=836): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000380)='net/if_inet6\x00') close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r5 = creat(0x0, 0xecf86c37d53049cc) close(r5) execve(0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14.430911205s ago: executing program 4 (id=840): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x80080) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x5, 0x8, 0x8, 0x0, 0x5, 0x5, 0x4, 0x7, 0x54c6cff2, 0xfd, 0x5, 0x1, 0xfffffae2, 0x1, 0x6, 0x7, 0x0, 0x3ff, 0x3, 0x10001, 0x89, 0x0, 0xa, 0x20001e5a, 0x3, 0x4, 0x3, 0xffffffff, 0x3, 0x0, 0xfffffff8]}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r6 = eventfd2(0x8, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x803, r6}) r7 = eventfd2(0x30f1, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 14.264904576s ago: executing program 1 (id=841): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x100000000000000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070084"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 12.732901515s ago: executing program 1 (id=843): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/66], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r7, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e797371e9979884"}}}}}}}, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200001f, &(0x7f00000001c0)={[{@block_validity}, {@errors_remount}, {@journal_dev}, {@noinit_itable}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$eJzs3UFrHG0dAPD/THZ9mzavm6qHWrAttpIU7SZpbBs8VAXRU0Gt9xqTbQjZZEuyaZtQNMUPIIio4EVPXgQ/gCD9CCIU9C4qimirBw/Vkd2djWm6m6R0s8ub/f3gycwzOzv/559lnp1nZtgJYGhdiojJiMiyLLsaEaV8eZqX2GmVxnovXzxZaJQksuzu35NI8mXtbb2XT8/kbzsVEV//SsS3kjfjbmxtr8xXq5X1vD5VX01eZdn2teXV+aXKUmVtdnbm5tytuRtz0z3Jczwibn/pzz/83s+/fPvXn3n0h3t/nfx2K8GWvXn0Uiv1YvN/0VaIiPXjCDYghWaGLTcG3BYAAA7WON7/SER8MiKuRilGmkdzAAAAwEmSfX4sXiWt638AAADAyZRGxFgkaTm/33cs0rRcbt3D+7E4nVZrG/VPZ6Xd8wXjUUzvL1cr0/m9A+NRTBr1mfwe23b9+r76bEScjYgflEab9fJCrbo40DMfAAAAMDzO7Bv//6vUGv8DAAAAJ8z4oBsAAAAAHDvjfwAAADj5jP8BAADgRPvqnTuNkrWff734cGtzpfbw2mJlY6W8urlQXqitPygv1WpLzd/sWz1se9Va7cFnY23z8VS9slGf2tjavrda21yr31t+7RHYAAAAQB+dvfjs90lE7HxuNI2ILNnzWjEiG9m7cqH/7QOOT/o2K//p+NoB9N/IoBsADIxDehhexUE3ABi4w/qBrjfv/Kb3bQEAAI7HxMd3r/83CzA88uv/STLohgB95/o/DC/X/2F4FQ86AjAogBMvPcKu/u7X/7PsrRoFAAD03FizJGk5HweMRZqWyxHvNx8LUEzuL1cr0xHx4Yj4Xan4XqM+03xn4vQAAAAAAAAAAAAAAAAAAAAAAAAAABxRliWRdTG6uw4AAADwQRaR/iXJn/81Uboytv/8wIeSf5ea04h49JO7P3o8X6+vzzSW/2N3ef3H+fLr/T57AQAAAHTSHqe3x/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0EsvXzxZaJd+xv3bFyNivFP8QpxqTk9FMSJO/zOJwp73JREx0oP4O08j4lyn+EmjWTGet2J//DQiRgcc/0wP4sMwe9bof77Qaf9L41Jz2nn/K+TlXXXv/9Ld/m+kS//3fqcNpm8uOv/8l1Nd4z+NOF/o3P+04ydd4l8+Yo7f/Mb2drfXsp9FTHT8/kleizWVFB5MbWxtX1tenV+qLFXWZmdnbs7dmrsxNz11f7layf92jPH9T/zqvwflf7pL/PFD8r9yxPz/8/zxi4+2Zov7XirGT7Ns8nLnz/9cl/jt775P5R93oz7Rnt9pze914Re/vXDxgPwXu+R/2Oc/ecT8r37tu3884qoAQB9sbG2vzFerlXUzZo5tZjT6GHQ+DlqnfRDbh/Z8Jw/1rtvJSoPYTwfYKQEAAMfi/wf9g24JAAAAAAAAAAAAAAAAAAAADK/DfgYsevBzYvtj7gwmVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA/0vAAD//+XXyps=") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_freeze_timeout', 0x149a82, 0x240) 11.975904639s ago: executing program 3 (id=844): io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, &(0x7f0000000780)) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r4, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 11.741786151s ago: executing program 4 (id=845): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) getpgid(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x12, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c0000000301"], 0x20}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xe3d61e193265878f}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfffe}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x81d4) 9.834667972s ago: executing program 4 (id=846): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000002c0), 0x980400, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r4) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, 0x0) 9.823895712s ago: executing program 1 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffec2) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresuid(0xee01, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x70}, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) listen(r7, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x16, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xce, &(0x7f0000000580)=""/206, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) 9.629781203s ago: executing program 3 (id=848): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000002c0), 0x980400, &(0x7f0000000700)=ANY=[]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r4) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, 0x0) 8.779044558s ago: executing program 4 (id=849): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000380)='net/if_inet6\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r6 = creat(0x0, 0xecf86c37d53049cc) close(r6) execve(0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7.861103664s ago: executing program 3 (id=850): socket$inet6(0xa, 0x2, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2920}}, 0x1c}}, 0x8c0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 7.323187917s ago: executing program 1 (id=851): ioperm(0x2, 0x1, 0x1) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x4, 0x1) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x8500017e) fanotify_mark(r4, 0x442, 0x30, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000040)={0x3, 0x3ff}) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x8, 0x31, 0xffffffffffffffff, 0x1000) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x2000) ioctl$EVIOCGKEYCODE(r7, 0x80084504, &(0x7f0000000a80)=""/94) syz_emit_ethernet(0xd6d, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0xff, 0x2]}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0x90}}, 0x0) 6.89566773s ago: executing program 2 (id=852): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/66], 0x119) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r7, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200001f, &(0x7f00000001c0)={[{@block_validity}, {@errors_remount}, {@journal_dev}, {@noinit_itable}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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") openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_freeze_timeout', 0x149a82, 0x240) 3.925207267s ago: executing program 3 (id=853): setresgid(0xee00, 0xee01, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setownex(r3, 0xf, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = open(0x0, 0x236540, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x9, 0x6, 0x1, "cd824187992bd1537ba859afe2d9583b5df1c438ae9ce81105c2145d5412c30b", 0x38416761}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000840)={[{@noblock_validity}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x8}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}], [{@dont_appraise}]}, 0x1, 0x488, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gYBWMxB8tLT/kYGI0mnjQqNEDxlPdFoIUMFATIUTBA8Z4MCTejUcT/wJPejHqycQr3g0JMVxAT2tmZ4Z2l93SHwtb3c8nGea9mVne++7bt/vmvd0G0LNGsn+SiPURcTkihiOi0nzBSL67ce1c9e9r56pJ1Gpv/ZVkD4vr185Vi/+ivmXW5QdqtSK/pkW5F9+NmJyZmT5V5Mdmj38wdvrM2WeOHp88Mn1k+sTEwYP79m4fODCxv/GBO95cVpxZXNe3fnxy25ZX3rn0WvXQpfd++S6r7/rifBlHJ43kz25Lj3e6sC7bMC+dVLpYEZYka7f+Yrscw9EXQzfPDcfLn3a1csCdVmn1+Vw4XwP+x7KBOtCLyg/67P633O7SuGNVuPpCPuGRxX2j2PIzlUiLa/qb7m87aTAiDp3/5+tsizs0DwEAMN8P2fjn6VbjvzQemHfdPcUaysaIuDciNkXEfRGxOSLuj6hf+2BEPLTE8ptXSJrHPxcivdJwQa1viSUsLBv/PVesbTWO/8rRX2zsK3Ib6vH3J4ePzkzvKZ6T3dG/JsuPNzyk0Y8v/f5l87Evimn2kXnjv2zLym+MML3SPEE3NTk7ufLIc1cvRGyttIo/ubkOmETElojYuswyjj757bZ251rFX46Fb6sD60y1byKeyNv/fDTFX0rark+OP3tgYv/YYMxM7xkrXxW3+vW3i2+0K39F8XdA1v5rW77+8/ize8RkMOL0mbPH6uu1p5dRyB+fVZM2pzbfNv5bX//VXREDydv19EB5VbEfSF7NdkPl8Y8mZ2dPTcw9tszX9+N5/Lt3zsU/GXP9f1N+e1Z/Jh6OiOxFvD0idkTEI0XbPRoRj0XEzgXC//nFXe+3O9e+/ReYle+gLP6pBdo/e8vLUnPtv/RE37Gfvm9Xfm1R7b+vntpdHFnM+99iK7iS5w4AAAD+K9L6d+CTdPRmOk1HR/Pv8G+OtWklIp46fPLDE1P5d+U3Rn9aznQNz5sPHS/mhsv8RFN+bzFv/FXfUD0/Wj05M9Xt4KHHrWvT/zN/dnapBViN/F4Lepf+D71L/4fepf9D73q+2xUAumOg9eFP7nY9gK5Y+vh/sNiv7XhdgLvL/T/0Lv0fepf+Dz2p7W/j0xX95H8FibQbhZaJSldCXlxiaHVUo0xEuiqq0bnE65/nXWK11KdMVBb9xyyWmVjT8lS335kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6498AAAD//0942pQ=") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 3.709687109s ago: executing program 1 (id=854): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) getpgid(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0x2, 0x12, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c0000000301"], 0x20}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xe3d61e193265878f}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfffe}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x81d4) 2.853656424s ago: executing program 4 (id=855): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x1c}}, 0x4800) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x1008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) landlock_create_ruleset(&(0x7f0000002a80)={0x840, 0x2}, 0x18, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xc, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x8000, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.588437605s ago: executing program 2 (id=856): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x1c}}, 0x4800) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x1008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) landlock_create_ruleset(&(0x7f0000002a80)={0x840, 0x2}, 0x18, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xc, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x8000, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.676361071s ago: executing program 1 (id=857): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_setup(0x4d57, &(0x7f0000001240)={0x0, 0xe762, 0x10, 0x1, 0x338}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xffffffff, 0x0, "8100e1c8e80b598c36ff000800"}) syz_open_pts(r2, 0x141601) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000001040), 0x4800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) epoll_create1(0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="ed"], 0x20) 1.668092341s ago: executing program 3 (id=858): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000002c0), 0x980400, &(0x7f0000000700)=ANY=[]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r4) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, 0x0) 1.001794035s ago: executing program 4 (id=859): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rEaIx0dlFE0mAwdIWNTo4MDto4r+4SaQStIiBDsLmp3D2EzgTFxI/hg7q5IKbk0NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8Wx7un+8uU8lrHcA4kkjI+Ue9X6Mp9a2Jl8xNee3q3Hy6bbVXlwfXEwB8/+vPjwFo53V4Mvf9t3cn5bgJrae3oCEj9Q4EDKn3oGFbagcCu1IfKroa1BvGQdl1jP2qWwyEGQQrCHYQcoP765wJFJX9CeV6vdE8KriuU/tBMax/nbyGFWV/6vvq9sZU+mdBgyV1DgIbUi8h0e1N1BLl/FOx/vr6L5+fgoLir4m+P/kXAinFn2KKf2S9ykm23mjOlSuFklNyjm07t2jOm+aCnQ2NKIqf+N9o6E9jyvojH9TGRRynBc+rWVHs5XYU33PceOh/GtKzUS7knEr4PZgUM8GQ1mVOCCGEEEIIIYQQQggh3840RPgXdAj2elj9GgAA//+j/Hgy") chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0) read$FUSE(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x23, 0x5, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6799, 0x80, 0x4, 0x3ce}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r7, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r8, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r1, 0x0, 0x28) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, 0x0, 0x515a02, 0x52abe154ad664f26) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 123.04233ms ago: executing program 3 (id=860): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000380)='net/if_inet6\x00') close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r3 = creat(0x0, 0xecf86c37d53049cc) close(r3) execve(0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 0s ago: executing program 2 (id=861): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000280)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000200)={0x0, 0x1, 0x3, 0x7fffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x4000, r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={0x0, 0x0, 0x10}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000040)=""/143, &(0x7f0000000100)=0x8f) signalfd4(r4, &(0x7f0000000500)={[0x6]}, 0x8, 0x0) kernel console output (not intermixed with test programs): which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.565816][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.587986][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.595025][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.621345][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.650763][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.657731][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.683756][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.697859][ T5801] team0: Port device team_slave_0 added [ 69.707189][ T5801] team0: Port device team_slave_1 added [ 69.722380][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.738077][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.818813][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.826171][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.852588][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.866119][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.873295][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.899264][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.915448][ T5789] hsr_slave_0: entered promiscuous mode [ 69.922240][ T5789] hsr_slave_1: entered promiscuous mode [ 69.943776][ T5793] team0: Port device team_slave_0 added [ 69.976487][ T5793] team0: Port device team_slave_1 added [ 69.997960][ T5797] hsr_slave_0: entered promiscuous mode [ 70.004808][ T5797] hsr_slave_1: entered promiscuous mode [ 70.012142][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.020097][ T5797] Cannot create hsr debugfs directory [ 70.063907][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.071043][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.097952][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.102349][ T5794] Bluetooth: hci0: command tx timeout [ 70.131881][ T5801] hsr_slave_0: entered promiscuous mode [ 70.138162][ T5801] hsr_slave_1: entered promiscuous mode [ 70.145073][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.153671][ T5801] Cannot create hsr debugfs directory [ 70.169808][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.176807][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.204052][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.208511][ T5792] Bluetooth: hci2: command tx timeout [ 70.215252][ T5794] Bluetooth: hci1: command tx timeout [ 70.257054][ T5793] hsr_slave_0: entered promiscuous mode [ 70.264478][ T5793] hsr_slave_1: entered promiscuous mode [ 70.270915][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.278500][ T5793] Cannot create hsr debugfs directory [ 70.349824][ T5794] Bluetooth: hci3: command tx timeout [ 70.625302][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.638849][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.650538][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.669271][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.742974][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.772899][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.801660][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.818176][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.838417][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.861394][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.871599][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.905116][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.967007][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.994432][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.005222][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.027777][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.154239][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.173152][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.198248][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.232311][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.239877][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.262736][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.273303][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.286814][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.294037][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.322441][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.329730][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.340051][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.347157][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.406606][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.426131][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.457191][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.464451][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.496639][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.514574][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.521784][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.542607][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.549830][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.584216][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.591547][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.695527][ T5797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.717800][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.722656][ T5797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.728137][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.025655][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.138902][ T5789] veth0_vlan: entered promiscuous mode [ 72.182062][ T5794] Bluetooth: hci0: command tx timeout [ 72.203877][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.214547][ T5789] veth1_vlan: entered promiscuous mode [ 72.232671][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.260967][ T5794] Bluetooth: hci2: command tx timeout [ 72.262045][ T5792] Bluetooth: hci1: command tx timeout [ 72.285966][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.361479][ T5789] veth0_macvtap: entered promiscuous mode [ 72.390334][ T5789] veth1_macvtap: entered promiscuous mode [ 72.408153][ T5801] veth0_vlan: entered promiscuous mode [ 72.415151][ T5797] veth0_vlan: entered promiscuous mode [ 72.429757][ T5792] Bluetooth: hci3: command tx timeout [ 72.452861][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.465190][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.476972][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.486712][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.497147][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.507049][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.529161][ T5797] veth1_vlan: entered promiscuous mode [ 72.546169][ T5801] veth1_vlan: entered promiscuous mode [ 72.556898][ T5793] veth0_vlan: entered promiscuous mode [ 72.572076][ T5793] veth1_vlan: entered promiscuous mode [ 72.688527][ T5793] veth0_macvtap: entered promiscuous mode [ 72.698078][ T5797] veth0_macvtap: entered promiscuous mode [ 72.708016][ T5801] veth0_macvtap: entered promiscuous mode [ 72.741126][ T5797] veth1_macvtap: entered promiscuous mode [ 72.756571][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.766801][ T5801] veth1_macvtap: entered promiscuous mode [ 72.767167][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.775237][ T5793] veth1_macvtap: entered promiscuous mode [ 72.808972][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.820569][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.833022][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.868290][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.879275][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.891944][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.911822][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.927668][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.936616][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.938730][ T5797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.955841][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.964880][ T5797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.993267][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.004623][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.014876][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.026661][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.040089][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.053717][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.064335][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.075111][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.086096][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.096489][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.107631][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.120720][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.155031][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.201006][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.213108][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.228362][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.243333][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.274379][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.294227][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.305435][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.317052][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.327883][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.345693][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.364727][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.405961][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.436750][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.445658][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.454604][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.474574][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.483579][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.492854][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.501787][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.704938][ T5880] vlan0: entered promiscuous mode [ 74.252666][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.260991][ T5792] Bluetooth: hci0: command tx timeout [ 74.271105][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.325997][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.340038][ T5792] Bluetooth: hci1: command tx timeout [ 74.341012][ T5794] Bluetooth: hci2: command tx timeout [ 74.365314][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.457309][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.468475][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.493170][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.501929][ T5794] Bluetooth: hci3: command tx timeout [ 74.532471][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.575265][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.604561][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.688215][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.721329][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.906054][ T5900] syz.3.4[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.918075][ T5900] loop3: detected capacity change from 0 to 8 [ 75.939720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.970056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.035981][ T5900] SQUASHFS error: lzo decompression failed, data probably corrupt [ 76.044879][ T5900] SQUASHFS error: Failed to read block 0x144: -5 [ 76.051709][ T5900] SQUASHFS error: Unable to read metadata cache entry [142] [ 76.059073][ T5900] SQUASHFS error: Unable to read inode 0x11f [ 76.354174][ T5794] Bluetooth: hci0: command tx timeout [ 76.420228][ T5794] Bluetooth: hci1: command tx timeout [ 76.425884][ T5794] Bluetooth: hci2: command tx timeout [ 76.448028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.549899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 76.583665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.589847][ T5794] Bluetooth: hci3: command tx timeout [ 76.650608][ T5897] Bluetooth: MGMT ver 1.22 [ 76.655946][ T5897] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 77.665776][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.674646][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.937802][ T5919] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 77.944620][ T5919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.984947][ T5919] vhci_hcd vhci_hcd.0: Device attached [ 78.036274][ T5923] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 78.042940][ T5923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.073162][ T5923] vhci_hcd vhci_hcd.0: Device attached [ 78.083373][ T5928] loop2: detected capacity change from 0 to 128 [ 78.098658][ T5926] capability: warning: `syz.0.10' uses deprecated v2 capabilities in a way that may be insecure [ 78.111048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.209771][ T5919] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 78.216438][ T5919] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 78.282918][ T5928] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.307178][ T5878] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 78.310864][ T5923] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 78.354474][ T5928] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 78.388532][ T5919] vhci_hcd vhci_hcd.0: Device attached [ 78.409599][ T5937] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 78.416273][ T5937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 78.660174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.686052][ T5937] vhci_hcd vhci_hcd.0: Device attached [ 78.716371][ T5919] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 78.723038][ T5919] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 79.502177][ T5945] "syz.2.11" (5945) uses obsolete ecb(arc4) skcipher [ 80.074728][ T5919] vhci_hcd vhci_hcd.0: Device attached [ 80.160769][ T5923] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 80.234037][ T5919] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(24) [ 80.240703][ T5919] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.347890][ T5923] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 80.353225][ T5919] vhci_hcd vhci_hcd.0: Device attached [ 80.430904][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.507534][ T5919] vhci_hcd vhci_hcd.0: port 0 already used [ 80.557724][ T5938] vhci_hcd: connection closed [ 80.559315][ T5930] vhci_hcd: connection closed [ 80.560164][ T5924] vhci_hcd: connection closed [ 80.570807][ T2947] vhci_hcd: stop threads [ 80.591198][ T5948] vhci_hcd: connection closed [ 80.593102][ T5920] vhci_hcd: connection reset by peer [ 80.609146][ T5940] vhci_hcd: connection closed [ 80.631673][ T2947] vhci_hcd: release socket [ 80.667741][ T5955] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 80.678196][ T2947] vhci_hcd: disconnect device [ 80.900014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.908390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.952519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.952820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.257514][ T3066] cfg80211: failed to load regulatory.db [ 82.290617][ T2947] vhci_hcd: stop threads [ 82.300092][ T2947] vhci_hcd: release socket [ 82.331104][ T2947] vhci_hcd: disconnect device [ 82.357266][ T2947] vhci_hcd: stop threads [ 82.380646][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.388650][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.407407][ T2947] vhci_hcd: release socket [ 82.428022][ T2947] vhci_hcd: disconnect device [ 82.469846][ T2947] vhci_hcd: stop threads [ 82.474215][ T2947] vhci_hcd: release socket [ 82.493397][ T2947] vhci_hcd: disconnect device [ 82.606873][ T2947] vhci_hcd: stop threads [ 82.616786][ T2947] vhci_hcd: release socket [ 82.629855][ T2947] vhci_hcd: disconnect device [ 82.641678][ T2947] vhci_hcd: stop threads [ 82.651113][ T2947] vhci_hcd: release socket [ 83.531389][ T5878] usb 35-1: device descriptor read/64, error -110 [ 83.647043][ T2947] vhci_hcd: disconnect device [ 83.753231][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.760550][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.768749][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.776046][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.971688][ T5955] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.036988][ T5962] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 84.221799][ T5962] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 84.240514][ T5974] loop1: detected capacity change from 0 to 2048 [ 84.503674][ T5946] usb usb36-port1: attempt power cycle [ 85.691328][ T5878] vhci_hcd: vhci_device speed not set [ 85.910469][ T5978] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 86.208901][ T5987] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.243540][ T5999] loop2: detected capacity change from 0 to 8 [ 89.488566][ T5999] SQUASHFS error: lzo decompression failed, data probably corrupt [ 89.497783][ T5999] SQUASHFS error: Failed to read block 0x144: -5 [ 89.504390][ T5999] SQUASHFS error: Unable to read metadata cache entry [142] [ 89.511988][ T5999] SQUASHFS error: Unable to read inode 0x11f [ 90.058977][ T6004] loop0: detected capacity change from 0 to 512 [ 90.261978][ T5946] usb usb36-port1: unable to enumerate USB device [ 90.363201][ T6013] loop3: detected capacity change from 0 to 128 [ 90.379123][ T6004] EXT4-fs (loop0): Test dummy encryption mode enabled [ 90.405072][ T6004] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.424239][ T6017] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.449187][ T6004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.454207][ T6018] loop1: detected capacity change from 0 to 128 [ 90.473420][ T6013] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.517723][ T6004] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.22: bad orphan inode 131083 [ 90.529637][ T6022] ptrace attach of "./syz-executor exec"[5789] was attempted by "./syz-executor exec"[6022] [ 90.562495][ T6013] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.601458][ T6018] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.641432][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.647047][ T6018] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.826797][ T6017] befs: (nbd2): No write support. Marking filesystem read-only [ 90.837756][ T6017] syz.2.25: attempt to access beyond end of device [ 90.837756][ T6017] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 90.850901][ T6017] befs: (nbd2): unable to read superblock [ 91.849694][ T6030] "syz.1.23" (6030) uses obsolete ecb(arc4) skcipher [ 92.210658][ T6004] sched: RT throttling activated [ 94.646737][ T5797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.809018][ T5801] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.862422][ T5793] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.996044][ T6035] loop0: detected capacity change from 0 to 4096 [ 95.016939][ T6035] ======================================================= [ 95.016939][ T6035] WARNING: The mand mount option has been deprecated and [ 95.016939][ T6035] and is ignored by this kernel. Remove the mand [ 95.016939][ T6035] option from the mount to silence this warning. [ 95.016939][ T6035] ======================================================= [ 96.973836][ T6049] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.474834][ T6052] Zero length message leads to an empty skb [ 100.509957][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 100.544422][ T6068] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 100.544422][ T6068] program syz.1.34 not setting count and/or reply_len properly [ 100.725953][ T6073] loop3: detected capacity change from 0 to 512 [ 100.744159][ T6073] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.752256][ T6073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.803223][ T6073] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.36: bad orphan inode 131083 [ 100.965172][ T6073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.083973][ T6080] ptrace attach of "./syz-executor exec"[5793] was attempted by "./syz-executor exec"[6080] [ 101.921214][ T6083] loop2: detected capacity change from 0 to 40427 [ 102.079044][ T6083] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 102.088017][ T6083] F2FS-fs (loop2): Image doesn't support compression [ 102.095549][ T6083] F2FS-fs (loop2): Image doesn't support compression [ 102.102747][ T6083] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 102.613654][ T6083] F2FS-fs (loop2): invalid crc value [ 102.643371][ T6083] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.712733][ T6087] befs: (nbd1): No write support. Marking filesystem read-only [ 102.723387][ T6087] syz.1.37: attempt to access beyond end of device [ 102.723387][ T6087] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 102.737407][ T6087] befs: (nbd1): unable to read superblock [ 102.745385][ T6083] F2FS-fs (loop2): Start checkpoint disabled! [ 102.796432][ T6083] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 102.927241][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.024149][ T6097] program syz.3.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.373070][ T6112] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.492651][ T6124] loop2: detected capacity change from 0 to 1024 [ 107.170188][ T6124] hfsplus: invalid btree flag [ 107.177754][ T6124] hfsplus: failed to load catalog file [ 108.250796][ T6132] loop2: detected capacity change from 0 to 128 [ 108.370851][ T6132] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.308906][ T6132] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.773868][ T6147] autofs4:pid:6147:autofs_fill_super: called with bogus options [ 110.286482][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.503346][ T6155] ptrace attach of "./syz-executor exec"[5797] was attempted by "./syz-executor exec"[6155] [ 110.626585][ T6158] befs: (nbd0): No write support. Marking filesystem read-only [ 110.636086][ T6158] syz.0.50: attempt to access beyond end of device [ 110.636086][ T6158] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 110.649198][ T6158] befs: (nbd0): unable to read superblock [ 111.823504][ T6166] tipc: Failed to remove unknown binding: 66,1,1/0:1093473339/1093473341 [ 111.832543][ T6166] tipc: Failed to remove unknown binding: 66,1,1/0:1093473339/1093473341 [ 111.934482][ T6166] sp0: Synchronizing with TNC [ 115.461666][ T6190] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 115.788852][ T6193] loop3: detected capacity change from 0 to 512 [ 115.815888][ T23] IPVS: starting estimator thread 0... [ 115.937109][ T6187] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 115.984013][ T6193] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.989774][ T6196] IPVS: using max 34 ests per chain, 81600 per kthread [ 116.086639][ T6193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.103138][ T6193] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.714453][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.794013][ T6229] ptrace attach of "./syz-executor exec"[5801] was attempted by "./syz-executor exec"[6229] [ 120.541782][ T6232] befs: (nbd3): No write support. Marking filesystem read-only [ 120.551626][ T6232] syz.3.64: attempt to access beyond end of device [ 120.551626][ T6232] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 120.564512][ T6232] befs: (nbd3): unable to read superblock [ 121.377840][ T6250] loop3: detected capacity change from 0 to 128 [ 122.120273][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 122.160292][ T6251] trusted_key: encrypted_key: insufficient parameters specified [ 122.227964][ T6250] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.255114][ T6250] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.762011][ T6262] netlink: 'syz.1.70': attribute type 5 has an invalid length. [ 124.724365][ T6274] loop2: detected capacity change from 0 to 4096 [ 124.789434][ T6276] autofs4:pid:6276:autofs_fill_super: called with bogus options [ 125.151288][ T6274] EXT4-fs (loop2): Test dummy encryption mode enabled [ 125.435233][ T6274] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 125.539031][ T6274] System zones: 0-5 [ 125.723738][ T6274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.290801][ T6274] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 126.420439][ T5801] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.491310][ T6290] overlayfs: missing 'workdir' [ 126.793008][ T6297] ptrace attach of "./syz-executor exec"[5797] was attempted by "./syz-executor exec"[6297] [ 126.937819][ T6287] netlink: 64 bytes leftover after parsing attributes in process `syz.2.75'. [ 127.745733][ T6293] befs: (nbd0): No write support. Marking filesystem read-only [ 127.754875][ T6293] syz.0.78: attempt to access beyond end of device [ 127.754875][ T6293] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 127.768314][ T6293] befs: (nbd0): unable to read superblock [ 128.602507][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.635532][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 130.667193][ T6331] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 130.667193][ T6331] program syz.3.84 not setting count and/or reply_len properly [ 131.291051][ T5827] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 131.793161][ T5827] usb 1-1: config 0 has no interfaces? [ 131.898850][ T5827] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 132.068335][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.536266][ T5827] usb 1-1: config 0 descriptor?? [ 134.139043][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.210515][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.997311][ T5881] usb 1-1: USB disconnect, device number 2 [ 136.637311][ T6364] autofs4:pid:6364:autofs_fill_super: called with bogus options [ 137.139111][ T6355] loop1: detected capacity change from 0 to 1024 [ 138.564276][ T6373] hfsplus: xattr searching failed [ 138.909131][ T6383] loop1: detected capacity change from 0 to 128 [ 139.062669][ T5931] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.271241][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.935983][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.959754][ T5931] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 140.086722][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.139052][ T6388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 140.153480][ T5931] usb 4-1: config 0 descriptor?? [ 140.305390][ T6390] NILFS (nullb0): couldn't find nilfs on the device [ 141.517740][ T5931] arvo 0003:1E7D:30D4.0001: item fetching failed at offset 5/7 [ 141.552998][ T5931] arvo 0003:1E7D:30D4.0001: parse failed [ 141.581414][ T5931] arvo: probe of 0003:1E7D:30D4.0001 failed with error -22 [ 142.788049][ T6405] loop1: detected capacity change from 0 to 64 [ 143.148136][ T6406] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 143.816702][ T6411] loop1: detected capacity change from 0 to 40427 [ 143.913956][ T6411] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 143.922589][ T6411] F2FS-fs (loop1): Image doesn't support compression [ 143.930498][ T6411] F2FS-fs (loop1): Image doesn't support compression [ 143.937340][ T6411] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 144.100677][ T6411] F2FS-fs (loop1): invalid crc value [ 144.130219][ T6411] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.196724][ T6411] F2FS-fs (loop1): Start checkpoint disabled! [ 144.273387][ T6411] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 144.298960][ T6416] loop0: detected capacity change from 0 to 1024 [ 144.779907][ T1195] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.160882][ T1195] usb 1-1: Using ep0 maxpacket: 16 [ 145.307455][ T1195] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.592992][ T5946] usb 4-1: USB disconnect, device number 2 [ 145.613581][ T1195] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.016872][ T1195] usb 1-1: config 1 has no interface number 1 [ 146.099521][ T1195] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x43, skipping [ 146.331826][ T1195] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 146.603671][ T1195] usb 1-1: string descriptor 0 read error: -71 [ 146.708575][ T1195] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0121, bcdDevice= 0.40 [ 146.755721][ T1195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.928728][ T1195] usb 1-1: can't set config #1, error -71 [ 146.956268][ T1195] usb 1-1: USB disconnect, device number 3 [ 147.311097][ T6429] ptrace attach of "./syz-executor exec"[5801] was attempted by "./syz-executor exec"[6429] [ 147.416174][ T6433] befs: (nbd3): No write support. Marking filesystem read-only [ 147.425052][ T6433] syz.3.105: attempt to access beyond end of device [ 147.425052][ T6433] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 147.437824][ T6433] befs: (nbd3): unable to read superblock [ 148.680184][ T6446] bridge_slave_1: left allmulticast mode [ 148.686011][ T6446] bridge_slave_1: left promiscuous mode [ 148.693610][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.313992][ T6446] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 149.604300][ T6448] loop2: detected capacity change from 0 to 32768 [ 149.811031][ T6448] process 'syz.2.109' launched './file1' with NULL argv: empty string added [ 153.012424][ T6463] loop3: detected capacity change from 0 to 40427 [ 153.143724][ T6463] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 153.152609][ T6463] F2FS-fs (loop3): Image doesn't support compression [ 153.159422][ T6463] F2FS-fs (loop3): Image doesn't support compression [ 153.166807][ T6463] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 153.182346][ T6463] F2FS-fs (loop3): invalid crc value [ 153.288155][ T6463] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.347250][ T6463] F2FS-fs (loop3): Start checkpoint disabled! [ 153.376652][ T6463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 155.483496][ T6486] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 156.078038][ T6493] loop2: detected capacity change from 0 to 4096 [ 156.148862][ T6493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.712981][ T6502] loop3: detected capacity change from 0 to 2048 [ 158.143821][ T5792] Bluetooth: hci0: link tx timeout [ 158.150699][ T5792] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.212103][ T6502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.482290][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.179673][ T6514] tipc: Failed to remove unknown binding: 66,1,1/0:905961435/905961437 [ 161.179747][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 161.188053][ T6514] tipc: Failed to remove unknown binding: 66,1,1/0:905961435/905961437 [ 162.202728][ T6514] sp0: Synchronizing with TNC [ 163.477656][ T6520] loop2: detected capacity change from 0 to 128 [ 166.634672][ T6552] loop1: detected capacity change from 0 to 512 [ 166.685059][ T6552] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.745257][ T6552] EXT4-fs (loop1): 1 truncate cleaned up [ 166.944000][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.958103][ T6552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.110930][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.127778][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.143066][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.163751][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.195779][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.217049][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.024073][ T6566] fuse: Bad value for 'group_id' [ 168.097206][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.247784][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.276753][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.390936][ T6571] bridge_slave_0: left allmulticast mode [ 168.396680][ T6571] bridge_slave_0: left promiscuous mode [ 168.404824][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.513342][ T6571] bridge_slave_1: left allmulticast mode [ 168.542028][ T6571] bridge_slave_1: left promiscuous mode [ 168.547883][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.585047][ T6571] bond0: (slave bond_slave_0): Releasing backup interface [ 168.633724][ T6571] bond0: (slave bond_slave_1): Releasing backup interface [ 169.294102][ T6571] team0: Port device team_slave_0 removed [ 169.300379][ T5792] Bluetooth: hci2: command tx timeout [ 169.347838][ T6571] team0: Port device team_slave_1 removed [ 169.411863][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.504739][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.538532][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.586806][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.668982][ T6574] team0: Mode changed to "loadbalance" [ 169.756211][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 169.767629][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.715302][ T6604] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.077183][ T6575] team0: Port device vlan0 added [ 171.680543][ T5792] Bluetooth: hci2: command tx timeout [ 173.032517][ T6625] loop2: detected capacity change from 0 to 128 [ 173.699979][ T5792] Bluetooth: hci2: command tx timeout [ 175.469841][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 175.661607][ T6640] loop3: detected capacity change from 0 to 512 [ 175.723672][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 175.775298][ T6640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.793018][ T5792] Bluetooth: hci2: command tx timeout [ 175.803262][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.826916][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.837599][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 175.847237][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.866845][ T6640] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.867876][ T23] usb 2-1: config 0 descriptor?? [ 176.348558][ T6655] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 176.381044][ T6655] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 176.394931][ T6655] EXT4-fs (loop3): This should not happen!! Data will be lost [ 176.394931][ T6655] [ 176.404919][ T6655] EXT4-fs (loop3): Total free blocks count 0 [ 176.411183][ T6655] EXT4-fs (loop3): Free/Dirty block details [ 176.417385][ T6655] EXT4-fs (loop3): free_blocks=65280 [ 176.423087][ T6655] EXT4-fs (loop3): dirty_blocks=33 [ 176.438010][ T6655] EXT4-fs (loop3): Block reservation details [ 176.444268][ T6655] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 176.772949][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.866382][ T23] arvo 0003:1E7D:30D4.0002: item fetching failed at offset 5/7 [ 176.885317][ T23] arvo 0003:1E7D:30D4.0002: parse failed [ 176.903044][ T23] arvo: probe of 0003:1E7D:30D4.0002 failed with error -22 [ 177.023093][ T6668] loop3: detected capacity change from 0 to 64 [ 177.052454][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.084164][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.114052][ T6556] bridge_slave_0: entered allmulticast mode [ 177.127096][ T6556] bridge_slave_0: entered promiscuous mode [ 177.182569][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.226421][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.264353][ T6556] bridge_slave_1: entered allmulticast mode [ 177.347129][ T6556] bridge_slave_1: entered promiscuous mode [ 177.446877][ T6668] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 179.624749][ T788] usb 2-1: USB disconnect, device number 2 [ 180.551798][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.597861][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.270846][ T6556] team0: Port device team_slave_0 added [ 181.282345][ T6556] team0: Port device team_slave_1 added [ 181.426674][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.462822][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.572701][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.646038][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 181.919700][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 182.465266][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.472632][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.604248][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.631567][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.659611][ T788] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.682327][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.212253][ T788] usb 2-1: config 0 descriptor?? [ 183.391374][ T6716] loop3: detected capacity change from 0 to 1024 [ 186.448406][ T788] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 186.513885][ T788] usb 2-1: USB disconnect, device number 3 [ 187.650703][ T6556] hsr_slave_0: entered promiscuous mode [ 187.703230][ T6556] hsr_slave_1: entered promiscuous mode [ 187.719298][ T6556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.733649][ T6556] Cannot create hsr debugfs directory [ 189.478254][ T6737] loop3: detected capacity change from 0 to 2048 [ 189.490962][ T6737] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 189.522839][ T6737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.310354][ T6754] kAFS: No cell specified [ 191.557759][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 191.989304][ T11] hsr_slave_0: left promiscuous mode [ 191.999886][ T11] hsr_slave_1: left promiscuous mode [ 192.026937][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.055078][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.120846][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.145718][ T6761] syz.1.163 (6761): drop_caches: 2 [ 192.425169][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.481446][ T11] bridge_slave_1: left allmulticast mode [ 192.509922][ T11] bridge_slave_1: left promiscuous mode [ 192.517890][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.570395][ T11] bridge_slave_0: left allmulticast mode [ 192.582456][ T11] bridge_slave_0: left promiscuous mode [ 192.761171][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.291293][ T11] veth1_macvtap: left promiscuous mode [ 193.336938][ T11] veth0_macvtap: left promiscuous mode [ 193.364157][ T11] veth1_vlan: left promiscuous mode [ 193.394822][ T11] veth0_vlan: left promiscuous mode [ 194.945790][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.308812][ T6822] input: syz1 as /devices/virtual/input/input6 [ 199.030888][ T6828] loop2: detected capacity change from 0 to 128 [ 199.470389][ T6830] kAFS: No cell specified [ 200.655030][ T6834] loop3: detected capacity change from 0 to 128 [ 200.712469][ T6834] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 201.908506][ T11] team0 (unregistering): Port device team_slave_1 removed [ 201.972359][ T11] team0 (unregistering): Port device team_slave_0 removed [ 202.024442][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.073142][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.617497][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 202.626309][ T11] bond0 (unregistering): Released all slaves [ 203.105926][ T6556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 203.138629][ T6556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 203.162241][ T6556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 203.184195][ T6556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.478569][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.526591][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.545047][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.552434][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.587449][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.595481][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.881550][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.226718][ T6556] veth0_vlan: entered promiscuous mode [ 204.243965][ T6556] veth1_vlan: entered promiscuous mode [ 204.285080][ T6556] veth0_macvtap: entered promiscuous mode [ 204.302251][ T6556] veth1_macvtap: entered promiscuous mode [ 204.329140][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.345228][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.355853][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.366792][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.380718][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.397452][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.408559][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.418923][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.430535][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.442361][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.466576][ T6556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.476627][ T6556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.495357][ T6556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.505387][ T6556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.599971][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.624679][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.670253][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.678151][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.264505][ T6900] loop4: detected capacity change from 0 to 40427 [ 205.342639][ C1] vcan0: j1939_tp_txtimer: 0xffff88802da78c00: tx aborted with unknown reason: -2 [ 205.355272][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802da7ac00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 205.375737][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802da78c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 205.465411][ T6900] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 205.475173][ T6900] F2FS-fs (loop4): Image doesn't support compression [ 205.482034][ T6900] F2FS-fs (loop4): Image doesn't support compression [ 205.488820][ T6900] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 205.520874][ T6900] F2FS-fs (loop4): invalid crc value [ 205.596404][ T6900] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.632772][ T6902] loop1: detected capacity change from 0 to 1024 [ 205.645276][ T6900] F2FS-fs (loop4): Start checkpoint disabled! [ 205.666162][ T6900] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 207.285547][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 207.305749][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.313202][ T6910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.320822][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.328010][ T6910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.728863][ T6910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.864694][ T6934] ptrace attach of "./syz-executor exec"[6556] was attempted by "./syz-executor exec"[6934] [ 208.960247][ T6936] overlayfs: missing 'lowerdir' [ 210.929221][ T6929] befs: (nbd4): No write support. Marking filesystem read-only [ 210.938006][ T6929] syz.4.174: attempt to access beyond end of device [ 210.938006][ T6929] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 210.950884][ T6929] befs: (nbd4): unable to read superblock [ 212.345109][ T6949] loop3: detected capacity change from 0 to 256 [ 212.366706][ T6949] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.388869][ T6949] xt_hashlimit: max too large, truncated to 1048576 [ 217.499446][ T5878] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 218.149444][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 218.169997][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.206842][ T5878] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.330291][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.358136][ T5878] usb 4-1: config 0 descriptor?? [ 220.246925][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 220.717099][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.778703][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.824238][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 220.834614][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.846574][ T23] usb 3-1: config 0 descriptor?? [ 220.858013][ T5878] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 220.910656][ T5878] usb 4-1: USB disconnect, device number 3 [ 220.973391][ T7033] loop1: detected capacity change from 0 to 128 [ 221.291181][ T23] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 5/7 [ 221.309754][ T23] arvo 0003:1E7D:30D4.0003: parse failed [ 221.319258][ T23] arvo: probe of 0003:1E7D:30D4.0003 failed with error -22 [ 221.485129][ T7033] ADFS-fs (loop1): error: can't find an ADFS filesystem on dev loop1. [ 221.504633][ T7027] syz.4.194 (7027): drop_caches: 2 [ 223.468717][ T5931] usb 3-1: USB disconnect, device number 2 [ 223.767601][ T7069] loop2: detected capacity change from 0 to 512 [ 223.945584][ T7069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.014504][ T7069] EXT4-fs (loop2): 1 truncate cleaned up [ 224.279675][ T7069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.793303][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.873109][ T7094] netlink: 80 bytes leftover after parsing attributes in process `syz.3.203'. [ 225.951405][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 226.443907][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.451171][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.148059][ T7106] tipc: Started in network mode [ 227.153705][ T7106] tipc: Node identity 4, cluster identity 4711 [ 227.159930][ T7106] tipc: Node number set to 4 [ 228.378617][ T7120] fuse: Bad value for 'group_id' [ 229.461808][ T7129] loop2: detected capacity change from 0 to 128 [ 229.495401][ T7129] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2. [ 229.787250][ T7134] (null): rxe_set_mtu: Set mtu to 1024 [ 230.371259][ T7134] infiniband syz2: set active [ 230.376312][ T7134] infiniband syz2: added veth1_to_team [ 230.384802][ T7134] syz2: rxe_create_cq: returned err = -12 [ 230.391420][ T7134] infiniband syz2: Couldn't create ib_mad CQ [ 230.397685][ T7134] infiniband syz2: Couldn't open port 1 [ 230.460962][ T7134] RDS/IB: syz2: added [ 230.465836][ T7134] smc: adding ib device syz2 with port count 1 [ 230.472501][ T7134] smc: ib device syz2 port 1 has pnetid [ 233.791798][ T7168] netlink: 80 bytes leftover after parsing attributes in process `syz.4.215'. [ 233.857378][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 234.380095][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.388310][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.323401][ T7189] fuse: Bad value for 'group_id' [ 239.325970][ T7216] loop4: detected capacity change from 0 to 512 [ 239.516341][ T7216] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 240.039288][ T7225] loop1: detected capacity change from 0 to 64 [ 240.096545][ T7216] EXT4-fs (loop4): 1 truncate cleaned up [ 240.141430][ T7216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.221209][ T5781] IPVS: starting estimator thread 0... [ 241.476476][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.574630][ T7236] IPVS: using max 34 ests per chain, 81600 per kthread [ 242.514622][ T7246] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 242.778067][ T28] audit: type=1326 audit(1762473979.283:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb561d8f6c9 code=0x7ffc0000 [ 243.284296][ T7251] loop1: detected capacity change from 0 to 4096 [ 243.291473][ T7251] ntfs3: Unknown parameter 'show' [ 243.311462][ T7246] netlink: 'syz.4.228': attribute type 2 has an invalid length. [ 243.442390][ T28] audit: type=1326 audit(1762473979.283:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb561d8f6c9 code=0x7ffc0000 [ 243.467463][ T28] audit: type=1326 audit(1762473979.283:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fb561d8f6c9 code=0x7ffc0000 [ 243.490540][ T28] audit: type=1326 audit(1762473979.283:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb561d8f6c9 code=0x7ffc0000 [ 243.513651][ T28] audit: type=1326 audit(1762473979.283:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb561d8f6c9 code=0x7ffc0000 [ 243.849855][ T5799] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.868862][ T28] audit: type=1326 audit(1762473979.283:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb561d8f6c9 code=0x7ffc0000 [ 243.978299][ T28] audit: type=1326 audit(1762473979.803:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb561d8f6c9 code=0x7ffc0000 [ 244.169561][ T28] audit: type=1326 audit(1762473979.803:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb561d8f6c9 code=0x7ffc0000 [ 244.970891][ T7280] kAFS: No cell specified [ 245.808468][ T7283] fuse: Bad value for 'group_id' [ 245.901681][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 246.026665][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 246.926412][ T7299] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 247.080104][ T28] audit: type=1400 audit(1762473983.563:10): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7288 comm="syz.1.235" [ 247.274282][ T7270] binder_alloc: 7267: binder_alloc_buf size 65520 failed, no address space [ 247.288610][ T7270] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 248.206692][ T7316] loop3: detected capacity change from 0 to 1024 [ 248.268707][ T7315] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 248.305752][ T7315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.238'. [ 248.514583][ T7315] batman_adv: batadv0: Adding interface: virt_wifi0 [ 248.532756][ T7315] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.019218][ T7315] batman_adv: batadv0: Interface activated: virt_wifi0 [ 249.237169][ T2947] hfsplus: b-tree write err: -5, ino 4 [ 250.395318][ T7342] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 250.507232][ T7343] kAFS: No cell specified [ 251.455042][ T5878] IPVS: starting estimator thread 0... [ 251.718622][ T7355] kAFS: No cell specified [ 252.479619][ T7351] IPVS: using max 18 ests per chain, 43200 per kthread [ 253.552113][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 253.918984][ T7378] bridge_slave_1: left allmulticast mode [ 253.924891][ T7378] bridge_slave_1: left promiscuous mode [ 253.934368][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.109518][ T7378] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 254.421632][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 254.556015][ T5878] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 254.626731][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.674249][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.730410][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.769937][ T7372] gtp0: entered promiscuous mode [ 254.777911][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.815139][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 255.321975][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.024152][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.321743][ T5878] usb 4-1: usb_control_msg returned -71 [ 256.327391][ T5878] usbtmc 4-1:16.0: can't read capabilities [ 256.415539][ T5878] usb 4-1: USB disconnect, device number 4 [ 256.643706][ T7401] loop2: detected capacity change from 0 to 4096 [ 256.651667][ T7401] ntfs3: Unknown parameter 'hide_zeFfV!iid0x0000000000000000' [ 256.930521][ T7405] kAFS: No cell specified [ 258.146781][ T7419] loop3: detected capacity change from 0 to 512 [ 258.172134][ T7419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 258.355428][ T7419] EXT4-fs (loop3): 1 truncate cleaned up [ 258.362181][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.352383][ T5878] IPVS: starting estimator thread 0... [ 259.361309][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.479635][ T7436] IPVS: using max 21 ests per chain, 50400 per kthread [ 261.126713][ T7448] loop4: detected capacity change from 0 to 512 [ 261.734789][ T7448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.075623][ T7448] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.770229][ T7464] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 262.795972][ T7464] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 262.808652][ T7464] EXT4-fs (loop4): This should not happen!! Data will be lost [ 262.808652][ T7464] [ 262.819247][ T7464] EXT4-fs (loop4): Total free blocks count 0 [ 262.825500][ T7464] EXT4-fs (loop4): Free/Dirty block details [ 262.832462][ T7464] EXT4-fs (loop4): free_blocks=65280 [ 262.838480][ T7464] EXT4-fs (loop4): dirty_blocks=33 [ 262.851672][ T7464] EXT4-fs (loop4): Block reservation details [ 262.858007][ T7464] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 263.484639][ T7469] loop2: detected capacity change from 0 to 2048 [ 264.136777][ T7469] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 264.155011][ T7469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.804652][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.824828][ T7470] loop3: detected capacity change from 0 to 131072 [ 265.843122][ T7486] kAFS: No cell specified [ 265.966808][ T7470] F2FS-fs (loop3): invalid crc value [ 265.977787][ T7470] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 266.587410][ T7493] (null): rxe_set_mtu: Set mtu to 1024 [ 266.598830][ T7493] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 267.793098][ T7501] loop2: detected capacity change from 0 to 8 [ 272.796464][ T7564] kAFS: No cell specified [ 273.697004][ T7570] loop4: detected capacity change from 0 to 512 [ 273.739888][ T7570] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 273.865019][ T7570] loop4: detected capacity change from 0 to 512 [ 274.830217][ T7570] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.279: inode has both inline data and extents flags [ 274.952734][ T7570] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.279: couldn't read orphan inode 15 (err -117) [ 275.028880][ T7570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.484711][ T7598] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 276.032210][ T28] audit: type=1804 audit(1762474012.053:11): pid=7598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.279" name="/newroot/25/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 276.418895][ T28] audit: type=1800 audit(1762474012.053:12): pid=7598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.279" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 276.430516][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.516111][ T7593] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 277.813418][ T7618] kAFS: No cell specified [ 279.040475][ T7625] loop2: detected capacity change from 0 to 4096 [ 279.047988][ T7625] ntfs3: Unknown parameter 'show' [ 279.056136][ T28] audit: type=1326 audit(1762474015.063:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ec18f6c9 code=0x7ffc0000 [ 279.083658][ T28] audit: type=1326 audit(1762474015.063:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ec18f6c9 code=0x7ffc0000 [ 279.115164][ T28] audit: type=1326 audit(1762474015.063:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fb2ec18f6c9 code=0x7ffc0000 [ 279.166614][ T5799] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.191994][ T28] audit: type=1326 audit(1762474015.063:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ec18f6c9 code=0x7ffc0000 [ 279.407655][ T28] audit: type=1326 audit(1762474015.063:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ec18f6c9 code=0x7ffc0000 [ 279.430099][ T28] audit: type=1326 audit(1762474015.063:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb2ec18f6c9 code=0x7ffc0000 [ 279.613846][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 279.656491][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 279.723489][ T28] audit: type=1326 audit(1762474015.503:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ec18f6c9 code=0x7ffc0000 [ 280.075064][ T28] audit: type=1326 audit(1762474015.503:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ec18f6c9 code=0x7ffc0000 [ 283.390423][ T7667] kAFS: No cell specified [ 283.983028][ T7676] loop3: detected capacity change from 0 to 64 [ 284.215773][ T7680] loop2: detected capacity change from 0 to 128 [ 284.454793][ T7680] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.624804][ T7680] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 285.778517][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.328360][ T7715] loop4: detected capacity change from 0 to 16 [ 288.033813][ T7715] erofs: (device loop4): mounted with root inode @ nid 36. [ 288.074640][ T7714] syz.4.306: attempt to access beyond end of device [ 288.074640][ T7714] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 288.113279][ T7714] syz.4.306: attempt to access beyond end of device [ 288.113279][ T7714] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 290.084484][ T7722] kAFS: No cell specified [ 291.701429][ T7736] binder: 7725:7736 ioctl c0306201 0 returned -14 [ 292.637666][ T7742] sd 0:0:1:0: device reset [ 292.707324][ T7743] loop4: detected capacity change from 0 to 512 [ 292.722982][ T7742] team0: Port device vlan0 removed [ 292.760256][ T7743] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.310: inode has both inline data and extents flags [ 292.774962][ T7743] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.310: couldn't read orphan inode 15 (err -117) [ 292.793444][ T7743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.038162][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.077535][ T7752] loop2: detected capacity change from 0 to 64 [ 294.425172][ T7753] smb3: Unknown parameter 'drd' [ 295.346813][ T7771] kAFS: No cell specified [ 296.834451][ T7777] loop1: detected capacity change from 0 to 512 [ 297.123253][ T7777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.140442][ T7777] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.059628][ T7781] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 298.355543][ T7796] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 298.371075][ T7796] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 298.383710][ T7796] EXT4-fs (loop1): This should not happen!! Data will be lost [ 298.383710][ T7796] [ 298.401631][ T7796] EXT4-fs (loop1): Total free blocks count 0 [ 298.407718][ T7796] EXT4-fs (loop1): Free/Dirty block details [ 298.413809][ T7796] EXT4-fs (loop1): free_blocks=65280 [ 298.419173][ T7796] EXT4-fs (loop1): dirty_blocks=33 [ 298.424434][ T7796] EXT4-fs (loop1): Block reservation details [ 298.430561][ T7796] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 298.858220][ T7781] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.102061][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.826338][ T7781] ubi31: attaching mtd0 [ 299.875741][ T7781] ubi31: scanning is finished [ 299.899033][ T7781] ubi31: empty MTD device detected [ 301.297579][ T7781] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 301.320689][ T7782] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 304.922325][ T7826] kAFS: No cell specified [ 310.102313][ T7856] nbd0: detected capacity change from 0 to 8589934655 [ 311.284369][ T5794] block nbd0: Receive control failed (result -104) [ 312.539080][ T7882] loop2: detected capacity change from 0 to 512 [ 313.138703][ T7882] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 313.635131][ T7887] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 317.385024][ T7924] loop3: detected capacity change from 0 to 512 [ 317.440853][ T7924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 317.466384][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.682689][ T7928] netlink: 20 bytes leftover after parsing attributes in process `syz.4.346'. [ 317.691968][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 318.055470][ T7924] EXT4-fs (loop3): 1 truncate cleaned up [ 318.094531][ T7924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.121072][ T7943] netlink: 'syz.4.350': attribute type 10 has an invalid length. [ 319.252898][ T7943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.350'. [ 319.338535][ T7943] dummy0: entered promiscuous mode [ 319.357131][ T7943] bridge0: port 2(dummy0) entered blocking state [ 319.385864][ T7943] bridge0: port 2(dummy0) entered disabled state [ 319.818429][ T7943] dummy0: entered allmulticast mode [ 323.145808][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.782894][ T7970] (unnamed net_device) (uninitialized): up delay (8) is not a multiple of miimon (2401), value rounded to 0 ms [ 326.783375][ T5794] Bluetooth: Frame is too long (len 18, expected len 4) [ 327.003219][ T7996] loop3: detected capacity change from 0 to 16 [ 327.060744][ T7996] erofs: (device loop3): mounted with root inode @ nid 36. [ 328.299981][ T7996] syz.3.360: attempt to access beyond end of device [ 328.299981][ T7996] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 328.404587][ T8003] loop4: detected capacity change from 0 to 8 [ 332.516147][ T8006] syz.3.360 (8006): drop_caches: 2 [ 333.253252][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 333.812613][ T8017] capability: warning: `syz.3.365' uses 32-bit capabilities (legacy support in use) [ 334.335090][ T8017] sctp: failed to load transform for md5: -2 [ 334.335708][ T8024] sctp: failed to load transform for md5: -2 [ 334.346193][ T8025] sctp: failed to load transform for md5: -2 [ 334.354725][ T8018] sctp: failed to load transform for md5: -2 [ 337.076755][ T8064] netlink: 'syz.3.370': attribute type 10 has an invalid length. [ 337.084927][ T8064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.370'. [ 337.103517][ T8064] batman_adv: batadv0: Adding interface: virt_wifi0 [ 337.110549][ T8064] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.136506][ T8064] batman_adv: batadv0: Interface activated: virt_wifi0 [ 339.534807][ T8078] netlink: 76 bytes leftover after parsing attributes in process `syz.3.374'. [ 341.251204][ T8085] netlink: 'syz.2.375': attribute type 10 has an invalid length. [ 341.343821][ T97] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 30 seconds [ 341.357098][ T97] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 30 seconds [ 341.518010][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.546401][ T8085] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 341.632921][ T8085] syz.2.375 (8085) used greatest stack depth: 20456 bytes left [ 343.783751][ T8107] loop2: detected capacity change from 0 to 512 [ 344.092554][ T8107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.289830][ T8107] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #17: comm syz.2.380: corrupted in-inode xattr: invalid size in ea xattr [ 344.304581][ T8107] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.380: couldn't read orphan inode 17 (err -117) [ 344.317721][ T8107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.690439][ T8110] loop1: detected capacity change from 0 to 40427 [ 344.724553][ T8110] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 344.735686][ T8110] F2FS-fs (loop1): invalid crc value [ 344.744440][ T8110] F2FS-fs (loop1): Found nat_bits in checkpoint [ 344.772066][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.833895][ T8110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 345.261067][ T8118] IPVS: dh: FWM 3 0x00000003 - no destination available [ 345.572597][ T5793] syz-executor: attempt to access beyond end of device [ 345.572597][ T5793] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 345.722100][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 346.679352][ T5793] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 349.243088][ T8138] program syz.4.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.040621][ T8140] loop3: detected capacity change from 0 to 16 [ 350.066016][ T8140] erofs: (device loop3): mounted with root inode @ nid 36. [ 351.167394][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.389'. [ 351.176622][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 353.621165][ T8177] loop1: detected capacity change from 0 to 16 [ 355.910910][ T8177] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 356.844245][ T8185] loop2: detected capacity change from 0 to 8 [ 359.005411][ T8185] SQUASHFS error: lzo decompression failed, data probably corrupt [ 359.013453][ T8185] SQUASHFS error: Failed to read block 0x91: -5 [ 359.019857][ T8185] SQUASHFS error: Unable to read metadata cache entry [8f] [ 359.027076][ T8185] SQUASHFS error: Unable to read inode 0x11f [ 360.220346][ T8195] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 360.231617][ T8195] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 360.395555][ T8202] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 360.452762][ T8202] ubi31: attaching mtd0 [ 360.491845][ T8202] ubi31: scanning is finished [ 360.878458][ T8202] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 361.532119][ T5794] Bluetooth: Frame is too long (len 18, expected len 4) [ 362.376326][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 365.967616][ T8239] sd 0:0:1:0: device reset [ 366.205008][ T8240] program syz.3.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.072255][ T8264] loop4: detected capacity change from 0 to 32768 [ 368.135777][ T8267] qnx4: no qnx4 filesystem (no root dir). [ 368.227140][ T8264] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.411 (8264) [ 368.514054][ T8264] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.524975][ T8264] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 368.533889][ T8264] BTRFS info (device loop4): using free space tree [ 370.579638][ T8291] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 371.453161][ T8264] BTRFS error (device loop4): open_ctree failed: -4 [ 371.863353][ T97] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 60 seconds [ 371.874526][ T97] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 60 seconds [ 372.340313][ T8309] loop3: detected capacity change from 0 to 4096 [ 372.972630][ T8315] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.988773][ T8309] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 373.059883][ T8309] NILFS (loop3): mounting fs with errors [ 374.131416][ T8324] sd 0:0:1:0: device reset [ 379.513933][ T5161] udevd[5161]: worker [7842] /devices/virtual/block/nbd0 is taking a long time [ 379.882665][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.466435][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 382.953300][ T8370] program syz.2.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.508401][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 385.517577][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 388.897127][ T8402] netlink: 96 bytes leftover after parsing attributes in process `syz.1.441'. [ 388.938607][ T8402] bridge0: port 2(team0) entered blocking state [ 388.947606][ T8402] bridge0: port 2(team0) entered disabled state [ 388.963186][ T8402] team0: entered allmulticast mode [ 388.970230][ T8402] team_slave_0: entered allmulticast mode [ 388.976886][ T8402] team_slave_1: entered allmulticast mode [ 389.020852][ T8402] team0: entered promiscuous mode [ 389.026165][ T8402] team_slave_0: entered promiscuous mode [ 389.037642][ T8402] team_slave_1: entered promiscuous mode [ 389.049284][ T8402] bridge0: port 2(team0) entered blocking state [ 389.056259][ T8402] bridge0: port 2(team0) entered forwarding state [ 389.089345][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 389.118364][ T8407] team0: left allmulticast mode [ 389.130179][ T8407] team_slave_0: left allmulticast mode [ 389.240874][ T8407] team_slave_1: left allmulticast mode [ 389.246759][ T8407] team0: left promiscuous mode [ 389.251928][ T8407] team_slave_0: left promiscuous mode [ 389.257734][ T8407] team_slave_1: left promiscuous mode [ 389.264315][ T8407] bridge0: port 2(team0) entered disabled state [ 389.285376][ T8407] bridge_slave_0: left allmulticast mode [ 389.293651][ T8407] bridge_slave_0: left promiscuous mode [ 389.302390][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.737893][ T8415] loop1: detected capacity change from 0 to 16 [ 389.755013][ T8415] erofs: (device loop1): mounted with root inode @ nid 36. [ 389.831307][ T8415] syz.1.444: attempt to access beyond end of device [ 389.831307][ T8415] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 393.471498][ T8417] syz.1.444 (8417): drop_caches: 2 [ 396.205986][ T8440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.638642][ T8440] batadv_slave_0: entered promiscuous mode [ 399.903339][ T8471] sd 0:0:1:0: device reset [ 400.489134][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 401.034143][ T8480] block nbd4: shutting down sockets [ 401.950642][ T97] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 90 seconds [ 401.961626][ T97] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 90 seconds [ 402.105074][ T8489] loop1: detected capacity change from 0 to 512 [ 402.514217][ T8494] tipc: Started in network mode [ 402.519426][ T8494] tipc: Node identity 4, cluster identity 4711 [ 402.525831][ T8494] tipc: Node number set to 4 [ 403.593695][ T8501] loop1: detected capacity change from 0 to 4096 [ 405.230924][ T8503] loop3: detected capacity change from 0 to 32768 [ 405.278063][ T8503] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.460 (8503) [ 405.998956][ T8503] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 406.011867][ T8503] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 406.020936][ T8503] BTRFS info (device loop3): setting nodatacow, compression disabled [ 406.029438][ T8503] BTRFS info (device loop3): enabling ssd optimizations [ 406.036624][ T8503] BTRFS info (device loop3): setting datacow [ 406.042863][ T8503] BTRFS info (device loop3): doing ref verification [ 406.049719][ T8503] BTRFS info (device loop3): force clearing of disk cache [ 406.057055][ T8503] BTRFS info (device loop3): turning off barriers [ 406.063791][ T8503] BTRFS info (device loop3): using spread ssd allocation scheme [ 406.071849][ T8503] BTRFS info (device loop3): using free space tree [ 406.126288][ T8501] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 406.138151][ T8509] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 406.170522][ T8501] NILFS (loop1): mounting fs with errors [ 406.726343][ T8503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 406.727065][ T8503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 406.739539][ T8503] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 406.749539][ T8503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 406.758910][ T8503] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 406.768976][ T8503] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 406.779595][ T8503] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 406.789946][ T8503] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 406.847971][ T8503] BTRFS error (device loop3): open_ctree failed: -12 [ 407.853523][ T7862] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (7862) [ 409.305975][ T8543] sd 0:0:1:0: device reset [ 410.122328][ T8551] mmap: syz.3.468 (8551) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 411.210997][ T8559] loop3: detected capacity change from 0 to 512 [ 411.244520][ T8559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 411.545758][ T8559] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #17: comm syz.3.469: corrupted in-inode xattr: invalid size in ea xattr [ 411.563767][ T8559] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.469: couldn't read orphan inode 17 (err -117) [ 411.596044][ T8559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.738746][ T8561] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 411.890986][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.969664][ T8605] fuse: Unknown parameter '0x00000000000000030000000000000000000000000000000000000000' [ 419.076169][ T8605] netlink: 72 bytes leftover after parsing attributes in process `syz.4.485'. [ 419.090883][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 420.371378][ T8619] loop1: detected capacity change from 0 to 32768 [ 420.449967][ T8619] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 420.461289][ T8619] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 420.470211][ T8619] BTRFS info (device loop1): setting nodatacow, compression disabled [ 420.478367][ T8619] BTRFS info (device loop1): enabling ssd optimizations [ 420.485487][ T8619] BTRFS info (device loop1): setting datacow [ 420.491569][ T8619] BTRFS info (device loop1): doing ref verification [ 420.498282][ T8619] BTRFS info (device loop1): force clearing of disk cache [ 420.505637][ T8619] BTRFS info (device loop1): turning off barriers [ 420.512225][ T8619] BTRFS info (device loop1): using spread ssd allocation scheme [ 420.520052][ T8619] BTRFS info (device loop1): using free space tree [ 420.800710][ T8619] BTRFS info (device loop1): auto enabling async discard [ 420.815600][ T8619] BTRFS info (device loop1): rebuilding free space tree [ 422.344152][ T8642] loop2: detected capacity change from 0 to 32768 [ 422.485884][ T8642] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.497 (8642) [ 422.560048][ T5793] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 422.737646][ T8644] netlink: 'syz.4.496': attribute type 10 has an invalid length. [ 423.576298][ T8052] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (8052) [ 424.075280][ T8644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.147964][ T8644] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 424.189507][ T8648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 424.215775][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 424.563231][ T8656] program syz.1.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.220843][ T8663] loop1: detected capacity change from 0 to 4096 [ 426.342962][ T8665] loop3: detected capacity change from 0 to 512 [ 426.380732][ T8665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 426.447558][ T8665] EXT4-fs (loop3): 1 truncate cleaned up [ 426.458583][ T8665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.701993][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.658076][ T8694] loop2: detected capacity change from 0 to 4096 [ 432.392820][ T8522] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 120 seconds [ 432.403813][ T8522] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 120 seconds [ 432.440655][ T8697] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.454038][ T8694] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 432.472164][ T8694] NILFS (loop2): mounting fs with errors [ 432.605431][ T8698] program syz.1.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.441406][ T8725] loop3: detected capacity change from 0 to 128 [ 437.449542][ T8725] zonefs (loop3) ERROR: Not a zoned block device [ 437.531275][ T7883] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 437.559035][ T8727] loop1: detected capacity change from 0 to 2048 [ 437.720559][ T8727] UDF-fs: bad mount option "@" or missing value [ 440.367225][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.854042][ T8754] program syz.3.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.061227][ T8761] random: crng reseeded on system resumption [ 444.749411][ T8781] netlink: 'syz.2.519': attribute type 1 has an invalid length. [ 444.757789][ T8781] netlink: 224 bytes leftover after parsing attributes in process `syz.2.519'. [ 445.599275][ T8777] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 446.100830][ T8786] loop2: detected capacity change from 0 to 1024 [ 446.239922][ T8788] loop4: detected capacity change from 0 to 8 [ 446.267262][ T8788] SQUASHFS error: lzo decompression failed, data probably corrupt [ 446.275542][ T8788] SQUASHFS error: Failed to read block 0x91: -5 [ 446.282018][ T8788] SQUASHFS error: Unable to read metadata cache entry [8f] [ 446.289400][ T8788] SQUASHFS error: Unable to read inode 0x11f [ 448.037964][ T8052] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 448.353250][ T8787] loop4: detected capacity change from 0 to 128 [ 448.582029][ T8787] syz.4.522: attempt to access beyond end of device [ 448.582029][ T8787] loop4: rw=1, sector=138, nr_sectors = 4 limit=128 [ 456.545852][ T8838] netlink: 348 bytes leftover after parsing attributes in process `syz.1.532'. [ 456.555428][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 457.967917][ T8849] program syz.3.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.268491][ T8856] loop4: detected capacity change from 0 to 128 [ 459.297557][ T8856] zonefs (loop4) ERROR: Not a zoned block device [ 460.457222][ T7883] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 461.665109][ T8868] loop3: detected capacity change from 0 to 4096 [ 462.744490][ T8522] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 150 seconds [ 462.757211][ T8522] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 150 seconds [ 464.428805][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 468.434817][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 468.467085][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 468.921328][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 476.611476][ T8970] loop2: detected capacity change from 0 to 16 [ 476.828727][ T8968] loop1: detected capacity change from 0 to 40427 [ 476.859843][ T8970] erofs: (device loop2): mounted with root inode @ nid 36. [ 476.873036][ T8968] F2FS-fs (loop1): invalid crc value [ 476.897017][ T8970] syz.2.565: attempt to access beyond end of device [ 476.897017][ T8970] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 476.924388][ T8968] F2FS-fs (loop1): Found nat_bits in checkpoint [ 476.955157][ T8968] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 477.855587][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 478.291602][ T5793] syz-executor: attempt to access beyond end of device [ 478.291602][ T5793] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 479.002868][ T8984] syz.2.565 (8984): drop_caches: 2 [ 479.231963][ T5793] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 485.453899][ T9021] loop1: detected capacity change from 0 to 512 [ 485.484321][ T9021] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 485.904773][ T9023] loop4: detected capacity change from 0 to 40427 [ 485.962135][ T9021] EXT4-fs (loop1): 1 truncate cleaned up [ 485.994521][ T9023] F2FS-fs (loop4): invalid crc value [ 486.064983][ T9021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.220870][ T9023] F2FS-fs (loop4): Found nat_bits in checkpoint [ 486.275610][ T9023] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 487.461579][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.578'. [ 487.760702][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.890282][ T6556] syz-executor: attempt to access beyond end of device [ 487.890282][ T6556] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 487.958065][ T6556] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 488.846538][ T9049] loop2: detected capacity change from 0 to 512 [ 489.500070][ T9049] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 489.500444][ T9049] EXT4-fs (loop2): orphan cleanup on readonly fs [ 489.504613][ T9049] __quota_error: 40 callbacks suppressed [ 489.504629][ T9049] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 489.504947][ T9049] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 489.504977][ T9049] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.581: Failed to acquire dquot type 1 [ 489.520425][ T9049] EXT4-fs (loop2): Remounting filesystem read-only [ 489.520524][ T9049] EXT4-fs (loop2): 1 truncate cleaned up [ 489.566230][ T9049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.776004][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.695565][ T9069] loop2: detected capacity change from 0 to 8192 [ 492.033862][ T9069] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 492.047759][ T9069] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 492.058088][ T9069] REISERFS (device loop2): using ordered data mode [ 492.064936][ T9069] reiserfs: using flush barriers [ 493.690625][ T8522] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 180 seconds [ 493.704038][ T8522] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 180 seconds [ 493.758187][ T9069] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 493.920648][ T9069] REISERFS (device loop2): checking transaction log (loop2) [ 493.976252][ T9072] loop4: detected capacity change from 0 to 16 [ 494.013452][ T9072] erofs: (device loop4): mounted with root inode @ nid 36. [ 494.022257][ T9069] REISERFS (device loop2): Using r5 hash to sort names [ 494.058253][ T9072] syz.4.579: attempt to access beyond end of device [ 494.058253][ T9072] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 494.091651][ T9069] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 494.806083][ T9074] syz.4.579 (9074): drop_caches: 2 [ 496.025570][ T9080] loop3: detected capacity change from 0 to 40427 [ 496.057878][ T9080] F2FS-fs (loop3): invalid crc value [ 496.291758][ T9080] F2FS-fs (loop3): Found nat_bits in checkpoint [ 496.434007][ T9080] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 498.137834][ T9096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.590'. [ 498.428116][ T9098] loop1: detected capacity change from 0 to 64 [ 498.484855][ T9098] hfs: bad catalog entry type 65535 [ 498.670554][ T5801] syz-executor: attempt to access beyond end of device [ 498.670554][ T5801] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 499.253354][ T9107] netlink: 100 bytes leftover after parsing attributes in process `syz.4.593'. [ 499.270672][ T9107] tipc: Started in network mode [ 499.275698][ T9107] tipc: Node identity ac14142f, cluster identity 4711 [ 499.283643][ T9107] tipc: New replicast peer: 0.0.0.0 [ 499.292764][ T9107] tipc: Enabled bearer , priority 10 [ 499.300737][ T9107] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 499.965040][ T5801] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 500.405528][ T7028] tipc: Node number set to 2886997039 [ 501.784073][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.495733][ T9123] loop2: detected capacity change from 0 to 16 [ 502.522908][ T9123] erofs: (device loop2): mounted with root inode @ nid 36. [ 502.545247][ T9123] syz.2.597: attempt to access beyond end of device [ 502.545247][ T9123] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 504.243634][ T9132] syz.2.597 (9132): drop_caches: 2 [ 509.409957][ T9142] Bluetooth: hci2: command 0x0406 tx timeout [ 510.784734][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 516.022757][ T9193] loop3: detected capacity change from 0 to 1024 [ 516.255529][ T9193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.577519][ T9173] syz.2.605: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 516.596793][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.604719][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.625966][ T9173] CPU: 0 PID: 9173 Comm: syz.2.605 Not tainted syzkaller #0 [ 516.633319][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.643409][ T9173] Call Trace: [ 516.646706][ T9173] [ 516.649659][ T9173] dump_stack_lvl+0x16c/0x230 [ 516.654365][ T9173] ? show_regs_print_info+0x20/0x20 [ 516.659823][ T9173] ? load_image+0x3b0/0x3b0 [ 516.664360][ T9173] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 516.670916][ T9173] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 516.677451][ T9173] warn_alloc+0x210/0x300 [ 516.681822][ T9173] ? zone_watermark_ok_safe+0x230/0x230 [ 516.687409][ T9173] ? _raw_spin_unlock+0x28/0x40 [ 516.692284][ T9173] ? xsk_init_queue+0xb0/0x110 [ 516.697076][ T9173] __vmalloc_node_range+0x662/0x1320 [ 516.702395][ T9173] ? free_vm_area+0x50/0x50 [ 516.706912][ T9173] vmalloc_user+0x74/0x80 [ 516.711240][ T9173] ? xskq_create+0xbf/0x170 [ 516.715731][ T9173] xskq_create+0xbf/0x170 [ 516.720053][ T9173] xsk_init_queue+0xb0/0x110 [ 516.724635][ T9173] xsk_setsockopt+0x4db/0x6f0 [ 516.729318][ T9173] ? xsk_poll+0x670/0x670 [ 516.733638][ T9173] ? __fget_files+0x28/0x4d0 [ 516.738217][ T9173] ? aa_sock_opt_perm+0x74/0x100 [ 516.743151][ T9173] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 516.748772][ T9173] ? security_socket_setsockopt+0x7e/0xa0 [ 516.754747][ T9173] ? xsk_poll+0x670/0x670 [ 516.759070][ T9173] do_sock_setsockopt+0x175/0x1a0 [ 516.764092][ T9173] ? __fdget+0x180/0x210 [ 516.768332][ T9173] __x64_sys_setsockopt+0x184/0x200 [ 516.773531][ T9173] do_syscall_64+0x55/0xb0 [ 516.777941][ T9173] ? clear_bhb_loop+0x40/0x90 [ 516.782613][ T9173] ? clear_bhb_loop+0x40/0x90 [ 516.787280][ T9173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.793160][ T9173] RIP: 0033:0x7fb2ec18f6c9 [ 516.797574][ T9173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.817269][ T9173] RSP: 002b:00007fb2ecf57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 516.825784][ T9173] RAX: ffffffffffffffda RBX: 00007fb2ec3e5fa0 RCX: 00007fb2ec18f6c9 [ 516.834157][ T9173] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 516.842232][ T9173] RBP: 00007fb2ec211f91 R08: 0000000000000004 R09: 0000000000000000 [ 516.850198][ T9173] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 516.858246][ T9173] R13: 00007fb2ec3e6038 R14: 00007fb2ec3e5fa0 R15: 00007ffd5d01f508 [ 516.866223][ T9173] [ 516.869339][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.607479][ T9173] Mem-Info: [ 517.610791][ T9173] active_anon:37369 inactive_anon:0 isolated_anon:0 [ 517.610791][ T9173] active_file:13176 inactive_file:40689 isolated_file:0 [ 517.610791][ T9173] unevictable:768 dirty:326 writeback:0 [ 517.610791][ T9173] slab_reclaimable:7158 slab_unreclaimable:94636 [ 517.610791][ T9173] mapped:25695 shmem:30975 pagetables:749 [ 517.610791][ T9173] sec_pagetables:0 bounce:0 [ 517.610791][ T9173] kernel_misc_reclaimable:0 [ 517.610791][ T9173] free:1300530 free_pcp:12595 free_cma:0 [ 517.657250][ T9173] Node 0 active_anon:150076kB inactive_anon:0kB active_file:52704kB inactive_file:162552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103380kB dirty:1304kB writeback:0kB shmem:122964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11892kB pagetables:2996kB sec_pagetables:0kB all_unreclaimable? no [ 517.793780][ T9173] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 517.823990][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.841151][ T9173] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.868492][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.747984][ T9173] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 520.791946][ T9173] Node 0 DMA32 free:1291388kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:151896kB inactive_anon:0kB active_file:52704kB inactive_file:161240kB unevictable:1536kB writepending:1332kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:30240kB local_pcp:8752kB free_cma:0kB [ 520.845416][ T9173] lowmem_reserve[]: 0 0 1 1 1 [ 520.851867][ T9173] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 520.880033][ T9173] lowmem_reserve[]: 0 0 0 0 0 [ 520.884918][ T9173] Node 1 Normal free:3900832kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17152kB local_pcp:9120kB free_cma:0kB [ 521.350456][ T9173] lowmem_reserve[]: 0 0 0 0 0 [ 521.355860][ T9173] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 521.414471][ T9173] Node 0 DMA32: 108*4kB (M) 448*8kB (ME) 258*16kB (UME) 154*32kB (ME) 125*64kB (UME) 75*128kB (ME) 36*256kB (ME) 33*512kB (UME) 17*1024kB (UME) 10*2048kB (UM) 293*4096kB (M) = 1294800kB [ 521.517462][ T9173] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 521.572044][ T9173] Node 1 Normal: 222*4kB (UM) 57*8kB (UME) 36*16kB (UME) 205*32kB (UME) 54*64kB (UE) 8*128kB (UM) 1*256kB (E) 1*512kB (M) 0*1024kB 0*2048kB 949*4096kB (UM) = 3900832kB [ 521.599121][ T9173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.608908][ T9173] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 521.618518][ T9173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.913815][ T9173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 522.140503][ T9173] 83691 total pagecache pages [ 522.145345][ T9173] 0 pages in swap cache [ 522.157825][ T9173] Free swap = 124720kB [ 522.181854][ T9173] Total swap = 124996kB [ 522.192143][ T9225] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 522.201877][ T9173] 2097051 pages RAM [ 522.448596][ T9173] 0 pages HighMem/MovableOnly [ 522.538929][ T9173] 416137 pages reserved [ 522.543743][ T9173] 0 pages cma reserved [ 525.254010][ T97] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 210 seconds [ 525.290222][ T97] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 210 seconds [ 526.887382][ T9246] syz.1.620 uses obsolete (PF_INET,SOCK_PACKET) [ 528.021412][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 528.073236][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'. [ 532.454615][ T9142] Bluetooth: hci2: command 0x0406 tx timeout [ 535.001119][ T28] audit: type=1326 audit(1762474271.543:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9302 comm="syz.1.632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb561d8f6c9 code=0x0 [ 535.869424][ T9306] block device autoloading is deprecated and will be removed. [ 536.449874][ T9134] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 536.919364][ T9134] usb 4-1: Using ep0 maxpacket: 8 [ 536.944050][ T9134] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 536.959419][ T9134] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.991627][ T9134] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 537.000615][ T9134] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.025394][ T9134] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 537.032768][ T9134] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.052498][ T9134] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 537.060219][ T9134] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.074929][ T9134] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 537.082405][ T9134] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.111429][ T9134] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 537.118819][ T9134] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.134254][ T9134] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 537.141663][ T9134] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.156567][ T9134] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 537.165896][ T9134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=204 [ 537.194282][ T9134] usb 4-1: SerialNumber: syz [ 537.217720][ T9134] usb 4-1: config 0 descriptor?? [ 539.379935][ T9134] usb 4-1: USB disconnect, device number 5 [ 543.237876][ T9359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.639'. [ 543.247125][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 545.994265][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 546.801537][ T9381] loop3: detected capacity change from 0 to 64 [ 546.818747][ T9381] hfs: bad catalog entry type 65535 [ 546.871476][ T9375] vivid-000: kernel_thread() failed [ 549.706057][ T9405] loop2: detected capacity change from 0 to 16 [ 549.733909][ T9405] erofs: (device loop2): mounted with root inode @ nid 36. [ 556.942555][ T5161] udevd[5161]: worker [7842] /devices/virtual/block/nbd0 timeout; kill it [ 556.988767][ T5161] udevd[5161]: seq 11903 '/devices/virtual/block/nbd0' killed [ 557.001785][ T8522] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 240 seconds [ 557.013872][ T8522] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 240 seconds [ 563.236407][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.645480][ T9469] loop4: detected capacity change from 0 to 164 [ 565.273489][ T9469] Unable to read rock-ridge attributes [ 565.328286][ T9466] loop2: detected capacity change from 0 to 128 [ 565.338674][ T9466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.489466][ T9466] EXT4-fs (loop2): Test dummy encryption mode enabled [ 566.740618][ T9466] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.964173][ T9466] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 570.131191][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.917620][ T9539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 573.972011][ T9551] tmpfs: Bad value for 'mpol' [ 574.428619][ T9142] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 574.699061][ T9557] tipc: Can't bind to reserved service type 0 [ 577.392553][ T9579] lo speed is unknown, defaulting to 1000 [ 577.398921][ T9579] lo speed is unknown, defaulting to 1000 [ 577.414406][ T9579] lo speed is unknown, defaulting to 1000 [ 577.460260][ T9579] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 577.539784][ T9579] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 577.855698][ T9579] lo speed is unknown, defaulting to 1000 [ 577.856535][ T9579] lo speed is unknown, defaulting to 1000 [ 577.857283][ T9579] lo speed is unknown, defaulting to 1000 [ 577.857997][ T9579] lo speed is unknown, defaulting to 1000 [ 580.290176][ T9603] tmpfs: Bad value for 'mpol' [ 582.401205][ T9611] loop2: detected capacity change from 0 to 40427 [ 582.718982][ T9611] F2FS-fs (loop2): invalid crc value [ 583.337930][ T9611] F2FS-fs (loop2): Found nat_bits in checkpoint [ 583.418542][ T9611] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 584.088023][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.694'. [ 584.412841][ T5789] syz-executor: attempt to access beyond end of device [ 584.412841][ T5789] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 584.890123][ T5789] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 584.986893][ T9633] loop1: detected capacity change from 0 to 164 [ 585.056033][ T9633] Unable to read rock-ridge attributes [ 587.823710][ T8522] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 270 seconds [ 587.839405][ T8522] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 270 seconds [ 601.304930][ T9134] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 601.626317][ T9734] loop1: detected capacity change from 0 to 512 [ 601.633724][ T9734] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 602.119242][ T9134] usb 5-1: Using ep0 maxpacket: 8 [ 602.161449][ T9134] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 602.254406][ T9134] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.325868][ T9134] usb 5-1: unable to read config index 1 descriptor/all [ 607.000658][ T9134] usb 5-1: can't read configurations, error -71 [ 616.802239][ T9779] loop3: detected capacity change from 0 to 8 [ 616.853497][ T9779] squashfs: Unknown parameter '' [ 621.049272][ T7883] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 621.792620][ T97] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 300 seconds [ 621.804024][ T97] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 300 seconds [ 624.702271][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.076712][ T9830] loop2: detected capacity change from 0 to 2048 [ 627.168786][ T9837] veth0_to_team: entered promiscuous mode [ 627.174716][ T9837] veth0_to_team: entered allmulticast mode [ 628.000604][ T9830] UDF-fs: bad mount option "obj_role=g_yk˿D-﷌zRapQc^f`̰ϯIT'+7PX:cq." or missing value [ 630.571262][ T9856] lo: entered allmulticast mode [ 634.291389][ T9888] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 634.319734][ T9142] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 634.621395][ T9891] loop4: detected capacity change from 0 to 512 [ 634.628990][ T9891] EXT4-fs: inline encryption not supported [ 634.634939][ T9891] EXT4-fs: Ignoring removed mblk_io_submit option [ 634.641533][ T9891] EXT4-fs: Ignoring removed bh option [ 634.852476][ T9891] EXT4-fs (loop4): Test dummy encryption mode enabled [ 634.859420][ T9891] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 634.895936][ T9891] EXT4-fs (loop4): 1 truncate cleaned up [ 634.906109][ T9891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.000156][ T9895] loop2: detected capacity change from 0 to 256 [ 635.008493][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 635.024867][ T9895] FAT-fs (loop2): Unrecognized mount option "showexec" or missing value [ 635.215455][ T6556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.314663][ T9897] loop1: detected capacity change from 0 to 16 [ 635.413485][ T9897] erofs: (device loop1): mounted with root inode @ nid 36. [ 637.764075][ T9926] loop4: detected capacity change from 0 to 8 [ 637.780457][ T9926] squashfs: Unknown parameter '' [ 637.834209][ T7883] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 637.844912][ T9930] loop2: detected capacity change from 0 to 512 [ 637.860243][ T9930] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 638.947957][ T9926] loop4: detected capacity change from 0 to 2048 [ 638.962635][ T7883] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 638.977656][ T7883] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.988292][ T7883] Buffer I/O error on dev loop4, logical block 0, async page read [ 641.188127][ T9926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 641.713035][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.763'. [ 650.523916][T10012] loop1: detected capacity change from 0 to 1024 [ 650.569053][T10012] hfsplus: bad catalog folder entry [ 652.215649][ T97] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 330 seconds [ 652.227856][ T97] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 330 seconds [ 658.711155][T10068] loop4: detected capacity change from 0 to 128 [ 672.583700][T10186] loop4: detected capacity change from 0 to 128 [ 672.696101][T10186] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 672.804948][T10186] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 676.607872][ T6556] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.493910][ T9134] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 678.703057][ T9134] usb 5-1: Using ep0 maxpacket: 8 [ 678.720106][ T9134] usb 5-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 678.759529][ T9134] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 678.809855][ T9134] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 679.033433][T10241] loop2: detected capacity change from 0 to 128 [ 680.038910][ T9134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.320548][ T9134] usb 5-1: USB disconnect, device number 4 [ 680.370983][T10246] loop1: detected capacity change from 0 to 2048 [ 680.494218][T10246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 681.327646][T10254] loop2: detected capacity change from 0 to 512 [ 681.511580][T10254] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 681.521058][T10254] EXT4-fs (loop2): orphan cleanup on readonly fs [ 681.537013][T10254] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 681.548194][T10254] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 681.557768][T10254] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.831: Failed to acquire dquot type 1 [ 681.573492][T10254] EXT4-fs (loop2): Remounting filesystem read-only [ 681.580289][T10254] EXT4-fs (loop2): 1 truncate cleaned up [ 681.597833][T10254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 681.915521][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.987727][T10257] loop3: detected capacity change from 0 to 32768 [ 683.258060][T10257] [ 683.258060][T10257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 683.258060][T10257] [ 683.308887][ T97] block nbd0: Possible stuck request ffff888021ae0000: control (read@0,1024B). Runtime 360 seconds [ 683.322093][ T97] block nbd0: Possible stuck request ffff888021ae0200: control (read@1024,3072B). Runtime 360 seconds [ 683.406699][T10257] ERROR: (device loop3): diWrite: ixpxd invalid [ 683.406699][T10257] [ 683.432575][T10257] ERROR: (device loop3): txCommit: [ 683.432575][T10257] [ 683.764439][T10261] loop1: detected capacity change from 0 to 16 [ 685.224235][ T5801] [ 685.224235][ T5801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 685.224235][ T5801] [ 685.239252][ T5801] [ 685.239252][ T5801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 685.239252][ T5801] [ 685.250434][T10261] erofs: (device loop1): mounted with root inode @ nid 36. [ 686.241914][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.492165][T10293] loop3: detected capacity change from 0 to 1024 [ 689.216867][T10290] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 689.838724][T10297] kernel read not supported for file /file0 (pid: 10297 comm: syz.3.842) [ 689.939268][ T28] audit: type=1800 audit(1762474426.383:62): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.842" name="file0" dev="mqueue" ino=19446 res=0 errno=0 [ 690.814730][T10301] loop1: detected capacity change from 0 to 512 [ 691.302543][T10301] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 691.314812][T10301] EXT4-fs (loop1): orphan cleanup on readonly fs [ 691.332343][T10301] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 691.343153][T10301] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 691.352825][T10301] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.843: Failed to acquire dquot type 1 [ 691.364903][T10301] EXT4-fs (loop1): Remounting filesystem read-only [ 691.371604][T10301] EXT4-fs (loop1): 1 truncate cleaned up [ 691.382167][T10301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.913727][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.802012][T10355] loop3: detected capacity change from 0 to 64 [ 698.926123][T10356] loop2: detected capacity change from 0 to 512 [ 699.509976][T10356] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 699.518429][T10356] EXT4-fs (loop2): orphan cleanup on readonly fs [ 699.544862][T10356] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 699.555608][T10356] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 699.565332][T10356] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.852: Failed to acquire dquot type 1 [ 699.577801][T10356] EXT4-fs (loop2): Remounting filesystem read-only [ 699.584651][T10356] EXT4-fs (loop2): 1 truncate cleaned up [ 699.600816][T10356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 699.928075][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.569453][T10377] loop4: detected capacity change from 0 to 16 [ 701.599441][T10377] erofs: (device loop4): mounted with root inode @ nid 36. [ 702.739426][ T29] INFO: task udevd:7842 blocked for more than 145 seconds. [ 702.746688][ T29] Not tainted syzkaller #0 [ 703.097211][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 703.338572][ T29] task:udevd state:D stack:25712 pid:7842 ppid:5161 flags:0x00004006 [ 703.572369][ T29] Call Trace: [ 703.633931][ T29] [ 703.697986][ T29] __schedule+0x14d2/0x44d0 [ 703.800641][ T29] ? asan.module_dtor+0x20/0x20 [ 703.926816][ T29] ? mark_lock+0x94/0x320 [ 704.012491][ T29] ? lock_chain_count+0x20/0x20 [ 704.141865][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 704.247786][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 704.467402][ T29] schedule+0xbd/0x170 [ 704.566200][ T29] io_schedule+0x80/0xd0 [ 704.570876][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 704.579405][ T29] ? folio_wait_bit+0x30/0x30 [ 704.584239][ T29] ? _compound_head+0x120/0x120 [ 704.589261][ T29] ? filemap_add_folio+0x192/0x3c0 [ 704.594553][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 704.600127][ T29] ? blkdev_writepage+0x30/0x30 [ 704.605055][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 704.610439][ T29] ? blkdev_writepage+0x30/0x30 [ 704.615339][ T29] read_part_sector+0xd2/0x350 [ 704.620311][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 704.625722][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 704.631108][ T29] ? put_partition+0x350/0x350 [ 704.635901][ T29] ? alloc_pages+0x4dc/0x740 [ 704.640628][ T29] bdev_disk_changed+0x73a/0x1410 [ 704.645823][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 704.651273][ T29] ? iput+0x347/0x920 [ 704.655402][ T29] blkdev_get_whole+0x30d/0x390 [ 704.660383][ T29] blkdev_get_by_dev+0x279/0x600 [ 704.665348][ T29] blkdev_open+0x152/0x360 [ 704.669886][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 704.674732][ T29] do_dentry_open+0x8c6/0x1500 [ 704.679591][ T29] path_openat+0x274b/0x3190 [ 704.684224][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 704.689350][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.695449][ T29] ? verify_lock_unused+0x140/0x140 [ 704.725972][ T29] ? do_filp_open+0x3d0/0x3d0 [ 704.792683][ T29] ? __virt_addr_valid+0x18c/0x540 [ 704.811123][ T29] do_filp_open+0x1c5/0x3d0 [ 704.835071][ T29] ? vfs_tmpfile+0x490/0x490 [ 704.841859][ T29] ? _raw_spin_unlock+0x28/0x40 [ 704.847201][ T29] ? alloc_fd+0x58f/0x630 [ 704.881409][ T29] do_sys_openat2+0x12c/0x1c0 [ 705.007358][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 705.038092][ T29] ? do_sys_open+0xe0/0xe0 [ 705.062196][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 705.152477][ T29] ? lock_chain_count+0x20/0x20 [ 705.157745][ T29] __x64_sys_openat+0x139/0x160 [ 705.164158][ T29] do_syscall_64+0x55/0xb0 [ 705.168795][ T29] ? clear_bhb_loop+0x40/0x90 [ 705.178620][ T29] ? clear_bhb_loop+0x40/0x90 [ 705.184150][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.192743][ T29] RIP: 0033:0x7f937cfdc407 [ 705.200171][ T29] RSP: 002b:00007ffdd00c2970 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 705.208882][ T29] RAX: ffffffffffffffda RBX: 00007f937cf50880 RCX: 00007f937cfdc407 [ 705.220533][ T29] RDX: 00000000000a0800 RSI: 000055604f28c2d0 RDI: ffffffffffffff9c [ 705.234347][ T29] RBP: 000055604f28b910 R08: 0000000000000000 R09: 0000000000000000 [ 705.242939][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055604f2bc750 [ 705.259487][ T29] R13: 000055604f2a3410 R14: 0000000000000000 R15: 000055604f2bc750 [ 705.272699][ T29] [ 705.275926][ T29] [ 705.275926][ T29] Showing all locks held in the system: [ 705.286795][ T29] 2 locks held by kworker/1:1/27: [ 705.294820][ T29] 1 lock held by khungtaskd/29: [ 705.302601][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 705.316303][ T29] 3 locks held by kworker/1:3/1195: [ 705.324386][ T29] 2 locks held by getty/5554: [ 705.332094][ T29] #0: ffff8880315b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 705.343677][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 705.357800][ T29] 3 locks held by kworker/1:7/7028: [ 705.376321][ T29] #0: ffff8880b8e3c218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 705.416194][ T29] #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x20ee/0x44d0 [ 705.430379][ T29] #2: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: gc_worker+0x269/0x14b0 [ 705.442676][ T29] 1 lock held by udevd/7842: [ 705.447396][ T29] #0: ffff8880219ca4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 705.474244][ T29] 1 lock held by syz.4.859/10375: [ 705.479811][ T29] #0: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 705.506500][ T29] 3 locks held by kvm-nx-lpage-re/10386: [ 705.515477][ T29] #0: ffffffff8cd59848 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x26/0xe0 [ 705.529200][ T29] #1: ffffffff8cbcb1d0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x11/0x30 [ 705.539483][ T29] #2: ffffffff8cd59a30 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x30/0xe0 [ 705.558843][ T29] [ 705.574849][ T29] ============================================= [ 705.574849][ T29] [ 705.583607][ T29] NMI backtrace for cpu 1 [ 705.587955][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 705.595173][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 705.605244][ T29] Call Trace: [ 705.608519][ T29] [ 705.611491][ T29] dump_stack_lvl+0x16c/0x230 [ 705.616191][ T29] ? preempt_count_add+0x91/0x1a0 [ 705.621230][ T29] ? show_regs_print_info+0x20/0x20 [ 705.626431][ T29] ? load_image+0x3b0/0x3b0 [ 705.630937][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 705.635875][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 705.642021][ T29] ? _printk+0xd0/0x110 [ 705.646164][ T29] ? load_image+0x3b0/0x3b0 [ 705.650669][ T29] ? load_image+0x3b0/0x3b0 [ 705.655164][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 705.661232][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 705.667221][ T29] watchdog+0xf41/0xf80 [ 705.671369][ T29] ? watchdog+0x1e1/0xf80 [ 705.675693][ T29] kthread+0x2fa/0x390 [ 705.679835][ T29] ? hungtask_pm_notify+0x90/0x90 [ 705.684852][ T29] ? kthread_blkcg+0xd0/0xd0 [ 705.689432][ T29] ret_from_fork+0x48/0x80 [ 705.693862][ T29] ? kthread_blkcg+0xd0/0xd0 [ 705.698466][ T29] ret_from_fork_asm+0x11/0x20 [ 705.703249][ T29] [ 705.708455][ T29] Sending NMI from CPU 1 to CPUs 0: [ 705.714030][ C0] NMI backtrace for cpu 0 [ 705.714041][ C0] CPU: 0 PID: 5150 Comm: klogd Not tainted syzkaller #0 [ 705.714055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 705.714064][ C0] RIP: 0010:check_stack_object+0x10/0xa0 [ 705.714090][ C0] Code: ff e9 e5 fc ff ff e8 7f a9 9b ff e9 c1 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 41 57 41 56 53 49 89 f6 48 89 fb e8 60 a9 9b ff <65> 4c 8b 3d 88 d1 19 7e 49 83 c7 20 4c 89 f8 48 c1 e8 03 48 b9 00 [ 705.714103][ C0] RSP: 0018:ffffc900032c7a18 EFLAGS: 00000293 [ 705.714116][ C0] RAX: ffffffff81e9e630 RBX: ffff888030973400 RCX: ffff88807d455a00 [ 705.714127][ C0] RDX: 0000000000000000 RSI: 0000000000000039 RDI: ffff888030973400 [ 705.714136][ C0] RBP: 0000000000000000 R08: ffff88807da10a77 R09: 1ffff1100fb4214e [ 705.714146][ C0] R10: dffffc0000000000 R11: ffffed100fb4214f R12: 0000000000000039 [ 705.714155][ C0] R13: ffff888030973400 R14: 0000000000000039 R15: ffffffffffffffc7 [ 705.714165][ C0] FS: 00007f986fee8c80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 705.714178][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.714188][ C0] CR2: 00007ffeea36da6c CR3: 000000007df61000 CR4: 00000000003526f0 [ 705.714201][ C0] Call Trace: [ 705.714206][ C0] [ 705.714212][ C0] __check_object_size+0x62/0xa30 [ 705.714233][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 705.714253][ C0] skb_copy_datagram_from_iter+0xe4/0x6e0 [ 705.714275][ C0] ? skb_put+0x11b/0x210 [ 705.714297][ C0] unix_dgram_sendmsg+0x652/0x1720 [ 705.714325][ C0] ? aa_sk_perm+0x7fc/0x930 [ 705.714348][ C0] ? unix_dgram_poll+0x670/0x670 [ 705.714367][ C0] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 705.714393][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 705.714411][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 705.714429][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 705.714445][ C0] __sys_sendto+0x46a/0x620 [ 705.714466][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 705.714484][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 705.714518][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 705.714536][ C0] ? lock_chain_count+0x20/0x20 [ 705.714554][ C0] __x64_sys_sendto+0xde/0xf0 [ 705.714573][ C0] do_syscall_64+0x55/0xb0 [ 705.714588][ C0] ? clear_bhb_loop+0x40/0x90 [ 705.714601][ C0] ? clear_bhb_loop+0x40/0x90 [ 705.714615][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.714629][ C0] RIP: 0033:0x7f9870038407 [ 705.714640][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 705.714652][ C0] RSP: 002b:00007ffde340aa90 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 705.714665][ C0] RAX: ffffffffffffffda RBX: 00007f986fee8c80 RCX: 00007f9870038407 [ 705.714675][ C0] RDX: 0000000000000039 RSI: 00007ffde340abd0 RDI: 0000000000000003 [ 705.714684][ C0] RBP: 00007ffde340b000 R08: 0000000000000000 R09: 0000000000000000 [ 705.714693][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde340b018 [ 705.714701][ C0] R13: 00007ffde340abd0 R14: 000000000000001e R15: 00007ffde340abd0 [ 705.714718][ C0] [ 705.717349][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 706.028659][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 706.035851][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 706.045938][ T29] Call Trace: [ 706.049314][ T29] [ 706.052253][ T29] dump_stack_lvl+0x16c/0x230 [ 706.056931][ T29] ? show_regs_print_info+0x20/0x20 [ 706.062140][ T29] ? load_image+0x3b0/0x3b0 [ 706.066656][ T29] panic+0x2c0/0x710 [ 706.070633][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 706.076255][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 706.080762][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 706.086313][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 706.092465][ T29] watchdog+0xf80/0xf80 [ 706.096623][ T29] ? watchdog+0x1e1/0xf80 [ 706.100960][ T29] kthread+0x2fa/0x390 [ 706.105033][ T29] ? hungtask_pm_notify+0x90/0x90 [ 706.110051][ T29] ? kthread_blkcg+0xd0/0xd0 [ 706.114629][ T29] ret_from_fork+0x48/0x80 [ 706.119034][ T29] ? kthread_blkcg+0xd0/0xd0 [ 706.123617][ T29] ret_from_fork_asm+0x11/0x20 [ 706.128380][ T29] [ 706.131669][ T29] Kernel Offset: disabled [ 706.135984][ T29] Rebooting in 86400 seconds..